What does itau.com.br track?
Before any consent, itau.com.br loaded 6 tracking companies and set 5 advertising or analytics cookies.
That's more tracking companies than 83% of the 2,450 sites we scanned. That's right in line with other .com.br sites we scanned: the typical one among 23 sites also loaded 6 tracking companies.
Scanned October 2, 2026 from Germany, loading www.itau.com.br once and clicking nothing. How we scan
- Tracking companies
- 6
- Tracking cookies
- 5
- Third-party hosts
- 16
- Cookies in total
- 22
Consent banner
The page loaded OneTrust, a consent management platform. Everything below was recorded before anyone answered it. 6 tracking companies still loaded while it was unanswered.
Companies contacted before consent
4 of the 10 companies it contacted before consent were analytics companies.
- Google Ads2 requestsAdvertising
ad.doubleclick.net, pagead2.googlesyndication.com
- LinkedIn4 requestsSocial media
snap.licdn.com, px.ads.linkedin.com
- VWO6 requestsAnalytics
dev.visualwebsiteoptimizer.com
- Google Analytics5 requestsAnalytics
www.googletagmanager.com, region1.google-analytics.com
- Salesforce2 requestsAnalytics
itauunibanco2.us-4.evergage.com
- Oracle Eloqua1 requestAnalytics
cdn.evgnet.com
Other third parties (content delivery, consent, functional, unclassified)
- handtalk.me9 requestsUnclassified
plugin.handtalk.me
- OneTrust16 requestsConsent banner
cdn.cookielaw.org, geolocation.onetrust.com
- Google3 requestsFunctional
fonts.googleapis.com, www.google.com, fonts.gstatic.com
- Cloudflare1 requestContent delivery
cdnjs.cloudflare.com
Cookies set before consent
The longest-lived tracking cookie it set was bcookie, from LinkedIn, lasting about 12 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| _gcl_au | Advertising | itau.com.br | 3 months |
| bcookie | Advertising | linkedin.com (third party) | 12 months |
| lidc | Advertising | linkedin.com (third party) | 1 day |
| _vwo_ds | Analytics | itau.com.br | 30 days |
| _vwo_sn | Analytics | itau.com.br | Under a day |
| _evga_6853 | Unclassified | itau.com.br | 13 months |
| _sfid_3e59 | Unclassified | itau.com.br | 13 months |
| abtest_stickness | Unclassified | itau.com.br | 13 months |
| abtest_stickness | Unclassified | www.itau.com.br | 13 months |
| cookieIdMobile | Unclassified | itau.com.br | 30 days |
| cookieIdWeb | Unclassified | itau.com.br | 30 days |
| fs_sample | Unclassified | itau.com.br | Under a day |
| itau_init_id | Unclassified | itau.com.br | Session |
| MultDevice | Unclassified | itau.com.br | 30 days |
| __cf_bm | Functional | linkedin.com (third party) | Under a day |
| _vis_opt_s | Functional | itau.com.br | 3 months |
| _vis_opt_test_cookie | Functional | itau.com.br | Session |
| _vwo_uuid | Functional | itau.com.br | 12 months |
| _vwo_uuid_v2 | Functional | itau.com.br | 12 months |
| AWSALBTGCORS | Functional | itauunibanco2.us-4.evergage.com (third party) | 7 days |
| li_gc | Functional | linkedin.com (third party) | 6 months |
| OptanonConsent | Functional | itau.com.br | 12 months |
The page also wrote 5 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.