euronews.com
Europe's largest news channel — 335 requests, 45 domains. A Didomi CMP is present, but advertising infrastructure (GPT, Criteo, Amazon Ads, DoubleVerify) loads roughly 700 ms before it's ready. The policy discloses transmission of email addresses to LiveRamp.
Request timeline
Declared versus actual
Transfer timings
DoubleVerify blocking time
GPT — advertising infrastructure
Criteo Prebid
LiveRamp identity resolution
Detected trackers
Show data recipients (17)
- Google Publisher Tag / GPT (securepubads.g.doubleclick.net)
- Google Ads (pagead2.googlesyndication.com)
- Connatix (capi.connatix.com, vid.connatix.com) — video advertising
- DoubleVerify (pub.doubleverify.com, vtrk.dv.tech)
- Chartbeat (static.chartbeat.com, ping.chartbeat.net)
- Adobe Launch / DTM (assets.adobedtm.com)
- Adobe Analytics (euronewsgroup.d3.sc.omtrdc.net)
- LiveRamp (launchpad-wrapper.privacymanager.io)
- Criteo (static.criteo.net)
- Amazon Ads (c.amazon-adsystem.com, aax.amazon-adsystem.com)
- Opti-Digital (scripts.opti-digital.com) — header bidding
- ml314.com — identity resolution
- html-load.com — advertising SDK
- Useinsider (euronewsfr.api.useinsider.com)
- HadronID (cdn.hadronid.net)
- Google Fonts (fonts.googleapis.com)
- JW Player (cdn.jwplayer.com, ssl.p.jwpcdn.com)
Indicators of GDPR non-compliance
- GDPR Art. 6(1), Art. 5(1)(a)vtrk.dv.tech (+192 ms), html-load.com (+217 ms), GPT (+218 ms), JW Player (+223 ms), ad-delivery.net (+273 ms), Google Ads (+307 ms), Criteo (+308 ms) — all load before the Didomi CMP. A critical gap: advertising infrastructure is initialized roughly 700 ms before the banner appears.
- GDPR Art. 7The Didomi CMP (+218 ms) loads at the same time as the advertising services, but does not block them. GPT, DoubleVerify, Criteo, and Amazon Ads are active before consent.
- GDPR Art. 13(1)(e) — LiveRampThe policy explicitly states that email addresses are transmitted to LiveRamp in hashed form for identity matching. LiveRamp is used for cross-site visitor tracking via hashed identifiers.
Context
Euronews is Europe’s largest news television channel and online publication, headquartered in Lyon. Owned by the NBCUniversal (Comcast) media group. Broadcasts in 12 languages, reaching over 400 million households. HAR: 335 requests, 45 domains. Session on the homepage.
Didomi is present — but doesn’t block
Didomi is a well-regarded French CMP. Euronews uses it. The problem isn’t the choice of CMP, but its configuration: GPT, DoubleVerify, Criteo, and Amazon Ads load at the same time Didomi initializes, rather than after consent is obtained. The gap between the first advertising request (+192 ms) and the banner being ready is roughly 700 ms.
Connatix — video advertising
capi.connatix.com, vid.connatix.com, cds.connatix.com — Connatix, an American video advertising platform. 43 requests per session. Euronews’s video player and ad breaks run through Connatix. imasdk.googleapis.com — Google’s IMA SDK for video advertising.
LiveRamp — an explicit admission in the policy
The policy states directly: an email address submitted during registration or a newsletter signup is hashed and transmitted to LiveRamp for identity resolution. This means Euronews visitors can be identified and tracked on other sites using LiveRamp, via hashed email matching.
Adobe Analytics via omtrdc.net
euronewsgroup.d3.sc.omtrdc.net — Adobe Analytics, American enterprise analytics (Adobe Experience Cloud). Visit data goes to Adobe’s infrastructure in the USA. Running in parallel with Chartbeat — two analytics systems at once.
Conclusion
Euronews shows a standard picture for a large media outlet with programmatic advertising: a Didomi CMP is present, but the advertising infrastructure loads ahead of it. 45 domains, LiveRamp for identity resolution, Connatix for video advertising, Adobe Analytics and Chartbeat running simultaneously. The privacy policy honestly discloses LiveRamp — a rarity among media sites.
