Waivern Consent Analyser
AI-Enhanced Compliance Report

AI-Enhanced Compliance Report

https://www.ebay.co.uk  ·  CMP: Unknown / Not detected   🤖 AI analysis active
After Reject All (post-rejection state)
4 FAIL   32 PASS   2 MANUAL

Consent State Screenshots — assessed by AI for K.1/K.2/K.3

Layer 1 — Initial banner (before interaction)
pre_consent
Layer 2 — After Accept All (consent baseline)
post_accept
After Reject All (post-rejection state)
post_reject

AI Executive Summary

Overall Risk: HIGH

eBay.co.uk demonstrates significant GDPR and ePrivacy compliance violations. The site's consent mechanism fails to respect user rejection choices, with 68 non-essential cookies continuing to be set after users select 'reject all'. Additionally, the cookie policy is incomplete, failing to declare 12 observed cookies, creating transparency deficits. While consent preferences are properly maintained across browser tabs, the core consent mechanism's failure to honor rejection renders the implementation non-compliant with EU privacy law.

Remediation Roadmap

  1. Fix consent management system to immediately stop all non-essential cookie deployment upon reject-all selection (high) — Resolves the most serious compliance violation and reduces regulatory enforcement risk significantly
  2. Conduct comprehensive cookie audit and update privacy policy with complete cookie declarations (medium) — Ensures transparency compliance and provides users with required information about data processing
  3. Implement automated cookie policy synchronization to prevent future declaration gaps (medium) — Prevents recurrence of transparency violations through systematic policy maintenance
  4. Deploy technical monitoring to verify consent preferences are properly enforced across all site functions (low) — Provides ongoing assurance that consent management system operates correctly
  5. Review and document legal basis for all processing activities to ensure GDPR compliance framework (medium) — Establishes comprehensive compliance documentation for regulatory review and internal governance

Detailed Findings

🤖 = AI-assessed  ·  👁 = Vision (screenshot)  ·  HIGH MEDIUM LOW = risk level from legal analysis

B. Pre-Consent State 0 FAIL   5 PASS   0 MANUAL
B.1 No tracking requests before consent banner interaction
✓ PASS

No consent-required domains observed before the consent signal.

B.2 No analytics/marketing cookies in Storage pre-consent
✓ PASS

No advertising cookies found in Storage before consent.

B.3 JS tracker globals return undefined pre-consent
✓ PASS

All probed tracker globals are undefined pre-consent.

B.4 No tracking identifiers in localStorage/sessionStorage pre-consent
✓ PASS

No tracking keys found in web storage pre-consent.

B.5 Non-essential scripts have type=text/plain (CMP-blocked) in DOM
✓ PASS

All tracking scripts in DOM appear to be CMP-blocked (type=text/plain) or absent.

C. Baseline Capture 0 FAIL   0 PASS   0 MANUAL
C.2 Inventory of third-party tracking domains active after Accept All
ℹ INFO

0 tracking domains active after consent-all (baseline).

C.3 Full cookie inventory (with expiry, HttpOnly, Secure, SameSite) after Accept All
ℹ INFO

14 cookies in storage after Accept All (full metadata).

▶ Show all 14 rows
namedomainexpires_dayshttp_onlysecuresame_siteclassification
s.ebay.co.uksessionTrueTrueLaxUNKNOWN
__uzma.ebay.co.uk180.0FalseFalseLaxUNKNOWN
__uzmb.ebay.co.uk180.0FalseFalseLaxUNKNOWN
__uzmc.ebay.co.uk180.0FalseFalseLaxUNKNOWN
__uzmd.ebay.co.uk180.0FalseFalseLaxUNKNOWN
__uzme.ebay.co.uk180.0FalseFalseLaxUNKNOWN
__uzmf.ebay.co.uk180.0FalseFalseLaxUNKNOWN
ds2.ebay.comsessionFalseTrueNoneUNKNOWN
__deba.ebay.co.uk180.0TrueTrueLaxUNKNOWN
ds2.ebay.co.uksessionFalseFalseLaxUNKNOWN
dp1.ebay.co.uk400.0FalseTrueLaxUNKNOWN
ds2.ebay.co.uksessionFalseTrueNoneUNKNOWN
nonsession.ebay.co.uk400.0TrueTrueLaxESSENTIAL
ebay.ebay.co.uksessionFalseTrueLaxUNKNOWN
C.4 Tracker JS globals active after Accept All (baseline)
ℹ INFO

