What does xero.com track?
Before any consent, xero.com loaded 18 tracking companies and set 33 advertising or analytics cookies.
That's more tracking companies than 97% of the 2,450 sites we scanned.
Scanned October 2, 2026 from Germany, loading www.xero.com once and clicking nothing. How we scan
- Tracking companies
- 18
- Tracking cookies
- 33
- Third-party hosts
- 60
- Cookies in total
- 63
Consent banner
The page loaded OneTrust, a consent management platform. Everything below was recorded before anyone answered it. 18 tracking companies still loaded while it was unanswered.
Companies contacted before consent
8 of the 31 companies it contacted before consent were advertising companies.
- Google Ads23 requestsAdvertising
9401320.fls.doubleclick.net, ad.doubleclick.net, www.googleadservices.com, googleads.g.doubleclick.net
- Microsoft Advertising7 requestsAdvertising
bat.bing.com, bat.bing.net
- Amazon Advertising4 requestsAdvertising
c.amazon-adsystem.com, aax-eu.amazon-adsystem.com
- Demandbase2 requestsAdvertising
tag.demandbase.com, tag-logger.demandbase.com
- Index Exchange2 requestsAdvertising
dsum-sec.casalemedia.com
- Magnite2 requestsAdvertising
partners.tremorhub.com, pixel.rubiconproject.com
- LiveRamp1 requestAdvertising
id.rlcdn.com
- PubMatic1 requestAdvertising
image2.pubmatic.com
- TikTok14 requestsSocial media
analytics.tiktok.com, analytics-ipv6.tiktokw.us
- Meta5 requestsSocial media
www.facebook.com, connect.facebook.net
- LinkedIn4 requestsSocial media
snap.licdn.com, px.ads.linkedin.com
- Reddit4 requestsSocial media
alb.reddit.com, www.redditstatic.com, pixel-config.reddit.com
- New Relic14 requestsAnalytics
js-agent.newrelic.com, bam.nr-data.net
- Google Analytics8 requestsAnalytics
www.googletagmanager.com, region1.analytics.google.com
- Contentsquare3 requestsAnalytics
t.contentsquare.net, c.contentsquare.net
- G22 requestsAnalytics
tracking.g2crowd.com, tracking-api.g2.com
- 6sense2 requestsAnalytics
s.company-target.com, api.company-target.com
- Salesforce1 requestAnalytics
cdn.c360a.salesforce.com
Other third parties (content delivery, consent, functional, unclassified)
- techlab-cdn.com4 requestsUnclassified
p11.techlab-cdn.com
- trkn.us4 requestsUnclassified
trkn.us
- podscribe.com4 requestsUnclassified
ipv4.podscribe.com, verifi.podscribe.com
- openai.com3 requestsUnclassified
bzrcdn.openai.com, bzr.openai.com
- jscloud.net2 requestsUnclassified
jscloud.net
- adalyser.com2 requestsUnclassified
c0.adalyser.com
- unifyintent.com2 requestsUnclassified
tag.unifyintent.com, api.unifyintent.com
- convertflow.co1 requestUnclassified
js.convertflow.co
- OneTrust12 requestsConsent banner
cdn-au.onetrust.com, geolocation.onetrust.com
- Google10 requestsFunctional
www.google.com, adservice.google.com, ajax.googleapis.com
- Stripe5 requestsFunctional
js.stripe.com, m.stripe.network
- Schema App5 requestsFunctional
cdn.schemaapp.com, data.schemaapp.com, api.schemaapp.com
- Amazon Web Services4 requestsContent delivery
fh-118116076e9a4c2a96a99fbb70bea2a0.ecs.us-west-2.on.aws, d34r8q7sht0t9k.cloudfront.net
Cookies set before consent
The longest-lived tracking cookie it set was __adal_id, lasting about 13 months.
