Waivern Consent Analyser ← Home Log

ePrivacy / GDPR Compliance Report · ePrivacy/GDPR (EU)

Consent Compliance Report

2026-04-01 08:29:16 UTC · https://www.manchestereveningnews.co.uk/ · CMP: OneTrust AI off

📍 Analysis ran from: 🇺🇸 Santa Clara, California, United States · IP: 52.52.202.228 · Amazon.com, Inc. · Results reflect how this site presents to this location.

Post Reject All — compliance state

20 FAIL 7 PASS 10 MANUAL · 8 warn 0 err

CMP Interaction

Banner detected	True
Accept button	Accept
Reject button
Clicks to accept / reject	1 / 0
Reject buried in manage panel	True

Screenshots

Pre-Consent — initial page load

Post Accept All — consent baseline

Post Reject All — compliance state

Section M — Summary

Category	Result
Pre Consent Clean	✗ FAIL
No Tracking Cookies Pre Consent	✗ FAIL
Tracker Globals Undefined	✗ FAIL
No Tracking Storage Pre Consent	✗ FAIL
Network Blocked After Decline	☐ MANUAL
Third Party Cookies Absent	☐ MANUAL
Doc Cookie Clean Post Reject	✓ PASS
Web Storage Clean Post Reject	✗ FAIL
First Party Cookies Classified	ℹ INFO
Server Side Cookies Gated	— N/A
No Cname Cloaking	✓ PASS
Tracker Globals Absent	✗ FAIL
Dom Scripts Blocked	✗ FAIL
Reject Equals Accept Clicks	✓ PASS
No Preticked Boxes	☐ MANUAL
Persistent Withdrawal Widget	✓ PASS
No Cookie Wall	✓ PASS
Consent Persists	✗ FAIL

Run Log 78 entries · ⚠ 8 warning(s) · raw JSON

elapsed	level	session	message
0.0s	▶ STEP	MAIN	Run 0d71ea11 started {"url": "https://www.manchestereveningnews.co.uk/"}
0.0s	· INFO	MAIN	Detecting probe server location
0.6s	· INFO	MAIN	Probe location {"ip": "52.52.202.228", "city": "Santa Clara", "region": "California", "country": "United States", "country_code": "US", "org": "Amazon.com, Inc.", "latitude": 37.3924, "longitude": -121.9623}
0.6s	▶ STEP	MAIN	Starting analysis of https://www.manchestereveningnews.co.uk/ {"mode": "GDPR"}
10.2s	· INFO	MAIN	Chromium launched {"headless": true}
11.8s	· INFO	PREFLIGHT	Navigating to https://www.manchestereveningnews.co.uk/
15.9s	· INFO	PREFLIGHT	Network idle reached
16.0s	▶ STEP	A	Session A start (accept path)
16.2s	· INFO	A	Navigating to https://www.manchestereveningnews.co.uk/
27.3s	⚠ WARN	A	Network did not reach idle state — proceeding after load event. Normal for sites with persistent connections (websockets, polling).
29.3s	· INFO	A	Capturing pre-consent state
29.5s	· INFO	A	Pre-consent state captured {"pre_consent_cookies": 154, "pre_consent_ad_cookies": 3, "pre_consent_tracking_storage": 7, "pre_consent_tracker_globals": ["gtag", "dataLayer", "google_tag_manager", "amplitude"], "pre_consent_unblocked_scripts": 11, "pre_consent_capture_error": null}
47.6s	· INFO	A	Banner: found
55.5s	· INFO	A	Accept All interaction {"cmp": "OneTrust", "button_text": "Accept", "clicked": true, "in_iframe": false, "error": null}
57.5s	· INFO	A	Capturing post-accept baseline state
58.4s	· INFO	A	Baseline captured {"baseline_cookies": 366, "baseline_ad_cookies": 14, "baseline_tracking_storage": 13, "baseline_tracker_globals": ["gtag", "dataLayer", "google_tag_manager", "fbq", "_fbq", "twq", "twttr", "amplitude", "ttq"], "baseline_unblocked_scripts": 22, "baseline_capture_error": null}
60.1s	· INFO	A	Context closed, HAR saved
60.1s	▶ STEP	A	Session A complete {"pre_consent_cookies": 154, "pre_consent_ad_cookies": 3, "pre_consent_tracking_storage": 7, "pre_consent_tracker_globals": ["gtag", "dataLayer", "google_tag_manager", "amplitude"], "pre_consent_unblocked_scripts": 11, "pre_consent_capture_error": null, "baseline_cookies": 366, "baseline_ad_cookies": 14, "baseline_tracking_storage": 13, "baseline_tracker_globals": ["gtag", "dataLayer", "google_tag
60.1s	▶ STEP	B	Session B start (reject path)
60.2s	· INFO	B	Navigating to https://www.manchestereveningnews.co.uk/
70.8s	⚠ WARN	B	Network did not reach idle state — proceeding after load event. Normal for sites with persistent connections (websockets, polling).
72.8s	· INFO	B	Capturing pre-consent state
72.9s	· INFO	B	Pre-consent B captured {"pre_consent_B_cookies": 151, "pre_consent_B_ad_cookies": 3, "pre_consent_B_tracking_storage": 7, "pre_consent_B_tracker_globals": ["gtag", "dataLayer", "google_tag_manager", "amplitude"], "pre_consent_B_unblocked_scripts": 11, "pre_consent_B_capture_error": null}
91.0s	· INFO	B	Banner: found
91.1s	· INFO	B	Persistent widget found pre-reject (CMP fully loaded) {"found": true, "text": "Privacy Notice", "in_iframe": false}
272.2s	· INFO	B	Click symmetry measured {"accept_clicks": 1, "reject_clicks": 0}
283.2s	· INFO	B	Reject All interaction {"cmp": "OneTrust", "button_text": "", "clicked": false, "clicks_required": 0, "required_manage_panel": true, "panel_navigated": false, "panel_new_frames": 0, "panel_wait_s": 0.0, "error": "No reject button and no manage/preferences button found on layer 1. CMP may not have loaded, or uses an unrecognised button label."}
283.2s	⚠ WARN	B	Reject interaction issue: No reject button and no manage/preferences button found on layer 1. CMP may not have loaded, or uses an unrecognised button label.
283.2s	⚠ WARN	B	Reject All was NOT successfully clicked — post-reject state captures an unmodified consent state, not a rejection.
285.2s	· INFO	B	Site accessible after reject: True
285.2s	· INFO	B	Capturing post-reject state
285.4s	· INFO	B	Post-reject captured {"post_reject_cookies": 225, "post_reject_ad_cookies": 4, "post_reject_tracking_storage": 7, "post_reject_tracker_globals": ["gtag", "dataLayer", "google_tag_manager", "amplitude"], "post_reject_unblocked_scripts": 12, "post_reject_capture_error": null}
285.4s	· INFO	B	Persistent widget check {"found": true, "text": "Privacy Notice", "in_iframe": false}
285.4s	· INFO	B	Capturing subpages
290.9s	· INFO	B	1 subpage(s) captured {"urls": ["https://www.manchestereveningnews.co.uk/news/"], "errors": []}
291.6s	· INFO	B	Context closed, HAR saved
291.6s	· INFO	B	Checking pre-ticked toggles (separate session)
291.6s	· INFO	B	Navigating to https://www.manchestereveningnews.co.uk/
296.4s	· INFO	B	Network idle reached
319.3s	⚠ WARN	B	Manage/preferences button not visible after 5s wait — toggle check may return 0 results
320.1s	· INFO	B	Pre-ticked toggles: 0 found {"toggles": {}}
320.1s	⚠ WARN	B	Toggle check returned 0 results — diagnostics: {"manage_button_found": false, "manage_button_text": null, "frames_scanned": [], "total_elements_found": 0, "note": "Manage/preferences button not found on page"}
320.2s	▶ STEP	B	Session B complete {"post_reject_cookies": 225, "post_reject_ad_cookies": 4, "post_reject_tracking_storage": 7, "post_reject_tracker_globals": ["gtag", "dataLayer", "google_tag_manager", "amplitude"], "post_reject_unblocked_scripts": 12, "post_reject_capture_error": null, "accept_clicks": 1, "reject_clicks": 0, "reject_at_first_screen": false, "subpages_captured": 1}
320.2s	▶ STEP	C	Session C start (persistence check)
320.2s	· INFO	C	Navigating to https://www.manchestereveningnews.co.uk/
324.9s	· INFO	C	Network idle reached
336.9s	· INFO	C	Reject for persistence test {"clicked": false, "error": "No reject button and no manage/preferences button found on layer 1. CMP may not have loaded, or uses an unrecognised button label."}
336.9s	⚠ WARN	C	Reject All failed in Session C — persistence check results will be unreliable.
338.9s	· INFO	C	Opening second tab (same-session test)
338.9s	· INFO	C	Navigating to https://www.manchestereveningnews.co.uk/
343.9s	· INFO	C	Network idle reached
345.9s	· INFO	C	Same-session state captured {"persistence_1_cookies": 30, "persistence_1_ad_cookies": 1, "persistence_1_tracking_storage": 5, "persistence_1_tracker_globals": ["gtag", "dataLayer", "google_tag_manager", "amplitude"], "persistence_1_unblocked_scripts": 8, "persistence_1_capture_error": null}
346.0s	· INFO	C	Storage state saved, opening new context
346.1s	· INFO	C	Navigating to https://www.manchestereveningnews.co.uk/
351.1s	· INFO	C	Network idle reached
353.2s	· INFO	C	New-session state captured {"persistence_2_cookies": 31, "persistence_2_ad_cookies": 1, "persistence_2_tracking_storage": 5, "persistence_2_tracker_globals": ["gtag", "dataLayer", "google_tag_manager", "amplitude"], "persistence_2_unblocked_scripts": 8, "persistence_2_capture_error": null}
353.2s	▶ STEP	C	Session C complete {"persistence_1_captured": true, "persistence_2_captured": true}
353.2s	▶ STEP	POLICY_RENDER	Rendering cookie policy page in browser
354.2s	· INFO	POLICY_RENDER	Navigating to policy: https://www.manchestereveningnews.co.uk/cookie-policy
363.3s	· INFO	POLICY_RENDER	Extracted 19964 chars from policy page
363.3s	· INFO	POLICY_RENDER	Policy page rendered (19964 chars)
363.3s	· INFO	MAIN	Browser closed
363.4s	▶ STEP	DNS	Running CNAME cloaking checks
363.4s	· INFO	DNS	Apex domain: co.uk (from hostname: www.manchestereveningnews.co.uk)
363.6s	· INFO	DNS	Checking 9 subdomain(s) {"subdomains": ["premium.express.co.uk", "manchestereveningnews.co.uk", "www.mirror.co.uk", "i2-prod.walesonline.co.uk", "s2-prod.manchestereveningnews.co.uk", "i2-prod.manchestereveningnews.co.uk", "stmg-prod.mirror.co.uk", "i2-prod.mirror.co.uk", "www.reachgeneric.co.uk"]}
363.8s	· INFO	DNS	CNAME check done — 0 tracker CNAME(s) {"results": [{"sub": "premium.express.co.uk", "cname": null, "tracker": false, "vendor": null}, {"sub": "manchestereveningnews.co.uk", "cname": null, "tracker": false, "vendor": null}, {"sub": "www.mirror.co.uk", "cname": null, "tracker": false, "vendor": null}, {"sub": "i2-prod.walesonline.co.uk", "cname": null, "tracker": false, "vendor": null}, {"sub": "s2-prod.manchestereveningnews.co.uk", "cn
363.8s	▶ STEP	POLICY	Fetching cookie policy
363.8s	· INFO	POLICY	Policy found at https://www.manchestereveningnews.co.uk/cookie-policy
363.8s	· INFO	POLICY	Fetching policy, cross-referencing 341 cookie(s)
364.6s	· INFO	POLICY	Policy fetch OK {"declared": 61, "undeclared_observed": 340, "ai_used": false}
364.6s	⚠ WARN	POLICY	340 cookie(s) not in policy {"cookies": ["__141_exp", "visitor-id", "DPSync4", "c", "_sharedid_cst", "iq_u_key", "visitor", "cto_bundle", "KRTBCOOKIE_27", "TDID", "pbjs_unifiedID", "guest_id_marketing", "KRTBCOOKIE_1540", "guest_id", "SCM", "ids", "VP", "UID", "clid", "CMPS"]}
364.6s	▶ STEP	MAIN	Analysis complete {"error_count": 0}
364.6s	▶ STEP	C1	Running Component 1 HAR analysis
364.9s	· INFO	C1	HAR analysis complete — 3 FAIL item(s) {"total_requests": 675, "phases": ["pre_consent"], "phase_strategy": {"accept": "not_detected", "reject": "not_detected"}, "fail_items": ["B.1", "G.4", "J.3"]}
365.2s	· INFO	C1	Running C1 on accept-path HAR for C.2/C.3 baseline
365.3s	· INFO	C1	Accept-HAR promoted 2 item(s): ['C.2', 'C.3'] {"phases": ["pre_consent", "post_accept"]}
365.4s	▶ STEP	CHECKS	Running browser-state checks
365.4s	· INFO	CHECKS	Browser checks complete — 17 FAIL item(s) {"fail_items": ["B.2", "B.3", "B.4", "B.5", "E.4", "F.3", "G.2", "G.6", "G.9", "H.1", "H.3", "I.1", "I.2", "I.3", "K.1", "L.2", "L.3"], "mode": "gdpr"}

