Teladoc

teladoc.com

Compare

Geo-redirect detected

https://teladoc.com redirected to https://www.teladochealth.com/.

https://teladoc.com

Scanned Apr 15, 2026 · 33.0s

Your website score is

0/100
Critical

Grade

F0

Banner

Yes

Regulatory Compliance

Multi-regulation overview — click any regulation for details

Technical scan only. A passing score does not equal legal compliance. Consult qualified legal counsel for your jurisdiction.

Tag Leak detected 27 user data leaks before consent on teladoc.com, including Advertising Tracker, VWO, Mixpanel.

Security Headers

5/6 present

Strict-Transport-Security

max-age=0

Content-Security-Policy

Add a Content-Security-Policy header to prevent XSS and code injection attacks

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

camera=(), microphone=(), geolocation=() interest-cohort=()

Google Consent Mode

Not Detected

Google Consent Mode v2 was not found on this page. GCM v2 allows Google's tags to adjust their behavior based on user consent, and is required for compliant advertising measurement in the EU. Without it, your Google Ads and GA4 conversions may be impacted after consent is declined.

Post-Rejection Audit

Reject Button

Found

Post-Rejection Fires

0 vendors

Consent Mode

Not Detected

GTM Load

Not detected

Consent Mode V2: Not Detected

Google Consent Mode was not detected on this site.

No tracking vendors detected firing after rejection

Consent Record Audit

Pass

Consent record stored after interaction

GDPR Art. 7(1)

Found: OptanonConsent (OneTrust)

Record contains timestamp

Art. 7(1)

Timestamp field detected

Record contains consent state

Art. 7(1)

Accept/reject state detected

Record contains consent categories

Art. 7(1)

Consent categories (analytics, marketing, etc.) not found in record

Consent withdrawal mechanism accessible

GDPR Art. 7(3)

Cookie settings link / floating button found

Consent record and withdrawal mechanism are both correctly implemented

Tracker categories detected

Advertising1 vendor
Analytics3 vendors
Security1
Functional1 vendor
Critical10
Advertising Tracker
criticalNetworkAdvertisingAdvertising Tracker

advertising tracker at perfalytics.com loaded before consent

Host: perfalytics.comFired: 498ms after load
VWO
VWO7 findings

dev.visualwebsiteoptimizer.com, _vwo_consent, _vwo_uuid, _vwo_sn, _vwo_ds, _vis_opt_s, _vis_opt_test_cookie

VWO
criticalNetworkAnalyticsVWO

VWO (VWO) loaded before consent: VWO A/B testing and conversion optimization

Host: dev.visualwebsiteoptimizer.comFired: 526ms after load
VWO
criticalCookieAnalyticsVWO

VWO cookie "_vwo_consent" set before consent

Cookie: _vwo_consentDomain: .teladochealth.com
VWO
criticalCookieAnalyticsVWO

VWO cookie "_vwo_uuid" set before consent

Cookie: _vwo_uuidDomain: .teladochealth.com
VWO
criticalCookieAnalyticsVWO

VWO cookie "_vwo_sn" set before consent

Cookie: _vwo_snDomain: .teladochealth.com
VWO
criticalCookieAnalyticsVWO

VWO cookie "_vwo_ds" set before consent

Cookie: _vwo_dsDomain: .teladochealth.com
VWO
criticalCookieAnalyticsVWO

VWO cookie "_vis_opt_s" set before consent

Cookie: _vis_opt_sDomain: .teladochealth.com
VWO
criticalCookieAnalyticsVWO

VWO cookie "_vis_opt_test_cookie" set before consent

Cookie: _vis_opt_test_cookieDomain: .teladochealth.com
Mixpanel
Mixpanel2 findings

mp_dcb9fb99-e4c4-4a9d-b4bc-35bcade689c0_perfalytics, mp_eventQueue

Mixpanel
criticalCookieAnalyticsMixpanel

Mixpanel cookie "mp_dcb9fb99-e4c4-4a9d-b4bc-35bcade689c0_perfalytics" set before consent

Cookie: mp_dcb9fb99-e4c4-4a9d-b4bc-35bcade689c0_perfalyticsDomain: .teladochealth.com
Mixpanel
criticalStorageAnalyticsMixpanel

Mixpanel (Mixpanel) wrote "mp_eventQueue" to localStorage before consent

Key: mp_eventQueueType: localStorageFired: 1387ms after load
Warnings17
vendor logo
warningNetwork

Unknown third-party request to www.teladochealth.com before consent

Host: www.teladochealth.comFired: 50ms after load
vendor logo
warningNetwork

Unknown third-party request to freshpaint-cdn.com before consent

Host: freshpaint-cdn.comFired: 162ms after load
vendor logo
warningNetwork

Unknown third-party request to tdh-backend.vercel.app before consent

Host: tdh-backend.vercel.appFired: 2137ms after load
vendor logo
warningNetwork

Unknown third-party request to api.iplocation.net before consent

Host: api.iplocation.netFired: 2518ms after load
warningStorage

localStorage key "_vwo_833362_config" written before consent

Key: _vwo_833362_configType: localStorageFired: 988ms after load
warningStorage

localStorage key "vwoSn" written before consent

Key: vwoSnType: localStorageFired: 1029ms after load
warningStorage

localStorage key "e3334fa8-b248-4fd1-b484-f611d3413db2" written before consent

Key: e3334fa8-b248-4fd1-b484-f611d3413db2Type: localStorageFired: 1062ms after load
warningStorage

localStorage key "__mplssupport__" written before consent

Key: __mplssupport__Type: localStorageFired: 1386ms after load
warningStorage

localStorage key "send_to_fp.95b7e7f8-6acc-477f-ba0c-83cfedae9f78.inProgress" written before consent