Globals defined after consent: []

D. Decline Non-Essential Consent 0 FAIL   1 PASS   0 MANUAL
D.4 Reject requires no more clicks than Accept (EDPB symmetry)
✓ PASS

Accept and Reject both require 1 click(s). Symmetric.

accept_clicksreject_clicksextra_clicks_to_rejectreject_required_manage_panel
110False
E. Network Request Verification 0 FAIL   4 PASS   0 MANUAL
E.1 No requests to non-essential third-party domains after reject-all
✓ PASS

No tracking domains observed post-reject.

E.2 No tracker JS libraries loaded after reject-all
✓ PASS

No tracker scripts observed post-reject.

E.3 No tracking pixels or beacons fired after reject-all
✓ PASS

No tracking beacons observed post-reject.

E.4 No tracking activity on subpages after reject-all
✓ PASS

No tracker globals or tracking storage observed on 2 subpage(s).

F. Cookie Verification (Third-Party) 0 FAIL   2 PASS   0 MANUAL
F.1 No analytics/marketing cookies present after reject-all
⚠ PARTIAL

No advertising cookies seen in request headers post-reject. Verify Storage tab with Component 2 for full confirmation.

F.2 document.cookie contains only essential cookies post-reject
✓ PASS

No advertising cookies visible in document.cookie post-reject.

doc_cookie_snippet
__uzma=619afde2-6573-4b0f-bc69-fb01342fae73; __uzmb=1775078948; __uzmc=924611086392; __uzmd=1775078948; __uzme=7499; __uzmf=7f60003b7b18db-e32e-4544-acea-98f0523f811517750789489550-06af23d357c275fb10; ds2=amsg/4af33cd219d0ac723dbabddbffdf8329^sotr/bHf7Kzzzzzzz^; dp1=bbl/US6d8ff56f^; ds2=asotr/bHf7Kz…
F.3 No tracking identifiers in web storage post-reject
✓ PASS

No tracking identifiers found in localStorage/sessionStorage post-reject.

G. First-Party Cookie Classification 2 FAIL   6 PASS   0 MANUAL
G.1 Complete first-party cookie inventory with full metadata
ℹ INFO

13 first-party cookies in Storage after Accept All.

▶ Show all 13 rows
namedomainexpires_dayshttp_onlysecuresame_siteclassification
s.ebay.co.uksessionTrueTrueLaxUNKNOWN
__uzma.ebay.co.uk180.0FalseFalseLaxUNKNOWN
__uzmb.ebay.co.uk180.0FalseFalseLaxUNKNOWN
__uzmc.ebay.co.uk180.0FalseFalseLaxUNKNOWN
__uzmd.ebay.co.uk180.0FalseFalseLaxUNKNOWN
__uzme.ebay.co.uk180.0FalseFalseLaxUNKNOWN
__uzmf.ebay.co.uk180.0FalseFalseLaxUNKNOWN
__deba.ebay.co.uk180.0TrueTrueLaxUNKNOWN
ds2.ebay.co.uksessionFalseFalseLaxUNKNOWN
dp1.ebay.co.uk400.0FalseTrueLaxUNKNOWN
ds2.ebay.co.uksessionFalseTrueNoneUNKNOWN
nonsession.ebay.co.uk400.0TrueTrueLaxESSENTIAL
ebay.ebay.co.uksessionFalseTrueLaxUNKNOWN
G.2 All observed cookies declared in cookie policy
✗ FAIL

12 cookie(s) observed but not found in cookie policy at https://www.ebay.co.uk/help/privacy.

