Medical News Today

medicalnewstoday.com

Compare

https://medicalnewstoday.com

Scanned Apr 15, 2026 · 36.0s

Your website score is

0/100
Critical

Grade

F0

Banner

Yes

Regulatory Compliance

Multi-regulation overview — click any regulation for details

Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.

Tag Leak detected 64 user data leaks before consent on medicalnewstoday.com, including Advertising Tracker, Google (Tracker Tracker), DoubleVerify (Tracker Tracker) and 13 more.

Security Headers

1/6 present

Strict-Transport-Security

max-age=31536000; includeSubDomains

Content-Security-Policy

Add a Content-Security-Policy header to prevent XSS and code injection attacks

X-Frame-Options

Add X-Frame-Options header to prevent clickjacking attacks

X-Content-Type-Options

Set X-Content-Type-Options to 'nosniff' to prevent MIME type sniffing

Referrer-Policy

Set a Referrer-Policy header to control how much referrer information is shared

Permissions-Policy

Add a Permissions-Policy header to restrict browser features like camera, microphone, and geolocation

Google Consent Mode

V2
70/100
GTM Containers:GTM-MB6365D

Consent Parameters

ParameterDefaultUpdated
Ad Storagenot_setgranted
Ad User Datanot_setgranted
Ad Personalizationnot_setgranted
Analytics Storagenot_setgranted
Functionality Storagenot_setdenied
Personalization Storagenot_setdenied
Security Storagenot_setdenied

Issues (1)

No default consent call detected — consent mode may not be initialised correctly

Post-Rejection Audit

Reject Button

Found

Post-Rejection Fires

7 vendors

Consent Mode

Not Detected

GTM Load

1314ms pre-consent

Google Tag Manager(GTM-MB6365D)

Loaded 1314ms after page load — before the consent banner was detected (banner appeared at 7826ms). Per a 2022 German court ruling, GTM itself transmits the user's IP to Google pre-consent.

Consent Mode V2: Not Detected

Google Consent Mode was not detected on this site.

✓ gtag('consent', 'update') call detected on rejection

Vendors firing after rejection (7)

VendorCategoryTimingURL
TikTok — TikTok Pixeladvertising20352msanalytics.tiktok.com
Meta — Meta Pixeladvertising20352msconnect.facebook.net
Microsoft — Microsoft Adsadvertising20363msbat.bing.com
Reddit — Reddit Pixeladvertising20401msalb.reddit.com
Meta — Meta Pixeladvertising20670mswww.facebook.com
Microsoft — Microsoft Clarityanalytics20673mswww.clarity.ms
TikTok — TikTok Pixeladvertising20897msanalytics-ipv6.tiktokw.us

Consent Record Audit

Issues detected

Consent record stored after interaction

GDPR Art. 7(1)

Found: OptanonConsent (OneTrust)

Record contains timestamp

Art. 7(1)

Timestamp field detected

Record contains consent state

Art. 7(1)

Accept/reject state detected

Record contains consent categories

Art. 7(1)

Consent categories (analytics, marketing, etc.) not found in record

Consent withdrawal mechanism accessible

GDPR Art. 7(3)

No way for users to withdraw consent found on page

No cookie settings link, footer link, or floating consent button was detected. GDPR requires users to withdraw consent as easily as they gave it.

Why this matters

Under GDPR Article 7, controllers must be able to demonstrate that consent was given (Art. 7(1)) and ensure users can withdraw consent at any time, as easily as giving it (Art. 7(3)). Sites with no consent record or no withdrawal mechanism cannot legally rely on consent as a lawful basis.

