What does upwork.com track?
Before any consent, upwork.com loaded 1 tracking company and set 1 advertising or analytics cookie.
That's fewer tracking companies than most sites we scanned: 75% of the 2,450 sites we checked loaded more.
Scanned October 2, 2026 from Germany, loading www.upwork.com once and clicking nothing. How we scan
- Tracking companies
- 1
- Tracking cookies
- 1
- Third-party hosts
- 16
- Cookies in total
- 21
Consent banner
No known consent management platform was detected on the page.
Companies contacted before consent
3 of the 9 companies it contacted before consent were unclassified.
- VWO1 requestAnalytics
dev.visualwebsiteoptimizer.com
Other third parties (content delivery, consent, functional, unclassified)
- static-upwork.com21 requestsUnclassified
acquisition-ui-assets.static-upwork.com, assets.static-upwork.com
- icg-in.com3 requestsUnclassified
conn-check.icg-in.com
- incognia.com1 requestUnclassified
repo.incognia.com
- Transcend4 requestsConsent banner
transcend-cdn.com
- Forter12 requestsFunctional
cdn0.forter.com, 30d8d9777d9c4033b1f165c2afc9318c-4c4cc75a16ed.cdn.forter.com, cdn3.forter.com, 4c4cc75a16ed.cdn4.forter.com
- Google3 requestsFunctional
accounts.google.com, fonts.gstatic.com
- Cloudinary6 requestsContent delivery
res.cloudinary.com
- Amazon Web Services2 requestsContent delivery
prod-us-east-1-backend-company-uploads-transcend-io.s3.amazonaws.com
Cookies set before consent
The longest-lived tracking cookie it set was visitor_id, from Salesforce, lasting about 12 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| visitor_id | Advertising | upwork.com | 12 months |
| __cf_ob | Unclassified | www.upwork.com | Session |
| _upw_id.2a16 | Unclassified | www.upwork.com | 13 months |
| _upw_ses.2a16 | Unclassified | www.upwork.com | Under a day |
| cookie_domain | Unclassified | www.upwork.com | Session |
| cookie_prefix | Unclassified | www.upwork.com | Session |
| enabled_ff | Unclassified | www.upwork.com | Session |
| forterToken | Unclassified | upwork.com | 13 months |
| forterToken | Unclassified | www.upwork.com | 13 months |
| fp_token_7c6a6574-f011-4c9a-abdd-9894a102ccef | Unclassified | www.upwork.com | 12 months |
| umq | Unclassified | upwork.com | 6 months |
| visitor_gql_token | Unclassified | upwork.com | 1 day |
| __cf_bm | Functional | static-upwork.com (third party) | Under a day |
| __cf_bm | Functional | upwork.com | Under a day |
| __cflb | Functional | upwork.com | 7 days |
| __cflb | Functional | www.upwork.com | 7 days |
| AWSALBTG | Functional | www.upwork.com | 7 days |
| AWSALBTGCORS | Functional | www.upwork.com | 7 days |
| cf_clearance | Functional | upwork.com | 12 months |
| g_state | Functional | www.upwork.com | 6 months |
| XSRF-TOKEN | Necessary | upwork.com | Session |
The page also wrote 30 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.