How to verify: download the file and compute its checksum — sha256sum file.har (Linux, macOS) or certutil -hashfile file.har SHA256 (Windows); it must match the one shown. The conclusions apply to the scope of this measurement — see the limitations of the method.
4ab74cf5f8505d64d6e899238007ea9324a2e229ee20c0f24f3b08e85b096300Want a response from the company about this audit? → Open the tool
Fill in once — it will be inserted into every letter below:
All fields are required to print the document — this is a formal requirement of the letter itself (the particulars of an official submission), not data collection: nothing is sent or saved anywhere, it all stays in your browser and disappears when you close the page. See the methodology for details.
RIA DigiDoc — phone · Smart-ID / Mobile-ID
Send this letter directly to the company first — before contacting the regulator it has the right to respond (GDPR Art. 12(3) — 30 days).
Тема: Запрос доступа к персональным данным (ст. 15 GDPR) — euronews.com Кому: [укажите адрес компании — DPO / поддержка / юридический отдел] От: [Ваше имя], [контактный email] Прошу предоставить доступ к моим персональным данным, обрабатываемым в связи с использованием сайта euronews.com. 1. Категории данных и цели обработки (ст. 15(1)(a)-(c)) На основании независимого технического анализа сайта прошу подтвердить и подробно раскрыть следующие категории обработки: 1) vtrk.dv.tech (+192 мс), html-load.com (+217 мс), GPT (+218 мс), JW Player (+223 мс), ad-delivery.net (+273 мс), Google Ads (+307 мс), Criteo (+308 мс) — всё загружается до Didomi CMP. Разрыв критический: рекламная инфраструктура инициализирована за ~700 мс до появления баннера. 2) Didomi CMP (+218 мс) загружается одновременно с рекламными сервисами, но не блокирует их. GPT, DoubleVerify, Criteo, Amazon Ads активны до согласия. 3) Политика прямо указывает что email передаётся в LiveRamp в хешированном виде для identity matching. LiveRamp используется для cross-site трекинга посетителей через hashed identifiers. 2. Получатели, сроки хранения и передача за пределы ЕЭЗ (ст. 15(1)(c)-(d), 46) Прошу также указать полный список третьих лиц-получателей, применимые сроки хранения по каждой категории и правовые основания передачи данных за пределы ЕЭЗ, если таковая происходит. Полный технический разбор с доказательствами (сохранённый сетевой журнал, контрольная сумма SHA-256) опубликован по адресу: https://gdpru.eu/en/audits/euronews-com/ 3. Автоматизированная обработка и профилирование (ст. 15(1)(h)) Прошу сообщить, применяется ли в отношении меня автоматизированное принятие решений или профилирование, и если да — раскрыть логику такой обработки. С уважением, [Ваше имя] [контактный email] [Страна] [Дата]
Subject: Data access request (GDPR Art. 15) — euronews.com To: [insert the company's address — DPO / support / legal department] From: [Your name], [contact email] I request access to my personal data processed in connection with the website euronews.com. 1. Categories of data and purposes of processing (Art. 15(1)(a)-(c)) Based on an independent technical analysis of the site, I request confirmation and detailed disclosure of the following categories of processing: 1) vtrk.dv.tech (+192 ms), html-load.com (+217 ms), GPT (+218 ms), JW Player (+223 ms), ad-delivery.net (+273 ms), Google Ads (+307 ms), Criteo (+308 ms) — all load before the Didomi CMP. A critical gap: advertising infrastructure is initialized roughly 700 ms before the banner appears. 2) The Didomi CMP (+218 ms) loads at the same time as the advertising services, but does not block them. GPT, DoubleVerify, Criteo, and Amazon Ads are active before consent. 3) The policy explicitly states that email addresses are transmitted to LiveRamp in hashed form for identity matching. LiveRamp is used for cross-site visitor tracking via hashed identifiers. 2. Recipients, retention periods, and transfers outside the EEA (Art. 15(1)(c)-(d), 46) I also request the full list of third-party recipients, the applicable retention period for each category, and the legal basis for any transfer of data outside the EEA. The full technical audit with evidence (saved network log, SHA-256 checksum) is published at: https://gdpru.eu/en/audits/euronews-com/ 3. Automated processing and profiling (Art. 15(1)(h)) Please state whether I am subject to automated decision-making or profiling, and if so, disclose the logic involved. Sincerely, [Your name] [contact email] [Country] [Date]
