https://mcdonalds.com
Scanned Apr 15, 2026 · 35.3s
Your website score is
Grade
BannerConsent Banner
Yes
Regulatory Compliance
Multi-regulation overview — click any regulation for details
Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.
Tag Leak detected 13 user data leaks before consent on mcdonalds.com, including Advertising Tracker, Akamai (Analytics Tracker).
Security Headers
3/6 presentStrict-Transport-Security
max-age=31557600
Content-Security-Policy
Add a Content-Security-Policy header to prevent XSS and code injection attacks
X-Frame-Options
SAMEORIGIN
X-Content-Type-Options
nosniff
Referrer-Policy
Set a Referrer-Policy header to control how much referrer information is shared
Permissions-Policy
Add a Permissions-Policy header to restrict browser features like camera, microphone, and geolocation
Google Consent Mode
V2Consent Parameters
Issues (2)
No default consent call detected — consent mode may not be initialised correctly
No GTM container detected — consent mode works best with Google Tag Manager
Post-Rejection Audit
Reject Button
Found
Post-Rejection Fires
1 vendor
Consent Mode
Not Detected
GTM Load
Not detected
Consent Mode V2: Not Detected
Google Consent Mode was not detected on this site.
✓ gtag('consent', 'update') call detected on rejection
Vendors firing after rejection (1)
| Vendor | Category | Timing | URL |
|---|---|---|---|
| OneTrust — OneTrust | consent_management | 15554ms | cdn.cookielaw.org |
Consent Record Audit
PassConsent record stored after interaction
GDPR Art. 7(1)Found: OptanonConsent (OneTrust)
Record contains timestamp
Art. 7(1)Timestamp field detected
Record contains consent state
Art. 7(1)Accept/reject state detected
Record contains consent categories
Art. 7(1)Consent categories (analytics, marketing, etc.) not found in record
Consent withdrawal mechanism accessible
GDPR Art. 7(3)Cookie settings link / floating button found
Tracker categories detected
Critical4
advertising tracker at rum.hlx.page loaded before consent
Akamai (Analytics Tracker)2 findingss.go-mpulse.net, c.go-mpulse.net
s.go-mpulse.net, c.go-mpulse.net
Akamai (analytics) loaded before consent
Akamai (analytics) loaded before consent
OneTrust — OneTrust fires after user rejected consent
Warnings10
Unknown third-party request to assets.adobedtm.com before consent
localStorage key "dummy" written before consent
localStorage key "ak_a" written before consent
localStorage key "_boomr_clss" written before consent
localStorage key "__akfp_storage_test__" written before consent
localStorage key "mparticle" written before consent
localStorage key "mprtcl-v4_C2E81D2D-id-cache" written before consent
localStorage key "mprtcl-v4_C2E81D2D" written before consent
localStorage key "mprtcl-tos-C2E81D2D" written before consent
sessionStorage key "mprtcl-v4_C2E81D2D-events" written before consent
Info8
Adobe (cdn) loaded before consent
OneTrust2 findingscdn.cookielaw.org, OptanonConsent
cdn.cookielaw.org, OptanonConsent
OneTrust (OneTrust) loaded before consent: OneTrust cookie consent management
OneTrust cookie "OptanonConsent" set before consent
OneTrust CMP (OneTrust) loaded before consent: OneTrust geo-lookup — determines which consent banner to show based on user location
Akamai cookie "AKA_A2" set before consent — Used for Akamai's Advanced Acceleration feature, intended to improve web performance
Tripadvisor cookie "RT" set before consent — This cookie is used to identify the visitor through an application. This allows the visitor to login to a website through their LinkedIn application for example.
Akamai bot manager — necessary for site protection
Akamai bot management session — necessary for site protection
Compliant5
OneTrust cookie "OptanonAlertBoxClosed" set correctly after consent
Mixpanel3 findingsmp_a43fc59a7407b75f9028aa113978e697_mixpanel, mp_tab_id_mparticle_a43fc59a7407b75f9028aa113978e697, mp_gen_new_tab_id_mparticle_a43fc59a7407b75f9028aa113978e697
mp_a43fc59a7407b75f9028aa113978e697_mixpanel, mp_tab_id_mparticle_a43fc59a7407b75f9028aa113978e697, mp_gen_new_tab_id_mparticle_a43fc59a7407b75f9028aa113978e697
Mixpanel cookie "mp_a43fc59a7407b75f9028aa113978e697_mixpanel" set correctly after consent
Mixpanel (Mixpanel) wrote "mp_tab_id_mparticle_a43fc59a7407b75f9028aa113978e697" to sessionStorage correctly after consent
Mixpanel (Mixpanel) wrote "mp_gen_new_tab_id_mparticle_a43fc59a7407b75f9028aa113978e697" to sessionStorage correctly after consent
Akamai cookie "bm_sv" set correctly after consent
Is this your site?
Run a full multi-page scan with monitoring and get detailed remediation steps
Scan mcdonalds.com →This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com