Costco gets an A. Here's what loads before you agree
Checked October 25, 2026 in a US browser, with no choice made on any banner.
costco.com
94/100
- Online since 1997, 29 years
- No consent banner seen
- Built with Next.js
What cost it points
- low
Another site could frame it to trick your clicks.
- low
Your browser may guess file types attackers can abuse.
- low
Keyboard users can't skip the menu.
- low
No published way to report a security hole.
- low
Full page addresses can leak to third parties.
What loaded before you chose
Third-party trackers that fired before any choice, across 2 visits.
- Ad trackers
- None
- Analytics
- None
- Cookies before a choice
- 3
- Session recording
- None
- Consent banner
- None
- Opt-out link
- Yes
The fine print
- Terms of use
- 35 min read (opens in a new tab) · 8,374 words
- Privacy policy
- Couldn't read it
- Forced arbitration
- Not found
- Class-action waiver
- Not found
- AI in the privacy policy
- Unknown
- Accessibility statement
- Yes
Read automatically, so unusual wording can be missed. Not scored.
Security
- HTTPS
- Yes
- HSTS
- Yes
- Content-Security-Policy
- Yes
- Framing blocked
- No
- Secret keys in code
- None
- security.txt
- No
Not an audit or legal advice. Run costco.com? Tell us what changed. How we grade
Shopping
Get your own site to an A
14-day free trial · card needed to start, cancel before day 14 and you pay nothing