Valo Systems · Article evidence

Website privacy comparison

Browser observations from ten South African sites in retail, news, banking and telecoms, alongside the publisher’s site. Open a site for screenshots, the test phases and the redacted network record.

Back to the article

How we checked

We revisited the four retail sites, three news sites, two telecoms sites and one bank from the original comparison. Valo, the publisher, was checked separately using the same method.

Each first visit started with a fresh, logged-out Chrome session on a 1440 × 1000 desktop viewport, with the language set to South African English and the time zone set to Africa/Johannesburg. The connection was identified as South African by the network check. The observation window started at navigation and ran for 12 seconds after Chrome reported that the initial document was ready (DOMContentLoaded).

Where the homepage exposed a relevant choice we could operate, separate fresh sessions were used for rejection and acceptance. Those observation windows include the click and the next 12 seconds. Return visits reused that session. Withdrawal was recorded where a suitable preference control could be reached. The checks used public pages and cookie controls only. The screenshots show the page as it appeared in the corresponding phase. Selected screenshot excerpts are shown here, with any crop stated in the caption.

The measurement column counts observed HTTP 2xx responses to recognised Google Analytics, Meta Pixel and Microsoft Clarity measurement endpoints on GET or POST requests. Other matched resources are shown separately. The log also records recognised attempts without a successful response. The cookie column covers selected names observed in browser storage at the end of each window.

These are time-bound observations of the specified public pages and endpoint classes. Server activity, use of information after receipt and the basis for processing are outside the browser check. The log contains elapsed timing, phase, destination host, endpoint class and response outcome. It omits payloads, full URLs, identifiers and cookie values.

In the primary first-visit checks, eight of the ten external sites returned a successful response from at least one of the measurement endpoints checked. The repeat checks are shown separately because results can vary between fresh sessions.

Retail

Takealot

Requested https://www.takealot.com/

Separately sourced privacy notice

Redacted network log (JSON)

Controls we saw. The first screen showed a cookie notice with Got it. The notice stayed dismissed on return after acknowledgement.

First visit · Primary run

08 Nov 2026, 23:18:56 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 5 of 5 attempts Meta Pixel script, Google tag script, Google advertising domain or endpoint _fbp, _ga, _ga_*, _gcl_*, _gid, _ttp
First visit, cropped to the cookie notice and Got it button.
First visit, cropped to the cookie notice and Got it button. Open screenshot
Acknowledge the prompt · Follow-up for this control

08 Nov 2026, 23:20:37 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked Got it.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 5 of 5 attempts Meta Pixel script, Google tag script, Google advertising domain or endpoint _fbp, _ga, _ga_*, _gcl_*, _gid, _ttp
During and after the choice 1 of 1 attempts None matched _fbp, _ga, _ga_*, _gcl_*, _gid, _ttp
Return visit after the choice 5 of 5 attempts Meta Pixel script, Google advertising domain or endpoint _fbp, _ga, _ga_*, _gcl_*, _gid, _ttp
Return visit after acknowledging the notice, full viewport.
Return visit after acknowledging the notice, full viewport. Open screenshot

Retail

Bash

Requested https://bash.com/

Separately sourced privacy notice

Redacted network log (JSON)

Controls we saw. A cookie prompt was not visible in the first viewport.

First visit · Primary run

08 Nov 2026, 23:18:57 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 4 of 4 attempts Google tag script, Meta Pixel script, Google Fonts, Google advertising domain or endpoint _clck, _clsk, _fbp, _ga, _ga_*, _gcl_*, _ttp
First visit, full viewport. A cookie prompt was not visible here.
First visit, full viewport. A cookie prompt was not visible here. Open screenshot

Retail

Checkers (Sixty60 website)

Requested https://www.checkers.co.za/

Separately sourced privacy notice

Redacted network log (JSON)

Controls we saw. A cookie prompt was not visible in the first viewport of the Sixty60 website.

First visit · Primary run

08 Nov 2026, 23:19:11 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 3 of 3 attempts Google advertising domain or endpoint, Google tag script, Meta Pixel script _fbp, _ga, _ga_*, _gcl_*, _ttp
First visit, full viewport of the Sixty60 website. A cookie prompt was not visible here.
First visit, full viewport of the Sixty60 website. A cookie prompt was not visible here. Open screenshot

Retail

Makro

Requested https://www.makro.co.za/

Separately sourced privacy notice

Redacted network log (JSON)

Controls we saw. Accept and Reject non-essential cookies were visible behind a sign-in overlay. Both separate choice sessions reached a browser challenge, so the effect of either choice could not be verified.

