Skip to content
CookieTosser

What does joomla.org track?

Before any consent, joomla.org loaded 4 tracking companies and set 4 advertising or analytics cookies.

That's more tracking companies than 70% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading www.joomla.org once and clicking nothing. How we scan

Tracking companies
4
Tracking cookies
4
Third-party hosts
10
Cookies in total
5

Consent banner

No known consent management platform was detected on the page.

Companies contacted before consent

3 of the 6 companies it contacted before consent were analytics companies.

  • Google Ads

    www.google.de, stats.g.doubleclick.net

    2 requestsAdvertising
  • Google Analytics

    www.googletagmanager.com, www.google-analytics.com

    4 requestsAnalytics
  • Pingdom

    rum-static.pingdom.net, rum-collector-2.pingdom.net

    2 requestsAnalytics
  • Cloudflare Web Analytics

    static.cloudflareinsights.com

    1 requestAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • Report URI

    wwwjorg.report-uri.com

    3 requestsFunctional
  • Google

    fonts.googleapis.com, fonts.gstatic.com

    2 requestsFunctional

Cookies set before consent

The longest-lived tracking cookie it set was _ga, from Google Analytics, lasting about 13 months.

CookiePurposeSet byLasts
_gaAnalyticsjoomla.org13 months
_ga_X283HVFSTNAnalyticsjoomla.org13 months
_gat_UA-544070-3Analyticsjoomla.orgUnder a day
_gidAnalyticsjoomla.org1 day
312b0a5d22b922fb76560c8879ef7cd8Unclassifiedwww.joomla.orgSession

The page also wrote 2 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.