RIA DigiDoc — phone · Smart-ID / Mobile-ID
Where to file: Commission nationale de l'informatique et des libertés (CNIL) — cnil.fr
The regulator reviews complaints in its national language. There is an officially translated template from the European Data Protection Board (EDPB) — you can use it instead of or alongside this letter: Official EDPB complaint form (PDF, your language)
Тема: Жалоба на обработку персональных данных — euronews.com 1. Предмет жалобы Я подаю жалобу в отношении обработки моих персональных данных сайтом euronews.com. 2. Обстоятельства Я посетил сайт euronews.com и обнаружил признаки несоответствия обработки моих персональных данных требованиям GDPR. Технический разбор, опубликованный на gdpru.eu 13.05.2026 (открытая методология, воспроизводимые измерения), документирует следующие признаки: 1) vtrk.dv.tech (+192 мс), html-load.com (+217 мс), GPT (+218 мс), JW Player (+223 мс), ad-delivery.net (+273 мс), Google Ads (+307 мс), Criteo (+308 мс) — всё загружается до Didomi CMP. Разрыв критический: рекламная инфраструктура инициализирована за ~700 мс до появления баннера. 2) Didomi CMP (+218 мс) загружается одновременно с рекламными сервисами, но не блокирует их. GPT, DoubleVerify, Criteo, Amazon Ads активны до согласия. 3) Политика прямо указывает что email передаётся в LiveRamp в хешированном виде для identity matching. LiveRamp используется для cross-site трекинга посетителей через hashed identifiers. Полная техническая документация опубликована по адресу: https://gdpru.eu/en/audits/euronews-com/ 3. Положения GDPR, соблюдение которых прошу проверить GDPR Art. 6(1), Art. 5(1)(a); GDPR Art. 7; GDPR Art. 13(1)(e) — LiveRamp 4. Требование Прошу проверить изложенные обстоятельства и, если несоответствие подтвердится, принять меры, предусмотренные статьёй 58(2) GDPR. 5. Приложения Полная доказательная база — HAR-файл, контрольная сумма SHA-256 и цитата из политики конфиденциальности сайта, документирующая указанное противоречие — опубликована и проверяема по ссылке в пункте 2 выше. С уважением, [Ваше имя] [контактный email] [Страна] [Дата]
Subject: Complaint regarding personal data processing — euronews.com 1. Subject of the complaint I am filing a complaint regarding the processing of my personal data by the website euronews.com. 2. Circumstances I visited the website euronews.com and found indications that the processing of my personal data does not comply with the GDPR. The technical analysis published on gdpru.eu on 13 May 2026 (open methodology, reproducible measurements) documents the following indications: 1) vtrk.dv.tech (+192 ms), html-load.com (+217 ms), GPT (+218 ms), JW Player (+223 ms), ad-delivery.net (+273 ms), Google Ads (+307 ms), Criteo (+308 ms) — all load before the Didomi CMP. A critical gap: advertising infrastructure is initialized roughly 700 ms before the banner appears. 2) The Didomi CMP (+218 ms) loads at the same time as the advertising services, but does not block them. GPT, DoubleVerify, Criteo, and Amazon Ads are active before consent. 3) The policy explicitly states that email addresses are transmitted to LiveRamp in hashed form for identity matching. LiveRamp is used for cross-site visitor tracking via hashed identifiers. Full technical documentation is published at: https://gdpru.eu/en/audits/euronews-com/ 3. GDPR provisions I ask you to examine GDPR Art. 6(1), Art. 5(1)(a); GDPR Art. 7; GDPR Art. 13(1)(e) — LiveRamp 4. Request I request that you examine the circumstances described and, if non-compliance is confirmed, apply the measures provided for in Article 58(2) GDPR. 5. Attachments The full evidence base — the HAR file, its SHA-256 checksum and the quotation from the site's privacy policy documenting the stated contradiction — is published and verifiable at the link in point 2 above. Sincerely, [Your name] [contact email] [Country] [Date]