Detailed Findings

B. Pre-Consent State 5 FAIL 0 PASS 0 MANUAL

B.1 No tracking requests before consent banner interaction

✗ FAIL

45 tracking domain(s) made requests before any consent signal was recorded.

▶ Show all 45 rows

domain	vendor	category	request_count	first_request_time	example_url
securepubads.g.doubleclick.net	Google Publisher Ads	ADVERTISING	3	2026-04-01T08:24:12	https://securepubads.g.doubleclick.net/tag/js/gpt.js
cdn.eu.amplitude.com	Amplitude	ANALYTICS	1	2026-04-01T08:24:12	https://cdn.eu.amplitude.com/libs/analytics-browser-2.25.0-min.js.gz
sr-client-cfg.eu.amplitude.com	Amplitude	ANALYTICS	5	2026-04-01T08:24:12	https://sr-client-cfg.eu.amplitude.com/config/e5d55384252f213e7cfa79584a442b70?config_group=browser
cdn.amplitude.com	Amplitude	ANALYTICS	5	2026-04-01T08:24:12	https://cdn.amplitude.com/libs/analytics-browser-gtm-wrapper-2.36.8.min.js.br
sb.scorecardresearch.com	Comscore	ANALYTICS	4	2026-04-01T08:24:12	https://sb.scorecardresearch.com/b?c1=2&c2=6035737&ns__t=1775031852828&ns_c=UTF-8&c8=Manchester%20Evening%20News%3A%20Nu
link.rubiconproject.com	Magnite (Rubicon)	ADVERTISING	1	2026-04-01T08:24:12	https://link.rubiconproject.com/magnite/7949.js
micro.rubiconproject.com	Magnite (Rubicon)	ADVERTISING	1	2026-04-01T08:24:12	https://micro.rubiconproject.com/prebid/dynamic/7949.js
id5-sync.com	ID5 (universal ID)	IDENTITY	13	2026-04-01T08:24:13	https://id5-sync.com/api/config/prebid
cdn.id5-sync.com	ID5 (universal ID)	IDENTITY	2	2026-04-01T08:24:13	https://cdn.id5-sync.com/api/1.0/id5PrebidModule.js
id.crwdcntrl.net	Lotame	IDENTITY	1	2026-04-01T08:24:13	https://id.crwdcntrl.net/id?gdpr_applies=false&c=9458
ad.doubleclick.net	Google DoubleClick	ADVERTISING	7	2026-04-01T08:24:13	https://ad.doubleclick.net/favicon.ico?ad=300x250&ad_box_=1&adnet=1&showad=1&size=250x250&e=0.6491581332621223
tags.crwdcntrl.net	Lotame	IDENTITY	2	2026-04-01T08:24:13	https://tags.crwdcntrl.net/lt/c/16576/sync.min.js
bcp.crwdcntrl.net	Lotame	IDENTITY	1	2026-04-01T08:24:13	https://bcp.crwdcntrl.net/6/map?xcid=16576
api.id5-sync.com	ID5	IDENTITY	1	2026-04-01T08:24:13	https://api.id5-sync.com/analytics/226/id5-api-js
api.eu.amplitude.com	Amplitude	ANALYTICS	4	2026-04-01T08:24:13	https://api.eu.amplitude.com/2/httpapi
eus.rubiconproject.com	Magnite (Rubicon)	ADVERTISING	2	2026-04-01T08:24:13	https://eus.rubiconproject.com/usync.html?p=20986&endpoint=us-east
ads.pubmatic.com	PubMatic	ADVERTISING	3	2026-04-01T08:24:13	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156512
token.rubiconproject.com	Magnite (Rubicon)	ADVERTISING	7	2026-04-01T08:24:14	https://token.rubiconproject.com/khaos.json?gdpr=0
api.rlcdn.com	LiveRamp	IDENTITY	1	2026-04-01T08:24:14	https://api.rlcdn.com/api/identity/envelope?pid=1258
idx.liadm.com	LiveIntent	IDENTITY	1	2026-04-01T08:24:14	https://idx.liadm.com/idex/did-004m/any?duid=f0af49eb415c--01kn4298z90kjyg8h08gmcs4yx&us_privacy=1NNN&did=did-004m&cd=.m
pixel-us-east.rubiconproject.com	Magnite (Rubicon)	ADVERTISING	1	2026-04-01T08:24:14	https://pixel-us-east.rubiconproject.com/exchange/sync.php?p=20986&gdpr_consent=undefined&gdpr=0&khaos=MNFS4W5N-23-8PB4
cm.g.doubleclick.net	Google DoubleClick	ADVERTISING	11	2026-04-01T08:24:14	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0
pixel.rubiconproject.com	Magnite (Rubicon)	ADVERTISING	9	2026-04-01T08:24:14	https://pixel.rubiconproject.com/exchange/sync.php?p=a9us&gdpr=0
id.rlcdn.com	LiveRamp	IDENTITY	1	2026-04-01T08:24:14	https://id.rlcdn.com/709414.gif?gdpr=0
t.pubmatic.com	PubMatic	ADVERTISING	1	2026-04-01T08:24:14	https://t.pubmatic.com/wl?pubid=156512
px.ads.linkedin.com	LinkedIn Ads	ADVERTISING	3	2026-04-01T08:24:14	https://px.ads.linkedin.com/setuid?partner=rubiconDb&dbredirect=true&ruxId=MNFS4W5N-23-8PB4&gdpr=0
ib.adnxs.com	Xandr AppNexus	ADVERTISING	7	2026-04-01T08:24:14	https://ib.adnxs.com/prebid/setuid?bidder=rubicon&uid=MNFS4W5N-23-8PB4&gdpr=0
ut.pubmatic.com	PubMatic	ADVERTISING	1	2026-04-01T08:24:14	https://ut.pubmatic.com/geo?pubid=156512
image6.pubmatic.com	PubMatic	ADVERTISING	3	2026-04-01T08:24:14	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=86476842&p=156512&s=0&a=0&ptask=ALL&np=0&fp=0
c1.adform.net	Adform	ADVERTISING	3	2026-04-01T08:24:14	https://c1.adform.net/serving/cookie/match?party=14&cid=5AA6AAFE-57EF-4B91-86B3-71C28F3EE230&gdpr=0&gdpr_consent=
sync.ipredictive.com	iPromote	ADVERTISING	1	2026-04-01T08:24:14	https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJ
cms.quantserve.com	Quantcast Measure	ANALYTICS	2	2026-04-01T08:24:14	https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=
idsync.rlcdn.com	LiveRamp	IDENTITY	1	2026-04-01T08:24:14	https://idsync.rlcdn.com/420486.gif?partner_uid=5AA6AAFE-57EF-4B91-86B3-71C28F3EE230
image2.pubmatic.com	PubMatic	ADVERTISING	15	2026-04-01T08:24:14	https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=2018808941812827
image4.pubmatic.com	PubMatic	ADVERTISING	1	2026-04-01T08:24:14	https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-lzi0lc1E2uVQEdDLU9McqPgP2q5jUtI-~A&gdpr=0&us_privacy=
simage2.pubmatic.com	PubMatic	ADVERTISING	19	2026-04-01T08:24:14	https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQwNjQmdGw9NDMyMDA=&piggybackCookie=y-lNhrx4hE2oAPY
rtb-csync.smartadserver.com	Smart (Equativ)	ADVERTISING	1	2026-04-01T08:24:14	https://rtb-csync.smartadserver.com/redir?partneruserid=AAGXhE7TmawAAAIdUWoN9A&partnerid=127&redirurl=https%3A%2F%2Fmatc
simage4.pubmatic.com	PubMatic	ADVERTISING	3	2026-04-01T08:24:16	https://simage4.pubmatic.com/AdServer/SPug?partnerID=156512&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=
sync.crwdcntrl.net	Lotame	IDENTITY	1	2026-04-01T08:24:44	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=5AA6AAFE-57EF-4B91-86B3-71C28F3EE230&gdpr=0&gdpr_consent=
rtb.openx.net	OpenX	ADVERTISING	2	2026-04-01T08:24:44	https://rtb.openx.net/sync/prebid?gdpr=0&gdpr_consent=&us_privacy=&r=https%3A%2F%2Fprebid.a-mo.net%2Fsetuid%3Fbidder%3Do
image8.pubmatic.com	PubMatic	ADVERTISING	2	2026-04-01T08:24:44	https://image8.pubmatic.com/AdServer/ImgSync?p=158355&gdpr=0&gdpr_consent=&us_privacy=&pu=https%3A%2F%2Fprebid.a-mo.net%
cm.adform.net	Adform	ADVERTISING	1	2026-04-01T08:24:44	https://cm.adform.net/cookie?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&redirect_url=https%3A%2F%2Fprebid.a-mo.net%2
ow.pubmatic.com	PubMatic	ADVERTISING	1	2026-04-01T08:24:45	https://ow.pubmatic.com/setuid?bidder=amx&uid=dd4c3f08-fbaa-4aa2-b1f0-69cda8554a25&gdpr=0&
pagead2.googlesyndication.com	Google AdSense/GAM	ADVERTISING	1	2026-04-01T08:25:13	https://pagead2.googlesyndication.com/pagead/ping?e=1
dis.criteo.com	Criteo	ADVERTISING	1	2026-04-01T08:25:14	https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&url=h

Recommendation: Third-party analytics and advertising scripts must not be loaded until after affirmative consent. Implement a consent-gate that defers all non-essential script initialisation until the TCF API reports a positive consent decision.

B.2 No analytics/marketing cookies in Storage pre-consent

✗ FAIL

3 advertising cookie(s) present in browser storage before any consent was given.

name	domain	value_snippet
_ga	.stmg-prod.mirror.co.uk	GA1.4.1475422037.1775031853
receive-cookie-deprecation	.rubiconproject.com	1
IDE	.doubleclick.net	AHWqTUm6TIYMsCCXhOKE9vriKav35MRUe54PW-sCEOZP0D0M5oHqi0EMQw97UvzSGTM

Recommendation: Advertising and analytics cookies must not be set until after the user has given affirmative consent. Verify server-side Set-Cookie logic does not fire before the consent signal is received.

