Psychology Today

psychologytoday.com

Compare

https://psychologytoday.com

Scanned Apr 15, 2026 · 38.3s

Your website score is

30/100
Critical

Grade

D30

Banner

Yes

Regulatory Compliance

Multi-regulation overview — click any regulation for details

Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.

Tag Leak detected 6 user data leaks before consent on psychologytoday.com, including Google (Tracker Tracker), Advertising Tracker, GA4.

Security Headers

3/6 present

Strict-Transport-Security

max-age=31536000

Content-Security-Policy

Add a Content-Security-Policy header to prevent XSS and code injection attacks

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

Set a Referrer-Policy header to control how much referrer information is shared

Permissions-Policy

Add a Permissions-Policy header to restrict browser features like camera, microphone, and geolocation

Google Consent Mode

V2
70/100
GTM Containers:GTM-NW5PKS

Consent Parameters

ParameterDefaultUpdated
Ad Storagenot_setgranted
Ad User Datanot_setgranted
Ad Personalizationnot_setgranted
Analytics Storagenot_setgranted
Functionality Storagenot_setgranted
Personalization Storagenot_setgranted
Security Storagenot_setgranted

Issues (1)

No default consent call detected — consent mode may not be initialised correctly

Post-Rejection Audit

Reject Button

Found

Post-Rejection Fires

0 vendors

Consent Mode

Not Detected

GTM Load

728ms pre-consent

Google Tag Manager(GTM-NW5PKS)

Loaded 728ms after page load — before the consent banner was detected (banner appeared at 7852ms). Per a 2022 German court ruling, GTM itself transmits the user's IP to Google pre-consent.

Consent Mode V2: Not Detected

Google Consent Mode was not detected on this site.

✓ gtag('consent', 'update') call detected on rejection

No tracking vendors detected firing after rejection

Consent Record Audit

Issues detected

Consent record stored after interaction

GDPR Art. 7(1)

Found: cookieyes-consent (CookieYes)

Record contains timestamp

Art. 7(1)

Timestamp field detected

Record contains consent state

Art. 7(1)

Accept/reject state detected

Record contains consent categories

Art. 7(1)

Consent categories detected

Consent withdrawal mechanism accessible

GDPR Art. 7(3)

No way for users to withdraw consent found on page

No cookie settings link, footer link, or floating consent button was detected. GDPR requires users to withdraw consent as easily as they gave it.

Why this matters

Under GDPR Article 7, controllers must be able to demonstrate that consent was given (Art. 7(1)) and ensure users can withdraw consent at any time, as easily as giving it (Art. 7(3)). Sites with no consent record or no withdrawal mechanism cannot legally rely on consent as a lawful basis.

Tracker categories detected

Advertising4 vendors
Analytics4 vendors
Marketing22 vendors
Security1 vendor
Functional3 vendors
Tag Management1 vendor
Critical4
GA4
criticalNetworkAnalyticsGA4

GA4 (Google) loaded before consent: Sends pageview and event data to Google Analytics

ID: G-5EMHF6S1M6Host: region1.google-analytics.comFired: 2324ms after load
Google (Tracker Tracker)
criticalNetworkGoogle (Tracker Tracker)

Google (tracker) loaded before consent

Host: securepubads.g.doubleclick.netFired: 479ms after load
Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at log.cookieyes.com loaded before consent

Host: log.cookieyes.comFired: 1655ms after load
criticalConsent Record

No recognizable consent withdrawal mechanism detected — GDPR Article 7(3) requires users can withdraw consent as easily as giving it (cookie settings link or floating button expected)

Warnings3
Google Tag Manager
Google Tag Manager2 findingsID tracked

www.googletagmanager.com

Google Tag Manager
warningNetworkTag ManagementGoogle Tag Manager

Google Tag Manager loads before consent — this is expected and required for GCM v2 to initialise consent defaults before any tags fire

ID: GTM-NW5PKSHost: www.googletagmanager.comFired: 479ms after load
Google Tag Manager
warningGTMTag ManagementGoogle Tag Manager

GTM loaded before consent banner — IP address transmitted to Google pre-consent (container: GTM-NW5PKS)

vendor logo
warningNetwork

Unknown third-party request to directory.cookieyes.com before consent

Host: directory.cookieyes.comFired: 2012ms after load
Info2
CookieYes
CookieYes2 findings

cdn-cookieyes.com, cookieyes-consent

CookieYes
infoNetworkConsent MgmtCookieYes

CookieYes (CookieYes) loaded before consent: CookieYes cookie consent management

Host: cdn-cookieyes.comFired: 976ms after load
CookieYes
infoCookieConsent MgmtCookieYes

CookieYes cookie "cookieyes-consent" set before consent

Cookie: cookieyes-consentDomain: .www.psychologytoday.com
Compliant45
Google Ads
Google Ads3 findings

