Skip to content
CookieTosser

What does visa.com track?

Before any consent, visa.com loaded 3 tracking companies and set 4 advertising or analytics cookies.

That's more tracking companies than 58% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading www.visa.de once and clicking nothing. How we scan

Tracking companies
3
Tracking cookies
4
Third-party hosts
5
Cookies in total
10

Consent banner

No known consent management platform was detected on the page.

Companies contacted before consent

2 of the 4 companies it contacted before consent were analytics companies.

  • YouTube

    www.youtube.com

    2 requestsSocial media
  • Tealium

    tags.tiqcdn.com

    4 requestsAnalytics
  • Optimizely

    cdn.optimizely.com, a10654255723.cdn.optimizely.com

    2 requestsAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • cookiereports.com

    policy.cookiereports.com

    3 requestsUnclassified

Cookies set before consent

The longest-lived tracking cookie it set was __Secure-ROLLOUT_TOKEN, from YouTube, lasting about 6 months.

CookiePurposeSet byLasts
__Secure-ROLLOUT_TOKENAdvertisingyoutube.com (third party)6 months
VISITOR_INFO1_LIVEAdvertisingyoutube.com (third party)6 months
VISITOR_PRIVACY_METADATAAdvertisingyoutube.com (third party)6 months
_50100646453736153000537361790936853537035145831…Analyticsa10654255723.cdn.optimizely.com (third party)6 months
__cflbFunctionalwww.visa.com2 days
__Secure-YNIDFunctionalyoutube.com (third party)6 months
_cfuvidFunctionalvisa.comSession
_cfuvidFunctionalvisa.deSession
utag_mainFunctionalvisa.de12 months
YSCFunctionalyoutube.com (third party)Session

The page also wrote 9 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.