B.3 JS tracker globals return undefined pre-consent

✗ FAIL

Tracker globals defined before consent: ['gtag', 'google_tag_manager', 'amplitude']

global	type
gtag	function
google_tag_manager	__defined_object__
amplitude	__defined_object__

Recommendation: Tracker initialisation scripts must not execute before consent. Implement a consent gate that loads tracker SDKs only after the TCF API confirms a positive decision.

B.4 No tracking identifiers in localStorage/sessionStorage pre-consent

✗ FAIL

7 tracking storage key(s) present before consent.

key	type	value
REACH_CMP_READY	localStorage	false
AMP_remote_config_68994201ba	localStorage	{"remoteConfig":{"configs":{"diagnostics":{"browserSDK":{"sampleRate":0.02}},"se
AMP_unsent_e5d5538425	localStorage	[]
_li_duid	localStorage	f0af49eb415c--01kn4298z90kjyg8h08gmcs4yx
AMP_unsent_68994201ba	localStorage	[]
AMP_remote_config_e5d5538425	localStorage	{"remoteConfig":{"configs":{"diagnostics":{"browserSDK":{"sampleRate":0.02}},"se
AMP_PAGE_VIEW	sessionStorage	{"pageViewId":"8a02233b-621c-4f88-a8a7-9ea1f53ff0bd"}

B.5 Non-essential scripts have type=text/plain (CMP-blocked) in DOM

✗ FAIL

11 tracking script(s) in DOM without CMP-blocking type attribute.

▶ Show all 11 rows

src	type	vendor
https://sb.scorecardresearch.com/c2/6035737/cs.js	text/javascript	Comscore
https://cdn.id5-sync.com/api/1.0/id5PrebidModule.js	text/javascript	ID5 (universal ID)
https://cdn.amplitude.com/libs/analytics-browser-gtm-2.36.8-min.js.gz	text/javascript	Amplitude
https://cdn.amplitude.com/libs/analytics-browser-gtm-wrapper-2.36.8.min.js.br	text/javascript	Amplitude
https://cdn.eu.amplitude.com/libs/analytics-browser-2.25.0-min.js.gz	text/javascript	Amplitude
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202603250101/pubads_impl.js?cb=3109743		Google Publisher Ads
https://link.rubiconproject.com/magnite/7949.js		Magnite (Rubicon)
https://micro.rubiconproject.com/prebid/dynamic/7949.js		Magnite (Rubicon)
https://tags.crwdcntrl.net/lt/c/16576/sync.min.js		Lotame
https://cdn.id5-sync.com/api/1.0/id5-api.js		ID5 (universal ID)
https://securepubads.g.doubleclick.net/tag/js/gpt.js		Google Publisher Ads

Recommendation: Scripts for tracking vendors should either be absent from the DOM entirely pre-consent, or have their type attribute set to 'text/plain' to prevent execution. CMPs typically manage this; verify the CMP script-blocking configuration.

C. Baseline Capture 0 PASS 0 MANUAL

C.2 Inventory of third-party tracking domains active after Accept All

ℹ INFO

39 tracking domains active after consent-all (baseline).

▶ Show all 39 rows

domain	vendor	category	first_seen	example_url
ep2.adtrafficquality.google	Google SODAR/IVT	ADVERTISING	2026-04-01T08:24:06	https://ep2.adtrafficquality.google/sodar/sodar2/253/runner.html
pagead2.googlesyndication.com	Google AdSense/GAM	ADVERTISING	2026-04-01T08:24:06	https://pagead2.googlesyndication.com/bg/i-vnP5CT4DzRJiYTtQsLnpGcJHX0B_fruXg5tdl4444.js
dsum-sec.casalemedia.com	Index Exchange	ADVERTISING	2026-04-01T08:24:07	https://dsum-sec.casalemedia.com/crum?cm_dsp_id=282&external_user_id=A4110044578936391599
ib.adnxs.com	Xandr AppNexus	ADVERTISING	2026-04-01T08:24:07	https://ib.adnxs.com/ut/v3/prebid
fastlane.rubiconproject.com	Magnite	ADVERTISING	2026-04-01T08:24:07	https://fastlane.rubiconproject.com/a/api/prebid-exchange.json?as=7949-554432&m=banner&s=2
hbopenbid.pubmatic.com	PubMatic OpenBid	ADVERTISING	2026-04-01T08:24:07	https://hbopenbid.pubmatic.com/translator?source=prebid-client&gzip=1
securepubads.g.doubleclick.net	Google Publisher Ads	ADVERTISING	2026-04-01T08:24:07	https://securepubads.g.doubleclick.net/pcs/view?xai=AKAOjssHHCH9GzoyvzGCSe8W_sxOlleAK1JpOFTwZgjoizZs0mFHuS8lUz-oZztJotF8
googleads.g.doubleclick.net	Google Ads	ADVERTISING	2026-04-01T08:24:08	https://googleads.g.doubleclick.net/xbbe/pixel?d=CO656Z4cENHR5qgcGMS4w9ECMAE&v=APEucNWkpzQMokE3KG3AO54oFojECvQHu96jGw5Xd
fw.adsafeprotected.com	Integral Ad Science	MEASUREMENT	2026-04-01T08:24:08	https://fw.adsafeprotected.com/rjss/st/2743650/92404296/skeleton.js?bundleId=${BUNDLE_ID}&ias_dspID=3&ias_campId=1024798
s0.2mdn.net	DoubleClick Studio	ADVERTISING	2026-04-01T08:24:08	https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_287.js
tpc.googlesyndication.com	Google AdSense	ADVERTISING	2026-04-01T08:24:08	https://tpc.googlesyndication.com/pagead/js/r20260331/r20110914/client/window_focus_fy2021.js
ep1.adtrafficquality.google	Google SODAR/IVT	ADVERTISING	2026-04-01T08:24:08	https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=253&t=2&li=gpt_m202603300101&jk=8130725544467864&bg=!ra6lrs
cm.g.doubleclick.net	Google DoubleClick	ADVERTISING	2026-04-01T08:24:08	https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm&gdpr=0&gpp=DBABBg~BUoAAAKY.Q
ad.doubleclick.net	Google DoubleClick	ADVERTISING	2026-04-01T08:24:08	https://ad.doubleclick.net/pcs/view?xai=AKAOjssZoS1eeZSNZjz8GvU5k-aw4_BxpiA0-frTQnC3vJpADIyf_fMKyapGwptrH2zGJLM2B9HKi3wx
sync.ipredictive.com	iPromote	ADVERTISING	2026-04-01T08:24:08	https://sync.ipredictive.com/d/sync/cookie/generic?https://cm.g.doubleclick.net/pixel?google_nid=adelphic_mobile&google_
dis.criteo.com	Criteo	ADVERTISING	2026-04-01T08:24:08	https://dis.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle
prebid-a.rubiconproject.com	Magnite (Rubicon)	ADVERTISING	2026-04-01T08:24:08	https://prebid-a.rubiconproject.com/event
jsconfig.adsafeprotected.com	Integral Ad Science	MEASUREMENT	2026-04-01T08:24:08	https://jsconfig.adsafeprotected.com/jsconfig/rjss/st/2743650/92404296/skeleton.js?cbName=__IntegralAS__8140&bundleId=%2
c1.adform.net	Adform	ADVERTISING	2026-04-01T08:24:08	https://c1.adform.net/serving/cookie/match/?party=1&google_push=AXcoOmSr_BUaDTccmR8eXteuZTP_EhqclfV-ZYuLCexk89VixVWnTbiH
servedby.flashtalking.com	Flashtalking	ADVERTISING	2026-04-01T08:24:08	https://servedby.flashtalking.com/imp/8/214033;9350128;201;js;AdobeAdCloud;KV7TargetingAdapts300x250Q1FY25png/?ftx=&fty=
image8.pubmatic.com	PubMatic	ADVERTISING	2026-04-01T08:24:08	https://image8.pubmatic.com/AdServer/ImgSync?p=156872&gdpr=&gdpr_consent=&pu=https%3A%2F%2Fimage4.pubmatic.com%2FAdServe
ssbsync.smartadserver.com	Smart (Equativ)	ADVERTISING	2026-04-01T08:24:08	https://ssbsync.smartadserver.com/api/sync?callerId=112&gdpr=0&gdpr_consent=
u.openx.net	OpenX	ADVERTISING	2026-04-01T08:24:08	https://u.openx.net/w/1.0/cm?id=9b5994f2-035d-46de-8c12-bc0e9a4e66c2&r=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fox-usy
ssum-sec.casalemedia.com	Index Exchange	ADVERTISING	2026-04-01T08:24:08	https://ssum-sec.casalemedia.com/usermatchredir?s=191306&cb=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fix-usync%3Fuid%3D
cms.quantserve.com	Quantcast Measure	ANALYTICS	2026-04-01T08:24:08	https://cms.quantserve.com/pixel/p-u1vdacBMXAcfT.gif?idmatch=0
static.adsafeprotected.com	Integral Ad Science	MEASUREMENT	2026-04-01T08:24:08	https://static.adsafeprotected.com/sca.17.6.4.js
image4.pubmatic.com	PubMatic	ADVERTISING	2026-04-01T08:24:08	https://image4.pubmatic.com/AdServer/SPug?p=156872&pmc=1&pr=https%3A%2F%2Frouter.infolinks.com%2Fdyn%2Fpbm-usync%3Fuid%3
pixel.rubiconproject.com	Magnite (Rubicon)	ADVERTISING	2026-04-01T08:24:08	https://pixel.rubiconproject.com/exchange/sync.php?p=unruly&rndcb=5491822664
dt.adsafeprotected.com	Integral Ad Science	MEASUREMENT	2026-04-01T08:24:08	https://dt.adsafeprotected.com/dt?advEntityId=2743650&asId=4be2f503-5353-9f4c-3d91-ac90ae3c4f5b&tv=%7Bc:8widVQ,pingTime:
elb.the-ozone-project.com	Ozone Project	IDENTITY	2026-04-01T08:24:09	https://elb.the-ozone-project.com/static/load-cookie.html?gdpr=0&gdpr_consent=&usp_consent=1NNN&gpp=&gpp_sid=&pubcid.org
acdn.adnxs.com	Xandr (AppNexus)	ADVERTISING	2026-04-01T08:24:09	https://acdn.adnxs.com/dmp/async_usersync.html
id5-sync.com	ID5 (universal ID)	IDENTITY	2026-04-01T08:24:09	https://id5-sync.com/s/441/9.gif?puid=u_8ace70c6-615c-493a-82ce-47d4e563bbf8&gdpr=0&gdpr_consent=
idx.liadm.com	LiveIntent	IDENTITY	2026-04-01T08:24:09	https://idx.liadm.com/idex/did-004d/any?duid=f0af49eb415c--01kn427yepjkz1sx5zchp00v2h&did=did-004d&cd=.manchesterevening
api.id5-sync.com	ID5	IDENTITY	2026-04-01T08:24:09	https://api.id5-sync.com/analytics/535/id5-api-js
secure-assets.rubiconproject.com	Magnite (Rubicon)	ADVERTISING	2026-04-01T08:24:09	https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=infolinks&endpoint=us-east
eus.rubiconproject.com	Magnite (Rubicon)	ADVERTISING	2026-04-01T08:24:09	https://eus.rubiconproject.com/usync.html?p=infolinks&endpoint=us-east
secure.adnxs.com	Xandr (AppNexus)	ADVERTISING	2026-04-01T08:24:09	https://secure.adnxs.com/getuid?https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fan%2F%24UID%3Fch%3D69ccd62992cc7f000159538c%26chc%
token.rubiconproject.com	Magnite (Rubicon)	ADVERTISING	2026-04-01T08:24:09	https://token.rubiconproject.com/khaos.json?gdpr=0&khaos=MNFS3YMU-1T-J8HA
ads.pubmatic.com	PubMatic	ADVERTISING	2026-04-01T08:24:09	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=165473&gdpr=0&gdpr_consent=&us_privacy=1NNN&gpp=DBABBg~B

C.3 Full cookie inventory (with expiry, HttpOnly, Secure, SameSite) after Accept All

ℹ INFO

366 cookies in storage after Accept All (full metadata).

