What does kpmg.com track?
Before any consent, kpmg.com loaded 1 tracking company and set 4 advertising or analytics cookies.
That's fewer tracking companies than most sites we scanned: 75% of the 2,450 sites we checked loaded more.
Scanned October 2, 2026 from Germany, loading kpmg.com/xx/en.html once and clicking nothing. How we scan
- Tracking companies
- 1
- Tracking cookies
- 4
- Third-party hosts
- 9
- Cookies in total
- 7
Consent banner
The page loaded OneTrust, a consent management platform. Everything below was recorded before anyone answered it. 1 tracking company still loaded while it was unanswered.
Companies contacted before consent
2 of the 4 companies it contacted before consent were functional companies.
- Adobe1 requestAnalytics
rum.hlx.page
Other third parties (content delivery, consent, functional, unclassified)
- OneTrust1 requestConsent banner
cdn.cookielaw.org
- Brightcove20 requestsFunctional
metrics.brightcove.com, fastly-signed-us-east-1-prod.brightcovecdn.com, manifest.prod.boltdns.net, players.brightcove.net
- SAP (Gigya)2 requestsFunctional
cdns.gigya.com
Cookies set before consent
The longest-lived tracking cookie it set was gig_bootstrap_4_azL3BNfXLB_XWsTbbzd9Vw, from SAP (Gigya), lasting about 12 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| gig_bootstrap_4_azL3BNfXLB_XWsTbbzd9Vw | Advertising | kpmg.com | 12 months |
| gmid | Advertising | login.kpmg.com | 12 months |
| hasGmid | Advertising | login.kpmg.com | 6 months |
| ucid | Advertising | login.kpmg.com | 12 months |
| gig_canary | Functional | cdns.gigya.com (third party) | Under a day |
| OptanonConsent | Functional | kpmg.com | 12 months |
| affinity | Necessary | kpmg.com | Session |
The page also wrote 3 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.