https://finanzen.net
Scanned Apr 17, 2026 · 42.8s
Your website score is
Grade
BannerConsent Banner
Yes
Regulatory Compliance
Multi-regulation overview — click any regulation for details
Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.
Tag Leak detected 14 user data leaks before consent on finanzen.net.
Security Headers
4/6 presentStrict-Transport-Security
max-age=31536000; includeSubDomains
Content-Security-Policy
Add a Content-Security-Policy header to prevent XSS and code injection attacks
X-Frame-Options
SAMEORIGIN
X-Content-Type-Options
nosniff
Referrer-Policy
strict-origin-when-cross-origin
Permissions-Policy
Add a Permissions-Policy header to restrict browser features like camera, microphone, and geolocation
Google Consent Mode
V2Consent Parameters
Issues (1)
No GTM container detected — consent mode works best with Google Tag Manager
Post-Rejection Audit
Reject Button
Found
Post-Rejection Fires
0 vendors
Consent Mode
Not Detected
GTM Load
Not detected
Consent Mode V2: Not Detected
Google Consent Mode was not detected on this site.
✓ gtag('consent', 'update') call detected on rejection
Consent Record Audit
Issues detectedConsent record stored after interaction
GDPR Art. 7(1)No consent record written — cannot prove consent was given
No CMP consent cookie or localStorage entry was found after the consent interaction. GDPR requires controllers to demonstrate consent was given.
Consent withdrawal mechanism accessible
GDPR Art. 7(3)No way for users to withdraw consent found on page
No cookie settings link, footer link, or floating consent button was detected. GDPR requires users to withdraw consent as easily as they gave it.
Why this matters
Under GDPR Article 7, controllers must be able to demonstrate that consent was given (Art. 7(1)) and ensure users can withdraw consent at any time, as easily as giving it (Art. 7(3)). Sites with no consent record or no withdrawal mechanism cannot legally rely on consent as a lawful basis.
Tracker categories detected
Critical2
Data was transmitted to a third-party or storage was written on the user’s device before consent. This is a GDPR/ePrivacy violation, not just a script load.
No recognizable consent cookie or storage entry detected after interaction — GDPR Article 7(1) requires controllers to demonstrate consent was given (server-side storage cannot be verified)
No recognizable consent withdrawal mechanism detected — GDPR Article 7(3) requires users can withdraw consent as easily as giving it (cookie settings link or floating button expected)
Warnings14
A tag container or script loaded before consent but tags appear correctly gated (e.g. GTM with Consent Mode v2). Not a violation on its own — review to confirm downstream tags stay blocked.

Quantcast CMP was clicked but no consent storage was written — tags may continue firing as if consent was never given
Unknown third-party request to geoip.user.public.finanzen2.net before consent
Unknown third-party request to b.delivery.consentmanager.net before consent
Unknown third-party request to cdn.consentmanager.net before consent
localStorage key "finanzen-net-userbased-targeting" written before consent
localStorage key "finUsrLocCache" written before consent
localStorage key "sg-dark-scheme" written before consent
localStorage key "pseudo_google_one_tap_storage" written before consent
localStorage key "__cmpconsent92593_.finanzen.net" written before consent
localStorage key "__cmpconsent92593_expire_.finanzen.net" written before consent
localStorage key "__cmpcvcu92593_.finanzen.net" written before consent
localStorage key "__cmpcvcu92593_expire_.finanzen.net" written before consent
localStorage key "__cmpcpcu92593_.finanzen.net" written before consent
localStorage key "__cmpcpcu92593_expire_.finanzen.net" written before consent
Info3
Neutral observations — activity we detected that isn’t a violation but is useful context (e.g. essential cookies, CMP initialisation).
Consentmanager.net3 findings__cmpconsent92593, __cmpcvcu92593, __cmpcpcu92593
__cmpconsent92593, __cmpcvcu92593, __cmpcpcu92593
Consentmanager.net cookie "__cmpconsent92593" set before consent — Consent String of the IAB CMP Framework (TCF) v2 specific to a single account in our platform.
Consentmanager.net cookie "__cmpcvcu92593" set before consent — List of custom vendor IDs separated by underscore specific to a single account in our platform
Consentmanager.net cookie "__cmpcpcu92593" set before consent — List of custom purpose IDs separated by underscore
Compliant189
Tags that fired only after the user gave consent — working as intended.
Google Analytics5 findingsID trackedregion1.analytics.google.com, region1.google-analytics.com, www.googletagmanager.com, _ga_J4WKRJQPHJ, _ga

region1.analytics.google.com, region1.google-analytics.com, www.googletagmanager.com, _ga_J4WKRJQPHJ, _ga