▶ Show all 12 rows
cookie_namestatus
__uzmcobserved but not in cookie policy
__uzmdobserved but not in cookie policy
__uzmbobserved but not in cookie policy
dp1observed but not in cookie policy
ds2observed but not in cookie policy
__uzmaobserved but not in cookie policy
__debaobserved but not in cookie policy
__uzmeobserved but not in cookie policy
sobserved but not in cookie policy
ebayobserved but not in cookie policy
__uzmfobserved but not in cookie policy
nonsessionobserved but not in cookie policy
G.3 Strictly necessary two-part test (AI-assisted)
✓ PASS

AI analysis: 0 cookie(s) fail the strictly-necessary test and should be absent after reject-all. Summary:

G.4 Server-side analytics/ad cookies identified in Set-Cookie headers
✓ PASS

No advertising cookies observed in Set-Cookie response headers.

G.5 No CNAME cloaking detected (first-party subdomains resolving to tracker infrastructure)
✓ PASS

No CNAME cloaking detected across 7 subdomain(s).

subdomaincname_targetis_trackervendorerror
pulsar.ebay.co.uk(no CNAME / A record only)FalseNoneNone
edgetrksvc.ebay.co.uk(no CNAME / A record only)FalseNoneNone
backstory.ebay.co.uk(no CNAME / A record only)FalseNoneNone
devicebind.ebay.co.uk(no CNAME / A record only)FalseNoneNone
signin.ebay.co.uk(no CNAME / A record only)FalseNoneNone
ebay.co.uk(no CNAME / A record only)FalseNoneNone
sofe.ebay.co.uk(no CNAME / A record only)FalseNoneNone
G.6 Non-essential first-party cookies absent after reject-all
✓ PASS

All advertising cookies absent from Storage post-reject.