Key: send_to_fp.95b7e7f8-6acc-477f-ba0c-83cfedae9f78.inProgressType: localStorageFired: 1399ms after load
warningStorage

localStorage key "send_to_fp.95b7e7f8-6acc-477f-ba0c-83cfedae9f78.queue" written before consent

Key: send_to_fp.95b7e7f8-6acc-477f-ba0c-83cfedae9f78.queueType: localStorageFired: 1399ms after load
warningStorage

localStorage key "send_to_fp.95b7e7f8-6acc-477f-ba0c-83cfedae9f78.ack" written before consent

Key: send_to_fp.95b7e7f8-6acc-477f-ba0c-83cfedae9f78.ackType: localStorageFired: 1399ms after load
warningStorage

localStorage key "send_to_fp.95b7e7f8-6acc-477f-ba0c-83cfedae9f78.reclaimStart" written before consent

Key: send_to_fp.95b7e7f8-6acc-477f-ba0c-83cfedae9f78.reclaimStartType: localStorageFired: 1399ms after load
warningStorage

localStorage key "send_to_fp.95b7e7f8-6acc-477f-ba0c-83cfedae9f78.reclaimEnd" written before consent

Key: send_to_fp.95b7e7f8-6acc-477f-ba0c-83cfedae9f78.reclaimEndType: localStorageFired: 1399ms after load
warningStorage

localStorage key "fp-event-queue-19d9293495c89c-04b9bc659e772-11313779-13c680-19d9293495d1095" written before consent

Key: fp-event-queue-19d9293495c89c-04b9bc659e772-11313779-13c680-19d9293495d1095Type: localStorageFired: 1425ms after load
warningStorage

localStorage key "fp-event-queue-19d9293496bd5e-032ab94367e7d2-11313779-13c680-19d9293496cd7f" written before consent

Key: fp-event-queue-19d9293496bd5e-032ab94367e7d2-11313779-13c680-19d9293496cd7fType: localStorageFired: 1440ms after load
warningStorage

localStorage key "fp-event-queue-session-start-19d92934986308-03095e1b2c75cb-11313779-13c680-19d92934987c82" written before consent

Key: fp-event-queue-session-start-19d92934986308-03095e1b2c75cb-11313779-13c680-19d92934987c82Type: localStorageFired: 1467ms after load
warningStorage

localStorage key "fp-event-queue-19d92934b52eb-03aaf0cd84db178-11313779-13c680-19d92934b53bc4" written before consent

Key: fp-event-queue-19d92934b52eb-03aaf0cd84db178-11313779-13c680-19d92934b53bc4Type: localStorageFired: 1927ms after load
Info5
Cloudflare Web Analytics
infoNetworkAnalyticsCloudflare Web Analytics

Cloudflare Web Analytics (Cloudflare) loaded before consent: Cloudflare Web Analytics beacon — privacy-focused, no cookies

Host: static.cloudflareinsights.comFired: 162ms after load
OneTrust
OneTrust2 findings

cdn.cookielaw.org, OptanonConsent

OneTrust
infoNetworkConsent MgmtOneTrust

OneTrust (OneTrust) loaded before consent: OneTrust cookie consent management

Host: cdn.cookielaw.orgFired: 667ms after load
OneTrust
infoCookieConsent MgmtOneTrust

OneTrust cookie "OptanonConsent" set before consent

Cookie: OptanonConsentDomain: .teladochealth.com
OneTrust CMP
infoNetworkConsent MgmtOneTrust CMP

OneTrust CMP (OneTrust) loaded before consent: OneTrust geo-lookup — determines which consent banner to show based on user location

Host: geolocation.onetrust.comFired: 2138ms after load
Cloudflare
infoCookieFunctionalCloudflare

Cloudflare cookie "_cfuvid" set before consent — The _cfuvid cookie is only set when a site uses this option in a Rate Limiting Rule, and is only used to allow the Cloudflare WAF to distinguish individual users who share the same IP address.

Cookie: _cfuvidDomain: .teladochealth.comRetention: session
Compliant3
VWO
VWO2 findings

dev.visualwebsiteoptimizer.com, _vwo_uuid_v2

VWO
CompliantNetworkAnalyticsVWO

VWO (VWO) loaded correctly after consent

Host: dev.visualwebsiteoptimizer.comFired: 731ms after load
VWO
CompliantCookieAnalyticsVWO

VWO cookie "_vwo_uuid_v2" set correctly after consent

Cookie: _vwo_uuid_v2Domain: .teladochealth.com
OneTrust
CompliantCookieConsent MgmtOneTrust

OneTrust cookie "OptanonAlertBoxClosed" set correctly after consent

Cookie: OptanonAlertBoxClosedDomain: .teladochealth.com

Is this your site?

Run a full multi-page scan with monitoring and get detailed remediation steps

Scan teladoc.com

This audit is based on publicly observable website behavior. To request removal from the index, email support@tagleak.com