NVIDIA Cookie Compliance Report

NVIDIA

nvidia.com

Compare

https://nvidia.com

Scanned Apr 15, 2026 · 37.0s

Your website score is

75/100

Good

Grade

B75

BannerConsent Banner

Yes

Regulatory Compliance

Multi-regulation overview — click any regulation for details

Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.

Tag Leak detected 2 user data leaks before consent on nvidia.com.

Security Headers

2/6 present

Strict-Transport-Security

Add HSTS header to enforce HTTPS connections and prevent downgrade attacks

Content-Security-Policy

frame-ancestors 'self' *.awsapps.nvidia.com *.nvidia.com https://widget.stackla.com https://app-sj14.marketo.com https://www.youtube.com https://www.quadro-selector.com http://player.youku.com https://player.youku.com https://live.nvidia-china.com https://www.google.com *.nvidia.cn https://events.rainfocus.com https://www.twitch.tv https://store.nvidia.ru https://store.nvidia.in *.geforcenow.com https://salespro.hpe.com https://hpe.seismic.com https://cms.nvidia-docs-uat.lower.k3.m1.brightspot.cloud https://cms.nvidia-docs-qa3.lower.k3.m1.brightspot.cloud https://events.rainfocus.com https://docs.nvidia-docs-uat.lower.k3.m1.brightspot.cloud https://docs.nvidia-docs-qa3.lower.k3.m1.brightspot.cloud https://nvfile;

X-Frame-Options

Add X-Frame-Options header to prevent clickjacking attacks

X-Content-Type-Options

nosniff

Referrer-Policy

Set a Referrer-Policy header to control how much referrer information is shared

Permissions-Policy

Add a Permissions-Policy header to restrict browser features like camera, microphone, and geolocation

Google Consent Mode

Not Detected

Google Consent Mode v2 was not found on this page. GCM v2 allows Google's tags to adjust their behavior based on user consent, and is required for compliant advertising measurement in the EU. Without it, your Google Ads and GA4 conversions may be impacted after consent is declined.

Post-Rejection Audit

Reject Button

Found

Post-Rejection Fires

2 vendors

Consent Mode

Not Detected

GTM Load

Not detected

Consent Mode V2: Not Detected

Google Consent Mode was not detected on this site.

Vendors firing after rejection (2)

Vendor	Category	Timing	URL
OneTrust — OneTrust	consent_management	16949ms	cdn.cookielaw.org
OneTrust — OneTrust CMP	consent_management	17143ms	geolocation.onetrust.com

Consent Record Audit

Issues detected

Consent record stored after interaction

GDPR Art. 7(1)

Found: OptanonConsent (OneTrust)

Record contains timestamp

Art. 7(1)

Timestamp field detected

Record contains consent state

Art. 7(1)

Accept/reject state detected

Record contains consent categories

Art. 7(1)

Consent categories (analytics, marketing, etc.) not found in record

Consent withdrawal mechanism accessible

GDPR Art. 7(3)

No way for users to withdraw consent found on page

No cookie settings link, footer link, or floating consent button was detected. GDPR requires users to withdraw consent as easily as they gave it.

Why this matters

Under GDPR Article 7, controllers must be able to demonstrate that consent was given (Art. 7(1)) and ensure users can withdraw consent at any time, as easily as giving it (Art. 7(3)). Sites with no consent record or no withdrawal mechanism cannot legally rely on consent as a lawful basis.

Tracker categories detected

Advertising7 vendors

Analytics6 vendors

Marketing7 vendors

Security4

Functional5 vendors

Critical3

criticalPost-RejectionConsent MgmtOneTrust — OneTrust

OneTrust — OneTrust fires after user rejected consent

Fired: 16949ms after load

criticalPost-RejectionConsent MgmtOneTrust — OneTrust CMP

OneTrust — OneTrust CMP fires after user rejected consent

Fired: 17143ms after load

criticalConsent Record

No recognizable consent withdrawal mechanism detected — GDPR Article 7(3) requires users can withdraw consent as easily as giving it (cookie settings link or floating button expected)