G.7 HIGH No non-essential Set-Cookie headers after reject-all
✗ FAIL

68 Set-Cookie header(s) for non-essential cookies observed post-reject.

▶ Show all 68 rows
cookie_namedomainheaderclassificationtimestamp
sdevicebind.ebay.co.uks=CgAD4ACBpzt+kNGFmMzNjZDIxOWQwYWM3MjNkYmFiZGRiZmZkZjgzMjl3Hna1; Domain=.ebay.co.uk; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:27
ds2devicebind.ebay.co.ukds2=amsg/4af33cd219d0ac723dbabddbffdf8329^; Domain=.ebay.co.uk; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:27
ebaydevicebind.ebay.co.ukebay=%5Ejs%3D1%5Esbf%3D%23000000%5E; Domain=.ebay.co.uk; Path=/; SecureUNKNOWN2026-04-01T21:30:27
dp1devicebind.ebay.co.ukdp1=bbl/US6d8ff573^; Domain=.ebay.co.uk; Path=/; Expires=Fri, 31 Mar 2028 21:30:27 GMT; SecureUNKNOWN2026-04-01T21:30:27
__debadevicebind.ebay.co.uk__deba=iGMonQAswzkUZQtUYBEoMMxAAK-S9Q97-_mrSkxf7YrCxGZfuth_d94_zrAxTWKvXR8UW1J2_XMwSXzXGqPFGLPSRW2itDcmMw9aZmPb_0Qi0fI6tABpAw5eV2iDoTTcqya7Ul5lUUaJYvxUNKNOWN2026-04-01T21:30:27
swww.ebay.co.uks=CgAD4ACBpzt+kNGFmMzNjZDIxOWQwYWM3MjNkYmFiZGRiZmZkZjgzMjl3Hna1; Domain=.ebay.co.uk; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:27
ds2www.ebay.co.ukds2=amsg/4af33cd219d0ac723dbabddbffdf8329^; Domain=.ebay.co.uk; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:27
ebaywww.ebay.co.ukebay=%5Ejs%3D1%5Esbf%3D%23000000%5E; Domain=.ebay.co.uk; Path=/; SecureUNKNOWN2026-04-01T21:30:27
dp1www.ebay.co.ukdp1=bbl/US6d8ff573^; Domain=.ebay.co.uk; Path=/; Expires=Fri, 31 Mar 2028 21:30:27 GMT; SecureUNKNOWN2026-04-01T21:30:27
swww.ebay.co.uks=CgAD4ACBpzt+kNGFmMzNjZDIxOWQwYWM3MjNkYmFiZGRiZmZkZjgzMjl3Hna1; Domain=.ebay.co.uk; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:29
ds2www.ebay.co.ukds2=amsg/4af33cd219d0ac723dbabddbffdf8329^; Domain=.ebay.co.uk; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:29
ebaywww.ebay.co.ukebay=%5Ejs%3D1%5Esbf%3D%23000000%5E; Domain=.ebay.co.uk; Path=/; SecureUNKNOWN2026-04-01T21:30:29
dp1www.ebay.co.ukdp1=bbl/US6d8ff575^; Domain=.ebay.co.uk; Path=/; Expires=Fri, 31 Mar 2028 21:30:30 GMT; SecureUNKNOWN2026-04-01T21:30:29
__debawww.ebay.co.uk__deba=iGMonQAswzkUZQtUYBEoMImFIBK9F7G_gaxM1dEbQIxJb1-tt-u7LZk5tDsUvqtVXR8UW1J2_XMwSXzXGqPFGLPSRW2itDcmMw9aZmPb_0Qi0fI6tABpAw5eV2iDoTTcqya7Ul5lUUaJYvxUNKNOWN2026-04-01T21:30:29
swww.ebay.co.uks=CgAD4ACBpzt+kNGFmMzNjZDIxOWQwYWM3MjNkYmFiZGRiZmZkZjgzMjl3Hna1; Domain=.ebay.co.uk; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:30
ds2www.ebay.co.ukds2=amsg/4af33cd219d0ac723dbabddbffdf8329^; Domain=.ebay.co.uk; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:30
ebaywww.ebay.co.ukebay=%5Ejs%3D1%5Esbf%3D%23000000%5E; Domain=.ebay.co.uk; Path=/; SecureUNKNOWN2026-04-01T21:30:30