▶ Show all 366 rows

name	domain	expires_days	http_only	secure	same_site	classification
bounceClientVisit5877c	.bounceexchange.com	0.0	False	True	None	UNKNOWN
_li_ss	i.liadm.com	30.0	False	True	None	UNKNOWN
GS_GROUP	www.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
GS_REVENUE_LOC	www.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
GS_RESTRICT	www.manchestereveningnews.co.uk	session	False	False	Lax	UNKNOWN
pageCount	.manchestereveningnews.co.uk	0.0	False	False	Lax	UNKNOWN
_ga	.stmg-prod.mirror.co.uk	400.0	False	True	None	AD
UID	.scorecardresearch.com	390.0	False	True	None	UNKNOWN
XID	.scorecardresearch.com	390.0	False	True	None	UNKNOWN
TM_ga_clientId	www.manchestereveningnews.co.uk	400.0	False	True	None	UNKNOWN
usprivacy	.www.manchestereveningnews.co.uk	390.0	False	True	Lax	UNKNOWN
IABGPP_HDR_GppString	.www.manchestereveningnews.co.uk	390.0	False	True	Lax	UNKNOWN
DotMetrics.DomainCookie	www.manchestereveningnews.co.uk	365.0	False	True	Lax	UNKNOWN
DotMetrics.DeviceKey	.dotmetrics.net	365.0	False	True	None	UNKNOWN
DotMetrics.UniqueUserIdentityCookie	.dotmetrics.net	365.0	False	True	None	UNKNOWN
pbjs_sharedId	.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
pbjs_sharedId_cst	.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
TDID	.adsrvr.org	365.0	False	True	None	UNKNOWN
_pubcid	.manchestereveningnews.co.uk	180.0	False	False	Lax	UNKNOWN
_cc_id	.crwdcntrl.net	270.0	False	True	None	UNKNOWN
idw-fe-id	www.manchestereveningnews.co.uk	365.0	False	False	Lax	UNKNOWN
pbjs_unifiedID	www.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
pbjs_unifiedID_cst	www.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
_cc_id	.manchestereveningnews.co.uk	270.0	False	False	Lax	UNKNOWN
panoramaId_expiry	.manchestereveningnews.co.uk	1.0	False	False	Lax	UNKNOWN
DM_SitId899	www.manchestereveningnews.co.uk	session	False	True	Lax	UNKNOWN
DM_SitId899SecId5026	www.manchestereveningnews.co.uk	session	False	True	Lax	UNKNOWN
3pc_test	static.anonm.io	0.0	False	True	None	UNKNOWN
_lr_geo_location_state	www.manchestereveningnews.co.uk	2.0	False	False	Lax	UNKNOWN
_lr_geo_location	www.manchestereveningnews.co.uk	2.0	False	False	Lax	UNKNOWN
_li_dcdm_c	.manchestereveningnews.co.uk	session	False	False	Lax	UNKNOWN
_lc2_fpi	.manchestereveningnews.co.uk	400.0	False	False	Lax	UNKNOWN
_lc2_fpi_meta	.manchestereveningnews.co.uk	400.0	False	False	Lax	UNKNOWN
_pubcid_cst	.manchestereveningnews.co.uk	180.0	False	False	Lax	UNKNOWN
_lr_retry_request	www.manchestereveningnews.co.uk	0.0	False	False	Lax	UNKNOWN
_lr_env_src_ats	www.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
khaos	.rubiconproject.com	365.0	False	True	None	UNKNOWN
khaos_p	.rubiconproject.com	365.0	False	True	None	UNKNOWN
lidid	.liadm.com	400.0	False	True	None	UNKNOWN
receive-cookie-deprecation	.rubiconproject.com	90.0	True	True	None	AD
A3	.yahoo.com	365.2	True	True	None	UNKNOWN
bcookie	.linkedin.com	365.0	False	True	None	UNKNOWN
lidc	.linkedin.com	1.0	False	True	None	UNKNOWN
stx_user_id	.sharethrough.com	30.0	False	True	None	UNKNOWN
uids	.pbs.yahoo.com	182.0	True	True	None	UNKNOWN
__3idcontext	.cdnwidget.com	395.0	False	True	None	UNKNOWN
__idcontext	.manchestereveningnews.co.uk	395.0	False	True	None	UNKNOWN
rubiconUID	.ssp.wknd.ai	session	True	True	None	UNKNOWN
ljt_reader	.lijit.com	365.0	False	True	None	UNKNOWN
bito	.bidr.io	394.8	False	True	None	UNKNOWN
bitoIsSecure	.bidr.io	394.8	False	True	None	UNKNOWN
_sv3_7	.a-mo.net	1.0	True	True	None	UNKNOWN
amuid2	.a-mo.net	365.0	True	True	None	UNKNOWN
pamuid2	.a-mo.net	365.0	True	True	None	UNKNOWN
psd_amuid2	.sync.a-mo.net	365.0	True	True	None	UNKNOWN
sd_amuid2	.sync.a-mo.net	365.0	True	True	None	UNKNOWN
sub	account.anonymised.io	365.0	True	True	None	UNKNOWN
ad-privacy	.amazon-adsystem.com	400.0	True	True	None	UNKNOWN
KADUSERCOOKIE	.pubmatic.com	365.0	False	True	None	UNKNOWN
mc	.quantserve.com	396.0	False	True	None	UNKNOWN
rud	.rfihub.com	390.0	False	True	None	UNKNOWN
ruds	.rfihub.com	session	False	True	None	UNKNOWN
KRTBCOOKIE_452	.pubmatic.com	30.0	False	True	None	UNKNOWN
IDE	.doubleclick.net	400.0	True	True	None	AD
KRTBCOOKIE_377	.pubmatic.com	90.0	False	True	None	UNKNOWN
KRTBCOOKIE_18	.pubmatic.com	90.0	False	True	None	UNKNOWN
KRTBCOOKIE_153	.pubmatic.com	90.0	False	True	None	UNKNOWN
ssi	.sitescout.com	365.0	False	True	None	UNKNOWN
XANDR_PANID	.adnxs.com	90.0	False	True	None	UNKNOWN
uuid2	.adnxs.com	90.0	True	True	None	UNKNOWN
suid	.simpli.fi	366.0	False	True	None	UNKNOWN
uid	.turn.com	180.0	False	True	None	UNKNOWN
KRTBCOOKIE_57	.pubmatic.com	90.0	False	True	None	UNKNOWN
KRTBCOOKIE_188	.pubmatic.com	90.0	False	True	None	UNKNOWN
_uid	.fwmrm.net	180.0	False	True	None	UNKNOWN
KRTBCOOKIE_148	.pubmatic.com	30.0	False	True	None	UNKNOWN
demdex	.demdex.net	180.0	False	True	None	UNKNOWN
KRTBCOOKIE_22	.pubmatic.com	30.0	False	True	None	UNKNOWN
everest_g_v2	.everesttech.net	365.0	False	True	None	UNKNOWN
KRTBCOOKIE_279	.pubmatic.com	30.0	False	True	None	UNKNOWN
KRTBCOOKIE_218	.pubmatic.com	90.0	False	True	None	UNKNOWN
V	.contextweb.com	360.0	False	True	None	UNKNOWN
VP	.contextweb.com	360.0	False	True	None	UNKNOWN
INGRESSCOOKIE	bh.contextweb.com	session	True	True	None	UNKNOWN
dpm	.dpm.demdex.net	180.0	False	True	None	UNKNOWN
b	.blismedia.com	365.0	False	True	None	UNKNOWN
__uis	.go.sonobi.com	365.0	False	True	None	UNKNOWN
tuuid	.bidswitch.net	365.0	False	True	None	UNKNOWN
c	.bidswitch.net	365.0	False	True	None	UNKNOWN
tuuid_lu	.bidswitch.net	365.0	False	True	None	UNKNOWN
KRTBCOOKIE_32	.pubmatic.com	90.0	False	True	None	UNKNOWN
cu	.ipredictive.com	365.0	False	True	None	UNKNOWN
C	.adform.net	30.0	False	True	None	UNKNOWN
did	.pippio.com	365.0	False	True	None	UNKNOWN
didts	.pippio.com	365.0	False	True	None	UNKNOWN
nnls	.pippio.com	60.0	False	True	None	UNKNOWN
pxrc	.pippio.com	60.0	False	True	None	UNKNOWN
CDIUSER	.deepintent.com	400.0	False	True	None	UNKNOWN
UID	beacon.lynx.cognitivlabs.com	365.0	False	True	None	UNKNOWN
li_sugr	.linkedin.com	90.0	False	True	None	UNKNOWN
sa-user-id	sync.srv.stackadapt.com	365.0	False	True	None	UNKNOWN
sa-user-id	.srv.stackadapt.com	365.0	False	True	None	UNKNOWN
sa-user-id-v2	sync.srv.stackadapt.com	365.0	False	True	None	UNKNOWN
sa-user-id-v2	.srv.stackadapt.com	365.0	False	True	None	UNKNOWN
sa-user-id-v3	sync.srv.stackadapt.com	365.0	False	True	None	UNKNOWN
sa-user-id-v3	.srv.stackadapt.com	365.0	False	True	None	UNKNOWN
KRTBCOOKIE_860	.pubmatic.com	90.0	False	True	None	UNKNOWN
uid	.adform.net	60.0	False	True	None	UNKNOWN
zuuid	.sportradarserving.com	364.0	False	True	None	UNKNOWN
c	.sportradarserving.com	364.0	False	True	None	UNKNOWN
zuuid_lu	.sportradarserving.com	364.0	False	True	None	UNKNOWN
ad-id	.amazon-adsystem.com	275.0	True	True	None	UNKNOWN
KRTBCOOKIE_1278	.pubmatic.com	90.0	False	True	None	UNKNOWN
zuuid_k	.sportradarserving.com	364.0	False	True	None	UNKNOWN
zuuid_k_lu	.sportradarserving.com	364.0	False	True	None	UNKNOWN
ss	beacon.lynx.cognitivlabs.com	365.0	False	True	None	UNKNOWN
KRTBCOOKIE_466	.pubmatic.com	90.0	False	True	None	UNKNOWN
TapAd_TS	.tapad.com	60.0	False	True	None	UNKNOWN
TapAd_DID	.tapad.com	60.0	False	True	None	UNKNOWN
g	.creativecdn.com	365.0	False	True	None	UNKNOWN
ts	.creativecdn.com	365.0	False	True	None	UNKNOWN
OAU	.opera.com	365.0	False	True	None	UNKNOWN
instUid	.ingage.tech	0.1	True	True	None	UNKNOWN
KRTBCOOKIE_632	.pubmatic.com	30.0	False	True	None	UNKNOWN
KRTBCOOKIE_1323	.pubmatic.com	14.0	False	True	None	UNKNOWN
uid	.criteo.com	390.0	False	True	None	UNKNOWN
viewer_token	.csync.loopme.me	90.0	True	True	None	ESSENTIAL
vst	.gumgum.com	365.0	False	True	None	UNKNOWN
i	.openx.net	365.0	False	True	None	UNKNOWN
CIPAShown	www.manchestereveningnews.co.uk	365.0	False	False	Lax	UNKNOWN
_cb	.manchestereveningnews.co.uk	395.0	False	True	Lax	UNKNOWN
_chartbeat2	.manchestereveningnews.co.uk	395.0	False	True	Lax	UNKNOWN
_cb_svref	.manchestereveningnews.co.uk	0.0	False	True	Lax	UNKNOWN
csuuid	.primis.tech	25.0	False	True	None	UNKNOWN
_ain_cid	www.manchestereveningnews.co.uk	0.0	False	True	Strict	UNKNOWN
_ain_uid	www.manchestereveningnews.co.uk	180.0	False	True	Strict	UNKNOWN
lotame_domain_check	.manchestereveningnews.co.uk	0.0	False	False	Lax	UNKNOWN
_ttp	.tiktok.com	390.0	False	True	None	UNKNOWN
_twpid	.manchestereveningnews.co.uk	390.0	False	True	Strict	UNKNOWN
_cc_dc	.crwdcntrl.net	270.0	False	True	None	UNKNOWN
_cc_cc	.crwdcntrl.net	270.0	False	True	None	UNKNOWN
_cc_aud	.crwdcntrl.net	270.0	False	True	None	UNKNOWN
_t_tests	.manchestereveningnews.co.uk	0.0	False	True	Lax	UNKNOWN
muc_ads	.t.co	400.0	False	True	None	UNKNOWN
guest_id_marketing	.twitter.com	400.0	False	True	None	UNKNOWN
guest_id_ads	.twitter.com	400.0	False	True	None	UNKNOWN
personalization_id	.twitter.com	400.0	False	True	None	UNKNOWN
guest_id	.twitter.com	400.0	False	True	None	UNKNOWN
_fbp	.manchestereveningnews.co.uk	90.0	False	False	Lax	AD
_tt_enable_cookie	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
_ttp	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
AMP_MKTG_19d4e52dbb	.manchestereveningnews.co.uk	365.0	False	False	Lax	AD
AMP_19d4e52dbb	.manchestereveningnews.co.uk	365.0	False	False	Lax	AD
AMP_MKTG_d8c8a103d7	.manchestereveningnews.co.uk	365.0	False	False	Lax	AD
AMP_d8c8a103d7	.manchestereveningnews.co.uk	365.0	False	False	Lax	AD
ttcsid	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
ttcsid_C4J0JGS17T561FR1JQ0G	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
TiPMix	.c.cintnetworks.com	0.0	True	True	None	UNKNOWN
x-ms-routing-name	.c.cintnetworks.com	0.0	True	True	None	UNKNOWN
_iiq_fdata	www.manchestereveningnews.co.uk	session	False	False	Lax	UNKNOWN
IQver	.intentiq.com	400.0	False	True	None	UNKNOWN
intentIQCDate	.intentiq.com	400.0	False	True	None	UNKNOWN
intentIQ	.intentiq.com	400.0	False	True	None	UNKNOWN
CMID	.casalemedia.com	365.0	False	True	None	UNKNOWN
CMPS	.casalemedia.com	90.0	False	True	None	UNKNOWN
CMPRO	.casalemedia.com	90.0	False	True	None	UNKNOWN
usp_status	.media.net	185.0	False	True	None	ESSENTIAL
data-pri	.media.net	365.0	False	True	None	UNKNOWN
tvid	.tremorhub.com	365.2	False	True	None	UNKNOWN
tluidp	.3lift.com	90.0	False	True	None	UNKNOWN
tluid	.3lift.com	90.0	False	True	None	UNKNOWN
pbjs-unifiedid	www.manchestereveningnews.co.uk	60.0	False	False	Lax	UNKNOWN
pbjs-unifiedid_cst	www.manchestereveningnews.co.uk	60.0	False	False	Lax	UNKNOWN