Warnings2

warningNetwork

Unknown third-party request to assets.adobedtm.com before consent

Host: assets.adobedtm.comFired: 472ms after load

warningStorage

localStorage key "__akfp_storage_test__" written before consent

Key: __akfp_storage_test__Type: localStorageFired: 1336ms after load

Info5

OneTrust2 findings

cdn.cookielaw.org, OptanonConsent

infoNetworkConsent MgmtOneTrust

OneTrust (OneTrust) loaded before consent: OneTrust cookie consent management

Host: cdn.cookielaw.orgFired: 472ms after load

infoCookieConsent MgmtOneTrust

OneTrust cookie "OptanonConsent" set before consent

Cookie: OptanonConsentDomain: .nvidia.com

infoNetworkConsent MgmtOneTrust CMP

OneTrust CMP (OneTrust) loaded before consent: OneTrust geo-lookup — determines which consent banner to show based on user location

Host: geolocation.onetrust.comFired: 878ms after load

infoCookieFunctional

Akamai bot management — necessary for site protection

Cookie: bm_svDomain: .nvidia.com

infoCookieFunctional

Akamai bot management session — necessary for site protection

Cookie: ak_bmscDomain: .nvidia.com

Compliant57

HotJar2 findingsID tracked

static.hotjar.com, script.hotjar.com

CompliantNetworkAnalyticsHotJar

HotJar (Hotjar) loaded correctly after consent

ID: 3655182Host: static.hotjar.comFired: 1713ms after load

CompliantNetworkAnalyticsHotJar

HotJar (Hotjar) loaded correctly after consent

Host: script.hotjar.comFired: 2692ms after load

TikTok Pixel7 findingsID tracked

analytics.tiktok.com, analytics-ipv6.tiktokw.us, _ttp, _tt_enable_cookie, tt_sessionId, tt_appInfo, tt_pixel_session_index

CompliantNetworkAdvertisingTikTok Pixel

TikTok Pixel (TikTok) loaded correctly after consent

ID: C2DMTL2QV140ORDIK620Host: analytics.tiktok.comFired: 1897ms after load

CompliantNetworkAdvertisingTikTok Pixel

TikTok Pixel (TikTok) loaded correctly after consent

Host: analytics-ipv6.tiktokw.usFired: 3852ms after load

CompliantCookieAdvertisingTikTok Pixel

TikTok Pixel cookie "_ttp" set correctly after consent

Cookie: _ttpDomain: .tiktok.com

CompliantCookieAdvertisingTikTok Pixel

TikTok Pixel cookie "_tt_enable_cookie" set correctly after consent

Cookie: _tt_enable_cookieDomain: .nvidia.com

CompliantStorageAdvertisingTikTok Pixel

TikTok Pixel (TikTok) wrote "tt_sessionId" to sessionStorage correctly after consent

Key: tt_sessionIdType: sessionStorageFired: -20058ms after load

CompliantStorageAdvertisingTikTok Pixel

TikTok Pixel (TikTok) wrote "tt_appInfo" to sessionStorage correctly after consent

Key: tt_appInfoType: sessionStorageFired: -20048ms after load

CompliantStorageAdvertisingTikTok Pixel

TikTok Pixel (TikTok) wrote "tt_pixel_session_index" to sessionStorage correctly after consent

Key: tt_pixel_session_indexType: sessionStorageFired: -20047ms after load

Twitter/X Pixel2 findingsID tracked

t.co, static.ads-twitter.com

CompliantNetworkAdvertisingTwitter/X Pixel

Twitter/X Pixel (X (Twitter)) loaded correctly after consent

ID: twHost: t.coFired: 2008ms after load

CompliantNetworkAdvertisingTwitter/X Pixel

Twitter/X Pixel (X (Twitter)) loaded correctly after consent

Host: static.ads-twitter.comFired: 1693ms after load

Meta Pixel2 findingsID tracked

www.facebook.com, connect.facebook.net

CompliantNetworkAdvertisingMeta Pixel

Meta Pixel (Meta) loaded correctly after consent

ID: 161755414605325Host: www.facebook.comFired: 2754ms after load

CompliantNetworkAdvertisingMeta Pixel

Meta Pixel (Meta) loaded correctly after consent

Host: connect.facebook.netFired: 1683ms after load

Microsoft Clarity3 findingsID tracked

www.clarity.ms, scripts.clarity.ms, i.clarity.ms

CompliantNetworkAnalyticsMicrosoft Clarity

Microsoft Clarity (Microsoft) loaded correctly after consent

ID: uetHost: www.clarity.msFired: 3975ms after load

CompliantNetworkAnalyticsMicrosoft Clarity

Microsoft Clarity (Microsoft) loaded correctly after consent

Host: scripts.clarity.msFired: 4038ms after load

CompliantNetworkAnalyticsMicrosoft Clarity

Microsoft Clarity (Microsoft) loaded correctly after consent

Host: i.clarity.msFired: 4256ms after load

Adobe Analytics5 findings

nvidia.tt.omtrdc.net, s_ecid, AMCV_F207D74D549850760A4C98C6%40AdobeOrg, s_ppv, s_cc

