https://nintendo.com
Scanned Apr 15, 2026 · 39.7s
Your website score is
Grade
BannerConsent Banner
Yes
Regulatory Compliance
Multi-regulation overview — click any regulation for details
Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.
Tag Leak detected 6 user data leaks before consent on nintendo.com.
Security Headers
6/6 presentStrict-Transport-Security
max-age=31557600
Content-Security-Policy
upgrade-insecure-requests; frame-ancestors 'none'; script-src 'self' https: 'strict-dynamic' 'nonce-t/S0aapB5Xb+7xbr/PCIOAq5' 'unsafe-eval'; base-uri 'none'; font-src 'self' https: data:; form-action 'self'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline';
X-Frame-Options
SAMEORIGIN
X-Content-Type-Options
nosniff
Referrer-Policy
strict-origin-when-cross-origin
Permissions-Policy
camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
Google Consent Mode
Not DetectedGoogle Consent Mode v2 was not found on this page. GCM v2 allows Google's tags to adjust their behavior based on user consent, and is required for compliant advertising measurement in the EU. Without it, your Google Ads and GA4 conversions may be impacted after consent is declined.
Post-Rejection Audit
Reject Button
Found
Post-Rejection Fires
2 vendors
Consent Mode
Not Detected
GTM Load
After consent
Google Tag Manager(GTM-P3CK3CN)
Loaded after consent banner detected — no pre-consent IP transmission detected.
Consent Mode V2: Not Detected
Google Consent Mode was not detected on this site.
Vendors firing after rejection (2)
| Vendor | Category | Timing | URL |
|---|---|---|---|
| OneTrust — OneTrust | consent_management | 18583ms | cdn.cookielaw.org |
| OneTrust — OneTrust CMP | consent_management | 18828ms | geolocation.onetrust.com |
Consent Record Audit
PassConsent record stored after interaction
GDPR Art. 7(1)Found: OptanonConsent (OneTrust)
Record contains timestamp
Art. 7(1)Timestamp field detected
Record contains consent state
Art. 7(1)Accept/reject state detected
Record contains consent categories
Art. 7(1)Consent categories (analytics, marketing, etc.) not found in record
Consent withdrawal mechanism accessible
GDPR Art. 7(3)Cookie settings link / floating button found
Tracker categories detected
Critical2
OneTrust — OneTrust fires after user rejected consent
OneTrust — OneTrust CMP fires after user rejected consent
Warnings6
Unknown third-party request to alps.cdn.nintendo.net before consent
Unknown third-party request to api.cba.nintendo-europe.com before consent
localStorage key "__alps_dummy_name" written before consent
localStorage key "alps/lock/f9a80c41a802ed10/c-1776289615038" written before consent
localStorage key "alps/loginSession/f9a80c41a802ed10" written before consent
localStorage key "alps/loginSession" written before consent
Info5
OneTrust2 findingscdn.cookielaw.org, OptanonConsent
cdn.cookielaw.org, OptanonConsent
OneTrust (OneTrust) loaded before consent: OneTrust cookie consent management
OneTrust cookie "OptanonConsent" set before consent
OneTrust CMP (OneTrust) loaded before consent: OneTrust geo-lookup — determines which consent banner to show based on user location
f5 BIG-IP cookie "BIGipServerWEBFARM_REDIRECT_8053" set before consent — Used by the f5 BIG-IP load balancer to ensure one user's request is always handled by the same server to maintain a consistent user experience
Akamai bot manager — necessary for site protection
Compliant13
Google Tag Manager (Google) loaded correctly after consent
Google Analytics4 findingsID trackedregion1.analytics.google.com, _ga, _ga_8CCMZ61YS8, _ga_SHLQBN3S9L
region1.analytics.google.com, _ga, _ga_8CCMZ61YS8, _ga_SHLQBN3S9L
GA4 (Google) loaded correctly after consent
Google Analytics cookie "_ga" set correctly after consent
Google Analytics cookie "_ga_8CCMZ61YS8" set correctly after consent
Google Analytics cookie "_ga_SHLQBN3S9L" set correctly after consent
Meta Pixel2 findingsconnect.facebook.net, _fbp
connect.facebook.net, _fbp
Meta Pixel (Meta) loaded correctly after consent
Meta Pixel cookie "_fbp" set correctly after consent
Google Ads4 findingswww.google.com, googleads.g.doubleclick.net, _gcl_au, _gcl_ls
www.google.com, googleads.g.doubleclick.net, _gcl_au, _gcl_ls
Google Ads (Google) loaded correctly after consent
Google Ads (Google) loaded correctly after consent
Google Ads cookie "_gcl_au" set correctly after consent
Google Ads (Google) wrote "_gcl_ls" to localStorage correctly after consent
OneTrust cookie "OptanonAlertBoxClosed" set correctly after consent
DoubleClick/Google Marketing cookie "IDE" set correctly after consent
Is this your site?
Run a full multi-page scan with monitoring and get detailed remediation steps
Scan nintendo.com →This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com