First visit · Primary run

08 Nov 2026, 23:19:20 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 1 of 1 attempts Google tag script, Meta Pixel script, Google advertising domain or endpoint _fbp, _ga, _ga_*, _ttp
First visit, cropped below the location header. The cookie buttons appear behind the sign-in overlay.
First visit, cropped below the location header. The cookie buttons appear behind the sign-in overlay. Open screenshot
Reject · Primary run

08 Nov 2026, 23:19:40 SAST · Chrome/150.0.7871.24 · 12-second observation window

An access challenge or denial appeared. HTTP 200.

The separate rejection session stopped at a browser challenge.
The separate rejection session stopped at a browser challenge. Open screenshot
Accept · Primary run

08 Nov 2026, 23:19:53 SAST · Chrome/150.0.7871.24 · 12-second observation window

An access challenge or denial appeared. HTTP 200.

News

News24

Requested https://www.news24.com/

Separately sourced privacy notice

Redacted network log (JSON)

Controls we saw. The prompt showed OK and links to policy information.

First visit · Primary run

08 Nov 2026, 23:18:50 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 8 of 8 attempts Google advertising domain or endpoint, Google tag script, Meta Pixel script, Google Fonts _clck, _clsk, _fbp, _ga, _ga_*, _gcl_*, _ttp
First visit, cropped to the cookie notice and OK button.
First visit, cropped to the cookie notice and OK button. Open screenshot
Acknowledge the prompt · Primary run

08 Nov 2026, 23:19:03 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked OK.

We could not verify withdrawal. No matching public preference control found.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 8 of 8 attempts Google advertising domain or endpoint, Google tag script, Meta Pixel script, Google Fonts _clck, _clsk, _fbp, _ga, _ga_*, _gcl_*, _ttp
During and after the choice 3 of 3 attempts None matched _clck, _clsk, _fbp, _ga, _ga_*, _gcl_*, _ttp
Return visit after the choice 11 of 11 attempts Google advertising domain or endpoint, Google tag script, Meta Pixel script, Google Fonts _clck, _clsk, _fbp, _ga, _ga_*, _gcl_*, _ttp
First visit · Repeat run

08 Nov 2026, 23:20:39 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 8 of 8 attempts Google advertising domain or endpoint, Google tag script, Meta Pixel script, Google Fonts _clck, _clsk, _fbp, _ga, _ga_*, _gcl_*, _ttp
Acknowledge the prompt · Repeat run

08 Nov 2026, 23:20:52 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked OK.

We could not verify withdrawal. No matching public preference control found.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 10 of 10 attempts Google advertising domain or endpoint, Google tag script, Meta Pixel script, Google Fonts _clck, _clsk, _fbp, _ga, _ga_*, _gcl_*, _ttp
During and after the choice 4 of 4 attempts None matched _clck, _clsk, _fbp, _ga, _ga_*, _gcl_*, _ttp
Return visit after the choice 10 of 10 attempts Google advertising domain or endpoint, Google tag script, Meta Pixel script, Google Fonts _clck, _clsk, _fbp, _ga, _ga_*, _gcl_*, _ttp

News

The Citizen

Requested https://www.citizen.co.za/

Separately sourced privacy notice

Redacted network log (JSON)

Controls we saw. Agree, Disagree and More Options were visible. The Privacy control reopened settings in the withdrawal follow-up.

First visit · Primary run

08 Nov 2026, 23:18:50 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 3 of 3 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _ga, _ga_*
First visit, cropped to the cookie prompt and its three choices.
First visit, cropped to the cookie prompt and its three choices. Open screenshot
Reject · Primary run

08 Nov 2026, 23:19:08 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked DISAGREE.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 3 of 3 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _ga, _ga_*
During and after the choice 4 of 4 attempts Google advertising domain or endpoint _ga, _ga_*
Return visit after the choice 5 of 5 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _ga, _ga_*
Accept · Primary run

08 Nov 2026, 23:19:55 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked AGREE.

We could not verify withdrawal. No matching public preference control found.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 3 of 3 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _ga, _ga_*
During and after the choice 5 of 5 attempts Google advertising domain or endpoint, Google tag script, Google Fonts _clck, _clsk, _ga, _ga_*, _ttp
Return visit after the choice 7 of 7 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _clck, _clsk, _ga, _ga_*, _ttp
First visit · Repeat run

08 Nov 2026, 23:20:39 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 3 of 3 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _ga, _ga_*
Reject · Repeat run

08 Nov 2026, 23:20:52 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked DISAGREE.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 3 of 3 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _ga, _ga_*
During and after the choice 4 of 4 attempts Google advertising domain or endpoint _ga, _ga_*
Return visit after the choice 5 of 5 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _ga, _ga_*
Accept · Repeat run

08 Nov 2026, 23:21:29 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked AGREE.

Opened the preferences using Privacy.