Tracker categories detected

Advertising17 vendors
Analytics5 vendors
Marketing4 vendors
Security5
Functional3 vendors
Tag Management1 vendor
Critical32
Advertising Tracker
Advertising Tracker2 findings

prod.adspsp.com, ingest.make.rvohealth.com

Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at prod.adspsp.com loaded before consent

Host: prod.adspsp.comFired: 967ms after load
Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at ingest.make.rvohealth.com loaded before consent

Host: ingest.make.rvohealth.comFired: 1901ms after load
Google (Tracker Tracker)
Google (Tracker Tracker)2 findings

securepubads.g.doubleclick.net, ad.doubleclick.net

Google (Tracker Tracker)
criticalNetworkGoogle (Tracker Tracker)

Google (tracker) loaded before consent

Host: securepubads.g.doubleclick.netFired: 967ms after load
Google (Tracker Tracker)
criticalNetworkGoogle (Tracker Tracker)

Google (tracker) loaded before consent

Host: ad.doubleclick.netFired: 4597ms after load
DoubleVerify (Tracker Tracker)
criticalNetworkDoubleVerify (Tracker Tracker)

DoubleVerify (tracker) loaded before consent

Host: pub.doubleverify.comFired: 970ms after load
Amazon (Advertising Tracker)
Amazon (Advertising Tracker)3 findings

config.aps.amazon-adsystem.com, client.aps.amazon-adsystem.com, c.amazon-adsystem.com

Amazon (Advertising Tracker)
criticalNetworkAdvertisingAmazon (Advertising Tracker)

Amazon (advertising) loaded before consent

Host: config.aps.amazon-adsystem.comFired: 970ms after load
Amazon (Advertising Tracker)
criticalNetworkAdvertisingAmazon (Advertising Tracker)

Amazon (advertising) loaded before consent

Host: client.aps.amazon-adsystem.comFired: 970ms after load
Amazon (Advertising Tracker)
criticalNetworkAdvertisingAmazon (Advertising Tracker)

Amazon (advertising) loaded before consent

Host: c.amazon-adsystem.comFired: 1397ms after load
Confiant (Advertising Tracker)
criticalNetworkAdvertisingConfiant (Advertising Tracker)

Confiant (advertising) loaded before consent

Host: cdn.confiant-integrations.netFired: 4322ms after load
AdDelivery (Advertising Tracker)
criticalNetworkAdvertisingAdDelivery (Advertising Tracker)

AdDelivery (advertising) loaded before consent

Host: ad-delivery.netFired: 4597ms after load
IndexExchange (Advertising Tracker)
criticalNetworkAdvertisingIndexExchange (Advertising Tracker)

IndexExchange (advertising) loaded before consent

Host: js-sec.indexww.comFired: 5173ms after load
LiveRamp (Advertising Tracker)
criticalNetworkAdvertisingLiveRamp (Advertising Tracker)

LiveRamp (advertising) loaded before consent

Host: api.rlcdn.comFired: 5239ms after load
The Trade Desk (Tracker Tracker)
criticalNetworkThe Trade Desk (Tracker Tracker)

The Trade Desk (tracker) loaded before consent

Host: match.adsrvr.orgFired: 5241ms after load
33Across (Advertising Tracker)
criticalNetworkAdvertising33Across (Advertising Tracker)

33Across (advertising) loaded before consent

Host: lexicon.33across.comFired: 5313ms after load
Yahoo! (Analytics Tracker)
criticalNetworkAnalyticsYahoo! (Analytics Tracker)

Yahoo! (analytics) loaded before consent

Host: ups.analytics.yahoo.comFired: 5314ms after load
ID5 (Advertising Tracker)
ID5 (Advertising Tracker)5 findings

id5-sync.com, lb.eu-1-id5-sync.com, cdn.id5-sync.com, api.id5-sync.com, lbs.eu-1-id5-sync.com

ID5 (Advertising Tracker)
criticalNetworkAdvertisingID5 (Advertising Tracker)

ID5 (advertising) loaded before consent

Host: id5-sync.comFired: 5314ms after load
ID5 (Advertising Tracker)
criticalNetworkAdvertisingID5 (Advertising Tracker)

ID5 (advertising) loaded before consent

Host: lb.eu-1-id5-sync.comFired: 5393ms after load
ID5 (Advertising Tracker)
criticalNetworkAdvertisingID5 (Advertising Tracker)

