MLB gets a D. Here's what loads before you agree
Checked October 25, 2026 in a US browser, with no choice made on any banner.
mlb.com
64/100
- Online since 1994, 31 years
- No consent banner seen
- Built with Next.js
What cost it points
- high
Ad networks log your visit before you choose.
- high
You can't pinch to zoom on a phone.
- medium
Outside analytics log your visit before you choose.
- medium
A first visit can be downgraded to unencrypted.
- medium
One hijacked script could reach the whole page.
- medium
No banner asks you, so there's nothing to refuse.
- low
Keyboard users can't skip the menu.
What loaded before you chose
Third-party trackers that fired before any choice, across 2 visits.
- Ad trackers
- Google Ads / DoubleClick, Meta (Facebook) Pixel, TikTok Pixel, X (Twitter) Ads
- Analytics
- Google Analytics
- Cookies before a choice
- 39
- Session recording
- None
- Consent banner
- None
- Opt-out link
- Yes
The fine print
- Terms of use
- 47 min read (opens in a new tab) · 11,071 words
- Privacy policy
- 47 min read (opens in a new tab) · 11,207 words
- Forced arbitration
- Yes: no court
- Class-action waiver
- Yes
- AI in the privacy policy
- None
- Accessibility statement
- Yes
Read automatically, so unusual wording can be missed. Not scored.
Security
- HTTPS
- Yes
- HSTS
- No
- Content-Security-Policy
- No
- Framing blocked
- Yes
- Secret keys in code
- None
- security.txt
- Yes
Not an audit or legal advice. Run mlb.com? Tell us what changed. How we grade
News, sports and reference
Get your own site to an A
14-day free trial · card needed to start, cancel before day 14 and you pay nothing