Skip to content
CookieTosser

What does nypost.com track?

Before any consent, nypost.com loaded 8 tracking companies and set 11 advertising or analytics cookies.

That's more tracking companies than 89% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading nypost.com once and clicking nothing. How we scan

Tracking companies
8
Tracking cookies
11
Third-party hosts
27
Cookies in total
23

Consent banner

The page loaded OneTrust, a consent management platform. Everything below was recorded before anyone answered it. 8 tracking companies still loaded while it was unanswered.

Companies contacted before consent

3 of the 12 companies it contacted before consent were advertising companies.

  • Google Ads

    googleads.g.doubleclick.net, static.doubleclick.net, securepubads.g.doubleclick.net, stats.g.doubleclick.net

    9 requestsAdvertising
  • Ad Lightning

    tagan.adlightning.com

    3 requestsAdvertising
  • Amazon Advertising

    config.aps.amazon-adsystem.com, client.aps.amazon-adsystem.com

    2 requestsAdvertising
  • YouTube

    www.youtube.com, i.ytimg.com

    23 requestsSocial media
  • X (Twitter)

    static.ads-twitter.com, t.co, analytics.twitter.com

    3 requestsSocial media
  • Adobe

    use.typekit.net, p.typekit.net

    8 requestsAnalytics
  • Google Analytics

    region1.analytics.google.com, www.googletagmanager.com

    6 requestsAnalytics
  • Parse.ly

    experiments.parsely.com

    1 requestAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • p-n.io

    cdn.p-n.io

    1 requestUnclassified
  • OneTrust

    cdn.cookielaw.org, geolocation.onetrust.com

    13 requestsConsent banner
  • Google

    accounts.google.com, fonts.gstatic.com, www.google.com, jnn-pa.googleapis.com

    8 requestsFunctional
  • WordPress.com

    stats.wp.com, pixel.wp.com

    2 requestsFunctional

Cookies set before consent

The longest-lived tracking cookie it set was guest_id, from X (Twitter), lasting about 13 months.

CookiePurposeSet byLasts
__Secure-ROLLOUT_TOKENAdvertisingyoutube.com (third party)6 months
_gcl_auAdvertisingnypost.com3 months
guest_idAdvertisingtwitter.com (third party)13 months
guest_id_adsAdvertisingtwitter.com (third party)13 months
guest_id_marketingAdvertisingtwitter.com (third party)13 months
muc_adsAdvertisingt.co (third party)13 months
personalization_idAdvertisingtwitter.com (third party)13 months
VISITOR_INFO1_LIVEAdvertisingyoutube.com (third party)6 months
VISITOR_PRIVACY_METADATAAdvertisingyoutube.com (third party)6 months
_gaAnalyticsnypost.com13 months
_ga_0DZ7LHF5PZAnalyticsnypost.com13 months
_pn_lGqPv8wEUnclassifiednypost.com6 months
_twpidUnclassifiednypost.com13 months
_twsidUnclassifiednypost.com13 months
blaize_sessionUnclassifiednypost.com12 months
__cf_bmFunctionaltwitter.com (third party)Under a day
__cf_bmFunctionalt.co (third party)Under a day
__Secure-YNIDFunctionalyoutube.com (third party)6 months
AWSALBFunctionalzephr-v4.nypost.com7 days
AWSALBCORSFunctionalzephr-v4.nypost.com7 days
g_stateFunctionalnypost.com6 months
OptanonConsentFunctionalnypost.com12 months
YSCFunctionalyoutube.com (third party)Session

The page also wrote 7 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.