Skip to content
CookieTosser

What does paypal.com track?

Before any consent, paypal.com loaded 1 tracking company and set 1 advertising or analytics cookie.

That's fewer tracking companies than most sites we scanned: 75% of the 2,450 sites we checked loaded more.

Scanned October 2, 2026 from Germany, loading www.paypal.com/de/home once and clicking nothing. How we scan

Tracking companies
1
Tracking cookies
1
Third-party hosts
5
Cookies in total
11

Consent banner

No known consent management platform was detected on the page.

Companies contacted before consent

1 of the 3 companies it contacted before consent were analytics companies.

Other third parties (content delivery, consent, functional, unclassified)

  • browser-intake-us5-datadoghq.com

    browser-intake-us5-datadoghq.com

    9 requestsUnclassified
  • Google

    www.recaptcha.net, www.gstatic.com, fonts.gstatic.com

    11 requestsFunctional

Cookies set before consent

The longest-lived tracking cookie it set was _dd_s, from Datadog, lasting about under a day.

CookiePurposeSet byLasts
_dd_sAnalyticswww.paypal.comUnder a day
cookie_prefsUnclassifiedpaypal.com12 months
enforce_policyFunctionalpaypal.com12 months
l7_azFunctionalpaypal.comUnder a day
LANGFunctionalpaypal.comUnder a day
nsidFunctionalwww.paypal.comSession
tsFunctionalpaypal.com12 months
ts_cFunctionalpaypal.com12 months
tsrceFunctionalpaypal.com3 days
x-pp-sFunctionalpaypal.comSession
datadomeNecessarypaypal.com30 days

The page also wrote 1 key to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.