Public Compliance Report

toogoodtogo.com

D
Last scanned: March 6, 2026

Compliance Score

48/100
D

Grade D

Poor compliance, significant issues

Litigation Exposure Index

40ELEVATED

Several compliance issues should be addressed

Findings

3

3 risk signals identified

Third-Party Requests

17

17 third-party network requests observed

Share this report
Privacy Compliance Reportpreconsent.io

toogoodtogo.com

3 finding(s)|LEI: ELEVATED
D

48/100

Pre-Consent Tracking
No Fingerprinting

Check your own website

Run a free pre-consent scan and see what trackers fire before your visitors consent.

Key Risk Signals

No visible consent banner detected on the page.

Observed before consent
high

Review consent banner implementation to ensure compliant opt-in flow.

First-party subdomain static-mkt.toogoodtogo.com has a CNAME pointing to known tracker aws_cloudfront (d4tedfcy080v1.cloudfront.net). This disguises third-party tracking as first-party.

Observed before consent
critical

Implement tag manager consent mode to gate tracking scripts.

First-party subdomain www.toogoodtogo.com has a CNAME pointing to third-party domain bb8624d69a040d29.vercel-dns-016.com. This may be used to bypass cookie restrictions.

Observed before consent
high

Ensure cookies are only set after valid user consent.

Top Third-Party Vendors

4 vendors
analytics:2
functional:1
unknown:1

Data Flow Map

3 countries3 vendors
Scan Sourcetoogoodtogo.com
Advertising
Analytics
Functional

Data observed flowing to 3 countries via 3 third-party vendors before user consent

This report reflects automated observations at the time of scanning and does not constitute legal advice or an assertion of non-compliance. Findings represent potential risk signals that may warrant further review. Compliance posture may have changed since the last scan.

Continuous Monitoring

Is this your website?

Claim ownership, control public visibility, and start continuous compliance monitoring with real-time alerts.

Monitor compliance continuously
Detect new trackers automatically

About This Analysis

Real Browser Scan

Executed in a full Chromium browser session, capturing actual network behavior.

No Consent Simulated

All activity captured before any consent interaction, reflecting first-visit behavior.

2,400+ Vendor Database

Each request matched against a curated database of known tracking and analytics vendors.