pbjs-unifiedid_last	www.manchestereveningnews.co.uk	60.0	False	False	Lax	UNKNOWN
pid	.smartadserver.com	90.0	False	True	None	UNKNOWN
tvssa	.tremorhub.com	5.0	False	True	None	UNKNOWN
SyncRTB4	.pubmatic.com	90.0	False	True	None	UNKNOWN
cto_bundle	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
cto_bidid	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
_sv3_17	.a-mo.net	1.0	True	True	None	UNKNOWN
psd_amuid2	.prebid.a-mo.net	365.0	True	True	None	UNKNOWN
sd_amuid2	.prebid.a-mo.net	365.0	True	True	None	UNKNOWN
mxpim	.mxptint.net	400.0	False	True	None	UNKNOWN
KRTBCOOKIE_52	.pubmatic.com	30.0	False	True	None	UNKNOWN
PugT	.pubmatic.com	30.0	False	True	None	UNKNOWN
uuid	.mathtag.com	393.0	False	True	None	UNKNOWN
ab	.agkn.com	365.0	False	True	None	UNKNOWN
KRTBCOOKIE_27	.pubmatic.com	90.0	False	True	None	UNKNOWN
KRTBCOOKIE_391	.pubmatic.com	30.0	False	True	None	UNKNOWN
muidn	.mgid.com	365.0	False	True	None	AD
SSPZ	.adkernel.com	session	False	True	None	UNKNOWN
DSP2F_100	.adkernel.com	session	False	True	None	UNKNOWN
ADGRX_UID	.adgrx.com	395.0	True	True	None	UNKNOWN
SEUNCY	.semasio.net	365.0	True	True	None	UNKNOWN
ADGRX_CM_PUBMATIC_BRIDGED	.adgrx.com	1.0	True	True	None	UNKNOWN
vdz_sync	.kueezrtb.com	30.0	False	True	None	UNKNOWN
mg_sync	cm.mgid.com	30.0	False	True	None	UNKNOWN
KRTBCOOKIE_1003	.pubmatic.com	90.0	False	True	None	UNKNOWN
KRTBCOOKIE_1513	.pubmatic.com	90.0	False	True	None	UNKNOWN
obuid	.outbrain.com	90.0	False	True	None	UNKNOWN
ADKUID	.adkernel.com	30.0	False	True	None	UNKNOWN
x	.advolve.io	365.0	True	True	None	UNKNOWN
iq_u_key	.iqzone.com	14.0	False	True	None	UNKNOWN
KRTBCOOKIE_1465	.pubmatic.com	90.0	False	True	None	UNKNOWN
KRTBCOOKIE_1515	.pubmatic.com	90.0	False	True	None	UNKNOWN
KRTBCOOKIE_1466	.pubmatic.com	14.0	False	True	None	UNKNOWN
LoudEcho	.loudecho.ai	90.0	True	True	None	UNKNOWN
KRTBCOOKIE_1540	.pubmatic.com	90.0	False	True	None	UNKNOWN
TEST-COOKIE	.inmobi.com	365.0	False	True	None	UNKNOWN
otad_key	.ottadvisors.com	14.0	False	True	None	UNKNOWN
otad_red	.ottadvisors.com	14.0	False	True	None	UNKNOWN
KRTBCOOKIE_945	.pubmatic.com	90.0	False	True	None	UNKNOWN
iid	.inmobi.com	365.0	False	True	None	UNKNOWN
_auid	.c.appier.net	365.0	True	True	None	UNKNOWN
_rxuuid	.targeting.unrulymedia.com	365.0	True	True	None	UNKNOWN
KRTBCOOKIE_904	.pubmatic.com	30.0	False	True	None	UNKNOWN
chk	sync.vistarsagency.com	session	False	True	None	UNKNOWN
pdid	.richaudience.com	30.0	True	True	None	UNKNOWN
pid	.vistarsagency.com	400.0	False	True	None	UNKNOWN
ayl_visitor	.omnitagjs.com	30.0	False	True	None	UNKNOWN
ljtrtbexp	.lijit.com	365.0	False	True	None	UNKNOWN
presage-ssp	.presage.io	183.0	True	True	None	UNKNOWN
presage-freshness	.presage.io	7.0	True	True	None	UNKNOWN
wrvUserID	.minutemedia-prebid.com	30.0	True	True	None	UNKNOWN
wrvUserID	.yellowblue.io	30.0	True	True	None	UNKNOWN
rlas3	.rlcdn.com	365.0	False	True	None	UNKNOWN
UTID	.undertone.com	365.0	False	True	None	UNKNOWN
UTID_ENC	.undertone.com	365.0	False	True	None	UNKNOWN
UID_EXT_46	.undertone.com	365.2	False	True	None	UNKNOWN
ccpa	.contextweb.com	30.0	False	True	None	UNKNOWN
yieldmo_id	.yieldmo.com	365.0	False	True	None	UNKNOWN
st_uid	.seedtag.com	360.0	False	True	None	UNKNOWN
st_usi	.seedtag.com	session	False	True	None	UNKNOWN
visitor-id	.media.net	365.0	False	True	None	UNKNOWN
data-pbs	.media.net	365.0	False	True	None	UNKNOWN
visitor	.postrelease.com	365.0	False	True	None	UNKNOWN
status	.postrelease.com	365.0	False	True	None	UNKNOWN
tuuid	.company-target.com	396.0	True	True	None	UNKNOWN
tuuid_lu	.company-target.com	396.0	True	True	None	UNKNOWN
uid	.emxdgt.com	90.0	True	True	None	UNKNOWN
pb_rtb_ev	.contextweb.com	365.0	False	True	None	UNKNOWN
pb_rtb_ev_part	.contextweb.com	365.0	False	True	None	UNKNOWN
33x_ps	.33across.com	365.0	False	True	None	UNKNOWN
uids	.prebid-server.rubiconproject.com	14.0	False	True	None	UNKNOWN
did	syncingbridge.com	21.0	True	True	None	UNKNOWN
uid	syncingbridge.com	30.0	True	True	None	UNKNOWN
ssplink	syncingbridge.com	0.0	True	True	None	UNKNOWN
gdpr	syncingbridge.com	0.0	True	True	None	UNKNOWN
c	.mfadsrvr.com	365.0	False	True	None	UNKNOWN
tuuid_lu	.mfadsrvr.com	365.0	False	True	None	UNKNOWN
tuuid	.mfadsrvr.com	365.0	False	True	None	UNKNOWN
iq_r_key	.iqzone.com	14.0	False	True	None	UNKNOWN
pxrc	.rlcdn.com	60.0	False	True	None	UNKNOWN
zeta-ssp-user-id	.disqus.com	365.0	False	True	None	UNKNOWN
SCMrise	.smaato.net	21.0	False	True	None	UNKNOWN
SCMinmobi	.smaato.net	21.0	False	True	None	UNKNOWN
SCM	.smaato.net	21.0	False	True	None	UNKNOWN
SCM1124	.smaato.net	21.0	False	True	None	UNKNOWN
SCMrktn	.smaato.net	21.0	False	True	None	UNKNOWN
dc	.betweendigital.com	365.0	False	True	None	UNKNOWN
tuuid	.betweendigital.com	365.0	False	True	None	UNKNOWN
ss	.betweendigital.com	365.0	False	True	None	UNKNOWN
vdz_sync	.cootlogix.com	30.0	False	True	None	UNKNOWN
uid	measureadv.com	30.0	True	True	None	UNKNOWN
zync-uuid	.rezync.com	390.0	False	True	None	UNKNOWN
euds	.rfihub.com	session	False	True	None	UNKNOWN
equativ	.pxl.iqm.com	30.0	False	True	None	UNKNOWN
iqm.retarget.uid	.pxl.iqm.com	15.0	False	True	None	UNKNOWN
new	syncingbridge.com	21.0	True	True	None	UNKNOWN
Rp	.rmp.rakuten.com	30.0	False	True	None	UNKNOWN
ssplink	measureadv.com	0.0	True	True	None	UNKNOWN
gdpr	measureadv.com	0.0	True	True	None	UNKNOWN
sd-session-id	live.rezync.com	390.0	True	True	None	ESSENTIAL
lluid	.ortb.net	30.0	False	True	None	UNKNOWN
llum	.ortb.net	365.0	False	True	None	UNKNOWN
csync	.smartadserver.com	30.0	False	True	None	UNKNOWN
_nauid	.nrich.ai	400.0	False	True	None	UNKNOWN
tuuid	.360yield.com	90.0	True	True	None	UNKNOWN
tuuid_lu	.360yield.com	90.0	True	True	None	UNKNOWN
pili_key	.pinklion.io	14.0	False	True	None	UNKNOWN
pili_red	.pinklion.io	14.0	False	True	None	UNKNOWN
SERVERID	.eyeota.net	0.0	True	True	None	UNKNOWN
ut	.betweendigital.com	365.0	False	True	None	UNKNOWN
s-81	.pmbmonetize.live	365.0	True	True	None	UNKNOWN
pd	.openx.net	15.0	False	True	None	UNKNOWN
_rxuuid	.1rx.io	365.0	True	True	None	UNKNOWN
CDIPARTNERS	.deepintent.com	400.0	False	True	None	UNKNOWN
TestIfCookieP	.smartadserver.com	365.0	False	True	None	UNKNOWN
pbw	.smartadserver.com	365.0	False	True	None	UNKNOWN
pd_key	.playdigo.com	14.0	False	True	None	UNKNOWN
pd_red	.playdigo.com	14.0	False	True	None	UNKNOWN
tuuid	.creative-serving.com	360.0	False	True	None	UNKNOWN
c	.creative-serving.com	360.0	False	True	None	UNKNOWN
tuuid_lu	.creative-serving.com	360.0	False	True	None	UNKNOWN
ym_user_cookie	.ymmobi.com	360.0	False	True	None	UNKNOWN
__194_cid	.bfmio.com	365.0	False	True	None	UNKNOWN
xeadiu	.pmbmonetize.live	365.0	True	True	None	UNKNOWN
_ssuma	.sitescout.com	30.0	False	True	None	UNKNOWN
admtr	.admanmedia.com	7.0	False	True	None	UNKNOWN
ac_r	.admanmedia.com	7.0	False	True	None	UNKNOWN
__168_cid	.bfmio.com	365.0	False	True	None	UNKNOWN
__106_cid	.bfmio.com	365.0	False	True	None	UNKNOWN
__141_cid	.bfmio.com	365.0	False	True	None	UNKNOWN
__141_exp	.bfmio.com	7.0	False	True	None	UNKNOWN
__io_cid	.bfmio.com	365.0	False	True	None	UNKNOWN
__157_cid	.bfmio.com	365.0	False	True	None	UNKNOWN
__157_exp	.bfmio.com	7.0	False	True	None	UNKNOWN
__eDId	.eskimi.com	30.0	False	True	None	UNKNOWN
__181_cid	.bfmio.com	365.0	False	True	None	UNKNOWN
TapAd_3WAY_SYNCS	.tapad.com	60.0	False	True	None	UNKNOWN
clid	.media6degrees.com	180.0	False	True	None	UNKNOWN
acs	.media6degrees.com	180.0	False	True	None	UNKNOWN
pid	.xplosion.de	365.0	False	True	None	UNKNOWN
pid_short	.xplosion.de	365.0	False	True	None	UNKNOWN
pid_signature	.xplosion.de	365.0	False	True	None	UNKNOWN
ep	.xplosion.de	365.0	False	True	None	UNKNOWN
SPugT	.pubmatic.com	30.0	False	True	None	UNKNOWN
__eDSync	.eskimi.com	90.0	False	True	None	UNKNOWN
DPSync4	.pubmatic.com	90.0	False	True	None	UNKNOWN
pubsyncexp	.ads.pubmatic.com	1.0	False	True	None	UNKNOWN
audit_p	.rubiconproject.com	365.0	False	True	None	UNKNOWN
audit	.rubiconproject.com	365.0	False	True	None	UNKNOWN
st_cs	.seedtag.com	360.0	False	True	None	UNKNOWN
st_csd	.seedtag.com	360.0	False	True	None	UNKNOWN
ids	measureadv.com	0.0	True	True	None	UNKNOWN
did	measureadv.com	21.0	True	True	None	UNKNOWN
new	measureadv.com	21.0	True	True	None	UNKNOWN
id5	.id5-sync.com	90.0	False	True	None	UNKNOWN
IMRID	.imrworldwide.com	390.0	False	True	None	UNKNOWN
TDCPM	.adsrvr.org	365.0	False	True	None	UNKNOWN
um	.360yield.com	90.0	True	True	None	UNKNOWN
umeh	.360yield.com	90.0	True	True	None	UNKNOWN
mc	.thrtle.com	200.0	False	True	None	UNKNOWN
sc	.thrtle.com	200.0	False	True	None	UNKNOWN
__bfio_sync	.bfmio.com	3.0	False	True	None	UNKNOWN
IQPData	.intentiq.com	400.0	False	True	None	UNKNOWN
sw_user_params_infos	.smilewanted.com	365.2	True	True	None	UNKNOWN
3pi	.id5-sync.com	90.0	False	True	None	UNKNOWN
_sharedid	.manchestereveningnews.co.uk	365.0	False	False	Lax	UNKNOWN
_sharedid_cst	.manchestereveningnews.co.uk	365.0	False	False	Lax	UNKNOWN
receive-cookie-deprecation	.casalemedia.com	365.0	True	True	None	AD
receive-cookie-deprecation	.3lift.com	90.0	True	True	None	AD
DotomiTest	.dotomi.com	0.0	False	True	None	UNKNOWN
IDSYNC	.analytics.yahoo.com	365.0	False	True	None	UNKNOWN
ANON_ID	.tribalfusion.com	90.0	False	True	None	UNKNOWN
ADKUID	.delivrdsp.ai	30.0	False	True	None	UNKNOWN
__gads	.manchestereveningnews.co.uk	390.0	False	True	None	AD
__gpi	.manchestereveningnews.co.uk	390.0	False	True	None	AD
__eoi	.manchestereveningnews.co.uk	180.0	False	True	None	AD
ar_debug	.doubleclick.net	30.0	True	True	None	UNKNOWN
logglytrackingsession	www.manchestereveningnews.co.uk	session	False	False	Lax	ESSENTIAL
ssh	.mfadsrvr.com	365.0	False	True	None	UNKNOWN
cuid	.infolinks.com	400.0	False	True	None	UNKNOWN
gob_cookie	.inmobi.com	365.0	False	True	None	UNKNOWN
google_push	.bidswitch.net	0.0	False	True	None	UNKNOWN
ADK_EX_11	.adkernel.com	14.0	False	True	None	UNKNOWN
cto_bundle	.criteo.com	390.0	False	True	None	UNKNOWN
GLOBALID	.bttrack.com	90.0	False	True	None	UNKNOWN
HAPLB3G	.go.sonobi.com	session	False	True	None	UNKNOWN
flashtalkingad1	.flashtalking.com	395.4	False	True	None	UNKNOWN
mlcwc	.moloco.com	365.0	False	True	None	UNKNOWN
sp	.quantserve.com	90.0	False	True	None	UNKNOWN
chkChromeAb67Sec	.pubmatic.com	90.0	False	True	None	UNKNOWN
ipc	.pubmatic.com	0.0	False	True	None	UNKNOWN
pi	.pubmatic.com	1.0	False	True	None	UNKNOWN
eud	.rfihub.com	390.0	False	True	None	UNKNOWN

