Skip to content
CookieTosser

What does vlr.gg track?

Before any consent, vlr.gg loaded 12 tracking companies and set 6 advertising or analytics cookies.

That's more tracking companies than 95% of the 2,450 sites we scanned.

Scanned October 2, 2026 from Germany, loading www.vlr.gg once and clicking nothing. How we scan

Tracking companies
12
Tracking cookies
6
Third-party hosts
34
Cookies in total
12

Consent banner

The page loaded IAB TCF (unidentified platform), a consent management platform. Everything below was recorded before anyone answered it. 12 tracking companies still loaded while it was unanswered.

Companies contacted before consent

10 of the 23 companies it contacted before consent were advertising companies.

  • Google Ads

    ad.doubleclick.net, securepubads.g.doubleclick.net, www.google.de, stats.g.doubleclick.net

    13 requestsAdvertising
  • Blockthrough

    api.btloader.com, btloader.com, cdn.btloader.com, cdn.api.btloader.com

    7 requestsAdvertising
  • Confiant

    cdn.confiant-integrations.net

    4 requestsAdvertising
  • Amazon Advertising

    c.amazon-adsystem.com, config.aps.amazon-adsystem.com

    3 requestsAdvertising
  • ID5

    cdn.id5-sync.com

    1 requestAdvertising
  • Lotame

    tags.crwdcntrl.net

    1 requestAdvertising
  • Epsilon (Conversant)

    secure.cdn.fastclick.net

    1 requestAdvertising
  • The Trade Desk

    match.adsrvr.org

    1 requestAdvertising
  • LiveRamp

    api.rlcdn.com

    1 requestAdvertising
  • Criteo

    gum.criteo.com

    1 requestAdvertising
  • Google Analytics

    www.googletagmanager.com, region1.analytics.google.com

    3 requestsAnalytics
  • Scorecard Research (Comscore)

    sb.scorecardresearch.com

    2 requestsAnalytics

Other third parties (content delivery, consent, functional, unclassified)

  • nitropay.com

    s.nitropay.com, floors.nitropay.com

    11 requestsUnclassified
  • ad-delivery.net

    ad-delivery.net

    11 requestsUnclassified
  • owcdn.net

    owcdn.net

    10 requestsUnclassified
  • p7cloud.net

    silo60.p7cloud.net

    2 requestsUnclassified
  • nitrocnct.com

    consent.nitrocnct.com

    2 requestsUnclassified
  • dns-finder.com

    ab.dns-finder.com

    2 requestsUnclassified
  • scalibur.io

    srv.scalibur.io

    1 requestUnclassified
  • hadronid.net

    cdn.hadronid.net

    1 requestUnclassified
  • ad.gt

    a.ad.gt

    1 requestUnclassified
  • Sourcepoint

    geo.privacymanager.io, ats-wrapper.privacymanager.io

    3 requestsConsent banner
  • Google

    fonts.gstatic.com, fonts.googleapis.com

    7 requestsFunctional

Cookies set before consent

The longest-lived tracking cookie it set was _ga, from Google Analytics, lasting about 13 months.

CookiePurposeSet byLasts
_lr_env_src_atsAdvertisingwww.vlr.gg30 days
_lr_retry_requestAdvertisingwww.vlr.ggUnder a day
_pubcidAdvertisingvlr.gg12 months
_pubcid_cstAdvertisingvlr.gg12 months
_gaAnalyticsvlr.gg13 months
_ga_XG53CMV532Analyticsvlr.gg13 months
_nitroIDUnclassifiedvlr.gg12 months
ncmp.domainUnclassifiedvlr.gg12 months
nitro-uidUnclassifiedwww.vlr.gg2 months
nitro-uid_cstUnclassifiedwww.vlr.gg2 months
__cf_bmFunctionalnitropay.com (third party)Under a day
PHPSESSIDFunctionalwww.vlr.ggSession

The page also wrote 11 keys to local storage, which works like a cookie but isn't sent with requests.

Understanding this page

  • How to see which cookies and trackers a website loads

    A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.

  • What counts as valid cookie consent in the EU

    The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.

  • Consent management platforms explained

    What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.