What does sophos.com track?
Before any consent, sophos.com loaded 3 tracking companies and set 0 advertising or analytics cookies.
That's more tracking companies than 58% of the 2,450 sites we scanned.
Scanned October 2, 2026 from Germany, loading www.sophos.com/de-de once and clicking nothing. How we scan
- Tracking companies
- 3
- Tracking cookies
- 0
- Third-party hosts
- 20
- Cookies in total
- 7
Consent banner
The page loaded OneTrust, a consent management platform. Everything below was recorded before anyone answered it. 3 tracking companies still loaded while it was unanswered.
Companies contacted before consent
2 of the 8 companies it contacted before consent were analytics companies.
- Google Ads1 requestAdvertising
pagead2.googlesyndication.com
- Google Analytics6 requestsAnalytics
www.googletagmanager.com, region1.google-analytics.com
- Cloudflare Web Analytics1 requestAnalytics
static.cloudflareinsights.com
Other third parties (content delivery, consent, functional, unclassified)
- OneTrust12 requestsConsent banner
cdn.cookielaw.org, geolocation.onetrust.com
- Qualified38 requestsFunctional
app.qualified.com, js.qualified.com, assets.qualified.com, messenger-assets.qualified.com
- Sentry1 requestFunctional
o209747.ingest.us.sentry.io
- Contentstack24 requestsContent delivery
images.contentstack.io, assets.contentstack.io
- Akamai7 requestsContent delivery
s.go-mpulse.net, c.go-mpulse.net, trial-eum-clientnsv4-s.akamaihd.net, trial-eum-clienttons-s.akamaihd.net
Cookies set before consent
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| __q_state_SxxAr5qUsCFed7N6 | Unclassified | sophos.com | 13 months |
| akacd_pr01 | Unclassified | sophos.com | Session |
| akacd_pr01 | Unclassified | www.sophos.com | Session |
| ak_bmsc | Functional | sophos.com | Under a day |
| AKA_A2 | Functional | sophos.com | Under a day |
| bm_sv | Functional | sophos.com | Under a day |
| OptanonConsent | Functional | sophos.com | 12 months |
The page also wrote 2 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.