Skip to content
CookieTosser

What does stuff.co.nz track?

Before any consent, stuff.co.nz loaded 19 tracking companies and set 21 advertising or analytics cookies.

That's more tracking companies than 97% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading www.stuff.co.nz once and clicking nothing. How we scan

Tracking companies
19
Tracking cookies
21
Third-party hosts
73
Cookies in total
39

Consent banner

The page loaded Google Funding Choices, a consent management platform. Everything below was recorded before anyone answered it. 19 tracking companies still loaded while it was unanswered.

Companies contacted before consent

14 of the 29 companies it contacted before consent were advertising companies.

  • Taboola

    vidstat.taboola.com, images.taboola.com, cdn.taboola.com, trc.taboola.com

    61 requestsAdvertising
  • Google Ads

    ad.doubleclick.net, securepubads.g.doubleclick.net, cm.g.doubleclick.net, www3.doubleclick.net

    15 requestsAdvertising
  • Blockthrough

    api.btloader.com, btloader.com, cdn.btloader.com, cdn.api.btloader.com

    7 requestsAdvertising
  • PubMatic

    hbopenbid.pubmatic.com, image8.pubmatic.com, image2.pubmatic.com

    5 requestsAdvertising
  • Index Exchange

    dsum.casalemedia.com, htlb.casalemedia.com, dsum-sec.casalemedia.com

    4 requestsAdvertising
  • The Trade Desk

    match.adsrvr.org, direct.adsrvr.org

    3 requestsAdvertising
  • Xandr (Microsoft)

    ib.adnxs.com

    2 requestsAdvertising
  • Integral Ad Science

    pixel.adsafeprotected.com

    2 requestsAdvertising
  • OpenX

    rtb.openx.net, stuff2-d.openx.net

    2 requestsAdvertising
  • Criteo

    gum.criteo.com

    1 requestAdvertising
  • LiveRamp

    api.rlcdn.com

    1 requestAdvertising
  • Unruly

    targeting.unrulymedia.com

    1 requestAdvertising
  • Magnite

    fastlane.rubiconproject.com

    1 requestAdvertising
  • Amobee (Turn)

    ad.turn.com

    1 requestAdvertising
  • LinkedIn

    px.ads.linkedin.com

    1 requestSocial media
  • Cxense (Piano)

    api.cxense.com, cdn.cxense.com, id.cxense.com, comcluster.cxense.com

    7 requestsAnalytics
  • Nielsen

    cdn-gl.imrworldwide.com, secure-dcr.imrworldwide.com, jwvroy3wuoveuzjh0pk8t8jpt8ria1790938225.nuid.imrworldwide.com

    6 requestsAnalytics
  • Google Analytics

    region1.analytics.google.com, www.googletagmanager.com

    5 requestsAnalytics
  • Parse.ly

    experiments.parsely.com, tr-experiments.parsely.com, cdn.parsely.com, p1.parsely.com

    4 requestsAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • ad-delivery.net

    ad-delivery.net

    11 requestsUnclassified
  • dns-finder.com

    ab.dns-finder.com

    2 requestsUnclassified
  • pbxai.com

    cdn.pbxai.com

    1 requestUnclassified
  • qovani.com

    static.qovani.com

    1 requestUnclassified
  • npttech.com

    www.npttech.com

    1 requestUnclassified
  • Sourcepoint

    ats-wrapper.privacymanager.io, geo.privacymanager.io

    2 requestsConsent banner
  • Google

    fundingchoicesmessages.google.com, accounts.google.com, fonts.googleapis.com, fonts.gstatic.com

    17 requestsFunctional
  • Piano

    api-esp.piano.io, cdn-au.piano.io, c2-au.piano.io, buy-au.piano.io

    5 requestsFunctional
  • jQuery CDN

    code.jquery.com

    1 requestContent delivery
  • Amazon Web Services

    7mt8qqz89f.execute-api.ap-southeast-2.amazonaws.com

    1 requestContent delivery

Cookies set before consent

The longest-lived tracking cookie it set was _ga, from Google Analytics, lasting about 13 months.

CookiePurposeSet byLasts
_gcl_auAdvertisingstuff.co.nz3 months
_lr_env_src_atsAdvertisingwww.stuff.co.nz30 days
_lr_retry_requestAdvertisingwww.stuff.co.nzUnder a day
bcookieAdvertisinglinkedin.com (third party)12 months
CMIDAdvertisingcasalemedia.com (third party)12 months
CMPROAdvertisingcasalemedia.com (third party)3 months
CMPSAdvertisingcasalemedia.com (third party)3 months
cX_GAdvertisingstuff.co.nz13 months
gckpAdvertisingcxense.com (third party)12 months
IMRIDAdvertisingimrworldwide.com (third party)13 months
KADUSERCOOKIEAdvertisingpubmatic.com (third party)12 months
lidcAdvertisinglinkedin.com (third party)1 day
piAdvertisingpubmatic.com (third party)1 day
SyncRTB4Advertisingpubmatic.com (third party)3 months
uidAdvertisingturn.com (third party)6 months
__patAnalyticsstuff.co.nz30 days
__pviAnalyticsstuff.co.nz1 day
_gaAnalyticsstuff.co.nz13 months
_ga_P3Q4DDZ07FAnalyticsstuff.co.nz13 months
cX_PAnalyticsstuff.co.nz13 months
FCCDCFAnalyticsstuff.co.nz13 months
deviceuuidUnclassifiedwww.stuff.co.nz2 months
oli-ad-cookieUnclassifiedwww.stuff.co.nzUnder a day
unifiedIdUnclassifiedwww.stuff.co.nz12 months
unifiedId_cstUnclassifiedwww.stuff.co.nz12 months
__adblockerFunctionalwww.stuff.co.nzUnder a day
__cf_bmFunctionalpiano.io (third party)Under a day
__cf_bmFunctionallinkedin.com (third party)Under a day
__tbcFunctionalstuff.co.nz13 months
_parsely_sessionFunctionalstuff.co.nzUnder a day
_parsely_visitorFunctionalstuff.co.nz13 months
_pcidFunctionalstuff.co.nz13 months
_pctxFunctionalstuff.co.nz13 months
chkChromeAb67SecFunctionalpubmatic.com (third party)3 months
g_stateFunctionalwww.stuff.co.nz6 months
KTPCACOOKIEFunctionalpubmatic.com (third party)1 day
li_gcFunctionallinkedin.com (third party)6 months
xbcFunctionalstuff.co.nz13 months
datadomeNecessarytaboola.com (third party)12 months

The page also wrote 17 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.