What does tmall.com track?
Before any consent, tmall.com loaded 0 tracking companies and set 4 advertising or analytics cookies.
Scanned October 2, 2026 from Germany, loading www.tmall.com once and clicking nothing. How we scan
- Tracking companies
- 0
- Tracking cookies
- 4
- Third-party hosts
- 15
- Cookies in total
- 17
Consent banner
No known consent management platform was detected on the page.
Companies contacted before consent
4 of the 5 companies it contacted before consent were unclassified.
None.
Other third parties (content delivery, consent, functional, unclassified)
- mmstat.com137 requestsUnclassified
gm.mmstat.com, s-gm.mmstat.com, log.mmstat.com
- taobao.com5 requestsUnclassified
fourier.taobao.com, pc-growht-rta.taobao.com, www.taobao.com
- alibaba.com1 requestUnclassified
fourier.alibaba.com
- mediav.com1 requestUnclassified
cm.mediav.com
- Alibaba Cloud150 requestsContent delivery
img.alicdn.com, g.alicdn.com, gw.alicdn.com, at.alicdn.com
Cookies set before consent
The longest-lived tracking cookie it set was cna, lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| cna | Analytics | taobao.com (third party) | 13 months |
| cna | Analytics | mmstat.com (third party) | 13 months |
| cna | Analytics | tmall.com | 13 months |
| xlly_s | Analytics | tmall.com | 3 days |
| _m_h5_tk | Unclassified | tmall.com | Under a day |
| _m_h5_tk_enc | Unclassified | tmall.com | Under a day |
| _tb_token_ | Unclassified | taobao.com (third party) | Session |
| arms_uid | Unclassified | www.tmall.com | 6 months |
| atpsida | Unclassified | mmstat.com (third party) | Session |
| cookie2 | Unclassified | taobao.com (third party) | Session |
| isg | Unclassified | tmall.com | 6 months |
| mtop_partitioned_detect | Unclassified | tmall.com | Under a day |
| sca | Unclassified | mmstat.com (third party) | Session |
| tbsa | Unclassified | mmstat.com (third party) | Session |
| v1 | Unclassified | mediav.com (third party) | 13 months |
| t | Functional | taobao.com (third party) | 3 months |
| tfstk | Necessary | tmall.com | 6 months |
The page also wrote 18 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.