Cookie Inventory
SL-03Every cookie, storage key, pixel, SDK and fingerprinting technique observed on our own surfaces. The two columns that matter are whether it carries personal data and whether a declared purpose authorises it — a yes and a no together is a finding.
6 cookies carry personal data with no purpose in the registry
_fbp, IDE, hjSessionUser, yt-remote-device-id, advertising_id, canvas_fp. A cookie without a declared purpose is processing without a stated purpose, which fails Section 4 before any question of consent arises. Either bind each one to a purpose or stop setting it.
Cookies & trackers
14
Carry personal data
11
Set before consent
7
No declared purpose
6
Third-party
8
Blocked
4