dp1www.ebay.co.ukdp1=bbl/US6d8ff576^; Domain=.ebay.co.uk; Path=/; Expires=Fri, 31 Mar 2028 21:30:30 GMT; SecureUNKNOWN2026-04-01T21:30:30
ds2rover.ebay.comds2=amsg/4af341a319d0a9f3c1881473ff8fc557^; Domain=.ebay.com; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:30
dp1rover.ebay.comdp1=bbl/US6d8ff576^; Domain=.ebay.com; Path=/; Expires=Fri, 31 Mar 2028 21:30:30 GMT; SecureUNKNOWN2026-04-01T21:30:30
srover.ebay.coms=CgAD4ACBpzt/2NGFmMzQxYTMxOWQwYTlmM2MxODgxNDczZmY4ZmM1NTdBvqpI; Domain=.ebay.com; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:30
ebayrover.ebay.comebay=%5Esbf%3D%23000000%5E; Domain=.ebay.com; Path=/; SecureUNKNOWN2026-04-01T21:30:30
__debarover.ebay.com__deba=5gedHJP-NdRhKEc0eEqb4Pqvggpzm9lwIJ-qGvP6o7NcLp7KHvp1yDieKxiuelSwXR8UW1J2_XMwSXzXGqPFGBOZOnvpUd-8pEqzHp0-mwqHyGRxWT1xG5pym5HEISJ2D10T9MpNHX57WShUNKNOWN2026-04-01T21:30:30
swww.ebay.co.uks=CgAD4ACBpzt+kNGFmMzNjZDIxOWQwYWM3MjNkYmFiZGRiZmZkZjgzMjl3Hna1; Domain=.ebay.co.uk; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:30
ds2www.ebay.co.ukds2=amsg/4af33cd219d0ac723dbabddbffdf8329^; Domain=.ebay.co.uk; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:30
ebaywww.ebay.co.ukebay=%5Ejs%3D1%5Esbf%3D%23000000%5E; Domain=.ebay.co.uk; Path=/; SecureUNKNOWN2026-04-01T21:30:30
dp1www.ebay.co.ukdp1=bbl/US6d8ff577^; Domain=.ebay.co.uk; Path=/; Expires=Fri, 31 Mar 2028 21:30:31 GMT; SecureUNKNOWN2026-04-01T21:30:30
ssignin.ebay.co.uks=CgAD4ACBpzt+kNGFmMzNjZDIxOWQwYWM3MjNkYmFiZGRiZmZkZjgzMjl3Hna1; Domain=.ebay.co.uk; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:31
ds2signin.ebay.co.ukds2=amsg/4af33cd219d0ac723dbabddbffdf8329^; Domain=.ebay.co.uk; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:31
ebaysignin.ebay.co.ukebay=%5Ejs%3D1%5Esbf%3D%23000000%5E; Domain=.ebay.co.uk; Path=/; SecureUNKNOWN2026-04-01T21:30:31
dp1signin.ebay.co.ukdp1=bbl/US6d8ff577^; Domain=.ebay.co.uk; Path=/; Expires=Fri, 31 Mar 2028 21:30:31 GMT; SecureUNKNOWN2026-04-01T21:30:31
__debasignin.ebay.co.uk__deba=iGMonQAswzkUZQtUYBEoMO-Q-L_YL4_QQS7aYkKqVQaAYlQvQBpb-FZXpRoi31xqXR8UW1J2_XMwSXzXGqPFGLPSRW2itDcmMw9aZmPb_0Qi0fI6tABpAw5eV2iDoTTcqya7Ul5lUUaJYvxUNKNOWN2026-04-01T21:30:31
__uzmasignin.ebay.co.uk__uzma=619afde2-6573-4b0f-bc69-fb01342fae73; Path=/; Domain=.ebay.co.uk; Expires=Mon, 28 Sep 2026 21:30:31 UTCUNKNOWN2026-04-01T21:30:31
__uzmbsignin.ebay.co.uk__uzmb=1775078948; Path=/; Domain=.ebay.co.uk; Expires=Mon, 28 Sep 2026 21:30:31 UTCUNKNOWN2026-04-01T21:30:31
__uzmcsignin.ebay.co.uk__uzmc=595971618646; Path=/; Domain=.ebay.co.uk; Expires=Mon, 28 Sep 2026 21:30:31 UTCUNKNOWN2026-04-01T21:30:31
__uzmdsignin.ebay.co.uk__uzmd=1775079031; Path=/; Domain=.ebay.co.uk; Expires=Mon, 28 Sep 2026 21:30:31 