GA4 (Google) loaded correctly after consent

GA4 (Google) loaded correctly after consent

GA4 (Google) loaded correctly after consent

Google Analytics cookie "_ga_J4WKRJQPHJ" set correctly after consent

Google Analytics cookie "_ga" set correctly after consent
Meta Pixel3 findingsID trackedwww.facebook.com, connect.facebook.net, _fbp

www.facebook.com, connect.facebook.net, _fbp

Meta Pixel (Meta) loaded correctly after consent

Meta Pixel (Meta) loaded correctly after consent

Meta Pixel cookie "_fbp" set correctly after consent
Google Ads3 findingsgoogleads.g.doubleclick.net, _gcl_au, _gcl_ls

googleads.g.doubleclick.net, _gcl_au, _gcl_ls

Google Ads (Google) loaded correctly after consent

Google Ads cookie "_gcl_au" set correctly after consent

Google Ads (Google) wrote "_gcl_ls" to localStorage correctly after consent
TripleLift2 findingssync, tluid
sync, tluid
TripleLift cookie "sync" set correctly after consent
TripleLift cookie "tluid" set correctly after consent

Criteo cookie "cto_bundle" set correctly after consent
Consentmanager.net3 findings__cmpconsent92593, __cmpcvcu92593, __cmpcpcu92593
__cmpconsent92593, __cmpcvcu92593, __cmpcpcu92593
Consentmanager.net cookie "__cmpconsent92593" set correctly after consent
Consentmanager.net cookie "__cmpcvcu92593" set correctly after consent
Consentmanager.net cookie "__cmpcpcu92593" set correctly after consent
Marfeel15 findings_sp_net_ses.dbd3, _sp_net_id.dbd3, _sharedid, _sharedid_cst, _sv3_7, _sv3_11, _sv3_3, _sv3_4, _sv3_8, _sv3_6, _sv3_13, _sv3_14, _sv3_15, _sv3_17, _ssuma
_sp_net_ses.dbd3, _sp_net_id.dbd3, _sharedid, _sharedid_cst, _sv3_7, _sv3_11, _sv3_3, _sv3_4, _sv3_8, _sv3_6, _sv3_13, _sv3_14, _sv3_15, _sv3_17, _ssuma
Marfeel cookie "_sp_net_ses.dbd3" set correctly after consent
Marfeel cookie "_sp_net_id.dbd3" set correctly after consent
Marfeel cookie "_sharedid" set correctly after consent
Marfeel cookie "_sharedid_cst" set correctly after consent
Marfeel cookie "_sv3_7" set correctly after consent
Marfeel cookie "_sv3_11" set correctly after consent
Marfeel cookie "_sv3_3" set correctly after consent
Marfeel cookie "_sv3_4" set correctly after consent
Marfeel cookie "_sv3_8" set correctly after consent
Marfeel cookie "_sv3_6" set correctly after consent
Marfeel cookie "_sv3_13" set correctly after consent
Marfeel cookie "_sv3_14" set correctly after consent
Marfeel cookie "_sv3_15" set correctly after consent
Marfeel cookie "_sv3_17" set correctly after consent
Marfeel cookie "_ssuma" set correctly after consent
Snowplow cookie "sp" set correctly after consent
infOnline cookie "i00" set correctly after consent
Adobe Audience Manager3 findingsdemdex, AMCVS_B21B678254F601E20A4C98A5%40AdobeOrg, dpm

demdex, AMCVS_B21B678254F601E20A4C98A5%40AdobeOrg, dpm

Adobe Audience Manager cookie "demdex" set correctly after consent

Adobe Audience Manager cookie "AMCVS_B21B678254F601E20A4C98A5%40AdobeOrg" set correctly after consent

Adobe Audience Manager cookie "dpm" set correctly after consent
Optinmonster2 findings_omappvp, _omappvs
_omappvp, _omappvs
Optinmonster cookie "_omappvp" set correctly after consent
Optinmonster cookie "_omappvs" set correctly after consent

Adobe Advertising cookie "everest_g_v2" set correctly after consent
Adobe Analytics4 findingsAMCV_B21B678254F601E20A4C98A5%40AdobeOrg, s_tp, s_ppv, s_cc

AMCV_B21B678254F601E20A4C98A5%40AdobeOrg, s_tp, s_ppv, s_cc

Adobe Analytics cookie "AMCV_B21B678254F601E20A4C98A5%40AdobeOrg" set correctly after consent