ID5 (advertising) loaded before consent

Host: cdn.id5-sync.comFired: 5538ms after load
ID5 (Advertising Tracker)
criticalNetworkAdvertisingID5 (Advertising Tracker)

ID5 (advertising) loaded before consent

Host: api.id5-sync.comFired: 5611ms after load
ID5 (Advertising Tracker)
criticalNetworkAdvertisingID5 (Advertising Tracker)

ID5 (advertising) loaded before consent

Host: lbs.eu-1-id5-sync.comFired: 6122ms after load
Dentsu (Advertising Tracker)
criticalNetworkAdvertisingDentsu (Advertising Tracker)

Dentsu (advertising) loaded before consent

Host: id2.sv.rkdms.comFired: 5316ms after load
PublicisGroupe (Tracker Tracker)
criticalNetworkPublicisGroupe (Tracker Tracker)

PublicisGroupe (tracker) loaded before consent

Host: secure.cdn.fastclick.netFired: 5538ms after load
Youtube
Youtube3 findings

__Secure-ROLLOUT_TOKEN, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA

Youtube
criticalCookieMarketingYoutube

Youtube cookie "__Secure-ROLLOUT_TOKEN" set before consent — Registers a unique ID to keep statistics of what videos from YouTube the user has seen.

Cookie: __Secure-ROLLOUT_TOKENDomain: .youtube.comRetention: 180 days
Youtube
criticalCookieMarketingYoutube

Youtube cookie "VISITOR_INFO1_LIVE" set before consent — Tries to estimate the users' bandwidth on pages with integrated YouTube videos. Also used for marketing

Cookie: VISITOR_INFO1_LIVEDomain: .youtube.comRetention: 179 days
Youtube
criticalCookieMarketingYoutube

Youtube cookie "VISITOR_PRIVACY_METADATA" set before consent — Youtube visitor privacy metadata cookie

Cookie: VISITOR_PRIVACY_METADATADomain: .youtube.comRetention: 180 days
criticalCookieMarketingID5

ID5 cookie "id5" set before consent — Sets a unique ID for the visitor, that allows third party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third party advertisement hubs, which facilitates real-time bidding for advertisers.

Cookie: id5Domain: .id5-sync.comRetention: 1 day
TikTok — TikTok Pixel
criticalPost-RejectionAdvertisingTikTok — TikTok Pixel

TikTok — TikTok Pixel fires after user rejected consent

Fired: 20352ms after load
Meta — Meta Pixel
criticalPost-RejectionAdvertisingMeta — Meta Pixel

Meta — Meta Pixel fires after user rejected consent

Fired: 20352ms after load
Microsoft — Microsoft Ads
criticalPost-RejectionAdvertisingMicrosoft — Microsoft Ads

Microsoft — Microsoft Ads fires after user rejected consent

Fired: 20363ms after load
Reddit — Reddit Pixel
criticalPost-RejectionAdvertisingReddit — Reddit Pixel

Reddit — Reddit Pixel fires after user rejected consent

Fired: 20401ms after load
Microsoft — Microsoft Clarity
criticalPost-RejectionAnalyticsMicrosoft — Microsoft Clarity

Microsoft — Microsoft Clarity fires after user rejected consent

Fired: 20673ms after load
criticalConsent Record

No recognizable consent withdrawal mechanism detected — GDPR Article 7(3) requires users can withdraw consent as easily as giving it (cookie settings link or floating button expected)

Warnings38
Google Tag Manager
Google Tag Manager2 findingsID tracked

www.googletagmanager.com

Google Tag Manager
warningNetworkTag ManagementGoogle Tag Manager

Google Tag Manager loads before consent — this is expected and required for GCM v2 to initialise consent defaults before any tags fire

ID: GTM-MB6365DHost: www.googletagmanager.comFired: 3901ms after load
Google Tag Manager
warningGTMTag ManagementGoogle Tag Manager

