www.hubspot.com

Checked on 9/4/2026 · https://www.hubspot.com/

62 / 100

Cookie banner: Cookie Consent (Osano/Insites) · Privacy-policy link: yes · Legal-notice link: no

Best-case value: the issues found are the minimum. Behind a tag manager or cookie banner, further services can load that this scan does not see — the real value is likely lower.

No critical items in the delivered HTML · to review: 1.

How is the score calculated? (100 starting points)

Analytics service: HubSpot Analytics	-15
Analytics service: Google Analytics (additional)	-5
Analytics service: HubSpot (additional)	-5
Tag manager: Google Tag Manager	-12
Tag manager loads further scripts unchecked	-6
Cookie banner detected (Cookie Consent (Osano/Insites))	+5
Result	62 / 100

Multiple services of the same kind count on a sliding scale. The score is a guide, not a legal verdict.

What this scan doesn't see consentglass reads only the first, unmodified HTML — without executing JavaScript. Because a cookie banner (Cookie Consent (Osano/Insites)) is active, the actual trackers almost always load only afterwards and don't appear here. A tag manager is embedded — which services it loads is decided only in the browser. So a good result here doesn't automatically mean “GDPR-compliant”. Monitoring runs the full test with JavaScript enabled.

Tiefen-Scan (mit JavaScript) Lädt die Seite wie ein echter Browser, führt JavaScript aus und protokolliert, welche Dritt-Dienste vor einer Einwilligung feuern und wie sich das Banner beim Ablehnen verhält. Dauert etwa eine Minute.

Cookies set on first load: _cfuvid, __cf_bm

Findings

To review

Cookie banner detected (Cookie Consent (Osano/Insites)) — does it load before consent anyway?

A banner is embedded. Whether the services really load only after consent cannot be determined conclusively from the initial HTML.

What you should do: Test it yourself: open the page in a private window, developer tools → “Network”, reload and see whether e.g. google-analytics appears before a click on “Accept”. Monitoring does this test automatically.

Detected services are named in the privacy policy

A text match of the linked privacy page found all detected providers. Whether the details are substantively complete is not checked by the match.

Next steps

Cookie banner detected (Cookie Consent (Osano/Insites)) — does it load before consent anyway?. Test it yourself: open the page in a private window, developer tools → “Network”, reload and see whether e.g. google-analytics appears before a click on “Accept”. Monitoring does this test automatically.

Third parties detected (5)

Service	Purpose	Vendor	Country	Legal basis
HubSpot Analytics js.hs-analytics.net	Audience measurement and usage analysis	HubSpot Inc.	US ⚠	Consent required
Google Analytics www.google-analytics.com	Audience measurement and usage analysis	Google LLC	US ⚠	Consent required
HubSpot hs-scripts.com	Audience measurement and usage analysis	HubSpot Inc.	US ⚠	Consent required
reCAPTCHA recaptcha.net	technically necessary function (e.g. payment, bot protection)	Google LLC	US ⚠	permitted without consent
Google Tag Manager www.googletagmanager.com	loads further scripts — content depends on the configuration	Google LLC	US ⚠	Consent required once it loads non-essential items

⚠ Established outside the EU/EEA — the transfer needs an additional basis (e.g. the EU-US Data Privacy Framework or standard contractual clauses).

Monitor this URL automatically?

Weekly re-scan, email as soon as a new tracker appears — coming soon.

Method & limits

On 9/4/2026 we checked the HTML that www.hubspot.com delivers on first load without a login (normal desktop browser, EU location). Detected: services embedded in the source (scripts, stylesheets, iframes, pixels), a cookie banner based on known providers, cookies from the server response, and links to the privacy policy and legal notice.

Not checked: anything that loads only via JavaScript, content behind a login, subpages, behaviour after clicking “Accept”/“Reject”, server locations and data-processing agreements. The result is an automated snapshot and not a substitute for legal advice.

Scan another website