What does suno.com track?
Before any consent, suno.com loaded 9 tracking companies and set 19 advertising or analytics cookies.
That's more tracking companies than 91% of the 2,450 sites we scanned.
Scanned October 2, 2026 from Germany, loading suno.com once and clicking nothing. How we scan
- Tracking companies
- 9
- Tracking cookies
- 19
- Third-party hosts
- 40
- Cookies in total
- 39
Consent banner
No known consent management platform was detected on the page.
Companies contacted before consent
6 of the 20 companies it contacted before consent were unclassified.
- Microsoft Advertising7 requestsAdvertising
bat.bing.com, bat.bing.net
- Beeswax (FreeWheel)2 requestsAdvertising
segment.prod.bidr.io
- TikTok12 requestsSocial media
analytics.tiktok.com, analytics-ipv6.tiktokw.us
- Meta3 requestsSocial media
connect.facebook.net, www.facebook.com
- X (Twitter)3 requestsSocial media
static.ads-twitter.com, t.co, analytics.twitter.com
- Google Analytics4 requestsAnalytics
www.googletagmanager.com, region1.google-analytics.com
- Microsoft Clarity3 requestsAnalytics
www.clarity.ms, scripts.clarity.ms, e.clarity.ms
- Maze3 requestsAnalytics
snippet.maze.co, prompts.maze.co
- Cloudflare Web Analytics2 requestsAnalytics
static.cloudflareinsights.com, cloudflareinsights.com
Other third parties (content delivery, consent, functional, unclassified)
- mineos.ai4 requestsUnclassified
cmp.mineos.ai
- openai.com3 requestsUnclassified
bzrcdn.openai.com, bzr.openai.com
- vaultdcr.com1 requestUnclassified
tte-prod.telemetry.vaultdcr.com
- pxf.io1 requestUnclassified
suno.pxf.io
- ojrq.net1 requestUnclassified
www.ojrq.net
- prelude.dev1 requestUnclassified
edge.prelude.dev
- Stripe28 requestsFunctional
js.stripe.com, r.stripe.com, m.stripe.com, b.stripecdn.com
- hCaptcha7 requestsFunctional
newassets.hcaptcha.com, hcaptcha.com, 5c87e9ebbeb1.w.hcaptcha.com, 5b98c2d6572f.w.hcaptcha.com
- Google2 requestsFunctional
accounts.google.com
- Amazon Web Services3 requestsContent delivery
d2hrivdxn8ekm8.cloudfront.net
- Cloudflare2 requestsContent delivery
challenges.cloudflare.com
Cookies set before consent
The longest-lived tracking cookie it set was guest_id, from X (Twitter), lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| _fbp | Advertising | suno.com | 3 months |
| _tt_enable_cookie | Advertising | suno.com | 13 months |
| _ttp | Advertising | tiktok.com (third party) | 13 months |
| _ttp | Advertising | suno.com | 13 months |
| bito | Advertising | bidr.io (third party) | 13 months |
| bitoIsSecure | Advertising | bidr.io (third party) | 13 months |
| brwsr | Advertising | pxf.io (third party) | 12 months |
| brwsr | Advertising | ojrq.net (third party) | 12 months |
| guest_id | Advertising | twitter.com (third party) | 13 months |
| guest_id_ads | Advertising | twitter.com (third party) | 13 months |
| guest_id_marketing | Advertising | twitter.com (third party) | 13 months |
| IR_gbd | Advertising | suno.com | Session |
| IR_PI | Advertising | suno.com | 12 months |
| irtps | Advertising | pxf.io (third party) | 1 day |
| muc_ads | Advertising | t.co (third party) | 13 months |
| personalization_id | Advertising | twitter.com (third party) | 13 months |
| ttcsid | Advertising | suno.com | 13 months |
| ttcsid_CT67HURC77UB52N3JFBG | Advertising | suno.com | 13 months |
| ajs_anonymous_id | Analytics | suno.com | 12 months |
| __obref | Unclassified | suno.com | 12 months |
| _twpid | Unclassified | suno.com | 13 months |
| _twsid | Unclassified | suno.com | 13 months |
| IR_46384 | Unclassified | suno.com | Session |
| prelude_dispatch_id | Unclassified | suno.com | Under a day |
| statsig_stable_id | Unclassified | suno.com | 12 months |
| suno_device_id | Unclassified | suno.com | 12 months |
| tatari-cookie-test | Unclassified | suno.com | 13 months |
| tatari-session-cookie | Unclassified | suno.com | 13 months |
| __cf_bm | Functional | bzrcdn.openai.com (third party) | Under a day |
| __cf_bm | Functional | twitter.com (third party) | Under a day |
| __cf_bm | Functional | t.co (third party) | Under a day |
| __cf_bm | Functional | hcaptcha.com (third party) | Under a day |
| __cf_bm | Functional | bzr.openai.com (third party) | Under a day |
| __stripe_mid | Functional | suno.com | 12 months |
| __stripe_sid | Functional | suno.com | Under a day |
| _cfuvid | Functional | bzrcdn.openai.com (third party) | Session |
| _cfuvid | Functional | bzr.openai.com (third party) | Session |
| g_state | Functional | suno.com | 6 months |
| m | Functional | m.stripe.com (third party) | 13 months |
The page also wrote 11 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.