Otte – er et rådgivningsselskap

https://otte.no/

A100/100

Excellent privacy practices with minimal tracking

Trackers Found

Network Requests

6.2s

Load Time

Risk Distribution

LOW0

HIGH1

INFO3

MEDIUM

Findings by Category

Data Collection

Consent Compliance

Detection Timeline

Network(2)

Third-party requests to GoogleThird-party requests to Google

Cookies(1)

Cookie: __cf_bm (unknown)

Consent(1)

No consent banner detected

Executive Summary

This Norwegian consultancy website operates with minimal tracking but has fundamental compliance gaps that create unnecessary legal risk. While the site appears to collect limited visitor data, it lacks any consent mechanism and uses Google services that share visitor IP addresses without permission. These issues are easily fixable but represent clear GDPR violations that Norwegian DPA could investigate.

Critical Actions:

Self-host Google Fonts to eliminate data sharing with Google
Implement basic cookie consent banner or remove all third-party services
Update privacy policy to document all cookies and data processing activities

Findings by Category

Consent Compliance

1 finding

Detail

No cookie consent mechanism was found on this page. If the site uses tracking cookies or scripts, this is likely a GDPR/ePrivacy violation.

Remediation

First, audit what tracking scripts are actually running on your site. If you find any cookies or tracking beyond essential functionality, implement a GDPR-compliant consent banner immediately. Recommended solutions: Cookiebot, OneTrust, or CookieYes. Ensure the banner blocks all non-essential tracking until visitors give explicit consent.

Legal Reference

ePrivacy Directive Art. 5(3), GDPR Art. 7

Raw Data

{
  "detection_attempted": true
}

Data Collection

3 findings

Detail

First-party cookie from otte.no, expires: 0 days, purpose: Unrecognized cookie.

Remediation

Verify with Cloudflare what data this cookie collects and update your privacy policy to describe its purpose. If it processes personal data, ensure it's covered by your data processing agreement with Cloudflare.

Legal Reference

GDPR Art. 13 - Information to be provided

Raw Data

{
  "expiry": "0 days",
  "secure": true,
  "vendor": "unknown",
  "purpose": "unknown",
  "http_only": true,
  "same_site": "None",
  "cookie_name": "__cf_bm",
  "cookie_domain": "otte.no",
  "is_long_lived": false,
  "is_third_party": false
}

Detail

1 request(s) to fonts.googleapis.com (Web font delivery).

Remediation

Host Google Fonts locally on your server or use a privacy-friendly CDN like Bunny Fonts. Download the font files and serve them from your own domain to eliminate third-party data sharing.

Legal Reference

Munich Regional Court LG München I, Jan 2022

Raw Data

{
  "domain": "fonts.googleapis.com",
  "vendor": "Google",
  "purpose": "Web font delivery",
  "sample_urls": [
    "https://fonts.googleapis.com/css?family=Fira+Sans%3A400%2C&display=fallback&ver=4.12.1"
  ],
  "pii_detected": [],
  "request_count": 1,
  "resource_types": [
    "stylesheet"
  ]
}

Raw Data

{
  "domain": "fonts.gstatic.com",
  "vendor": "Google",
  "purpose": "Web font file delivery",
  "sample_urls": [
    "https://fonts.gstatic.com/s/firasans/v18/va9E4kDNxMZdWfMOD5Vvl4jL.woff2"
  ],
  "pii_detected": [],
  "request_count": 1,
  "resource_types": [
    "font"
  ]
}