UTCUNKNOWN2026-04-01T21:30:31
__uzmesignin.ebay.co.uk__uzme=7499; Path=/; Domain=.ebay.co.uk; Expires=Mon, 28 Sep 2026 21:30:31 UTCUNKNOWN2026-04-01T21:30:31
__uzmfsignin.ebay.co.uk__uzmf=7f60003b7b18db-e32e-4544-acea-98f0523f8115177507894895582584-7b39bda7f40cc3fb16; Path=/; Domain=.ebay.co.uk; Expires=Mon, 28 Sep 2026 21:30:31 UNKNOWN2026-04-01T21:30:31
sdevicebind.ebay.co.uks=CgAD4ACBpzt+kNGFmMzNjZDIxOWQwYWM3MjNkYmFiZGRiZmZkZjgzMjl3Hna1; Domain=.ebay.co.uk; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:31
ds2devicebind.ebay.co.ukds2=amsg/4af33cd219d0ac723dbabddbffdf8329^; Domain=.ebay.co.uk; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:31
ebaydevicebind.ebay.co.ukebay=%5Ejs%3D1%5Esbf%3D%23000000%5E; Domain=.ebay.co.uk; Path=/; SecureUNKNOWN2026-04-01T21:30:31
dp1devicebind.ebay.co.ukdp1=bbl/US6d8ff577^; Domain=.ebay.co.uk; Path=/; Expires=Fri, 31 Mar 2028 21:30:31 GMT; SecureUNKNOWN2026-04-01T21:30:31
__debadevicebind.ebay.co.uk__deba=iGMonQAswzkUZQtUYBEoMJwnWULdEF4jF7VyhFxTM_GAYlQvQBpb-FZXpRoi31xqXR8UW1J2_XMwSXzXGqPFGLPSRW2itDcmMw9aZmPb_0Qi0fI6tABpAw5eV2iDoTTcqya7Ul5lUUaJYvxUNKNOWN2026-04-01T21:30:31
swww.ebay.co.uks=CgAD4ACBpzt+kNGFmMzNjZDIxOWQwYWM3MjNkYmFiZGRiZmZkZjgzMjl3Hna1; Domain=.ebay.co.uk; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:31
ds2www.ebay.co.ukds2=amsg/4af33cd219d0ac723dbabddbffdf8329^; Domain=.ebay.co.uk; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:31
ebaywww.ebay.co.ukebay=%5Ejs%3D1%5Esbf%3D%23000000%5E; Domain=.ebay.co.uk; Path=/; SecureUNKNOWN2026-04-01T21:30:31
dp1www.ebay.co.ukdp1=bbl/US6d8ff577^; Domain=.ebay.co.uk; Path=/; Expires=Fri, 31 Mar 2028 21:30:31 GMT; SecureUNKNOWN2026-04-01T21:30:31
__debapages.ebay.com__deba=KBJbwm9owGrn_0bLF1xfRiNsmVb1JcBbBIP4-uBiDQ1cLp7KHvp1yDieKxiuelSwXR8UW1J2_XMwSXzXGqPFGC6YADe0UeL_jjRLIWwZGxPfwn2JGSVaQxOuRDJK70bOFqGLGRQhdeEPobwUNKNOWN2026-04-01T21:30:31
thx_guidsrc.ebay-us.comthx_guid=53ee39bb3343dd421c88c06794c0d414; Max-Age=155520000; Version=1; HttpOnly; Path=/; Secure; SameSite=None;UNKNOWN2026-04-01T21:30:31
tmx_guidsrc.ebay-us.comtmx_guid=AAwZTqc6pMBlSM6uJiPILsNxSjjsGSopYawiG39TgT92K2pQPqk9ywRqkka13IEOdIeLsa6au-a3QTYkx6Q_JzFeeiqnJw; Max-Age=155520000; Version=1; HttpOnly; Path=UNKNOWN2026-04-01T21:30:31
ds2rover.ebay.comds2=amsg/4af341a319d0a9f3c1881473ff8fc557^; Domain=.ebay.com; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:31
dp1rover.ebay.comdp1=bbl/US6d8ff577^; Domain=.ebay.com; Path=/; Expires=Fri, 31 Mar 2028 21:30:31 GMT; SecureUNKNOWN2026-04-01T21:30:31
srover.ebay.coms=CgAD4ACBpzt/3NGFmMzQxYTMxOWQwYTlmM2MxODgxNDczZmY4ZmM1NTd3TDq7; Domain=.ebay.com; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:31