Adobe Analytics cookie "s_tp" set correctly after consent

Adobe Analytics cookie "s_ppv" set correctly after consent

Adobe Analytics cookie "s_cc" set correctly after consent
DoubleClick/Google Marketing3 findingsIDE, id, __gads

IDE, id, __gads

DoubleClick/Google Marketing cookie "IDE" set correctly after consent

DoubleClick/Google Marketing cookie "id" set correctly after consent

DoubleClick/Google Marketing cookie "__gads" set correctly after consent
Adform7 findingsuid, cto_bidid, c, C, CID, cid, UID

uid, cto_bidid, c, C, CID, cid, UID

Adform cookie "uid" set correctly after consent

Adform cookie "cto_bidid" set correctly after consent

Adform cookie "c" set correctly after consent

Adform cookie "C" set correctly after consent

Adform cookie "CID" set correctly after consent

Adform cookie "cid" set correctly after consent

Adform cookie "UID" set correctly after consent
openx.net2 findingsi, pd
i, pd
openx.net cookie "i" set correctly after consent
openx.net cookie "pd" set correctly after consent
Lotame4 findings_cc_dc, _cc_id, panoramaId_expiry, panoramaId
_cc_dc, _cc_id, panoramaId_expiry, panoramaId
Lotame cookie "_cc_dc" set correctly after consent
Lotame cookie "_cc_id" set correctly after consent
Lotame cookie "panoramaId_expiry" set correctly after consent
Lotame cookie "panoramaId" set correctly after consent
Xandr4 findingsuuid2, XANDR_PANID, icu, anj
uuid2, XANDR_PANID, icu, anj
Xandr cookie "uuid2" set correctly after consent
Xandr cookie "XANDR_PANID" set correctly after consent
Xandr cookie "icu" set correctly after consent
Xandr cookie "anj" set correctly after consent
Platform161 cookie "tuuid" set correctly after consent
Federated Media Publishing cookie "ljt_reader" set correctly after consent
Magnite4 findingskhaos, khaos_p, audit_p, audit
khaos, khaos_p, audit_p, audit
Magnite cookie "khaos" set correctly after consent
Magnite cookie "khaos_p" set correctly after consent
Magnite cookie "audit_p" set correctly after consent
Magnite cookie "audit" set correctly after consent
GumGum cookie "vst" set correctly after consent
Teads cookie "tt_viewer" set correctly after consent
Seedtag4 findingsst_uid, st_ssp, st_cs, st_csd
st_uid, st_ssp, st_cs, st_csd
Seedtag cookie "st_uid" set correctly after consent
Seedtag cookie "st_ssp" set correctly after consent
Seedtag cookie "st_cs" set correctly after consent
Seedtag cookie "st_csd" set correctly after consent
CreativeCDN cookie "g" set correctly after consent
PayPal cookie "ts" set correctly after consent
Google2 findingsreceive-cookie-deprecation, consent
receive-cookie-deprecation, consent
Google cookie "receive-cookie-deprecation" set correctly after consent
Google cookie "consent" set correctly after consent
bidswitch.net cookie "tuuid_lu" set correctly after consent

