Netflix

netflix.com

Compare

https://netflix.com

Scanned Apr 15, 2026 · 35.7s

Your website score is

0/100
Critical

Grade

F0

Banner

Yes

Regulatory Compliance

Multi-regulation overview — click any regulation for details

Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.

Tag Leak detected 23 user data leaks before consent on netflix.com, including OneTrust (Tracker Tracker), GA4, Snapchat Pixel and 4 more.

Security Headers

3/6 present

Strict-Transport-Security

max-age=31536000; includeSubDomains

Content-Security-Policy

Add a Content-Security-Policy header to prevent XSS and code injection attacks

X-Frame-Options

DENY

X-Content-Type-Options

nosniff

Referrer-Policy

Set a Referrer-Policy header to control how much referrer information is shared

Permissions-Policy

Add a Permissions-Policy header to restrict browser features like camera, microphone, and geolocation

Google Consent Mode

Not Detected

Google Consent Mode v2 was not found on this page. GCM v2 allows Google's tags to adjust their behavior based on user consent, and is required for compliant advertising measurement in the EU. Without it, your Google Ads and GA4 conversions may be impacted after consent is declined.

Post-Rejection Audit

Reject Button

Found

Post-Rejection Fires

1 vendor

Consent Mode

Not Detected

GTM Load

Not detected

Consent Mode V2: Not Detected

Google Consent Mode was not detected on this site.

Vendors firing after rejection (1)

VendorCategoryTimingURL
Snapchat — Snapchat Pixeladvertising20852mstr.snapchat.com

Consent Record Audit

Pass

Consent record stored after interaction

GDPR Art. 7(1)

Found: OptanonConsent (OneTrust)

Record contains timestamp

Art. 7(1)

Timestamp field detected

Record contains consent state

Art. 7(1)

Accept/reject state detected

Record contains consent categories

Art. 7(1)

Consent categories (analytics, marketing, etc.) not found in record

Consent withdrawal mechanism accessible

GDPR Art. 7(3)

Cookie settings link / floating button found

Consent record and withdrawal mechanism are both correctly implemented

Tracker categories detected

Advertising6 vendors
Analytics1 vendor
Security3
Functional1 vendor
Critical15
TikTok Pixel
TikTok Pixel3 findingsID tracked

analytics.tiktok.com, analytics-ipv6.tiktokw.us, _ttp

TikTok Pixel
criticalNetworkAdvertisingTikTok Pixel

TikTok Pixel (TikTok) loaded before consent: Sends event data to TikTok for ad measurement

ID: CRI5GNBC77UDCGHCQ7C0Host: analytics.tiktok.comFired: 2781ms after load
TikTok Pixel
criticalNetworkAdvertisingTikTok Pixel

TikTok Pixel (TikTok) loaded before consent: TikTok Pixel IPv6 enrichment and data collection

Host: analytics-ipv6.tiktokw.usFired: 3946ms after load
TikTok Pixel
criticalCookieAdvertisingTikTok Pixel

TikTok Pixel cookie "_ttp" set before consent

Cookie: _ttpDomain: .tiktok.com
Meta Pixel
Meta Pixel2 findingsID tracked

www.facebook.com, connect.facebook.net

Meta Pixel
criticalNetworkAdvertisingMeta Pixel

Meta Pixel (Meta) loaded before consent: Meta Pixel tracking endpoint

ID: 829253787145710Host: www.facebook.comFired: 4023ms after load
Meta Pixel
criticalNetworkAdvertisingMeta Pixel

Meta Pixel (Meta) loaded before consent: Sends user data to Meta for ad targeting and conversion tracking

Host: connect.facebook.netFired: 2781ms after load
OneTrust (Tracker Tracker)
criticalNetworkOneTrust (Tracker Tracker)

OneTrust (tracker) loaded before consent

Host: cookies-data.onetrust.ioFired: 2207ms after load
GA4
criticalNetworkAnalyticsGA4

GA4 (Google) loaded before consent: Google Analytics gtag.js library

Host: www.googletagmanager.comFired: 2781ms after load
Snapchat Pixel
Snapchat Pixel2 findings

sc-static.net, tr.snapchat.com

Snapchat Pixel
criticalNetworkAdvertisingSnapchat Pixel

Snapchat Pixel (Snapchat) loaded before consent: Loads Snapchat conversion tracking script

