What does orcid.org track?
Before any consent, orcid.org loaded 2 tracking companies and set 0 advertising or analytics cookies.
That's fewer tracking companies than most sites we scanned: 56% of the 2,450 sites we checked loaded more.
Scanned October 2, 2026 from Germany, loading orcid.org once and clicking nothing. How we scan
- Tracking companies
- 2
- Tracking cookies
- 0
- Third-party hosts
- 12
- Cookies in total
- 11
Consent banner
The page loaded OneTrust, a consent management platform. Everything below was recorded before anyone answered it. 2 tracking companies still loaded while it was unanswered.
Companies contacted before consent
3 of the 7 companies it contacted before consent were functional companies.
- New Relic2 requestsAnalytics
js-agent.newrelic.com, bam.nr-data.net
- Google Analytics1 requestAnalytics
www.googletagmanager.com
Other third parties (content delivery, consent, functional, unclassified)
- OneTrust14 requestsConsent banner
cdn.cookielaw.org, geolocation.onetrust.com
- Zendesk6 requestsFunctional
static.zdassets.com, ekr.zdassets.com, orcid.zendesk.com
- Vimeo4 requestsFunctional
player.vimeo.com
- Google1 requestFunctional
fonts.gstatic.com
- Cloudflare8 requestsContent delivery
challenges.cloudflare.com, brunhild.challenges.cloudflare.com
Cookies set before consent
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| __cf_ob | Unclassified | player.vimeo.com (third party) | Session |
| AUTH-XSRF-TOKEN | Unclassified | orcid.org | Session |
| __cf_bm | Functional | orcid.org | Under a day |
| __cf_bm | Functional | vimeo.com (third party) | Under a day |
| AWSALB | Functional | orcid.org | 7 days |
| AWSALB | Functional | auth.orcid.org | 7 days |
| AWSALBCORS | Functional | orcid.org | 7 days |
| AWSALBCORS | Functional | auth.orcid.org | 7 days |
| cf_clearance | Functional | vimeo.com (third party) | 12 months |
| OptanonConsent | Functional | orcid.org | 12 months |
| XSRF-TOKEN | Necessary | orcid.org | Session |
The page also wrote 3 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.