What does victoriassecret.com track?
Before any consent, victoriassecret.com loaded 0 tracking companies and set 2 advertising or analytics cookies.
Scanned October 2, 2026 from Germany, loading de.victoriassecret.com/de once and clicking nothing. How we scan
- Tracking companies
- 0
- Tracking cookies
- 2
- Third-party hosts
- 2
- Cookies in total
- 13
Consent banner
The page loaded OneTrust, a consent management platform. Everything below was recorded before anyone answered it.
Companies contacted before consent
1 of the 2 companies it contacted before consent were consent banner companies.
None.
Other third parties (content delivery, consent, functional, unclassified)
Cookies set before consent
The longest-lived tracking cookie it set was auth_token, from X (Twitter), lasting about 12 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| auth_token | Advertising | victoriassecret.com | 12 months |
| UID | Advertising | victoriassecret.com | 12 months |
| bc | Unclassified | victoriassecret.com | Under a day |
| geolocatedCountry | Unclassified | victoriassecret.com | Session |
| geolocatedRegion | Unclassified | victoriassecret.com | Session |
| LSKey-c$CookieConsentPolicy | Unclassified | kundenbetreuung.victoriassecret.com | 12 months |
| mcc | Unclassified | victoriassecret.com | 12 months |
| uxc | Unclassified | victoriassecret.com | 12 months |
| uxoverride | Unclassified | victoriassecret.com | Session |
| wuxc | Unclassified | de.victoriassecret.com | 30 days |
| __cf_bm | Functional | victoriassecret.com | Under a day |
| __cfwaitingroom | Functional | www.victoriassecret.com | Under a day |
| CookieConsentPolicy | Functional | kundenbetreuung.victoriassecret.com | 12 months |
The page also wrote 4 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.