Host: sc-static.netFired: 2781ms after load
Snapchat Pixel
criticalNetworkAdvertisingSnapchat Pixel

Snapchat Pixel (Snapchat) loaded before consent: Snapchat pixel tracking endpoint

Host: tr.snapchat.comFired: 3706ms after load
Google Ads
Google Ads4 findings

www.googleadservices.com, www.google.com, googleads.g.doubleclick.net, _gcl_au

Google Ads
criticalNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded before consent: Google Ads conversion tracking

Host: www.googleadservices.comFired: 3489ms after load
Google Ads
criticalNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded before consent: Google Consent Mode data collection for ad measurement

Host: www.google.comFired: 3490ms after load
Google Ads
criticalNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded before consent: Sends conversion data to Google Ads

Host: googleads.g.doubleclick.netFired: 4041ms after load
Google Ads
criticalCookieAdvertisingGoogle Ads

Google Ads cookie "_gcl_au" set before consent

Cookie: _gcl_auDomain: .nflximg.net
Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at tr6.snapchat.com loaded before consent

Host: tr6.snapchat.comFired: 4260ms after load
Snapchat — Snapchat Pixel
criticalPost-RejectionAdvertisingSnapchat — Snapchat Pixel

Snapchat — Snapchat Pixel fires after user rejected consent

Fired: 20852ms after load
Warnings9
vendor logo
warningNetwork

Unknown third-party request to assets.nflxext.com before consent

Host: assets.nflxext.comFired: 772ms after load
vendor logo
warningNetwork

Unknown third-party request to help.nflxext.com before consent

Host: help.nflxext.comFired: 772ms after load
vendor logo
warningNetwork

Unknown third-party request to occ.a.nflxso.net before consent

Host: occ.a.nflxso.netFired: 772ms after load
vendor logo
warningNetwork

Unknown third-party request to occ-0-769-768.1.nflxso.net before consent

Host: occ-0-769-768.1.nflxso.netFired: 936ms after load
vendor logo
warningNetwork

Unknown third-party request to www.google.com before consent

Host: www.google.comFired: 1977ms after load
vendor logo
warningNetwork

Unknown third-party request to ae.nflximg.net before consent

Host: ae.nflximg.netFired: 2528ms after load
warningStorage

localStorage key "__nf_storage_test__" written before consent

Key: __nf_storage_test__Type: localStorageFired: 1241ms after load
warningStorage

localStorage key "nf-cl-ls-1776281682007-5gn" written before consent

Key: nf-cl-ls-1776281682007-5gnType: localStorageFired: 2516ms after load
warningStorage

localStorage key "nf-cl-ls-1776281687015-ssc" written before consent

Key: nf-cl-ls-1776281687015-sscType: localStorageFired: 7524ms after load
Info6
OneTrust CMP
infoNetworkConsent MgmtOneTrust CMP

OneTrust CMP (OneTrust) loaded before consent: OneTrust geo-lookup — determines which consent banner to show based on user location

Host: geolocation.onetrust.comFired: 995ms after load
Google (Cdn)
Google (Cdn)3 findings

www.gstatic.com, fonts.gstatic.com, www.google.nl

Google (Cdn)
infoNetworkGoogle (Cdn)

Google (cdn) loaded before consent

Host: www.gstatic.comFired: 2209ms after load
Google (Cdn)
infoNetworkGoogle (Cdn)

Google (cdn) loaded before consent

Host: fonts.gstatic.comFired: 3146ms after load
Google (Cdn)
infoNetworkGoogle (Cdn)

Google (cdn) loaded before consent

Host: www.google.nlFired: 4238ms after load
Snapchat
infoCookieFunctionalSnapchat

Snapchat cookie "X-AB" set before consent — This cookie is used by the website’s operator in context with multi-variate testing. This is a tool used to combine or change content on the website. This allows the website to find the best variation/edition of the site.

Cookie: X-ABDomain: sc-static.netRetention: 1 day
OneTrust
infoCookieConsent MgmtOneTrust

OneTrust cookie "OptanonConsent" set before consent

Cookie: OptanonConsentDomain: .netflix.com
Compliant1
OneTrust
CompliantCookieConsent MgmtOneTrust

OneTrust cookie "OptanonAlertBoxClosed" set correctly after consent

Cookie: OptanonAlertBoxClosedDomain: .netflix.com

Is this your site?

Run a full multi-page scan with monitoring and get detailed remediation steps

Scan netflix.com →

This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com