ObservedSeverity: HighConfidence: High
Health article URL path sent in an advertising request
An ad request to Lanternfly Ads contained the full URL path of a health article together with a cookie identifier.
The Daily Ledger
Website · Ledger Press Ltd. · dailyledger.example
- Domain
- dailyledger.example
- Publisher
- Ledger Press Ltd.
- Platform
- Website
- Versions
- Chromium 130 (desktop profile)
- Scan date and region
- Oct 24, 2026 · US-West (California)
- Consent state
- Accepted, rejected, and withdrawn — tested separately
- Scan method
- Automated browser instrumentation
- Coverage
- Full · methodology 0.9
Privacy exposure
61 / 100
High measured exposure
Summary of the tested session
During tested sessions on six pages, the site contacted 8 recipient companies, including 2 documented data brokers. One advertising request included the URL path of a health article. Analytics requests continued after consent was rejected.
Evidence coverage: Full
All supported scenarios tested; request contents readable for nearly all recipients. Readable request contents: 100%.
Principal findings
ObservedSeverity: HighConfidence: High
Identifier sync request to two documented data brokers after acceptance
After consent was accepted, the browser sent cookie identifiers to Keystone Identity Graph and Brightpath Data Co. on article pages.
ObservedSeverity: ModerateConfidence: High
Analytics requests continued after consent was rejected
With optional cookies rejected, page views and scroll depth were still sent to Tallymark Analytics. No cookie identifier was included.
What information was involved
A permission alone is not treated as evidence of collection or transmission.
| Category | Status | Detail |
|---|---|---|
| Advertising and device identifiers | Observed in a transmission | Cookie identifiers sent to 4 recipients after acceptance. |
| Network information | Observed in a transmission | IP address visible to every contacted server. |
| Approximate or precise location | Observed in a transmission | Region code (state-level) in one ad request. |
| Browsing and interaction events | Observed in a transmission | Page views and scroll depth events. |
| App usage and viewing events | Not assessable with this method | Not applicable to a website scan. |
| Account or contact information | Not assessable with this method | Signed-in sessions were not tested. |
| Sensitive contextual information | Observed in a transmission | Health article URL path in one ad request. |
Behavior under tested privacy choices
| Scenario | Status | Recipients contacted | Companies |
|---|---|---|---|
| Consent accepted | Tested | 8 | Adreach Exchange, Lanternfly Ads, Brightpath Data Co., Keystone Identity Graph, Tallymark Analytics, Sentinel Verify, Quill Consent, Nimbus Edge |
| Consent rejected | Tested | 4 | Tallymark Analytics, Sentinel Verify, Quill Consent, Nimbus Edge |
| Consent withdrawn | Tested | 3 | Tallymark Analytics, Quill Consent, Nimbus Edge |
Why this rating
Illustrative · methodology 0.9
Sensitivity of observed information10/20
Persistence and linkability of identifiers15/20
Recipient roles and dissemination evidence16/20
Behavior under tested privacy choices12/20
Disclosure–observation discrepancies8/20
Five dimensions, 0 to 20 each, sum to the score. Coverage gaps never lower a score.
What remains unknown
- Signed-in and subscriber sessions were not tested.
- Six article and section pages were sampled; other pages may behave differently.
- Scan region was US-West; behavior may differ by region.
What you can do
Reject optional cookies on this site
In testing, advertising and broker requests stopped.
Review a recipient’s privacy information
Some recipients offer their own opt-out or deletion process.
Not a legal compliance certification or a safety guarantee. Child-audience assessment: Not assessed (separate from this rating). 8 recipient companies observed in this scan.