We could not verify withdrawal. No matching reject control in preferences.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 3 of 3 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _ga, _ga_*
During and after the choice 5 of 5 attempts Google advertising domain or endpoint, Google tag script _clck, _clsk, _ga, _ga_*, _ttp
Return visit after the choice 8 of 8 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _clck, _clsk, _ga, _ga_*, _ttp
Accept · Withdrawal follow-up

08 Nov 2026, 23:23:54 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked AGREE.

Opened the preferences using Privacy.

Clicked REJECT ALL to request withdrawal.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 3 of 3 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _ga, _ga_*
During and after the choice 5 of 5 attempts Google advertising domain or endpoint, Google tag script _clck, _clsk, _ga, _ga_*, _ttp
Return visit after the choice 7 of 7 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _clck, _clsk, _ga, _ga_*, _ttp
During and after withdrawal 1 of 1 attempts None matched _clck, _clsk, _ga, _ga_*, _ttp
Return visit after withdrawal 5 of 5 attempts Google Fonts, Google advertising domain or endpoint, Google tag script _clck, _clsk, _ga, _ga_*, _ttp
Reopened cookie preferences, cropped to the settings panel.
Reopened cookie preferences, cropped to the settings panel. Open screenshot

News

IOL

Requested https://iol.co.za/

Separately sourced privacy notice

Redacted network log (JSON)

Controls we saw. A cookie prompt was not visible on the first screen. The primary visit had zero successful responses from the endpoints checked. The repeat recorded responses from Google Analytics, Meta Pixel and Microsoft Clarity.

First visit · Primary run

08 Nov 2026, 23:19:47 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice None in our window Google advertising domain or endpoint, Google tag script, Meta Pixel script _gcl_*, _ttp
First visit, full viewport. A cookie prompt was not visible here.
First visit, full viewport. A cookie prompt was not visible here. Open screenshot
First visit · Repeat run

08 Nov 2026, 23:21:43 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 12 of 12 attempts Google advertising domain or endpoint, Google tag script, Meta Pixel script _clck, _clsk, _fbp, _ga, _ga_*, _gcl_*, _gid, _ttp

Banking

Standard Bank

Requested https://www.standardbank.co.za/

Separately sourced privacy notice

Redacted network log (JSON)

Controls we saw. A cookie prompt was not visible in the first viewport.

First visit · Primary run

08 Nov 2026, 23:18:46 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 1 of 1 attempts Meta Pixel script, Google tag script, Google advertising domain or endpoint, Google Fonts _fbp, _gcl_*
First visit, full viewport. A cookie prompt was not visible here.
First visit, full viewport. A cookie prompt was not visible here. Open screenshot
First visit · Repeat run

08 Nov 2026, 23:20:34 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 2 of 2 attempts Meta Pixel script, Google Fonts, Google advertising domain or endpoint _fbp, _ttp

Telecom

MTN

Requested https://www.mtn.co.za/

Separately sourced privacy notice

Redacted network log (JSON)

Controls we saw. The primary first viewport still showed a loading spinner. Another session showed Manage cookies, Essential cookies only and Accept all.

First visit · Primary run

08 Nov 2026, 23:18:46 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 2 of 2 attempts Google tag script, Meta Pixel script, Google advertising domain or endpoint _fbp, _ga, _ga_*, _gcl_*, _ttp
First visit, full viewport. The page was still loading at the end of this window.
First visit, full viewport. The page was still loading at the end of this window. Open screenshot
Reject · Primary run

08 Nov 2026, 23:19:05 SAST · Chrome/150.0.7871.24 · 12-second observation window

A later step did not complete. The table includes completed windows.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 4 of 4 attempts Google tag script, Meta Pixel script, Google advertising domain or endpoint, Google Fonts _fbp, _ga, _ga_*, _gcl_*, _ttp
Accept · Primary run