C.4 Tracker JS globals active after Accept All (baseline)

ℹ INFO

Globals defined after consent: ['gtag', 'dataLayer', 'google_tag_manager', 'fbq', '_fbq', 'twq', 'twttr', 'amplitude', 'ttq']

▶ Show all 9 rows

global	type
gtag	function
dataLayer	__defined_object__
google_tag_manager	__defined_object__
fbq	function
_fbq	function
twq	function
twttr	__defined_object__
amplitude	__defined_object__
ttq	__defined_object__

D. Decline Non-Essential Consent 1 PASS 0 MANUAL

D.4 Reject requires no more clicks than Accept (EDPB symmetry)

✓ PASS

Accept and Reject both require 1 click(s). Symmetric.

accept clicks: 1 · reject clicks: 1 · extra clicks to reject: 0 · reject required manage panel: True

E. Network Request Verification 1 FAIL 0 PASS 3 MANUAL

E.1 Network requests after reject-all

☐ MANUAL

No post-reject phase detected in this HAR.

E.2 Network requests after reject-all

☐ MANUAL

No post-reject phase detected in this HAR.

E.3 Network requests after reject-all

☐ MANUAL

No post-reject phase detected in this HAR.

E.4 No tracking activity on subpages after reject-all

✗ FAIL

Tracking activity detected on 1 subpage(s) after reject.

page	global	phase
https://www.manchestereveningnews.co.uk/news/	gtag	subpage_1
https://www.manchestereveningnews.co.uk/news/	google_tag_manager	subpage_1
https://www.manchestereveningnews.co.uk/news/	amplitude	subpage_1
https://www.manchestereveningnews.co.uk/news/	['REACH_CMP_READY', 'AMP_remote_config_68994201ba', 'AMP_unsent_e5d5538425', '_li_duid', 'AMP_unsent_68994201ba', 'AMP_remote_config_e5d5538425', 'AMP_PAGE_VIEW']	subpage_1

F. Cookie Verification (Third-Party) 1 FAIL 1 PASS 1 MANUAL

F.1 No non-essential cookies after reject-all

☐ MANUAL

No post-reject phase detected.

F.2 document.cookie contains only essential cookies post-reject

✓ PASS

No advertising cookies visible in document.cookie post-reject.

doc cookie snippet: GS_GROUP=2; GS_REVENUE_LOC=1; GS_RESTRICT=0; pageCount=0; usprivacy=1NNN; IABGPP_HDR_GppString=DBABBg~BUoAAAKY.QA; DotMetrics.DomainCookie={"dc":"db130f16-116d-42bc-a243-8714617eaf47","ts":1775031852982}; pbjs_sharedId=624bb065-23af-4a57-8b7f-3ab66db96ad2; pbjs_sharedId_cst=FpRHBg%3D%3D; TM_ga_clientId=1475422037.1775031853; _pubcid=6e96cd7e-2ea2-4e4f-90d7-b174a621bc21; pbjs_unifiedID=%7B%22TDID%2

F.3 No tracking identifiers in web storage post-reject

✗ FAIL

7 tracking storage key(s) still present post-reject.

key	type	value
REACH_CMP_READY	localStorage	false
AMP_remote_config_68994201ba	localStorage	{"remoteConfig":{"configs":{"diagnostics":{"browserSDK":{"sampleRate":0.02}},"se
AMP_unsent_e5d5538425	localStorage	[]
_li_duid	localStorage	f0af49eb415c--01kn4298z90kjyg8h08gmcs4yx
AMP_unsent_68994201ba	localStorage	[]
AMP_remote_config_e5d5538425	localStorage	{"remoteConfig":{"configs":{"diagnostics":{"browserSDK":{"sampleRate":0.02}},"se
AMP_PAGE_VIEW	sessionStorage	{"pageViewId":"8a02233b-621c-4f88-a8a7-9ea1f53ff0bd"}

Recommendation: On consent withdrawal, the CMP or page JS must clear all tracking-related localStorage and sessionStorage entries. Implement a consent-withdrawal handler that enumerates and removes known tracking keys.

G. First-Party Cookie Classification 4 FAIL 1 PASS 1 MANUAL

G.1 Complete first-party cookie inventory with full metadata

ℹ INFO

58 first-party cookies in Storage after Accept All.

