Scan 3296d019-5dc6-40d7-8e34-99f8062185b5

https://www.incuda.com

Gestartet: 2026-08-22T08:47:40 · Beendet: 2026-08-22T08:48:09 · Phase: done

Fehler: enrich: RuntimeError: Tracker-DB nicht bootstrappt. Starte: .venv/bin/python -m crawler.tracker_db bootstrap

Findings (1)

medium

1 Cookies mit Lifetime > 12 Monate

Die deutschen Aufsichtsbehörden (DSK) empfehlen, Cookies nicht länger als ein Jahr aufzubewahren. Längere Lifetimes sollten mit erneuter Einwilligung begründbar sein.

Norm: DSK-Orientierungshilfe Telemedien 2021 · Kategorie: Cookie-Eigenschaften

Evidenz (1)

m@m.stripe.com (~399 Tage)

Empfehlung: Lifetime auf max. 12 Monate reduzieren oder Cookie-Refresh bei erneutem Consent.

Übersicht

Entdeckte URLs	1
Pre-Consent erfasst	1
Post-Consent erfasst	1
Consent-Banner erkannt	✓ generic (text_match)

Policy-Analyse (Claude)

imprint: AuthenticationError: Error code: 401 - {'type': 'error', 'error': {'type': 'authentication_error', 'message': 'API key is invalid.'}, 'request_id': None}

Pre/Post-Vergleich pro Seite

Seite	Cookies (Pre → Post)	Requests (Pre → Post)	3rd-Party (Pre → Post)	Storage (Pre → Post)
https://www.incuda.com	3 → 3	28 → 28	27 → 27	0 → 0

Steigerung zwischen Pre und Post zeigt Tracker, die erst nach Consent geladen werden (DSGVO-konform). Bleibt die Zahl gleich, könnten Tracker bereits ohne Einwilligung aktiv sein (TTDSG-Risiko).

https://www.incuda.com

Pre-Consent HTTP 200 · 3 Cookies · 28 Requests · 27 3rd-Party · 0 Storage

Cookies (3)

Name	Domain	Lebenszeit	HttpOnly	Secure	SameSite
__cf_bm	.calendly.com	20687 d	✓	✓	None
_cfuvid	.calendly.com	Session	✓	✓	None
m	m.stripe.com	21087 d	✓	✓	None

Requests (28, davon 27 3rd-Party)

Host	Typ	Methode	Status	Partei
www.incuda.com	document	GET	302	1st
www.incuda.net	document	GET	200	3rd
fonts.googleapis.com	stylesheet	GET	200	3rd
www.incuda.net	image	GET	200	3rd
www.incuda.net	image	GET	200	3rd
www.incuda.net	image	GET	200	3rd
www.incuda.net	image	GET	200	3rd
www.novuter.com	image	GET	200	3rd
www.novuter.com	image	GET	200	3rd
www.novuter.com	image	GET	200	3rd
novuter.com	image	GET	200	3rd
assets.calendly.com	script	GET	200	3rd
www.incuda.net	image	GET	200	3rd
www.incuda.net	image	GET	200	3rd
fonts.gstatic.com	font	GET	200	3rd
calendly.com	document	GET	200	3rd
assets.calendly.com	stylesheet	GET	200	3rd
assets.calendly.com	script	GET	200	3rd
assets.calendly.com	script	GET	200	3rd
assets.calendly.com	script	GET	200	3rd
assets.calendly.com	script	GET	200	3rd
js.stripe.com	script	GET	200	3rd
calendly.com	xhr	GET	200	3rd
js.stripe.com	document	GET	200	3rd
js.stripe.com	script	GET	200	3rd
m.stripe.network	document	GET	200	3rd
m.stripe.network	script	GET	200	3rd
m.stripe.com	xhr	POST	200	3rd

Post-Consent HTTP 200 · 3 Cookies · 28 Requests · 27 3rd-Party · 0 Storage

Cookies (3)

Name	Domain	Lebenszeit	HttpOnly	Secure	SameSite
__cf_bm	.calendly.com	20687 d	✓	✓	None
_cfuvid	.calendly.com	Session	✓	✓	None
m	m.stripe.com	21087 d	✓	✓	None

Requests (28, davon 27 3rd-Party)

Host	Typ	Methode	Status	Partei
www.incuda.com	document	GET	302	1st
www.incuda.net	document	GET	200	3rd
fonts.googleapis.com	stylesheet	GET	200	3rd
www.incuda.net	image	GET	200	3rd
www.incuda.net	image	GET	200	3rd
www.incuda.net	image	GET	200	3rd
www.incuda.net	image	GET	200	3rd
www.novuter.com	image	GET	200	3rd
www.novuter.com	image	GET	200	3rd
www.novuter.com	image	GET	200	3rd
novuter.com	image	GET	200	3rd
assets.calendly.com	script	GET	200	3rd
www.incuda.net	image	GET	200	3rd
www.incuda.net	image	GET	200	3rd
fonts.gstatic.com	font	GET	200	3rd
calendly.com	document	GET	200	3rd
assets.calendly.com	stylesheet	GET	200	3rd
assets.calendly.com	script	GET	200	3rd
assets.calendly.com	script	GET	200	3rd
assets.calendly.com	script	GET	200	3rd
assets.calendly.com	script	GET	200	3rd
js.stripe.com	script	GET	200	3rd
calendly.com	xhr	GET	200	3rd
js.stripe.com	document	GET	200	3rd
js.stripe.com	script	GET	200	3rd
m.stripe.network	document	GET	200	3rd
m.stripe.network	script	GET	200	3rd
m.stripe.com	xhr	POST	200	3rd