GTM loaded before consent banner — IP address transmitted to Google pre-consent (container: GTM-MB6365D)

vendor logo
warningNetwork

Unknown third-party request to gtm-server.healthline.com before consent

ID: GTM-MB6365DHost: gtm-server.healthline.comFired: 1023ms after load
vendor logo
warningNetwork

Unknown third-party request to cdn.rvohealth.com before consent

Host: cdn.rvohealth.comFired: 1913ms after load
vendor logo
warningNetwork

Unknown third-party request to media.post.rvohealth.io before consent

Host: media.post.rvohealth.ioFired: 3348ms after load
vendor logo
warningNetwork

Unknown third-party request to pavlov-prod.healthline.com before consent

Host: pavlov-prod.healthline.comFired: 3694ms after load
vendor logo
warningNetwork

Unknown third-party request to cdn.btmessage.com before consent

Host: cdn.btmessage.comFired: 4197ms after load
vendor logo
warningNetwork

Unknown third-party request to api.btmessage.com before consent

Host: api.btmessage.comFired: 4592ms after load
warningStorage

sessionStorage key "tglr_hash_id" written before consent

Key: tglr_hash_idType: sessionStorageFired: 1860ms after load
warningStorage

localStorage key "lsTest" written before consent

Key: lsTestType: localStorageFired: 1888ms after load
warningStorage

localStorage key "pmp_dcsn_cache" written before consent

Key: pmp_dcsn_cacheType: localStorageFired: 3386ms after load
warningStorage

localStorage key "adb_u" written before consent

Key: adb_uType: localStorageFired: 4041ms after load
warningStorage

sessionStorage key "adb_s" written before consent

Key: adb_sType: sessionStorageFired: 4042ms after load
warningStorage

sessionStorage key "BT_sid" written before consent

Key: BT_sidType: sessionStorageFired: 4331ms after load
warningStorage

localStorage key "test" written before consent

Key: testType: localStorageFired: 5229ms after load
warningStorage

localStorage key "prebid.cookieTest" written before consent

Key: prebid.cookieTestType: localStorageFired: 5262ms after load
warningStorage

localStorage key "_sharedID_exp" written before consent

Key: _sharedID_expType: localStorageFired: 5285ms after load
warningStorage

localStorage key "_sharedID_cst" written before consent

Key: _sharedID_cstType: localStorageFired: 5286ms after load
warningStorage

localStorage key "_sharedID" written before consent

Key: _sharedIDType: localStorageFired: 5286ms after load
warningStorage

localStorage key "IXWRAPPERLiveRampIp" written before consent

Key: IXWRAPPERLiveRampIpType: localStorageFired: 5345ms after load
warningStorage

localStorage key "IXWRAPPERAdserverOrgIp" written before consent

Key: IXWRAPPERAdserverOrgIpType: localStorageFired: 5353ms after load
warningStorage

localStorage key "connectid_exp" written before consent

Key: connectid_expType: localStorageFired: 5415ms after load
warningStorage

localStorage key "connectid_cst" written before consent

Key: connectid_cstType: localStorageFired: 5419ms after load
warningStorage

localStorage key "connectid" written before consent

Key: connectidType: localStorageFired: 5420ms after load
warningStorage

localStorage key "id5id_exp" written before consent

Key: id5id_expType: localStorageFired: 5463ms after load
warningStorage

localStorage key "id5id_cst" written before consent

Key: id5id_cstType: localStorageFired: 5464ms after load
warningStorage

localStorage key "id5id" written before consent

Key: id5idType: localStorageFired: 5464ms after load
warningStorage

localStorage key "id5id_last" written before consent

Key: id5id_lastType: localStorageFired: 5464ms after load
warningStorage

localStorage key "__localStorage_test__" written before consent

Key: __localStorage_test__Type: localStorageFired: 5581ms after load
warningStorage