Cloudflare cookie "__cflb" set correctly after consent
ComScore cookie "pid" set correctly after consent
PubMatic32 findingsKADUSERCOOKIE, KRTBCOOKIE_80, KRTBCOOKIE_699, KRTBCOOKIE_153, KRTBCOOKIE_391, KRTBCOOKIE_632, KRTBCOOKIE_452, KRTBCOOKIE_377, DPSync4, SyncRTB4, ipc, KRTBCOOKIE_945, KRTBCOOKIE_1101, KRTBCOOKIE_57, KRTBCOOKIE_1469, KRTBCOOKIE_860, SPugT, KRTBCOOKIE_32, KRTBCOOKIE_1323, KCCH, pi, chkChromeAb67Sec, KRTBCOOKIE_188, PugT, KRTBCOOKIE_740, KRTBCOOKIE_1513, KRTBCOOKIE_22, KRTBCOOKIE_1529, chk, KRTBCOOKIE_1277, KRTBCOOKIE_409, pubsyncexp
KADUSERCOOKIE, KRTBCOOKIE_80, KRTBCOOKIE_699, KRTBCOOKIE_153, KRTBCOOKIE_391, KRTBCOOKIE_632, KRTBCOOKIE_452, KRTBCOOKIE_377, DPSync4, SyncRTB4, ipc, KRTBCOOKIE_945, KRTBCOOKIE_1101, KRTBCOOKIE_57, KRTBCOOKIE_1469, KRTBCOOKIE_860, SPugT, KRTBCOOKIE_32, KRTBCOOKIE_1323, KCCH, pi, chkChromeAb67Sec, KRTBCOOKIE_188, PugT, KRTBCOOKIE_740, KRTBCOOKIE_1513, KRTBCOOKIE_22, KRTBCOOKIE_1529, chk, KRTBCOOKIE_1277, KRTBCOOKIE_409, pubsyncexp
PubMatic cookie "KADUSERCOOKIE" set correctly after consent
PubMatic cookie "KRTBCOOKIE_80" set correctly after consent
PubMatic cookie "KRTBCOOKIE_699" set correctly after consent
PubMatic cookie "KRTBCOOKIE_153" set correctly after consent
PubMatic cookie "KRTBCOOKIE_391" set correctly after consent
PubMatic cookie "KRTBCOOKIE_632" set correctly after consent
PubMatic cookie "KRTBCOOKIE_452" set correctly after consent
PubMatic cookie "KRTBCOOKIE_377" set correctly after consent
PubMatic cookie "DPSync4" set correctly after consent
PubMatic cookie "SyncRTB4" set correctly after consent
PubMatic cookie "ipc" set correctly after consent
PubMatic cookie "KRTBCOOKIE_945" set correctly after consent
PubMatic cookie "KRTBCOOKIE_1101" set correctly after consent
PubMatic cookie "KRTBCOOKIE_57" set correctly after consent
PubMatic cookie "KRTBCOOKIE_1469" set correctly after consent
PubMatic cookie "KRTBCOOKIE_860" set correctly after consent
PubMatic cookie "SPugT" set correctly after consent
PubMatic cookie "KRTBCOOKIE_32" set correctly after consent
PubMatic cookie "KRTBCOOKIE_1323" set correctly after consent
PubMatic cookie "KCCH" set correctly after consent
PubMatic cookie "pi" set correctly after consent
PubMatic cookie "chkChromeAb67Sec" set correctly after consent
PubMatic cookie "KRTBCOOKIE_188" set correctly after consent
PubMatic cookie "PugT" set correctly after consent
PubMatic cookie "KRTBCOOKIE_740" set correctly after consent
PubMatic cookie "KRTBCOOKIE_1513" set correctly after consent
PubMatic cookie "KRTBCOOKIE_22" set correctly after consent
PubMatic cookie "KRTBCOOKIE_1529" set correctly after consent
PubMatic cookie "chk" set correctly after consent
PubMatic cookie "KRTBCOOKIE_1277" set correctly after consent
PubMatic cookie "KRTBCOOKIE_409" set correctly after consent
PubMatic cookie "pubsyncexp" set correctly after consent
Nexx360 cookie "n360-yieldlab" set correctly after consent
Outbrain cookie "obuid" set correctly after consent
The Tradedesk2 findingsTDID, TDCPM
TDID, TDCPM
The Tradedesk cookie "TDID" set correctly after consent
The Tradedesk cookie "TDCPM" set correctly after consent
Rapleaf2 findingspxrc, rlas3
pxrc, rlas3
Rapleaf cookie "pxrc" set correctly after consent
Rapleaf cookie "rlas3" set correctly after consent
Sharethrough cookie "stx_user_id" set correctly after consent
Yahoo2 findingsA3, IDSYNC
A3, IDSYNC
Yahoo cookie "A3" set correctly after consent
Yahoo cookie "IDSYNC" set correctly after consent
Beeswax2 findingsbito, bitoIsSecure
bito, bitoIsSecure
Beeswax cookie "bito" set correctly after consent
Beeswax cookie "bitoIsSecure" set correctly after consent
Google AdSense2 findings__gpi, __eoi

__gpi, __eoi

Google AdSense cookie "__gpi" set correctly after consent

Google AdSense cookie "__eoi" set correctly after consent
LinkedIn3 findingsbcookie, li_gc, lidc
bcookie, li_gc, lidc
LinkedIn cookie "bcookie" set correctly after consent
LinkedIn cookie "li_gc" set correctly after consent
LinkedIn cookie "lidc" set correctly after consent
Amazon2 findingsad-id, ad-privacy
ad-id, ad-privacy
Amazon cookie "ad-id" set correctly after consent
Amazon cookie "ad-privacy" set correctly after consent
SurveyMonkey3 findingsp_Amc_b, p_Amc_s, p_Amc_t
p_Amc_b, p_Amc_s, p_Amc_t
SurveyMonkey cookie "p_Amc_b" set correctly after consent
SurveyMonkey cookie "p_Amc_s" set correctly after consent
SurveyMonkey cookie "p_Amc_t" set correctly after consent
semasio.net cookie "SEUNCY" set correctly after consent
Visx.net cookie "um2" set correctly after consent