209bf26a7806f4f1a82f546dcdcea326.safeframe.googlesyndication.com, pagead2.googlesyndication.com, tpc.googlesyndication.com

Google Ads
CompliantNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded correctly after consent

Host: 209bf26a7806f4f1a82f546dcdcea326.safeframe.googlesyndication.comFired: 2468ms after load
Google Ads
CompliantNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded correctly after consent

Host: pagead2.googlesyndication.comFired: 2614ms after load
Google Ads
CompliantNetworkAdvertisingGoogle Ads

Google Ads (Google) loaded correctly after consent

Host: tpc.googlesyndication.comFired: 3535ms after load
Criteo
Criteo2 findings

dis.criteo.com, cto_bundle

Criteo
CompliantNetworkAdvertisingCriteo

Criteo (Criteo) loaded correctly after consent

Host: dis.criteo.comFired: 3853ms after load
Criteo
CompliantCookieAdvertisingCriteo

Criteo cookie "cto_bundle" set correctly after consent

Cookie: cto_bundleDomain: .criteo.com
Quantcast
Quantcast2 findings

cms.quantserve.com, mc

Quantcast
CompliantNetworkAdvertisingQuantcast

Quantcast (Quantcast) loaded correctly after consent

Host: cms.quantserve.comFired: 3894ms after load
Quantcast
CompliantCookieMarketingQuantcast

Quantcast cookie "mc" set correctly after consent

Cookie: mcDomain: .quantserve.comRetention: 13 months
CompliantCookieMarketingLiveRamp

LiveRamp cookie "euconsent" set correctly after consent

Cookie: euconsentDomain: .www.psychologytoday.comRetention: 1 year
Google Analytics
Google Analytics2 findings

_ga, _ga_5EMHF6S1M6

Google Analytics
CompliantCookieAnalyticsGoogle Analytics

Google Analytics cookie "_ga" set correctly after consent

Cookie: _gaDomain: .psychologytoday.com
Google Analytics
CompliantCookieAnalyticsGoogle Analytics

Google Analytics cookie "_ga_5EMHF6S1M6" set correctly after consent

Cookie: _ga_5EMHF6S1M6Domain: .psychologytoday.com
DoubleClick/Google Marketing
DoubleClick/Google Marketing2 findings

__gads, IDE

DoubleClick/Google Marketing
CompliantCookieMarketingDoubleClick/Google Marketing

DoubleClick/Google Marketing cookie "__gads" set correctly after consent

Cookie: __gadsDomain: .psychologytoday.comRetention: various
DoubleClick/Google Marketing
CompliantCookieMarketingDoubleClick/Google Marketing

DoubleClick/Google Marketing cookie "IDE" set correctly after consent

Cookie: IDEDomain: .doubleclick.netRetention: 2 years
Google AdSense
Google AdSense2 findings

__gpi, __eoi

Google AdSense
CompliantCookieMarketingGoogle AdSense

Google AdSense cookie "__gpi" set correctly after consent

Cookie: __gpiDomain: .psychologytoday.comRetention: 13 months
Google AdSense
CompliantCookieSecurityGoogle AdSense

Google AdSense cookie "__eoi" set correctly after consent

Cookie: __eoiDomain: .psychologytoday.comRetention: 3 Months
Adform
Adform2 findings

UID, uid

Adform
CompliantCookieMarketingAdform

Adform cookie "UID" set correctly after consent

Cookie: UIDDomain: .scorecardresearch.comRetention: 60 days
Adform
CompliantCookieMarketingAdform

Adform cookie "uid" set correctly after consent

Cookie: uidDomain: .criteo.comRetention: 60 days
ComScore
ComScore2 findings

XID, pid

ComScore
CompliantCookieMarketingComScore

ComScore cookie "XID" set correctly after consent

Cookie: XIDDomain: .scorecardresearch.comRetention: 1 year
ComScore
CompliantCookieMarketingComScore

ComScore cookie "pid" set correctly after consent

Cookie: pidDomain: .smartadserver.comRetention: 1 year
Google
Google2 findings

DSID, receive-cookie-deprecation

Google
CompliantCookieMarketingGoogle

Google cookie "DSID" set correctly after consent

Cookie: DSIDDomain: .doubleclick.netRetention: 2 weeks
Google
CompliantCookieFunctionalGoogle

Google cookie "receive-cookie-deprecation" set correctly after consent

Cookie: receive-cookie-deprecationDomain: .rubiconproject.comRetention: 180 days
The Tradedesk2 findings

TDID, TDCPM

CompliantCookieMarketingThe Tradedesk

The Tradedesk cookie "TDID" set correctly after consent

Cookie: TDIDDomain: .adsrvr.orgRetention: 1 year
CompliantCookieMarketingThe Tradedesk