08 Nov 2026, 23:19:31 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked Accept all.

We could not verify withdrawal. No matching public preference control found.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 4 of 4 attempts Google tag script, Meta Pixel script, Google advertising domain or endpoint, Google Fonts _fbp, _ga, _ga_*, _gcl_*, _ttp
During and after the choice None in our window None matched _fbp, _ga, _ga_*, _gcl_*, _ttp
Return visit after the choice 4 of 4 attempts Google tag script, Meta Pixel script, Google advertising domain or endpoint, Google Fonts _fbp, _ga, _ga_*, _gcl_*, _ttp
First visit · Repeat run

08 Nov 2026, 23:21:13 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 1 of 1 attempts Google tag script, Google Fonts, Google advertising domain or endpoint None matched
Repeat first visit, cropped to the cookie choices after the page loaded.
Repeat first visit, cropped to the cookie choices after the page loaded. Open screenshot
Reject · Repeat run

08 Nov 2026, 23:21:27 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked Essential cookies only.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 4 of 4 attempts Google tag script, Meta Pixel script, Google advertising domain or endpoint, Google Fonts _fbp, _ga, _ga_*, _gcl_*, _ttp
During and after the choice None in our window None matched _fbp, _ga, _ga_*, _gcl_*, _ttp
Return visit after the choice 4 of 4 attempts Google tag script, Meta Pixel script, Google advertising domain or endpoint, Google Fonts _fbp, _ga, _ga_*, _gcl_*, _ttp
Accept · Repeat run

08 Nov 2026, 23:22:11 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked Accept all.

We could not verify withdrawal. No matching public preference control found.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice 4 of 4 attempts Google tag script, Meta Pixel script, Google advertising domain or endpoint, Google Fonts _fbp, _ga, _ga_*, _gcl_*, _ttp
During and after the choice None in our window None matched _fbp, _ga, _ga_*, _gcl_*, _ttp
Return visit after the choice 4 of 4 attempts Google tag script, Meta Pixel script, Google advertising domain or endpoint, Google Fonts _fbp, _ga, _ga_*, _gcl_*, _ttp

Telecom

Vodacom

Requested https://www.vodacom.co.za/

Separately sourced privacy notice

Redacted network log (JSON)

Controls we saw. The first screen offered Manage Cookies, Reject All non-essential cookies and Accept all Cookies.

First visit · Primary run

08 Nov 2026, 23:19:04 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice None in our window None matched None matched
First visit, cropped to the cookie prompt and its three choices.
First visit, cropped to the cookie prompt and its three choices. Open screenshot
Reject · Primary run

08 Nov 2026, 23:19:21 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked Reject All non-essential cookies.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice None in our window None matched None matched
During and after the choice None in our window None matched None matched
Return visit after the choice None in our window None matched None matched
Return visit after rejecting non-essential cookies, full viewport.
Return visit after rejecting non-essential cookies, full viewport. Open screenshot
Accept · Primary run

08 Nov 2026, 23:19:59 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked Accept all Cookies.

We could not verify withdrawal. No matching public preference control found.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice None in our window None matched None matched
During and after the choice 5 of 5 attempts Meta Pixel script, Google tag script, Google advertising domain or endpoint _clck, _clsk, _fbp, _gcl_*, _ttp
Return visit after the choice None in our window None matched _clck, _clsk, _fbp, _gcl_*, _ttp
Accept · Preferences follow-up

08 Nov 2026, 23:22:18 SAST · Chrome/150.0.7871.24 · 12-second observation window

Clicked Accept all Cookies.

We could not verify withdrawal. No matching public preference control found.

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice None in our window None matched None matched
During and after the choice 5 of 5 attempts Meta Pixel script, Google tag script, Google advertising domain or endpoint _clck, _clsk, _fbp, _gcl_*, _ttp
Return visit after the choice None in our window None matched _clck, _clsk, _fbp, _gcl_*, _ttp

Publisher

VALO Systems

Requested https://valosystems.co.za/

Separately sourced privacy notice

Redacted network log (JSON)

Controls we saw. Valo had paused its optional analytics before the check. A cookie prompt was not visible in the first viewport.

First visit · Primary run

08 Nov 2026, 23:20:36 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice None in our window None matched None matched
First visit, full viewport. Valo had paused its optional analytics before the check.
First visit, full viewport. Valo had paused its optional analytics before the check. Open screenshot
First visit · Repeat run

08 Nov 2026, 23:21:13 SAST · Chrome/150.0.7871.24 · 12-second observation window

Phase Measurement responses (HTTP 2xx) Other recognised responses Recognised cookie names
Before a choice None in our window None matched None matched