https://reuters.com
Scanned Apr 15, 2026 · 24.8s
Your website score is
Grade
BannerConsent Banner
Yes
Regulatory Compliance
Multi-regulation overview — click any regulation for details
Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.
Tag Leak detected 130 user data leaks before consent on reuters.com, including TrueAnthem (Advertising Tracker), Freestar (Advertising Tracker), Akamai (Analytics Tracker) and 33 more.
Security Headers
2/6 presentStrict-Transport-Security
max-age=31536000
Content-Security-Policy
frame-ancestors 'self'; report-uri https://reuters.report-uri.com/r/t/csp/enforce; report-to report-uri
X-Frame-Options
Add X-Frame-Options header to prevent clickjacking attacks
X-Content-Type-Options
Set X-Content-Type-Options to 'nosniff' to prevent MIME type sniffing
Referrer-Policy
Set a Referrer-Policy header to control how much referrer information is shared
Permissions-Policy
Add a Permissions-Policy header to restrict browser features like camera, microphone, and geolocation
Google Consent Mode
V2Consent Parameters
Post-Rejection Audit
Reject Button
Missing
Post-Rejection Fires
0 vendors
Consent Mode
Not Detected
GTM Load
761ms pre-consent
Google Tag Manager(GTM-K5WTBZN)
Loaded 761ms after page load — before the consent banner was detected (banner appeared at 7653ms). Per a 2022 German court ruling, GTM itself transmits the user's IP to Google pre-consent.
Consent Mode V2: Not Detected
Google Consent Mode was not detected on this site.
Consent Record Audit
Issues detectedConsent record stored after interaction
GDPR Art. 7(1)No consent record written — cannot prove consent was given
No CMP consent cookie or localStorage entry was found after the consent interaction. GDPR requires controllers to demonstrate consent was given.
Consent withdrawal mechanism accessible
GDPR Art. 7(3)No way for users to withdraw consent found on page
No cookie settings link, footer link, or floating consent button was detected. GDPR requires users to withdraw consent as easily as they gave it.
Why this matters
Under GDPR Article 7, controllers must be able to demonstrate that consent was given (Art. 7(1)) and ensure users can withdraw consent at any time, as easily as giving it (Art. 7(3)). Sites with no consent record or no withdrawal mechanism cannot legally rely on consent as a lawful basis.
Tracker categories detected
Critical74
Segment (Twilio) loaded before consent: Segment customer data platform — routes data to multiple destinations
TrueAnthem (advertising) loaded before consent
Freestar (Advertising Tracker)3 findingsa.pub.network, d.pub.network, c.pub.network
a.pub.network, d.pub.network, c.pub.network
Freestar (advertising) loaded before consent
Freestar (advertising) loaded before consent
Freestar (advertising) loaded before consent
Akamai (Analytics Tracker)3 findingss.go-mpulse.net, c.go-mpulse.net, 684dd328.akstat.io
s.go-mpulse.net, c.go-mpulse.net, 684dd328.akstat.io
Akamai (analytics) loaded before consent
Akamai (analytics) loaded before consent
Akamai (analytics) loaded before consent
dianomi (Advertising Tracker)2 findingswww.dianomi.com, data.dianomi.com
www.dianomi.com, data.dianomi.com
dianomi (advertising) loaded before consent
dianomi (advertising) loaded before consent
Datadome (Tracker Tracker)2 findingsgeo.captcha-delivery.com, static.captcha-delivery.com
geo.captcha-delivery.com, static.captcha-delivery.com
Datadome (tracker) loaded before consent
Datadome (tracker) loaded before consent
ZetaGlobal (Advertising Tracker)7 findingsb-code.liadm.com, ak.sail-horizon.com, api.sail-personalize.com, rp.liadm.com, i.liadm.com, live.rezync.com, p.rfihub.com
b-code.liadm.com, ak.sail-horizon.com, api.sail-personalize.com, rp.liadm.com, i.liadm.com, live.rezync.com, p.rfihub.com
ZetaGlobal (advertising) loaded before consent
ZetaGlobal (advertising) loaded before consent
ZetaGlobal (advertising) loaded before consent
ZetaGlobal (advertising) loaded before consent
ZetaGlobal (advertising) loaded before consent
ZetaGlobal (advertising) loaded before consent
ZetaGlobal (advertising) loaded before consent
SingularLabs (advertising) loaded before consent
Integral Ad Science (Tracker Tracker)3 findingsstatic.adsafeprotected.com, dt.adsafeprotected.com, pixel.adsafeprotected.com
static.adsafeprotected.com, dt.adsafeprotected.com, pixel.adsafeprotected.com
Integral Ad Science (tracker) loaded before consent
Integral Ad Science (tracker) loaded before consent
Integral Ad Science (tracker) loaded before consent
Permutive (Advertising Tracker)4 findingscdn.permutive.com, a55a84b3-9632-4869-b625-3d8ef43ed18d.prmutv.co, api.permutive.com, googlesync.permutive.com
cdn.permutive.com, a55a84b3-9632-4869-b625-3d8ef43ed18d.prmutv.co, api.permutive.com, googlesync.permutive.com
Permutive (advertising) loaded before consent
Permutive (advertising) loaded before consent
Permutive (advertising) loaded before consent
Permutive (advertising) loaded before consent
Yahoo! (analytics) loaded before consent

