Checked on 9/18/2026 · https://liocont.md/
Best-case value: the issues found are the minimum. Behind a tag manager or cookie banner, further services can load that this scan does not see — the real value is likely lower.
Critical items: 1 · also to review: 1.
| Third-party CDN: jsDelivr CDN | -5 |
| Third-party CDN: unpkg CDN (additional) | -2 |
| Cookie banner detected (Cookie Consent (Osano/Insites)) | +5 |
| No link to the privacy policy found | -15 |
| Result | 83 / 100 |
Multiple services of the same kind count on a sliding scale. The score is a guide, not a legal verdict.
Cookies set on first load: ci_session
A banner is embedded. Whether the services really load only after consent cannot be determined conclusively from the initial HTML.
What you should do: Test it yourself: open the page in a private window, developer tools → “Network”, reload and see whether e.g. google-analytics appears before a click on “Accept”. Monitoring does this test automatically.
A privacy policy must be directly reachable from every page.
What you should do: Place a “Privacy” link permanently in the footer so it is visible on every subpage.
Art. 13 GDPR — duty to inform when collecting personal data.
| Service | Purpose | Vendor | Country | Legal basis |
|---|---|---|---|---|
| jsDelivr CDN cdn.jsdelivr.net |
Delivery of libraries or maps via third-party servers | jsDelivr | EU | Grey area — better to self-host; otherwise consent |
| unpkg CDN unpkg.com |
Delivery of libraries or maps via third-party servers | Cloudflare/npm | US ⚠ | Grey area — better to self-host; otherwise consent |
⚠ Established outside the EU/EEA — the transfer needs an additional basis (e.g. the EU-US Data Privacy Framework or standard contractual clauses).
Weekly re-scan, email as soon as a new tracker appears — coming soon.
On 9/18/2026 we checked the HTML that liocont.md delivers on first load without a login (normal desktop browser, EU location). Detected: services embedded in the source (scripts, stylesheets, iframes, pixels), a cookie banner based on known providers, cookies from the server response, and links to the privacy policy and legal notice.
Not checked: anything that loads only via JavaScript, content behind a login, subpages, behaviour after clicking “Accept”/“Reject”, server locations and data-processing agreements. The result is an automated snapshot and not a substitute for legal advice.