The Tradedesk cookie "TDCPM" set correctly after consent

Cookie: TDCPMDomain: .adsrvr.orgRetention: 1 year
CompliantCookieMarketingCreativeCDN

CreativeCDN cookie "g" set correctly after consent

Cookie: gDomain: .creativecdn.comRetention: 364 days
CompliantCookieFunctionalPayPal

PayPal cookie "ts" set correctly after consent

Cookie: tsDomain: .creativecdn.comRetention: 3 years
CompliantCookieMarketingAdition

Adition cookie "UserID1" set correctly after consent

Cookie: UserID1Domain: .adfarm1.adition.comRetention: 180 days
Yahoo2 findings

A3, IDSYNC

CompliantCookieMarketingYahoo

Yahoo cookie "A3" set correctly after consent

Cookie: A3Domain: .yahoo.comRetention: 1 year
CompliantCookieMarketingYahoo

Yahoo cookie "IDSYNC" set correctly after consent

Cookie: IDSYNCDomain: .analytics.yahoo.comRetention: 1 year
Adobe Advertising
CompliantCookieMarketingAdobe Advertising

Adobe Advertising cookie "everest_g_v2" set correctly after consent

Cookie: everest_g_v2Domain: .everesttech.netRetention: 2 years
CompliantCookieAnalyticsSnowplow

Snowplow cookie "sp" set correctly after consent

Cookie: spDomain: .quantserve.comRetention: 1 year
LinkedIn
LinkedIn3 findings

bcookie, li_gc, lidc

LinkedIn
CompliantCookieMarketingLinkedIn

LinkedIn cookie "bcookie" set correctly after consent

Cookie: bcookieDomain: .linkedin.comRetention: 1 year
LinkedIn
CompliantCookieFunctionalLinkedIn

LinkedIn cookie "li_gc" set correctly after consent

Cookie: li_gcDomain: .linkedin.comRetention: 2 years
LinkedIn
CompliantCookieMarketingLinkedIn

LinkedIn cookie "lidc" set correctly after consent

Cookie: lidcDomain: .linkedin.comRetention: 1 day
CompliantCookieMarketingPlatform161

Platform161 cookie "tuuid" set correctly after consent

Cookie: tuuidDomain: .360yield.comRetention: 13 months
Beeswax2 findings

bitoIsSecure, bito

CompliantCookieMarketingBeeswax

Beeswax cookie "bitoIsSecure" set correctly after consent

Cookie: bitoIsSecureDomain: .bidr.ioRetention: 1 year
CompliantCookieMarketingBeeswax

Beeswax cookie "bito" set correctly after consent

Cookie: bitoDomain: .bidr.ioRetention: 1 year
CompliantCookieAnalyticsYieldmo

Yieldmo cookie "yieldmo_id" set correctly after consent

Cookie: yieldmo_idDomain: .yieldmo.comRetention: 1 Year
CompliantCookieMarketingbidswitch.net

bidswitch.net cookie "tuuid_lu" set correctly after consent

Cookie: tuuid_luDomain: .360yield.comRetention: 3 months
Media.net2 findings

data-g, visitor-id

CompliantCookieMarketingMedia.net

Media.net cookie "data-g" set correctly after consent

Cookie: data-gDomain: .media.netRetention: 1 year
CompliantCookieMarketingMedia.net

Media.net cookie "visitor-id" set correctly after consent

Cookie: visitor-idDomain: .media.netRetention: 1 year
Sonobi2 findings

__uis, HAPLB8G

CompliantCookieMarketingSonobi

Sonobi cookie "__uis" set correctly after consent

Cookie: __uisDomain: .go.sonobi.comRetention: 29 days
CompliantCookieMarketingSonobi

Sonobi cookie "HAPLB8G" set correctly after consent

Cookie: HAPLB8GDomain: .go.sonobi.comRetention: session
CompliantCookieMarketingcsync.loopme.me

csync.loopme.me cookie "viewer_token" set correctly after consent

Cookie: viewer_tokenDomain: .csync.loopme.meRetention: 31 days
Teads
CompliantCookieMarketingTeads

Teads cookie "tt_viewer" set correctly after consent

Cookie: tt_viewerDomain: .teads.tvRetention: 1 year
CompliantCookieMarketingAdkernel

Adkernel cookie "ADKUID" set correctly after consent

Cookie: ADKUIDDomain: .adkernel.comRetention: 30 Days
CompliantCookieMarketingFederated Media Publishing

Federated Media Publishing cookie "ljt_reader" set correctly after consent

Cookie: ljt_readerDomain: .lijit.comRetention: 1 year

Is this your site?

Run a full multi-page scan with monitoring and get detailed remediation steps

Scan psychologytoday.com →

This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com