Audit comparison
booking.com
Jul 24, 2026, 03:31 AM UTC → Sep 25, 2026, 03:31 AM UTC
Older
49/100
Jul 24, 2026, 03:31 AM UTC
Change
+8
improved
Newer
57/100
Sep 25, 2026, 03:31 AM UTC
Summary
This site blocks automated tracking scans, so we couldn’t fully audit its setup. The vendor list below reflects only what we could see — likely a fraction of the real stack.
Mostly there (running 3 ad pixels and 1 session-replay tool), but missing Consent Mode v2 + PII visible in the URL drops the score.
What changed
PII in URL
pass fail
The audited URL contains what looks like PII (email / phone). PII in URLs leaks to every analytics + ad pixel on the page.
Single GA4 property
pass warn
2 different GA4 measurement IDs detected on the same page. This is sometimes intentional (parallel reporting), more often a misconfig that fragments your data.
Tracking on deep pages
Newly checked — warn
Couldn’t test a second page — no suitable second page linked from the homepage. Tracking parity across page types is unverified.
GA4 measurement ID
fail pass
Found G-SEJWFCBCVM (+1 more).
GTM container
warn pass
Container GTM-5Q664QZ is loading.
Google Ads conversion
warn pass
Found AW-988382855.
Consent banner
warn pass
A consent-management platform (OneTrust / Cookiebot / etc.) is loading on this page.
DataLayer initialised
warn pass
The page initialises `window.dataLayer` — standard GTM-ready foundation.