What does va.gov track?
Before any consent, va.gov loaded 2 tracking companies and set 4 advertising or analytics cookies.
That's fewer tracking companies than most sites we scanned: 56% of the 2,450 sites we checked loaded more.
Scanned October 2, 2026 from Germany, loading www.va.gov once and clicking nothing. How we scan
- Tracking companies
- 2
- Tracking cookies
- 4
- Third-party hosts
- 6
- Cookies in total
- 17
Consent banner
No known consent management platform was detected on the page.
Companies contacted before consent
2 of the 3 companies it contacted before consent were analytics companies.
- Google Analytics6 requestsAnalytics
www.googletagmanager.com, region1.google-analytics.com
- Digital Analytics Program (DAP)2 requestsAnalytics
dap.digitalgov.gov
Other third parties (content delivery, consent, functional, unclassified)
- Amazon Web Services38 requestsContent delivery
prod-va-gov-assets.s3-us-gov-west-1.amazonaws.com, dsva-vagov-prod-cms-files.s3.us-gov-west-1.amazonaws.com, s3-us-gov-west-1.amazonaws.com
Cookies set before consent
The longest-lived tracking cookie it set was _ga, from Google Analytics, lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| _dd_s | Analytics | www.va.gov | 12 months |
| _ga | Analytics | va.gov | 13 months |
| _ga_CSLL4ZEK4L | Analytics | va.gov | 13 months |
| _ga_YPB3FD0PQ9 | Analytics | va.gov | 13 months |
| __Secure-BIGipServer | Unclassified | eauth.va.gov | Session |
| api_session | Unclassified | api.va.gov | Session |
| FLIPPER_ID | Unclassified | www.va.gov | 31 days |
| spgwAMCookie | Unclassified | eauth.va.gov | Session |
| vid | Unclassified | api.va.gov | Under a day |
| did | Functional | api.va.gov | 13 months |
| kampyleSessionPageCounter | Functional | www.va.gov | 12 months |
| kampyleUserPercentile | Functional | www.va.gov | 12 months |
| kampyleUserSession | Functional | www.va.gov | 12 months |
| kampyleUserSessionsCount | Functional | www.va.gov | 12 months |
| SERVERID | Functional | resource.digital.voice.va.gov | Session |
| TS0148db7c | Functional | eauth.va.gov | Under a day |
| TS01f27c67 | Functional | api.va.gov | Under a day |
The page also wrote 7 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.