localStorage key "_pubcid_exp" written before consent

Key: _pubcid_expType: localStorageFired: 5586ms after load
warningStorage

localStorage key "_pubcid" written before consent

Key: _pubcidType: localStorageFired: 5587ms after load
warningStorage

localStorage key "id5id_cached_consent_data_exp" written before consent

Key: id5id_cached_consent_data_expType: localStorageFired: 6112ms after load
warningStorage

localStorage key "id5id_cached_consent_data" written before consent

Key: id5id_cached_consent_dataType: localStorageFired: 6113ms after load
warningStorage

localStorage key "__id5test" written before consent

Key: __id5testType: localStorageFired: 6113ms after load
warningStorage

localStorage key "id5id_extensions" written before consent

Key: id5id_extensionsType: localStorageFired: 6185ms after load
warningStorage

localStorage key "id5id_privacy_exp" written before consent

Key: id5id_privacy_expType: localStorageFired: 6207ms after load
warningStorage

localStorage key "id5id_privacy" written before consent

Key: id5id_privacyType: localStorageFired: 6207ms after load
warningStorage

localStorage key "id5id_v2_6731402884891114" written before consent

Key: id5id_v2_6731402884891114Type: localStorageFired: 6208ms after load
Info8
OneTrust
OneTrust2 findings

cdn.cookielaw.org, OptanonConsent

OneTrust
infoNetworkConsent MgmtOneTrust

OneTrust (OneTrust) loaded before consent: OneTrust cookie consent management

Host: cdn.cookielaw.orgFired: 931ms after load
OneTrust
infoCookieConsent MgmtOneTrust

OneTrust cookie "OptanonConsent" set before consent

Cookie: OptanonConsentDomain: .medicalnewstoday.com
OneTrust CMP
infoNetworkConsent MgmtOneTrust CMP

OneTrust CMP (OneTrust) loaded before consent: OneTrust geo-lookup — determines which consent banner to show based on user location

Host: geolocation.onetrust.comFired: 1108ms after load
Sourcepoint CMP
Sourcepoint CMP2 findings

ats-wrapper.privacymanager.io, geo.privacymanager.io

Sourcepoint CMP
infoNetworkConsent MgmtSourcepoint CMP

Sourcepoint CMP (Sourcepoint) loaded before consent: Sourcepoint consent management platform

Host: ats-wrapper.privacymanager.ioFired: 4322ms after load
Sourcepoint CMP
infoNetworkConsent MgmtSourcepoint CMP

Sourcepoint CMP (Sourcepoint) loaded before consent: Sourcepoint consent management platform

Host: geo.privacymanager.ioFired: 4510ms after load
Google (Cdn)
infoNetworkGoogle (Cdn)

Google (cdn) loaded before consent

Host: www.youtube.comFired: 4353ms after load
infoCookieFunctionalPrivacyPillar

PrivacyPillar cookie "usprivacy" set before consent — This cookie stores the US privacy string.

Cookie: usprivacyDomain: .medicalnewstoday.comRetention: 1 year
Youtube
infoCookieFunctionalYoutube

Youtube cookie "YSC" set before consent — Registers a unique ID to keep statistics of what videos from YouTube the user has seen.

Cookie: YSCDomain: .youtube.comRetention: Session
Compliant19
Google Analytics
Google Analytics3 findings

region1.analytics.google.com, _ga_930KV6HDTB, _ga

GA4
CompliantNetworkAnalyticsGA4

GA4 (Google) loaded correctly after consent

Host: region1.analytics.google.comFired: 3969ms after load
Google Analytics
CompliantCookieAnalyticsGoogle Analytics

Google Analytics cookie "_ga_930KV6HDTB" set correctly after consent

Cookie: _ga_930KV6HDTBDomain: .medicalnewstoday.com
Google Analytics
CompliantCookieAnalyticsGoogle Analytics

Google Analytics cookie "_ga" set correctly after consent

Cookie: _gaDomain: .medicalnewstoday.com
OneTrust
CompliantCookieConsent MgmtOneTrust

