Note
This is a cached result from 16 Oct 2026. A new scan will be available on 13 Nov 2026.

americanexpress.com

67.0s 16 Oct 2026
Verdict

8 findings · 1 warning · 0 checks passed

Advertising assessment: Non-Compliant Grade F
8% Technical score

Tools

12
Adobe Analytics Analytics Tracks visitors without consent (cookie or visitor ID)
amexpressenterpriseprod
Non-Compliant
Adobe Launch Functional
American Express - OneAmex (DTM - 2020-03-18 10:51:35)
Compliant
Amazon Ads Advertising Tracks visitors without consent (cookie or visitor ID)
afb12f81-e4ec-483e-8e95-2fc48324fe1c
Non-Compliant
Contentsquare Analytics Tracks visitors without consent (cookie or visitor ID)
3776
Non-Compliant
Dynatrace Analytics Sends requests before consent or after it was declined
Non-Compliant
Google Ads Advertising Tracks visitors without consent (cookie or visitor ID)
357551154693288085
Non-Compliant
LinkedIn Insight Advertising Tracks visitors without consent (cookie or visitor ID)
10193561
Non-Compliant
Meta Pixel Advertising Measures without consent; the tool has no cookie-less mode
10870252780659232480787885362253333619020577900
Non-Compliant
Pinterest Tag Advertising Tracks visitors without consent (cookie or visitor ID)
2612655561517
Non-Compliant
Qualtrics Analytics Sends requests before consent or after it was declined
Non-Compliant
Reddit Pixel Advertising Measures without consent; the tool has no cookie-less mode
t2_vjf6aeeo
Non-Compliant
Xandr Advertising Measures without consent; the tool has no cookie-less mode
Non-Compliant

Violations

5
Critical
No consent banner despite tracking tools CMP_001

Affected: Adobe Analytics, Amazon Ads, Contentsquare, Google Ads, LinkedIn Insight, Meta Pixel, Pinterest Tag, Reddit Pixel, Xandr, Dynatrace, Qualtrics

A consent banner is required when analytics or advertising tracking is used. Implement a Consent Management Platform (CMP) that collects consent before tracking scripts load.

Critical
Tracking cookies were set before the consent decision GCM_002

Cookies: AMCV_5C36123F5245AF470A490D45%40AdobeOrg, _cs_id, _cs_s, _pinterest_ct_ua, ad-id, bcookie

Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.

Warning
Consent Mode default is missing GCM_001

Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.

Warning
Non-compliant tracking before consent GCM_009

Affected: Adobe Analytics, Amazon Ads, Contentsquare, Google Ads, LinkedIn Insight, Meta Pixel, Pinterest Tag, Reddit Pixel, Xandr, Dynatrace, Qualtrics

The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.

Info
Content Security Policy blocks a tool's script CSP_001

Affected: LinkedIn Insight, Meta Pixel, Pinterest Tag

The site's script-src directive does not allow the script domains of the listed tools, so real visitors' browsers block them. Add the domains to script-src or remove the unused tags.

Overview

A consent banner is shown 0/15
The consent banner works 0/10
Consent can be rejected 0/10
No tracking before consent 0/20
Google Consent Mode is implemented 7.5/15
Google Consent Mode sends the correct states 0/10
No tracking cookies before consent 0/10
The consent choice persists 0/5
No tracking after rejection 0/5

Consent Mode

Consent Mode Implemented
Has Default Values
Updates on Accept
Updates on Reject
Persists Across Pages
GCS Configuration Valid

Have your measurement monitored every day.

Create a free project for permanent results, scheduled monitoring, and email alerts.

Get Full Access
Back