ebayrover.ebay.comebay=%5Esbf%3D%23000000%5E; Domain=.ebay.com; Path=/; SecureUNKNOWN2026-04-01T21:30:31
__debarover.ebay.com__deba=bdoLnLh0ZKTgLckZg0jCN3k_HxzsB3WlqSOO4x_k-1NcLp7KHvp1yDieKxiuelSwXR8UW1J2_XMwSXzXGqPFGFDHWeLo-Mwmw7cZeE213wryA6x_qC0xWUqS9uT9VnXVrRO92-TQmLYXvDGUNKNOWN2026-04-01T21:30:31
swww.ebay.co.uks=CgAD4ACBpzt+kNGFmMzNjZDIxOWQwYWM3MjNkYmFiZGRiZmZkZjgzMjl3Hna1; Domain=.ebay.co.uk; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:32
ds2www.ebay.co.ukds2=amsg/4af33cd219d0ac723dbabddbffdf8329^; Domain=.ebay.co.uk; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:32
ebaywww.ebay.co.ukebay=%5Ejs%3D1%5Esbf%3D%23000000%5E; Domain=.ebay.co.uk; Path=/; SecureUNKNOWN2026-04-01T21:30:32
dp1www.ebay.co.ukdp1=bbl/US6d8ff578^; Domain=.ebay.co.uk; Path=/; Expires=Fri, 31 Mar 2028 21:30:32 GMT; SecureUNKNOWN2026-04-01T21:30:32
swww.ebay.co.uks=CgAD4ACBpzt+kNGFmMzNjZDIxOWQwYWM3MjNkYmFiZGRiZmZkZjgzMjl3Hna1; Domain=.ebay.co.uk; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:32
ds2www.ebay.co.ukds2=amsg/4af33cd219d0ac723dbabddbffdf8329^; Domain=.ebay.co.uk; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:32
ebaywww.ebay.co.ukebay=%5Ejs%3D1%5Esbf%3D%23000000%5E; Domain=.ebay.co.uk; Path=/; SecureUNKNOWN2026-04-01T21:30:32
dp1www.ebay.co.ukdp1=bbl/US6d8ff578^; Domain=.ebay.co.uk; Path=/; Expires=Fri, 31 Mar 2028 21:30:32 GMT; SecureUNKNOWN2026-04-01T21:30:32
sdevicebind.ebay.co.uks=CgAD4ACBpzt+kNGFmMzNjZDIxOWQwYWM3MjNkYmFiZGRiZmZkZjgzMjl3Hna1; Domain=.ebay.co.uk; Path=/; HttpOnly; SecureUNKNOWN2026-04-01T21:30:32
ds2devicebind.ebay.co.ukds2=amsg/4af33cd219d0ac723dbabddbffdf8329^; Domain=.ebay.co.uk; Path=/; SameSite=None; Secure; PartitionedUNKNOWN2026-04-01T21:30:32
ebaydevicebind.ebay.co.ukebay=%5Ejs%3D1%5Esbf%3D%23000000%5E; Domain=.ebay.co.uk; Path=/; SecureUNKNOWN2026-04-01T21:30:32
dp1devicebind.ebay.co.ukdp1=bbl/US6d8ff578^; Domain=.ebay.co.uk; Path=/; Expires=Fri, 31 Mar 2028 21:30:32 GMT; SecureUNKNOWN2026-04-01T21:30:32
__debadevicebind.ebay.co.uk__deba=iGMonQAswzkUZQtUYBEoMHGbE89N-YQywXMMLY-pm2fXgq2sM4nmBa2fA2-c_YOFXR8UW1J2_XMwSXzXGqPFGLPSRW2itDcmMw9aZmPb_0Qi0fI6tABpAw5eV2iDoTTcqya7Ul5lUUaJYvxUNKNOWN2026-04-01T21:30:32
Regulatory basis: ePrivacy Directive Art. 5(3) · GDPR Art. 6(1)(a) · GDPR Art. 7(3)
Precedent: CNIL's enforcement against Google and Facebook (December 2021) established that failure to respect consent withdrawal constitutes a serious GDPR breach, now precedential across EU via EDPB consistency mechanism.
Recommendation: Implement technical controls to immediately cease all non-essential cookie deployment when users select reject-all, ensuring consent withdrawal is technically respected.
G.8 Cookie lifetime analysis (ITP bypass detection)
✓ PASS