▶ Show all 58 rows

name	domain	expires_days	http_only	secure	same_site	classification
GS_GROUP	www.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
GS_REVENUE_LOC	www.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
GS_RESTRICT	www.manchestereveningnews.co.uk	session	False	False	Lax	UNKNOWN
pageCount	.manchestereveningnews.co.uk	0.0	False	False	Lax	UNKNOWN
_ga	.stmg-prod.mirror.co.uk	400.0	False	True	None	AD
TM_ga_clientId	www.manchestereveningnews.co.uk	400.0	False	True	None	UNKNOWN
usprivacy	.www.manchestereveningnews.co.uk	390.0	False	True	Lax	UNKNOWN
IABGPP_HDR_GppString	.www.manchestereveningnews.co.uk	390.0	False	True	Lax	UNKNOWN
DotMetrics.DomainCookie	www.manchestereveningnews.co.uk	365.0	False	True	Lax	UNKNOWN
pbjs_sharedId	.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
pbjs_sharedId_cst	.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
_pubcid	.manchestereveningnews.co.uk	180.0	False	False	Lax	UNKNOWN
idw-fe-id	www.manchestereveningnews.co.uk	365.0	False	False	Lax	UNKNOWN
pbjs_unifiedID	www.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
pbjs_unifiedID_cst	www.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
_cc_id	.manchestereveningnews.co.uk	270.0	False	False	Lax	UNKNOWN
panoramaId_expiry	.manchestereveningnews.co.uk	1.0	False	False	Lax	UNKNOWN
DM_SitId899	www.manchestereveningnews.co.uk	session	False	True	Lax	UNKNOWN
DM_SitId899SecId5026	www.manchestereveningnews.co.uk	session	False	True	Lax	UNKNOWN
_lr_geo_location_state	www.manchestereveningnews.co.uk	2.0	False	False	Lax	UNKNOWN
_lr_geo_location	www.manchestereveningnews.co.uk	2.0	False	False	Lax	UNKNOWN
_li_dcdm_c	.manchestereveningnews.co.uk	session	False	False	Lax	UNKNOWN
_lc2_fpi	.manchestereveningnews.co.uk	400.0	False	False	Lax	UNKNOWN
_lc2_fpi_meta	.manchestereveningnews.co.uk	400.0	False	False	Lax	UNKNOWN
_pubcid_cst	.manchestereveningnews.co.uk	180.0	False	False	Lax	UNKNOWN
_lr_retry_request	www.manchestereveningnews.co.uk	0.0	False	False	Lax	UNKNOWN
_lr_env_src_ats	www.manchestereveningnews.co.uk	30.0	False	False	Lax	UNKNOWN
__idcontext	.manchestereveningnews.co.uk	395.0	False	True	None	UNKNOWN
CIPAShown	www.manchestereveningnews.co.uk	365.0	False	False	Lax	UNKNOWN
_cb	.manchestereveningnews.co.uk	395.0	False	True	Lax	UNKNOWN
_chartbeat2	.manchestereveningnews.co.uk	395.0	False	True	Lax	UNKNOWN
_cb_svref	.manchestereveningnews.co.uk	0.0	False	True	Lax	UNKNOWN
_ain_cid	www.manchestereveningnews.co.uk	0.0	False	True	Strict	UNKNOWN
_ain_uid	www.manchestereveningnews.co.uk	180.0	False	True	Strict	UNKNOWN
lotame_domain_check	.manchestereveningnews.co.uk	0.0	False	False	Lax	UNKNOWN
_twpid	.manchestereveningnews.co.uk	390.0	False	True	Strict	UNKNOWN
_t_tests	.manchestereveningnews.co.uk	0.0	False	True	Lax	UNKNOWN
_fbp	.manchestereveningnews.co.uk	90.0	False	False	Lax	AD
_tt_enable_cookie	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
_ttp	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
AMP_MKTG_19d4e52dbb	.manchestereveningnews.co.uk	365.0	False	False	Lax	AD
AMP_19d4e52dbb	.manchestereveningnews.co.uk	365.0	False	False	Lax	AD
AMP_MKTG_d8c8a103d7	.manchestereveningnews.co.uk	365.0	False	False	Lax	AD
AMP_d8c8a103d7	.manchestereveningnews.co.uk	365.0	False	False	Lax	AD
ttcsid	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
ttcsid_C4J0JGS17T561FR1JQ0G	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
_iiq_fdata	www.manchestereveningnews.co.uk	session	False	False	Lax	UNKNOWN
pbjs-unifiedid	www.manchestereveningnews.co.uk	60.0	False	False	Lax	UNKNOWN
pbjs-unifiedid_cst	www.manchestereveningnews.co.uk	60.0	False	False	Lax	UNKNOWN
pbjs-unifiedid_last	www.manchestereveningnews.co.uk	60.0	False	False	Lax	UNKNOWN
cto_bundle	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
cto_bidid	.manchestereveningnews.co.uk	390.0	False	False	Lax	UNKNOWN
_sharedid	.manchestereveningnews.co.uk	365.0	False	False	Lax	UNKNOWN
_sharedid_cst	.manchestereveningnews.co.uk	365.0	False	False	Lax	UNKNOWN
__gads	.manchestereveningnews.co.uk	390.0	False	True	None	AD
__gpi	.manchestereveningnews.co.uk	390.0	False	True	None	AD
__eoi	.manchestereveningnews.co.uk	180.0	False	True	None	AD
logglytrackingsession	www.manchestereveningnews.co.uk	session	False	False	Lax	ESSENTIAL

G.2 All observed cookies declared in cookie policy

✗ FAIL

340 cookie(s) observed but not found in cookie policy at https://www.manchestereveningnews.co.uk/cookie-policy.

▶ Show all 30 rows

cookie_name	status
__141_exp	observed but not in cookie policy
visitor-id	observed but not in cookie policy
DPSync4	observed but not in cookie policy
c	observed but not in cookie policy
_sharedid_cst	observed but not in cookie policy
iq_u_key	observed but not in cookie policy
visitor	observed but not in cookie policy
cto_bundle	observed but not in cookie policy
KRTBCOOKIE_27	observed but not in cookie policy
TDID	observed but not in cookie policy
pbjs_unifiedID	observed but not in cookie policy
guest_id_marketing	observed but not in cookie policy
KRTBCOOKIE_1540	observed but not in cookie policy
guest_id	observed but not in cookie policy
SCM	observed but not in cookie policy
ids	observed but not in cookie policy
VP	observed but not in cookie policy
UID	observed but not in cookie policy
clid	observed but not in cookie policy
CMPS	observed but not in cookie policy
_cc_aud	observed but not in cookie policy
pd	observed but not in cookie policy
KRTBCOOKIE_57	observed but not in cookie policy
GS_RESTRICT	observed but not in cookie policy
zuuid	observed but not in cookie policy
_lr_geo_location	observed but not in cookie policy
TapAd_DID	observed but not in cookie policy
pili_key	observed but not in cookie policy
bitoIsSecure	observed but not in cookie policy
i	observed but not in cookie policy

G.3 Strictly necessary two-part test

☐ MANUAL

Set ANTHROPIC_API_KEY environment variable to enable AI-assisted classification. Manual review required against cookie policy.

G.4 Server-side analytics/ad cookies identified in Set-Cookie headers

✗ FAIL

14 advertising cookie(s) set via HTTP Set-Cookie response header. These bypass client-side CMP controls.

▶ Show all 14 rows

cookie_name	set_by_domain	full_header	timestamp	phase	note
_ga	stmg-prod.mirror.co.uk	_ga=GA1.4.1475422037.1775031853;domain=stmg-prod.mirror.co.uk;path=/;expires=Fri, 31 Mar 2028 08:24:12 GMT;Secure;SameSite=None;	2026-04-01T08:24:12	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
receive-cookie-deprecation	pixel-us-east.rubiconproject.com	receive-cookie-deprecation=1; Max-Age=7776000; Expires=Tue, 30 Jun 2026 08:24:14 GMT; Path=/; Domain=.rubiconproject.com; Secure; HTTPOnly; SameSite=N	2026-04-01T08:24:14	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
receive-cookie-deprecation	pixel.rubiconproject.com	receive-cookie-deprecation=1; Max-Age=7776000; Expires=Tue, 30 Jun 2026 08:24:14 GMT; Path=/; Domain=.rubiconproject.com; Secure; HTTPOnly; SameSite=N	2026-04-01T08:24:14	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
receive-cookie-deprecation	pixel.rubiconproject.com	receive-cookie-deprecation=1; Max-Age=7776000; Expires=Tue, 30 Jun 2026 08:24:14 GMT; Path=/; Domain=.rubiconproject.com; Secure; HTTPOnly; SameSite=N	2026-04-01T08:24:14	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
receive-cookie-deprecation	pixel.rubiconproject.com	receive-cookie-deprecation=1; Max-Age=7776000; Expires=Tue, 30 Jun 2026 08:24:14 GMT; Path=/; Domain=.rubiconproject.com; Secure; HTTPOnly; SameSite=N	2026-04-01T08:24:14	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
receive-cookie-deprecation	pixel.rubiconproject.com	receive-cookie-deprecation=1; Max-Age=7776000; Expires=Tue, 30 Jun 2026 08:24:14 GMT; Path=/; Domain=.rubiconproject.com; Secure; HTTPOnly; SameSite=N	2026-04-01T08:24:14	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
receive-cookie-deprecation	pixel.rubiconproject.com	receive-cookie-deprecation=1; Max-Age=7776000; Expires=Tue, 30 Jun 2026 08:24:14 GMT; Path=/; Domain=.rubiconproject.com; Secure; HTTPOnly; SameSite=N	2026-04-01T08:24:14	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
receive-cookie-deprecation	pixel.rubiconproject.com	receive-cookie-deprecation=1; Max-Age=7776000; Expires=Tue, 30 Jun 2026 08:24:14 GMT; Path=/; Domain=.rubiconproject.com; Secure; HTTPOnly; SameSite=N	2026-04-01T08:24:14	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
receive-cookie-deprecation	pixel.rubiconproject.com	receive-cookie-deprecation=1; Max-Age=7776000; Expires=Tue, 30 Jun 2026 08:24:14 GMT; Path=/; Domain=.rubiconproject.com; Secure; HTTPOnly; SameSite=N	2026-04-01T08:24:14	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
receive-cookie-deprecation	pixel.rubiconproject.com	receive-cookie-deprecation=1; Max-Age=7776000; Expires=Tue, 30 Jun 2026 08:24:14 GMT; Path=/; Domain=.rubiconproject.com; Secure; HTTPOnly; SameSite=N	2026-04-01T08:24:14	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
IDE	cm.g.doubleclick.net	IDE=AHWqTUm6TIYMsCCXhOKE9vriKav35MRUe54PW-sCEOZP0D0M5oHqi0EMQw97UvzSGTM; expires=Fri, 31-Mar-2028 08:24:14 GMT; path=/; domain=.doubleclick.net; Secur	2026-04-01T08:24:14	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
muidn	cm.mgid.com	muidn=q31IE0p3e9o1; expires=Thu, 01 Apr 2027 08:24:44 GMT; domain=.mgid.com; path=/; secure; SameSite=None	2026-04-01T08:24:44	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
muidn	cm.mgid.com	muidn=q31IE0p3e9o1; expires=Thu, 01 Apr 2027 08:24:44 GMT; domain=.mgid.com; path=/; secure; SameSite=None	2026-04-01T08:24:44	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP
receive-cookie-deprecation	pixel.rubiconproject.com	receive-cookie-deprecation=1; Max-Age=7776000; Expires=Tue, 30 Jun 2026 08:24:44 GMT; Path=/; Domain=.rubiconproject.com; Secure; HTTPOnly; SameSite=N	2026-04-01T08:24:44	pre_consent	Server-set (HTTP response header) — bypasses client-side CMP

Recommendation: Server-side Set-Cookie headers for advertising/analytics identifiers require backend consent-gating. The server must read the CMP consent signal (e.g. the euconsent-v2 cookie) before setting tracking cookies. Consider implementing server-side consent enforcement middleware.

G.5 No CNAME cloaking detected (first-party subdomains resolving to tracker infrastructure)

✓ PASS

No CNAME cloaking detected across 9 subdomain(s).