Microsoft (advertising) loaded before consent
Admiral (advertising) loaded before consent
DataDog (analytics) loaded before consent
comScore (analytics) loaded before consent
Oracle (advertising) loaded before consent
Advertising Tracker7 findingstry.abtasty.com, dcinfos-cache.abtasty.com, wretchedfloor.com, ariane.abtasty.com, capi.connatix.com, lit.connatix.com, pl.connatix.com
try.abtasty.com, dcinfos-cache.abtasty.com, wretchedfloor.com, ariane.abtasty.com, capi.connatix.com, lit.connatix.com, pl.connatix.com
advertising tracker at try.abtasty.com loaded before consent
advertising tracker at dcinfos-cache.abtasty.com loaded before consent
advertising tracker at wretchedfloor.com loaded before consent
advertising tracker at ariane.abtasty.com loaded before consent
advertising tracker at capi.connatix.com loaded before consent
advertising tracker at lit.connatix.com loaded before consent
advertising tracker at pl.connatix.com loaded before consent
Chartbeat (Analytics Tracker)3 findingsping.chartbeat.net, mab.chartbeat.com, mabping.chartbeat.net
ping.chartbeat.net, mab.chartbeat.com, mabping.chartbeat.net
Chartbeat (analytics) loaded before consent
Chartbeat (analytics) loaded before consent
Chartbeat (analytics) loaded before consent
Oracle (analytics) loaded before consent
The Trade Desk (tracker) loaded before consent
Criteo2 findingsdis.criteo.com, cto_bundle

dis.criteo.com, cto_bundle

Criteo (Criteo) loaded before consent: Criteo display ad delivery endpoint

Criteo cookie "cto_bundle" set before consent

Adobe (tracker) loaded before consent
Teads (Advertising Tracker)2 findingsb1sync.zemanta.com, b1sync.outbrain.com
b1sync.zemanta.com, b1sync.outbrain.com
Teads (advertising) loaded before consent
Teads (advertising) loaded before consent
StackAdapt (advertising) loaded before consent
JWP Connatix (Advertising Tracker)3 findingscd.connatix.com, assets.connatix.com, cds.connatix.com
cd.connatix.com, assets.connatix.com, cds.connatix.com
JWP Connatix (advertising) loaded before consent
JWP Connatix (advertising) loaded before consent
JWP Connatix (advertising) loaded before consent
LiveRamp (advertising) loaded before consent
LiveIntent2 findings_li_ss, lidid
_li_ss, lidid
LiveIntent cookie "_li_ss" set before consent — Sets a unique ID for the visitor, that allows third party advertisers to target the visitor with relevant advertisement. This pairing service is provided by third party advertisement hubs, which facilitates real-time bidding for advertisers.
LiveIntent cookie "lidid" set before consent — Collects data on visitors' behaviour and interaction - This is used to make advertisement on the website more relevant. The cookie also allows the website to detect any referrals from other websites.

DoubleClick/Google Marketing cookie "IDE" set before consent — This cookie is used for targeting, analyzing and optimisation of ad campaigns in DoubleClick/Google Marketing Suite
Sailthru2 findingssailthru_pageviews, sailthru_visitor
sailthru_pageviews, sailthru_visitor
Sailthru cookie "sailthru_pageviews" set before consent — This cookie is set by Sailthru to tracks the number of page views for each user.
Sailthru cookie "sailthru_visitor" set before consent — This cookie is set by Sailthru. The cookie contains an id that is used to identify a user's pageviews within a session.
Chartbeat cookie "_chartbeat2" set before consent — Cookie is used to register if a person has visited the domain before (to calculate new vs returning users).

