Provider
CriteoSee all Criteo cookies →Used by Criteo to determine the highest-level domain on which it can set cookies. Set briefly during the test, then expires.
Session
Criteo SA
cto_tld_test is a advertising cookie. Under Art. 5(3) ePrivacy Directive and the GDPR, it must not be set before the visitor has given prior, informed, freely-given consent.
If your scanner finds cto_tld_test on a page before the visitor interacts with your consent banner, that's a violation — the cookie loaded without a legal basis.
Fix: gate the script that sets this cookie behind your CMP, so it only fires after the relevant consent category is accepted.
Run a free CookieSentry scan to find every cookie set before consent — including cto_tld_test — and get a downloadable evidence PDF.
Run a free scan →