What does mercadopago.com.br track?

Before any consent, mercadopago.com.br loaded 6 tracking companies and set 19 advertising or analytics cookies.

That's more tracking companies than 83% of the 2,450 sites we scanned. That's right in line with other .com.br sites we scanned: the typical one among 23 sites also loaded 6 tracking companies.

Scanned October 2, 2026 from Germany, loading www.mercadopago.com.br once and clicking nothing. How we scan

Tracking companies: 6
Tracking cookies: 19
Third-party hosts: 22
Cookies in total: 26

Consent banner

No known consent management platform was detected on the page.

Companies contacted before consent

2 of the 8 companies it contacted before consent were advertising companies.

Google Ads
14541721.fls.doubleclick.net, ad.doubleclick.net, www.googleadservices.com, googleads.g.doubleclick.net
14 requestsAdvertising
Criteo
gum.criteo.com, dynamic.criteo.com, sslwidget.criteo.com, widget.us.criteo.com
5 requestsAdvertising
TikTok
analytics.tiktok.com, analytics-ipv6.tiktokw.us
43 requestsSocial media
Meta
connect.facebook.net, www.facebook.com
7 requestsSocial media
Google Analytics
www.googletagmanager.com
7 requestsAnalytics
Hotjar
static.hotjar.com, script.hotjar.com, vc.hotjar.io
4 requestsAnalytics

Other third parties (content delivery, consent, functional, unclassified)

Google
www.google.com, adservice.google.com
10 requestsFunctional
Mercado Libre
http2.mlstatic.com, o11y-proxy-otel-frontend.meli.com, api.mercadolibre.com
93 requestsContent delivery

Cookies set before consent

The longest-lived tracking cookie it set was cto_bundle, from Criteo, lasting about 13 months.

Cookie	Purpose	Set by	Lasts
_d2id	Advertising	mercadopago.com.br	12 months
_fbp	Advertising	mercadopago.com.br	3 months
_gcl_au	Advertising	mercadopago.com.br	3 months
_tt_enable_cookie	Advertising	mercadopago.com.br	13 months
_ttp	Advertising	tiktok.com (third party)	13 months
_ttp	Advertising	mercadopago.com.br	13 months
cto_bundle	Advertising	criteo.com (third party)	13 months
cto_bundle	Advertising	mercadopago.com.br	13 months
IDE	Advertising	doubleclick.net (third party)	13 months
ttcsid	Advertising	mercadopago.com.br	13 months
ttcsid_CU409KRC77U5T1OVP8KG	Advertising	mercadopago.com.br	13 months
ttcsid_CUJ1CJ3C77U09FJDRBMG	Advertising	mercadopago.com.br	13 months
ttcsid_CUN021JC77U74NKAGB7G	Advertising	mercadopago.com.br	13 months
ttcsid_CUV1O83C77UCOV2E0PVG	Advertising	mercadopago.com.br	13 months
ttcsid_CVDCTDJC77UCRE2PIO20	Advertising	mercadopago.com.br	13 months
ttcsid_D04F33RC77U7UBOAPF1G	Advertising	mercadopago.com.br	13 months
ttcsid_D294UVJC77UB6AOKDSAG	Advertising	mercadopago.com.br	13 months
ttcsid_D2B3TUJC77U9TM7VUTAG	Advertising	mercadopago.com.br	13 months
uid	Advertising	criteo.com (third party)	13 months
_mldataSessionId	Unclassified	mercadopago.com.br	Under a day
app-restyled	Unclassified	mercadopago.com.br	Under a day
app-restyled-user	Unclassified	mercadopago.com.br	Under a day
app-theme	Unclassified	mercadopago.com.br	Under a day
_hjSession_492923	Functional	mercadopago.com.br	Under a day
_hjSessionUser_492923	Functional	mercadopago.com.br	12 months
_csrf	Necessary	www.mercadopago.com.br	Session

The page also wrote 4 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.