| Cookie | Purpose | Set by | Lasts |
|---|---|---|---|
| __adal_ca | Advertising | xero.com | 6 months |
| __adal_cw | Advertising | xero.com | 7 days |
| __adal_id | Advertising | xero.com | 13 months |
| __adal_ses | Advertising | xero.com | Under a day |
| _fbp | Advertising | xero.com | 3 months |
| _gcl_au | Advertising | xero.com | 3 months |
| _rdt_uuid | Advertising | xero.com | 3 months |
| _tt_enable_cookie | Advertising | xero.com | 13 months |
| _ttp | Advertising | tiktok.com (third party) | 13 months |
| _ttp | Advertising | xero.com | 13 months |
| _uetsid | Advertising | xero.com | 1 day |
| _uetvid | Advertising | xero.com | 13 months |
| ad-id | Advertising | amazon-adsystem.com (third party) | 9 months |
| barometric[cuid] | Advertising | trkn.us (third party) | 12 months |
| bcookie | Advertising | linkedin.com (third party) | 12 months |
| CMID | Advertising | casalemedia.com (third party) | 12 months |
| CMPRO | Advertising | casalemedia.com (third party) | 3 months |
| CMPS | Advertising | casalemedia.com (third party) | 3 months |
| IDE | Advertising | doubleclick.net (third party) | 13 months |
| lidc | Advertising | linkedin.com (third party) | 1 day |
| MUID | Advertising | bing.com (third party) | 13 months |
| ttcsid | Advertising | xero.com | 13 months |
| ttcsid_CSGERGBC77U221904B10 | Advertising | xero.com | 13 months |
| ttcsid_CU9HF8JC77U19VRV85T0 | Advertising | xero.com | 13 months |
| tuuid | Advertising | company-target.com (third party) | 13 months |
| tuuid_lu | Advertising | company-target.com (third party) | 13 months |
| tv_UIDM | Advertising | tremorhub.com (third party) | 13 months |
| tvid | Advertising | tremorhub.com (third party) | 12 months |
| _ga | Analytics | xero.com | 13 months |
| _ga_F8KKRF65EJ | Analytics | xero.com | 13 months |
| _ga_Q622B96ZEQ | Analytics | xero.com | 13 months |
| FPID | Analytics | xero.com | 13 months |
| FPLC | Analytics | xero.com | 1 day |
| __adal_lp | Unclassified | xero.com | 30 days |
| __obref | Unclassified | xero.com | 12 months |
| __ps_did | Unclassified | xero.com | 12 months |
| __ps_fva | Unclassified | xero.com | 12 months |
| __ps_lu | Unclassified | xero.com | 12 months |
| __ps_r | Unclassified | xero.com | 12 months |
| __ps_slu | Unclassified | xero.com | Under a day |
| __ps_sr | Unclassified | xero.com | Under a day |
| _pendo_meta.2182376509 | Unclassified | xero.com | 3 months |
| _pendo_sessionId.2182376509 | Unclassified | xero.com | 3 months |
| _pendo_utm.2182376509 | Unclassified | xero.com | 3 months |
| _pendo_visitorId.2182376509 | Unclassified | xero.com | 3 months |
| IndrX05DQTZkS1hXX0hzZEt3Z3hzWkUzU1lRaDFOcnhFYm1t… | Unclassified | xero.com | 13 months |
| IndrX05DQTZkS1hXX0hzZEt3Z3hzWkUzU1lRaDFOcnhFYm1t… | Unclassified | xero.com | 13 months |
| PIM-SESSION-ID | Unclassified | xero.com | Session |
| unify_session_id | Unclassified | xero.com | 13 months |
| unify_visitor_id | Unclassified | xero.com | 13 months |
| xessionId | Unclassified | xero.com | Session |
| xid | Unclassified | xero.com | 12 months |
| __cf_bm | Functional | g2crowd.com (third party) | Under a day |
| __cf_bm | Functional | bzrcdn.openai.com (third party) | Under a day |
| __cf_bm | Functional | g2.com (third party) | Under a day |
| __cf_bm | Functional | linkedin.com (third party) | Under a day |
| __cf_bm | Functional | bzr.openai.com (third party) | Under a day |
| _abck | Functional | xero.com | 12 months |
| _cfuvid | Functional | bzrcdn.openai.com (third party) | Session |
| _cfuvid | Functional | bzr.openai.com (third party) | Session |
| li_gc | Functional | linkedin.com (third party) | 6 months |
| OptanonConsent | Functional | xero.com | 12 months |
| bm_sz | Necessary | xero.com | Under a day |
The page also wrote 20 keys to local storage, which works like a cookie but isn't sent with requests.
Understanding this page
- How to see which cookies and trackers a website loads
A hands-on walkthrough for checking what a site sets before you've clicked anything, using Chrome and Firefox's built-in tools, plus how CookieTosser automates the same check every month.
- What counts as valid cookie consent in the EU
The rules that actually govern cookie banners — the ePrivacy Directive, the GDPR consent standard, the Planet49 ruling, the strictly-necessary exemption, and what "reject" has to offer compared with "accept.
- Consent management platforms explained
What a CMP banner is actually doing behind the scenes, how the IAB's TCF standard and Google's Consent Mode v2 fit in, and why a banner being present is no guarantee that nothing loads before you answer it.