CompliantNetworkAnalyticsAdobe Analytics

Adobe Analytics (Adobe) loaded correctly after consent

Host: nvidia.tt.omtrdc.netFired: 871ms after load

CompliantCookieMarketingAdobe Analytics

Adobe Analytics cookie "s_ecid" set correctly after consent

Cookie: s_ecidDomain: .nvidia.comRetention: 2 years

CompliantCookieAnalyticsAdobe Analytics

Adobe Analytics cookie "AMCV_F207D74D549850760A4C98C6%40AdobeOrg" set correctly after consent

Cookie: AMCV_F207D74D549850760A4C98C6%40AdobeOrgDomain: .nvidia.com

CompliantCookieAnalyticsAdobe Analytics

Adobe Analytics cookie "s_ppv" set correctly after consent

Cookie: s_ppvDomain: .nvidia.comRetention: session

CompliantCookieAnalyticsAdobe Analytics

Adobe Analytics cookie "s_cc" set correctly after consent

Cookie: s_ccDomain: .nvidia.com

CompliantNetworkAnalyticsGA4

GA4 (Google) loaded correctly after consent

Host: www.googletagmanager.comFired: 1689ms after load

CompliantNetworkAdvertisingLinkedIn Insight Tag

LinkedIn Insight Tag (LinkedIn) loaded correctly after consent

Host: snap.licdn.comFired: 1689ms after load

Marketo6 findings

munchkin.marketo.net, _biz_uid, _mkto_trk, _biz_nA, _biz_flagsA, _biz_pendingA

CompliantNetworkMarketingMarketo

Marketo (Adobe) loaded correctly after consent

Host: munchkin.marketo.netFired: 1710ms after load

CompliantCookieAnalyticsMarketo

Marketo cookie "_biz_uid" set correctly after consent

Cookie: _biz_uidDomain: .nvidia.comRetention: 1 year

CompliantCookieMarketingMarketo

Marketo cookie "_mkto_trk" set correctly after consent

Cookie: _mkto_trkDomain: .nvidia.com

CompliantCookieAnalyticsMarketo

Marketo cookie "_biz_nA" set correctly after consent

Cookie: _biz_nADomain: .nvidia.comRetention: 1 year

CompliantCookieAnalyticsMarketo

Marketo cookie "_biz_flagsA" set correctly after consent

Cookie: _biz_flagsADomain: .nvidia.comRetention: 1 year

CompliantCookieAnalyticsMarketo

Marketo cookie "_biz_pendingA" set correctly after consent

Cookie: _biz_pendingADomain: .nvidia.comRetention: 1 year

Reddit Pixel2 findings

alb.reddit.com, _rdt_uuid

CompliantNetworkAdvertisingReddit Pixel

Reddit Pixel (Reddit) loaded correctly after consent

Host: alb.reddit.comFired: 1897ms after load

CompliantCookieAdvertisingReddit Pixel

Reddit Pixel cookie "_rdt_uuid" set correctly after consent

Cookie: _rdt_uuidDomain: .nvidia.com

CompliantNetworkAdvertisingMicrosoft Ads

Microsoft Ads (Microsoft) loaded correctly after consent

Host: bat.bing.comFired: 1940ms after load

Google Ads4 findings

www.googleadservices.com, googleads.g.doubleclick.net, _gcl_au, _gcl_ls

CompliantNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded correctly after consent

Host: www.googleadservices.comFired: 2380ms after load

CompliantNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded correctly after consent