Adform cookie "uid" set before consent — Contains a unique ID to identify a user
ABTasty2 findingsABTastySession, ABTasty
ABTastySession, ABTasty
ABTasty cookie "ABTastySession" set before consent — This cookie allows us to identify a unique session. It allows us to determine that a new session has begun for a given user.
ABTasty cookie "ABTasty" set before consent — This cookie sends all test data (visitorID, test and variant IDs, timestamps).
Oracle2 findingsELOQUA, ELQSTATUS
ELOQUA, ELQSTATUS
Oracle cookie "ELOQUA" set before consent — This cookies allow better understand how visitors use the website. This cookie data may be used to personalise the content or design of the website
Oracle cookie "ELQSTATUS" set before consent — This cookie is used to track individual visitors and their use of the site. It is set when you first visit the site and updated on subsequent visits.
Adobe Audience Manager2 findingsdemdex, dpm

demdex, dpm

Adobe Audience Manager cookie "demdex" set before consent — Unique value with which Audience Manager can identify a user. Used, among others, for identification, segmentation, modeling and reporting purposes.

Adobe Audience Manager cookie "dpm" set before consent — DPM is an abbreviation for Data Provider Match. It tells internal, Adobe systems that a call from Audience Manager or the Adobe Experience Cloud ID Service is passing in customer data for synchronization or requesting an ID.
Outbrain cookie "obuid" set before consent — Holds the anonymous user's ID. Used for tracking user actions, such as clicks on the recommendations
Rapleaf2 findingsrlas3, pxrc
rlas3, pxrc
Rapleaf cookie "rlas3" set before consent — Collects anonymous data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.
Rapleaf cookie "pxrc" set before consent — This cookie registers non-personal data on the visitor. The information is used to optimize advertisement relevance.
No "reject all" option found — users cannot refuse non-essential cookies (ICO guidance requires this)
No recognizable consent cookie or storage entry detected after interaction — GDPR Article 7(1) requires controllers to demonstrate consent was given (server-side storage cannot be verified)
No recognizable consent withdrawal mechanism detected — GDPR Article 7(3) requires users can withdraw consent as easily as giving it (cookie settings link or floating button expected)
Warnings59
Google Tag Manager2 findingsID trackedwww.googletagmanager.com

www.googletagmanager.com

Google Tag Manager loads before consent — this is expected and required for GCM v2 to initialise consent defaults before any tags fire

GTM loaded before consent banner — IP address transmitted to Google pre-consent (container: GTM-K5WTBZN)
Google (Tracker Tracker)2 findingssecurepubads.g.doubleclick.net, cm.g.doubleclick.net
securepubads.g.doubleclick.net, cm.g.doubleclick.net
Google (Tracker Tracker) cookieless ping detected before consent — GCM v2 active with ad_storage and ad_user_data: denied. No user identifiers are collected in this request.
Google (Tracker Tracker) cookieless ping detected before consent — GCM v2 active with ad_storage and ad_user_data: denied. No user identifiers are collected in this request.
Unknown third-party request to api-reuters-reuters-prod.cdn.arcpublishing.com before consent
Unknown third-party request to assets.thecontentserver.com before consent
Unknown third-party request to ajo.prod.reuters.tv before consent
Unknown third-party request to api.prod.global.a206746.reutersmedia.net before consent
localStorage key "_boomr_clss" written before consent
sessionStorage key "utm" written before consent
localStorage key "ArcId.test" written before consent
localStorage key "i18next.translate.boo" written before consent
localStorage key "i18nextLng" written before consent
localStorage key "ad_context" written before consent
localStorage key "rcom-subscription-state" written before consent
sessionStorage key "fs.sitePath" written before consent
sessionStorage key "hasLoadedBefore" written before consent
sessionStorage key "fs.config" written before consent
sessionStorage key "fs.session" written before consent
localStorage key "permutive-consent" written before consent
localStorage key "_permutive_ls_test" written before consent
localStorage key "permutive-data-queries" written before consent
localStorage key "permutive-id" written before consent
sessionStorage key "__permutiveConfigQueryParams" written before consent
localStorage key "permutive-app" written before consent
localStorage key "permutive-data-misc" written before consent
localStorage key "_pdfps" written before consent
localStorage key "0.6451623546740173" written before consent
localStorage key "_li_duid" written before consent
localStorage key "singular_storage_enabled_test" written before consent
localStorage key "thomson_reuters_8cff8d04_com.reuters_web_url" written before consent
localStorage key "_pcrprs" written before consent
localStorage key "_pssps" written before consent
localStorage key "_psegs" written before consent
localStorage key "rcom-geolocation" written before consent
localStorage key "rcom_abtasty_sample_rate" written before consent
localStorage key "_cb_ls_test" written before consent
localStorage key "_cb" written before consent
localStorage key "_chartbeat2" written before consent
localStorage key "_cb_svref" written before consent
sessionStorage key "qualtricssessionstoragetestkey" written before consent
localStorage key "ArcP.test" written before consent
localStorage key "_t_tests" written before consent
sessionStorage key "QSI_HistorySession" written before consent
localStorage key "ABTastyData" written before consent
localStorage key "_li_ss" written before consent
sessionStorage key "ABTastyGeoloc" written before consent
sessionStorage key "ABTastyUA" written before consent
sessionStorage key "QSI_ActionSetHistory" written before consent
localStorage key "Q_INTER" written before consent
localStorage key "persisted-queue:v1:IEWBqQ8VWHijTQxb7lEBGFGS9uIJzigZ:event-queue:lock" written before consent
sessionStorage key "ABTastySessionHitHistory" written before consent
localStorage key "rcom_abtasty_tests" written before consent
localStorage key "persisted-queue:v1:IEWBqQ8VWHijTQxb7lEBGFGS9uIJzigZ:dest-Google Analytics:lock" written before consent
localStorage key "persisted-queue:v1:IEWBqQ8VWHijTQxb7lEBGFGS9uIJzigZ:dest-Visual Tagger:lock" written before consent
localStorage key "_aQS02MDE4OEY3ODEyNzc4OTNEQjEzNDZEM0YtMQ" written before consent
localStorage key "ArcP" written before consent
localStorage key "_v__chartbeat3" written before consent
localStorage key "persisted-queue:v1:IEWBqQ8VWHijTQxb7lEBGFGS9uIJzigZ:dest-Segment.io:lock" written before consent
Info16
OneTrust2 findingscdn.cookielaw.org, OptanonConsent

