Skip to content
CookieTosser

What does indown.io track?

Before any consent, indown.io loaded 3 tracking companies and set 5 advertising or analytics cookies.

That's more tracking companies than 58% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading indown.io/en4 once and clicking nothing. How we scan

Tracking companies
3
Tracking cookies
5
Third-party hosts
9
Cookies in total
9

Consent banner

The page loaded Google Funding Choices, a consent management platform. Everything below was recorded before anyone answered it. 3 tracking companies still loaded while it was unanswered.

Companies contacted before consent

2 of the 4 companies it contacted before consent were analytics companies.

Other third parties (content delivery, consent, functional, unclassified)

  • Google

    fundingchoicesmessages.google.com, fonts.gstatic.com, fonts.googleapis.com, lh3.googleusercontent.com

    14 requestsFunctional

Cookies set before consent

The longest-lived tracking cookie it set was _ga, from Google Analytics, lasting about 13 months.

CookiePurposeSet byLasts
_gaAnalyticsindown.io13 months
_ga_DGBNK67EMBAnalyticsindown.io13 months
_gat_gtag_UA_235385955_1Analyticsindown.ioUnder a day
_gidAnalyticsindown.io1 day
FCCDCFAnalyticsindown.io13 months
__cf_obUnclassifiedindown.ioSession
indown-sessionUnclassifiedindown.ioUnder a day
cf_clearanceFunctionalindown.io12 months
XSRF-TOKENNecessaryindown.ioUnder a day

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.