▶ Show all 9 rows

subdomain	cname_target	is_tracker	vendor	error
premium.express.co.uk	(no CNAME / A record only)	False	None	None
manchestereveningnews.co.uk	(no CNAME / A record only)	False	None	None
www.mirror.co.uk	(no CNAME / A record only)	False	None	None
i2-prod.walesonline.co.uk	(no CNAME / A record only)	False	None	None
s2-prod.manchestereveningnews.co.uk	(no CNAME / A record only)	False	None	None
i2-prod.manchestereveningnews.co.uk	(no CNAME / A record only)	False	None	None
stmg-prod.mirror.co.uk	(no CNAME / A record only)	False	None	None
i2-prod.mirror.co.uk	(no CNAME / A record only)	False	None	None
www.reachgeneric.co.uk	(no CNAME / A record only)	False	None	None

G.6 Non-essential first-party cookies absent after reject-all

✗ FAIL

4 advertising/analytics cookie(s) present in both baseline and post-reject storage.

cookie_name
IDE
_ga
muidn
receive-cookie-deprecation

G.9 No tracking keys in first-party localStorage/sessionStorage post-reject

✗ FAIL

7 tracking storage key(s) in first-party web storage post-reject.

key	type	value
REACH_CMP_READY	localStorage	false
AMP_remote_config_68994201ba	localStorage	{"remoteConfig":{"configs":{"diagnostics":{"browserSDK":{"sampleRate":0.02}},"se
AMP_unsent_e5d5538425	localStorage	[]
_li_duid	localStorage	f0af49eb415c--01kn4298z90kjyg8h08gmcs4yx
AMP_unsent_68994201ba	localStorage	[]
AMP_remote_config_e5d5538425	localStorage	{"remoteConfig":{"configs":{"diagnostics":{"browserSDK":{"sampleRate":0.02}},"se
AMP_PAGE_VIEW	sessionStorage	{"pageViewId":"8a02233b-621c-4f88-a8a7-9ea1f53ff0bd"}

H. JS Global Object Verification 2 FAIL 0 PASS 0 MANUAL

H.1 Tracker JS globals (ga, gtag, fbq, hj, etc.) return undefined post-reject

✗ FAIL

Tracker globals still defined after reject-all: ['gtag', 'google_tag_manager', 'amplitude']

global	type
gtag	function
google_tag_manager	__defined_object__
amplitude	__defined_object__

H.2 Tracker globals not merely defined without values

ℹ INFO

See H.1 — same evidence applies.

global	present
gtag	True
google_tag_manager	True
amplitude	True

H.3 window.dataLayer absent or contains no tracking events post-reject

✗ FAIL

dataLayer contains 2 tracking event(s): ['gtm.js', 'gtm.dom']

event
gtm.js
gtm.dom
tmClientId
experimentid.variantid
gtm.load

I. DOM / Source Inspection 3 FAIL 0 PASS 0 MANUAL

I.1 Tracker script tags have type=text/plain (CMP-blocked) in DOM post-reject

✗ FAIL

12 tracker script(s) in DOM without CMP type-blocking post-reject. 0 script(s) correctly blocked.

▶ Show all 12 rows

src	type_attr	vendor
https://sb.scorecardresearch.com/c2/6035737/cs.js	text/javascript	Comscore
https://cdn.id5-sync.com/api/1.0/id5PrebidModule.js	text/javascript	ID5 (universal ID)
https://cdn.amplitude.com/libs/analytics-browser-gtm-2.36.8-min.js.gz	text/javascript	Amplitude
https://cdn.amplitude.com/libs/analytics-browser-gtm-wrapper-2.36.8.min.js.br	text/javascript	Amplitude
https://cdn.eu.amplitude.com/libs/analytics-browser-2.25.0-min.js.gz	text/javascript	Amplitude
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202603250101/pubads_impl.js?cb=3109743		Google Publisher Ads
https://link.rubiconproject.com/magnite/7949.js		Magnite (Rubicon)
https://micro.rubiconproject.com/prebid/dynamic/7949.js		Magnite (Rubicon)
https://tags.crwdcntrl.net/lt/c/16576/sync.min.js		Lotame
https://cdn.id5-sync.com/api/1.0/id5-api.js		ID5 (universal ID)
https://tags.crwdcntrl.net/lt/c/16589/sync.min.js		Lotame
https://securepubads.g.doubleclick.net/tag/js/gpt.js		Google Publisher Ads

I.2 Non-essential scripts blocked (type=text/plain)

✗ FAIL

See I.1 — same check.

▶ Show all 12 rows

src	type_attr	vendor
https://sb.scorecardresearch.com/c2/6035737/cs.js	text/javascript	Comscore
https://cdn.id5-sync.com/api/1.0/id5PrebidModule.js	text/javascript	ID5 (universal ID)
https://cdn.amplitude.com/libs/analytics-browser-gtm-2.36.8-min.js.gz	text/javascript	Amplitude
https://cdn.amplitude.com/libs/analytics-browser-gtm-wrapper-2.36.8.min.js.br	text/javascript	Amplitude
https://cdn.eu.amplitude.com/libs/analytics-browser-2.25.0-min.js.gz	text/javascript	Amplitude
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202603250101/pubads_impl.js?cb=3109743		Google Publisher Ads
https://link.rubiconproject.com/magnite/7949.js		Magnite (Rubicon)
https://micro.rubiconproject.com/prebid/dynamic/7949.js		Magnite (Rubicon)
https://tags.crwdcntrl.net/lt/c/16576/sync.min.js		Lotame
https://cdn.id5-sync.com/api/1.0/id5-api.js		ID5 (universal ID)
https://tags.crwdcntrl.net/lt/c/16589/sync.min.js		Lotame
https://securepubads.g.doubleclick.net/tag/js/gpt.js		Google Publisher Ads

I.3 No tracker JS files in executed sources post-reject

✗ FAIL

Based on DOM script inventory; full Sources tab verification requires Chrome DevTools protocol introspection (beyond current scope).

▶ Show all 12 rows

src	type_attr	vendor
https://sb.scorecardresearch.com/c2/6035737/cs.js	text/javascript	Comscore
https://cdn.id5-sync.com/api/1.0/id5PrebidModule.js	text/javascript	ID5 (universal ID)
https://cdn.amplitude.com/libs/analytics-browser-gtm-2.36.8-min.js.gz	text/javascript	Amplitude
https://cdn.amplitude.com/libs/analytics-browser-gtm-wrapper-2.36.8.min.js.br	text/javascript	Amplitude
https://cdn.eu.amplitude.com/libs/analytics-browser-2.25.0-min.js.gz	text/javascript	Amplitude
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202603250101/pubads_impl.js?cb=3109743		Google Publisher Ads
https://link.rubiconproject.com/magnite/7949.js		Magnite (Rubicon)
https://micro.rubiconproject.com/prebid/dynamic/7949.js		Magnite (Rubicon)
https://tags.crwdcntrl.net/lt/c/16576/sync.min.js		Lotame
https://cdn.id5-sync.com/api/1.0/id5-api.js		ID5 (universal ID)
https://tags.crwdcntrl.net/lt/c/16589/sync.min.js		Lotame
https://securepubads.g.doubleclick.net/tag/js/gpt.js		Google Publisher Ads

J. Safari-Specific Considerations 1 FAIL 0 PASS 2 MANUAL

J.1 ITP setting

☐ MANUAL

Requires manual browser configuration check.

J.2 ITP-off re-test

☐ MANUAL

Requires manual browser configuration check.

J.3 Server-side cookie-setting identified where ITP would block client-side

✗ FAIL

10 advertising cookie(s) set with >7-day Max-Age via server-side header, bypassing ITP client-side restrictions.

▶ Show all 10 rows

cookie	domain	max_age_seconds	mechanism
receive-cookie-deprecation	pixel-us-east.rubiconproject.com	7776000	server-side (HTTP Set-Cookie header)
receive-cookie-deprecation	pixel.rubiconproject.com	7776000	server-side (HTTP Set-Cookie header)
receive-cookie-deprecation	pixel.rubiconproject.com	7776000	server-side (HTTP Set-Cookie header)
receive-cookie-deprecation	pixel.rubiconproject.com	7776000	server-side (HTTP Set-Cookie header)
receive-cookie-deprecation	pixel.rubiconproject.com	7776000	server-side (HTTP Set-Cookie header)
receive-cookie-deprecation	pixel.rubiconproject.com	7776000	server-side (HTTP Set-Cookie header)
receive-cookie-deprecation	pixel.rubiconproject.com	7776000	server-side (HTTP Set-Cookie header)
receive-cookie-deprecation	pixel.rubiconproject.com	7776000	server-side (HTTP Set-Cookie header)
receive-cookie-deprecation	pixel.rubiconproject.com	7776000	server-side (HTTP Set-Cookie header)
receive-cookie-deprecation	pixel.rubiconproject.com	7776000	server-side (HTTP Set-Cookie header)

K. Consent Mechanism UX Compliance 1 FAIL 2 PASS 2 MANUAL

K.1 Reject All at same prominence and level as Accept All

✗ FAIL

Reject All not directly accessible from first consent screen — requires entering Manage Preferences. EDPB guidelines require equal prominence.

accept visible at first screen: True · reject visible at first screen: False · reject requires extra layer: True · accept button text: Accept · reject button text:

Recommendation: Add a 'Reject All' button directly to the first consent layer (same screen as 'Accept All'). Do not require users to navigate to a preferences panel to decline.

K.2 Non-essential categories default to OFF

☐ MANUAL

Could not open preferences panel to check toggles.

K.3 No dark patterns in consent banner (colour, visual hierarchy)

☐ MANUAL

DOM-level button detection completed. Full visual assessment of colour contrast, typography prominence, and deceptive visual hierarchy requires screenshot review. See screenshots in report.

K.5 Persistent consent withdrawal mechanism accessible after interaction

✓ PASS

Persistent consent widget found: 'Privacy Notice'

found: True · text: Privacy Notice · in iframe: False

K.6 Site fully accessible after declining consent (no cookie wall)

✓ PASS

Site content accessible after declining consent.

accessible: True

L. Consent State Persistence 2 FAIL 0 PASS 0 MANUAL

L.2 Consent choice respected on second tab (same session)

✗ FAIL

Advertising cookies found in second tab — consent state may not be persisted.

consent cookie found: False · ad cookies found: True · tcf available: True · tcf display status: None

L.3 Declined state maintained after closing and reopening (simulate new session)

✗ FAIL

Advertising cookies found on return — consent state not correctly maintained.

ad cookies on return: True · total cookies: 31

Additional Findings 2 PASS 1 MANUAL

ADD.1 Persistent identifier bridging across consent states

✓ PASS

No persistent cross-phase identifiers detected in POST bodies.

ADD.2 TCF consent string analysis (all phases)

ℹ INFO

No TCF consent strings detected in query parameters.

ADD.3 Session ID bridging across consent and rejection phases

✓ PASS

No session ID bridging detected across consent states.

ADD.4 Vendor userId transmission post-reject

☐ MANUAL

No post-reject phase detected.

Test Details 0 PASS 0 MANUAL

META Site URL, test date, CMP platform

ℹ INFO

CMP identified as: Unknown / Not detected

url	Manchester Evening News for live, in-depth and regularly updated news from in and around Greater Manchester.
test date	2026-04-01
test time utc	2026-04-01T08:24:11
cmp detected	Unknown / Not detected
total requests	675
phases detected	pre_consent
phase strategy	{'accept': 'not_detected', 'reject': 'not_detected'}

run_id: 0d71ea11 · raw log · ⬇ report JSON · all runs · ← Home

🤖 AI-Enhanced Analysis

Add regulatory citations, risk ratings, enforcement precedents, and a remediation roadmap using Claude AI. Results are cached — generation only runs once per report.

🤖 View AI Report