cdn.cookielaw.org, OptanonConsent

OneTrust (OneTrust) loaded before consent: OneTrust cookie consent management

OneTrust cookie "OptanonConsent" set before consent

OneTrust CMP (OneTrust) loaded before consent: OneTrust geo-lookup — determines which consent banner to show based on user location
Yahoo! (cdn) loaded before consent
Chartbeat (cdn) loaded before consent
Qualtrics (Cdn)2 findingszn8qfk42azo5fsr2r-trdigital.siteintercept.qualtrics.com, siteintercept.qualtrics.com
zn8qfk42azo5fsr2r-trdigital.siteintercept.qualtrics.com, siteintercept.qualtrics.com
Qualtrics (cdn) loaded before consent
Qualtrics (cdn) loaded before consent
JWP Connatix (Cdn)3 findingscdn.jwplayer.com, entitlements.jwplayer.com, ssl.p.jwpcdn.com
cdn.jwplayer.com, entitlements.jwplayer.com, ssl.p.jwpcdn.com
JWP Connatix (cdn) loaded before consent
JWP Connatix (cdn) loaded before consent
JWP Connatix (cdn) loaded before consent
Google (cdn) loaded before consent

Cloudflare Web Analytics (Cloudflare) loaded before consent: Cloudflare Web Analytics beacon — privacy-focused, no cookies
PrivacyPillar cookie "usprivacy" set before consent — This cookie stores the US privacy string.
Permutive2 findingspermutive-id, pxid
permutive-id, pxid
Permutive cookie "permutive-id" set before consent — This ID is the same within a domain (not publisher-specific). The Permutive ID exists in all environments, including 3P cookie-blocked environments like Safari and Firefox. The ID is persistent for a user as long as the local storage isn’t refreshed on the user's device.
Permutive cookie "pxid" set before consent — Typically, it is enabled when a Publisher owned multiple domains and has an interest in identifying their users consistently across their domains. The URL of the referrer header has to match a pre-configured list of domains (configured in the Permutive dashboard). We refer to this service as the “Secure Permutive 3P cookie”, and will not be shared between Publishers. This PXID 3P cookie varies Publisher by Publisher.
DataDome bot protection — necessary for site security
Compliant8

OneTrust cookie "OptanonAlertBoxClosed" set correctly after consent
Google Ads2 findings_gcl_au, _gcl_ls

_gcl_au, _gcl_ls

Google Ads cookie "_gcl_au" set correctly after consent

Google Ads (Google) wrote "_gcl_ls" to localStorage correctly after consent
LinkedIn3 findingsbcookie, li_gc, lidc
bcookie, li_gc, lidc
LinkedIn cookie "bcookie" set correctly after consent
LinkedIn cookie "li_gc" set correctly after consent
LinkedIn cookie "lidc" set correctly after consent

Meta Pixel cookie "_fbp" set correctly after consent
Outbrain cookie "dicbo_id" set correctly after consent
Is this your site?
Run a full multi-page scan with monitoring and get detailed remediation steps
Scan reuters.com →This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com