Quantcast cookie "mc" set correctly after consent
Admixer cookie "am-uid" set correctly after consent
adscale.de3 findingsuu, tu, cct
uu, tu, cct
adscale.de cookie "uu" set correctly after consent
adscale.de cookie "tu" set correctly after consent
adscale.de cookie "cct" set correctly after consent
csync.loopme.me cookie "viewer_token" set correctly after consent
Yieldmo cookie "yieldmo_id" set correctly after consent
Casale Media3 findingsCMID, CMPS, CMPRO
CMID, CMPS, CMPRO
Casale Media cookie "CMID" set correctly after consent
Casale Media cookie "CMPS" set correctly after consent
Casale Media cookie "CMPRO" set correctly after consent
Smartadserver3 findingsTestIfCookieP, pbw, csync
TestIfCookieP, pbw, csync
Smartadserver cookie "TestIfCookieP" set correctly after consent
Smartadserver cookie "pbw" set correctly after consent
Smartadserver cookie "csync" set correctly after consent
Adition cookie "UserID1" set correctly after consent
Media.net2 findingsvisitor-id, data-ttd
visitor-id, data-ttd
Media.net cookie "visitor-id" set correctly after consent
Media.net cookie "data-ttd" set correctly after consent
Emetric3 findingspid_short, pid_signature, ep
pid_short, pid_signature, ep
Emetric cookie "pid_short" set correctly after consent
Emetric cookie "pid_signature" set correctly after consent
Emetric cookie "ep" set correctly after consent
ID53 findingsgdpr, id5, 3pi
gdpr, id5, 3pi
ID5 cookie "gdpr" set correctly after consent
ID5 cookie "id5" set correctly after consent
ID5 cookie "3pi" set correctly after consent
NGINX Ingresss cookie "INGRESSCOOKIE" set correctly after consent
Admatic cookie "uids" set correctly after consent
Aniview cookie "aniC" set correctly after consent
OnAudience4 findingsdone_redirects297, done_redirects153, done_redirects200, done_redirects280414
done_redirects297, done_redirects153, done_redirects200, done_redirects280414
OnAudience cookie "done_redirects297" set correctly after consent
OnAudience cookie "done_redirects153" set correctly after consent
OnAudience cookie "done_redirects200" set correctly after consent
OnAudience cookie "done_redirects280414" set correctly after consent
HAproxy cookie "SERVERID" set correctly after consent
Bing / Microsoft2 findingsMUID, MR

MUID, MR

Bing / Microsoft cookie "MUID" set correctly after consent

Bing / Microsoft cookie "MR" set correctly after consent
Improve Digital2 findingsum, umeh
um, umeh
Improve Digital cookie "um" set correctly after consent
Improve Digital cookie "umeh" set correctly after consent
Mediarithmics3 findingsmics_vid, mics_uaid, mics_lts
mics_vid, mics_uaid, mics_lts
Mediarithmics cookie "mics_vid" set correctly after consent
Mediarithmics cookie "mics_uaid" set correctly after consent
Mediarithmics cookie "mics_lts" set correctly after consent
BetweenDigital cookie "dc" set correctly after consent
betweendigital.com cookie "ss" set correctly after consent
Weborama cookie "AFFICHE_W" set correctly after consent
Tapad3 findingsTapAd_TS, TapAd_DID, TapAd_3WAY_SYNCS
TapAd_TS, TapAd_DID, TapAd_3WAY_SYNCS
Tapad cookie "TapAd_TS" set correctly after consent
Tapad cookie "TapAd_DID" set correctly after consent
Tapad cookie "TapAd_3WAY_SYNCS" set correctly after consent
Roku cookie "wfivefivec" set correctly after consent
Zeotap cookie "zc" set correctly after consent
Neustar cookie "ab" set correctly after consent
Yandex.Metrica4 findingsyuidss, yandexuid, yashr, bh
yuidss, yandexuid, yashr, bh
Yandex.Metrica cookie "yuidss" set correctly after consent
Yandex.Metrica cookie "yandexuid" set correctly after consent
Yandex.Metrica cookie "yashr" set correctly after consent
Yandex.Metrica cookie "bh" set correctly after consent
localStorage availability probe (null) wrote "__storage_test__" to localStorage correctly after consent
Is this your site?
Run a full multi-page scan with monitoring and get detailed remediation steps
Scan finanzen.net →This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com