Host: googleads.g.doubleclick.netFired: 2470ms after load

CompliantCookieAdvertisingGoogle Ads

Google Ads cookie "_gcl_au" set correctly after consent

Cookie: _gcl_auDomain: .nvidia.com

CompliantStorageAdvertisingGoogle Ads

Google Ads (Google) wrote "_gcl_ls" to localStorage correctly after consent

Key: _gcl_lsType: localStorageFired: -21471ms after load

CompliantCookieConsent MgmtOneTrust

OneTrust cookie "OptanonAlertBoxClosed" set correctly after consent

Cookie: OptanonAlertBoxClosedDomain: .nvidia.com

Adobe Audience Manager3 findings

at_check, AMCVS_F207D74D549850760A4C98C6%40AdobeOrg, mbox

CompliantCookieFunctionalAdobe Audience Manager

Adobe Audience Manager cookie "at_check" set correctly after consent

Cookie: at_checkDomain: .nvidia.comRetention: session

CompliantCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "AMCVS_F207D74D549850760A4C98C6%40AdobeOrg" set correctly after consent

Cookie: AMCVS_F207D74D549850760A4C98C6%40AdobeOrgDomain: .nvidia.comRetention: Session

CompliantCookieMarketingAdobe Audience Manager

Adobe Audience Manager cookie "mbox" set correctly after consent

Cookie: mboxDomain: .nvidia.comRetention: 2 years

CompliantCookieFunctionalJ2EE

J2EE cookie "JSESSIONID" set correctly after consent

Cookie: JSESSIONIDDomain: app.hushly.comRetention: session

LinkedIn3 findings

bcookie, li_gc, lidc

CompliantCookieMarketingLinkedIn

LinkedIn cookie "bcookie" set correctly after consent

Cookie: bcookieDomain: .linkedin.comRetention: 1 year

CompliantCookieFunctionalLinkedIn

LinkedIn cookie "li_gc" set correctly after consent

Cookie: li_gcDomain: .linkedin.comRetention: 2 years

CompliantCookieMarketingLinkedIn

LinkedIn cookie "lidc" set correctly after consent

Cookie: lidcDomain: .linkedin.comRetention: 1 day

CompliantCookieMarketingBombora

Bombora cookie "tp" set correctly after consent

Cookie: tpDomain: .nvidia.comRetention: 14 days

X5 findings

guest_id_marketing, guest_id_ads, personalization_id, guest_id, muc_ads

CompliantCookieMarketingX

X cookie "guest_id_marketing" set correctly after consent

Cookie: guest_id_marketingDomain: .twitter.comRetention: 2 years

CompliantCookieMarketingX

X cookie "guest_id_ads" set correctly after consent

Cookie: guest_id_adsDomain: .twitter.comRetention: 2 years

CompliantCookieMarketingX

X cookie "personalization_id" set correctly after consent

Cookie: personalization_idDomain: .twitter.comRetention: 2 years

CompliantCookieMarketingX

X cookie "guest_id" set correctly after consent

Cookie: guest_idDomain: .twitter.comRetention: 2 years

CompliantCookieMarketingX

X cookie "muc_ads" set correctly after consent

Cookie: muc_adsDomain: .t.coRetention: 24 months

ContentSquare3 findings

_cs_c, _cs_id, _cs_s

CompliantCookieAnalyticsContentSquare

ContentSquare cookie "_cs_c" set correctly after consent

Cookie: _cs_cDomain: .nvidia.comRetention: 13 months

CompliantCookieAnalyticsContentSquare

ContentSquare cookie "_cs_id" set correctly after consent

Cookie: _cs_idDomain: .nvidia.comRetention: 13 months

CompliantCookieAnalyticsContentSquare

ContentSquare cookie "_cs_s" set correctly after consent

Cookie: _cs_sDomain: .nvidia.comRetention: 1 Year

CompliantCookieFunctionalCloudflare

Cloudflare cookie "_cfuvid" set correctly after consent

Cookie: _cfuvidDomain: .zoominfo.comRetention: session

CompliantCookieFunctionalAmazon Web Services

Amazon Web Services cookie "AWSALBCORS" set correctly after consent

Cookie: AWSALBCORSDomain: app.hushly.comRetention: Session

TikTok2 findings

ttcsid, ttcsid_C2DMTL2QV140ORDIK620

CompliantCookieMarketingTikTok

TikTok cookie "ttcsid" set correctly after consent

Cookie: ttcsidDomain: .nvidia.comRetention: 1 year

CompliantCookieMarketingTikTok

TikTok cookie "ttcsid_C2DMTL2QV140ORDIK620" set correctly after consent

Cookie: ttcsid_C2DMTL2QV140ORDIK620Domain: .nvidia.comRetention: 1 year

Is this your site?

Run a full multi-page scan with monitoring and get detailed remediation steps

Scan nvidia.com →

This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com