Note
This is a cached result from 10 Oct 2026. A new scan will be available on 7 Nov 2026.

getyourguide.com

61.9s 10 Oct 2026
Verdict

1 finding · 2 warnings · 6 checks passed

Advertising assessment: Non-Compliant Grade B
83% Technical score

Tools

11
Cloudflare Web Analytics Functional
8f3c8493e9b44fc29a24253084570d2b
Compliant
Criteo Advertising
1312735220
Compliant
Google Ads Advertising Measures without consent in cookie-less mode (sends the IP address)
968041507
Warning
Google Analytics 4 Analytics Measures without consent; we saw no evidence of a cookie-less mode in this audit
G-BJKL76S993
Non-Compliant
Google Tag Manager Functional
GTM-3XTJ
Compliant
Google tag – server-side (encrypted) Analytics
Compliant
Hotjar Analytics Tracks visitors without consent (cookie or visitor ID)
318029
Non-Compliant
Meta Pixel Advertising
805739962934987862089090526421
Compliant
Microsoft Advertising (UET) Advertising
121000507300063414001299
Compliant
RTB House Advertising
K0UuV42nL5AJPLUINTmE
Compliant
Snapchat Pixel Advertising
Compliant

Violations

5
Critical
Tracking cookies were set before the consent decision GCM_002

Cookies: _hjHasCachedUserAttributes, _hjSessionUser_318029, _hjSession_318029

Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.

Critical
Non-compliant tracking after consent was rejected GCM_010

Affected: Hotjar

After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.

Warning
Non-compliant tracking before consent GCM_009

Affected: Google Analytics 4, Hotjar

The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.

Warning
Personal data sent to tools without consent GCM_012

Affected: Google Ads

No cookie or visitor ID was stored, but the visitor's IP address and page address — personal data — reached the tool without consent (before the choice or after a rejection). To be Compliant under this check, load the tool only after consent.

Info
Content Security Policy blocks a tool's script CSP_001

Affected: Criteo, Google Analytics 4, Google Tag Manager, Hotjar, Meta Pixel

The site's script-src directive does not allow the script domains of the listed tools, so real visitors' browsers block them. Add the domains to script-src or remove the unused tags.

Overview

A consent banner is shown 15/15
The consent banner works 10/10
Consent can be rejected 10/10
No tracking before consent 14.44/20
Google Consent Mode is implemented 15/15
Google Consent Mode sends the correct states 10/10
No tracking cookies before consent 0/10
The consent choice persists 5/5
No tracking after rejection 3.89/5

Consent Mode