Skip to content
Trust Index · News, sports and reference

MLB gets a D. Here's what loads before you agree

Checked October 25, 2026 in a US browser, with no choice made on any banner.

Grade D

mlb.com

64/100

  • Online since 1994, 31 years
  • No consent banner seen
  • Built with Next.js
Consent and tracking25
Security70
Accessibility80
Transparency100

What cost it points

  • high

    Ad networks log your visit before you choose.

  • high

    You can't pinch to zoom on a phone.

  • medium

    Outside analytics log your visit before you choose.

  • medium

    A first visit can be downgraded to unencrypted.

  • medium

    One hijacked script could reach the whole page.

  • medium

    No banner asks you, so there's nothing to refuse.

  • low

    Keyboard users can't skip the menu.

What loaded before you chose

Third-party trackers that fired before any choice, across 2 visits.

Ad trackers
Google Ads / DoubleClick, Meta (Facebook) Pixel, TikTok Pixel, X (Twitter) Ads
Analytics
Google Analytics
Cookies before a choice
39
Session recording
None
Consent banner
None
Opt-out link
Yes

The fine print

Terms of use
47 min read (opens in a new tab) · 11,071 words
Privacy policy
47 min read (opens in a new tab) · 11,207 words
Forced arbitration
Yes: no court
Class-action waiver
Yes
AI in the privacy policy
None
Accessibility statement
Yes

Read automatically, so unusual wording can be missed. Not scored.

Security

HTTPS
Yes
HSTS
No
Content-Security-Policy
No
Framing blocked
Yes
Secret keys in code
None
security.txt
Yes

Not an audit or legal advice. Run mlb.com? Tell us what changed. How we grade

News, sports and reference

All 49 grades

Get your own site to an A

14-day free trial · card needed to start, cancel before day 14 and you pay nothing

Cookie consent and accessibility, free for 14 days

Paste one line of code today. The banner and the menu go live on your next page load.

14-day free trial · card needed to start, cancel before day 14 and you pay nothing