No obvious ITP bypass patterns in Set-Cookie headers.

G.9 No tracking keys in first-party localStorage/sessionStorage post-reject
✓ PASS

No tracking identifiers found in first-party web storage post-reject.

H. JS Global Object Verification 0 FAIL   2 PASS   0 MANUAL
H.1 Tracker JS globals (ga, gtag, fbq, hj, etc.) return undefined post-reject
✓ PASS

All tracker globals return undefined post-reject.

H.2 Tracker globals not merely defined without values
ℹ INFO

See H.1 — same evidence applies.

H.3 window.dataLayer absent or contains no tracking events post-reject
✓ PASS

dataLayer not present post-reject.

I. DOM / Source Inspection 0 FAIL   3 PASS   0 MANUAL
I.1 Tracker script tags have type=text/plain (CMP-blocked) in DOM post-reject
✓ PASS

All 0 tracker scripts correctly blocked in DOM post-reject.

I.2 Non-essential scripts blocked (type=text/plain)
✓ PASS

See I.1 — same check.

I.3 No tracker JS files in executed sources post-reject
✓ PASS

Based on DOM script inventory; full Sources tab verification requires Chrome DevTools protocol introspection (beyond current scope).

J. Safari-Specific Considerations 0 FAIL   1 PASS   2 MANUAL
J.1 ITP setting
☐ MANUAL

Requires manual browser configuration check.

J.2 ITP-off re-test
☐ MANUAL

Requires manual browser configuration check.

J.3 Server-side cookie-setting identified where ITP would block client-side
✓ PASS

No obvious ITP-bypass server-side cookies detected.

K. Consent Mechanism UX Compliance 0 FAIL   4 PASS   0 MANUAL
K.1 Reject All at same prominence and level as Accept All
✓ PASS

Reject All available at first screen at same level as Accept All.

accept_visible_at_first_screenreject_visible_at_first_screenreject_requires_extra_layeraccept_button_textreject_button_text
TrueTrueFalseAccept allDecline all
K.2 👁 AI Non-essential categories default to OFF
UNCLEAR

Cannot assess default states of non-essential categories as the manage preferences interface is not shown in the provided screenshots

ai_evidence
No privacy manager/Layer 2 screenshot showing category toggles or preferences panel is visible
K.3 👁 AI No dark patterns in consent banner (colour, visual hierarchy)
✓ PASS

The interface appears to provide equal ease of acceptance and rejection without misleading design elements

ai_evidence
No apparent dark patterns observed - buttons have equal visual weight, clear labeling, and single-click rejection is available
K.5 Persistent consent withdrawal mechanism accessible after interaction
✓ PASS

Persistent consent widget found: 'Privacy'

foundtextin_iframe
TruePrivacyFalse
K.6 Site fully accessible after declining consent (no cookie wall)
✓ PASS

Site content accessible after declining consent.

accessible
True
L. Consent State Persistence 1 FAIL   1 PASS   0 MANUAL
L.2 Consent choice respected on second tab (same session)
✗ FAIL

Consent preference correctly persisted to second tab.

consent_cookie_foundad_cookies_foundtcf_availabletcf_display_status
FalseFalseFalseNone
L.3 Declined state maintained after closing and reopening (simulate new session)
✓ PASS

No advertising cookies found on simulated return visit.

ad_cookies_on_returntotal_cookies
False15
Additional Findings 0 FAIL   3 PASS   0 MANUAL
ADD.1 Persistent identifier bridging across consent states
✓ PASS

No persistent cross-phase identifiers detected in POST bodies.

ADD.2 TCF consent string analysis (all phases)
ℹ INFO

No TCF consent strings detected in query parameters.

ADD.3 Session ID bridging across consent and rejection phases
✓ PASS

No session ID bridging detected across consent states.

ADD.4 Persistent vendor userIds transmitted after reject-all
✓ PASS

No persistent vendor userIds detected in post-reject requests.

Test Details 0 FAIL   0 PASS   0 MANUAL
META Site URL, test date, CMP platform
ℹ INFO

CMP identified as: Unknown / Not detected

urltest_datetest_time_utccmp_detectedtotal_requestsphases_detectedphase_strategy
Best Deals on eBay - Shop Electronics, Home, Beauty, Fashion & Toys2026-04-012026-04-01T21:29:07Unknown / Not detected269['pre_consent', 'post_reject']{'accept': 'not_detected', 'reject': 'timestamp_hint'}
Component 3 — AI analysis via claude-sonnet-4-20250514  ·  ← Home