What does stuff.co.nz track?
Before any consent, stuff.co.nz loaded 19 tracking companies and set 21 advertising or analytics cookies.
That's more tracking companies than 97% of the 2,450 sites we scanned.
Scanned October 2, 2026 from Germany, loading www.stuff.co.nz once and clicking nothing. How we scan
- Tracking companies
- 19
- Tracking cookies
- 21
- Third-party hosts
- 73
- Cookies in total
- 39
Consent banner
The page loaded Google Funding Choices, a consent management platform. Everything below was recorded before anyone answered it. 19 tracking companies still loaded while it was unanswered.
Companies contacted before consent
14 of the 29 companies it contacted before consent were advertising companies.
- Taboola61 requestsAdvertising
vidstat.taboola.com, images.taboola.com, cdn.taboola.com, trc.taboola.com
- Google Ads15 requestsAdvertising
ad.doubleclick.net, securepubads.g.doubleclick.net, cm.g.doubleclick.net, www3.doubleclick.net
- Blockthrough7 requestsAdvertising
api.btloader.com, btloader.com, cdn.btloader.com, cdn.api.btloader.com
- PubMatic5 requestsAdvertising
hbopenbid.pubmatic.com, image8.pubmatic.com, image2.pubmatic.com
- Index Exchange4 requestsAdvertising
dsum.casalemedia.com, htlb.casalemedia.com, dsum-sec.casalemedia.com
- The Trade Desk3 requestsAdvertising
match.adsrvr.org, direct.adsrvr.org
- Xandr (Microsoft)2 requestsAdvertising
ib.adnxs.com
- Integral Ad Science2 requestsAdvertising
pixel.adsafeprotected.com
- OpenX2 requestsAdvertising
rtb.openx.net, stuff2-d.openx.net
- Criteo1 requestAdvertising
gum.criteo.com
- LiveRamp1 requestAdvertising
api.rlcdn.com
- Unruly1 requestAdvertising
targeting.unrulymedia.com
- Magnite1 requestAdvertising
fastlane.rubiconproject.com
- Amobee (Turn)1 requestAdvertising
ad.turn.com
- LinkedIn1 requestSocial media
px.ads.linkedin.com
- Cxense (Piano)7 requestsAnalytics
api.cxense.com, cdn.cxense.com, id.cxense.com, comcluster.cxense.com
- Nielsen6 requestsAnalytics
cdn-gl.imrworldwide.com, secure-dcr.imrworldwide.com, jwvroy3wuoveuzjh0pk8t8jpt8ria1790938225.nuid.imrworldwide.com
- Google Analytics5 requestsAnalytics
region1.analytics.google.com, www.googletagmanager.com
- Parse.ly4 requestsAnalytics
experiments.parsely.com, tr-experiments.parsely.com, cdn.parsely.com, p1.parsely.com
Other third parties (content delivery, consent, functional, unclassified)
- ad-delivery.net11 requestsUnclassified
ad-delivery.net
- dns-finder.com2 requestsUnclassified
ab.dns-finder.com
- pbxai.com1 requestUnclassified
cdn.pbxai.com
- qovani.com1 requestUnclassified
static.qovani.com
- npttech.com1 requestUnclassified
www.npttech.com
- Sourcepoint2 requestsConsent banner
ats-wrapper.privacymanager.io, geo.privacymanager.io
- Google17 requestsFunctional
fundingchoicesmessages.google.com, accounts.google.com, fonts.googleapis.com, fonts.gstatic.com
- Piano5 requestsFunctional
api-esp.piano.io, cdn-au.piano.io, c2-au.piano.io, buy-au.piano.io
- jQuery CDN1 requestContent delivery
code.jquery.com
- Amazon Web Services1 requestContent delivery
7mt8qqz89f.execute-api.ap-southeast-2.amazonaws.com
Cookies set before consent
The longest-lived tracking cookie it set was _ga, from Google Analytics, lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| _gcl_au | Advertising | stuff.co.nz | 3 months |
| _lr_env_src_ats | Advertising | www.stuff.co.nz | 30 days |
| _lr_retry_request | Advertising | www.stuff.co.nz | Under a day |
| bcookie | Advertising | linkedin.com (third party) | 12 months |
| CMID | Advertising | casalemedia.com (third party) | 12 months |
| CMPRO | Advertising | casalemedia.com (third party) | 3 months |
| CMPS | Advertising | casalemedia.com (third party) | 3 months |
| cX_G | Advertising | stuff.co.nz | 13 months |
| gckp | Advertising | cxense.com (third party) | 12 months |
| IMRID | Advertising | imrworldwide.com (third party) | 13 months |
| KADUSERCOOKIE | Advertising | pubmatic.com (third party) | 12 months |
| lidc | Advertising | linkedin.com (third party) | 1 day |
| pi | Advertising | pubmatic.com (third party) | 1 day |
| SyncRTB4 | Advertising | pubmatic.com (third party) | 3 months |
| uid | Advertising | turn.com (third party) | 6 months |
| __pat | Analytics | stuff.co.nz | 30 days |
| __pvi | Analytics | stuff.co.nz | 1 day |
| _ga | Analytics | stuff.co.nz | 13 months |
| _ga_P3Q4DDZ07F | Analytics | stuff.co.nz | 13 months |
| cX_P | Analytics | stuff.co.nz | 13 months |
| FCCDCF | Analytics | stuff.co.nz | 13 months |
| deviceuuid | Unclassified | www.stuff.co.nz | 2 months |
| oli-ad-cookie | Unclassified | www.stuff.co.nz | Under a day |
| unifiedId | Unclassified | www.stuff.co.nz | 12 months |
| unifiedId_cst | Unclassified | www.stuff.co.nz | 12 months |
| __adblocker | Functional | www.stuff.co.nz | Under a day |
| __cf_bm | Functional | piano.io (third party) | Under a day |
| __cf_bm | Functional | linkedin.com (third party) | Under a day |
| __tbc | Functional | stuff.co.nz | 13 months |
| _parsely_session | Functional | stuff.co.nz | Under a day |
| _parsely_visitor | Functional | stuff.co.nz | 13 months |
| _pcid | Functional | stuff.co.nz | 13 months |
| _pctx | Functional | stuff.co.nz | 13 months |
| chkChromeAb67Sec | Functional | pubmatic.com (third party) | 3 months |
| g_state | Functional | www.stuff.co.nz | 6 months |
| KTPCACOOKIE | Functional | pubmatic.com (third party) | 1 day |
| li_gc | Functional | linkedin.com (third party) | 6 months |
| xbc | Functional | stuff.co.nz | 13 months |
| datadome | Necessary | taboola.com (third party) | 12 months |
The page also wrote 17 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.