OneTrust cookie "OptanonAlertBoxClosed" set correctly after consent

Cookie: OptanonAlertBoxClosedDomain: .medicalnewstoday.com
Reddit Pixel
CompliantCookieAdvertisingReddit Pixel

Reddit Pixel cookie "_rdt_uuid" set correctly after consent

Cookie: _rdt_uuidDomain: .medicalnewstoday.com
Marfeel
CompliantCookieAnalyticsMarfeel

Marfeel cookie "_scor_uid" set correctly after consent

Cookie: _scor_uidDomain: .medicalnewstoday.comRetention: Session
TikTok Pixel
TikTok Pixel5 findings

_ttp, _tt_enable_cookie, tt_sessionId, tt_appInfo, tt_pixel_session_index

TikTok Pixel
CompliantCookieAdvertisingTikTok Pixel

TikTok Pixel cookie "_ttp" set correctly after consent

Cookie: _ttpDomain: .tiktok.com
TikTok Pixel
CompliantCookieAdvertisingTikTok Pixel

TikTok Pixel cookie "_tt_enable_cookie" set correctly after consent

Cookie: _tt_enable_cookieDomain: .medicalnewstoday.com
TikTok Pixel
CompliantStorageAdvertisingTikTok Pixel

TikTok Pixel (TikTok) wrote "tt_sessionId" to sessionStorage correctly after consent

Key: tt_sessionIdType: sessionStorageFired: -19319ms after load
TikTok Pixel
CompliantStorageAdvertisingTikTok Pixel

TikTok Pixel (TikTok) wrote "tt_appInfo" to sessionStorage correctly after consent

Key: tt_appInfoType: sessionStorageFired: -19307ms after load
TikTok Pixel
CompliantStorageAdvertisingTikTok Pixel

TikTok Pixel (TikTok) wrote "tt_pixel_session_index" to sessionStorage correctly after consent

Key: tt_pixel_session_indexType: sessionStorageFired: -19305ms after load
Sailthru3 findings

sailthru_pageviews, sailthru_content, sailthru_visitor

CompliantCookieMarketingSailthru

Sailthru cookie "sailthru_pageviews" set correctly after consent

Cookie: sailthru_pageviewsDomain: www.medicalnewstoday.comRetention: 30 minutes
CompliantCookieMarketingSailthru

Sailthru cookie "sailthru_content" set correctly after consent

Cookie: sailthru_contentDomain: www.medicalnewstoday.comRetention: 1 year
CompliantCookieMarketingSailthru

Sailthru cookie "sailthru_visitor" set correctly after consent

Cookie: sailthru_visitorDomain: www.medicalnewstoday.comRetention: 1 year
Meta Pixel
CompliantCookieAdvertisingMeta Pixel

Meta Pixel cookie "_fbp" set correctly after consent

Cookie: _fbpDomain: .medicalnewstoday.com
TikTok
TikTok2 findings

ttcsid, ttcsid_CK4UH1RC77U0BUL4H3QG

TikTok
CompliantCookieMarketingTikTok

TikTok cookie "ttcsid" set correctly after consent

Cookie: ttcsidDomain: .medicalnewstoday.comRetention: 1 year
TikTok
CompliantCookieMarketingTikTok

TikTok cookie "ttcsid_CK4UH1RC77U0BUL4H3QG" set correctly after consent

Cookie: ttcsid_CK4UH1RC77U0BUL4H3QGDomain: .medicalnewstoday.comRetention: 1 year
CompliantStorageFunctionallocalStorage availability probe

localStorage availability probe (null) wrote "__storage_test__" to localStorage correctly after consent

Key: __storage_test__Type: localStorageFired: -19456ms after load
Google Ads
CompliantStorageAdvertisingGoogle Ads

Google Ads (Google) wrote "_gcl_ls" to localStorage correctly after consent

Key: _gcl_lsType: localStorageFired: 3170ms after load

Is this your site?

Run a full multi-page scan with monitoring and get detailed remediation steps

Scan medicalnewstoday.com →

This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com