Iubenda

Early contact on all 21

On every one of the 21 sites, at least one company had been contacted before the consent banner could have been answered. That is the highest share of the nine consent platforms in this index, and the median site in the group had 8 companies arrive inside that window — also the highest before-consent median of the nine.

Those two figures describe the pages, not the product. The crawl counts, per site, how many companies were reached inside the window; it does not identify them, and it does not record where Iubenda's own requests fall.

The comparison set is nine platforms, which is small enough that a rank-one position here means less than the same rank would in a larger field.

The median site: 8 companies, 38 requests

The median site carrying Iubenda contacted 8 companies over 38 requests, 2 of those companies classified as tracking. That company count is second of the nine platforms here; the tracker count is third.

First contact came at a median of 595 ms after the page began loading, and the earliest first contact anywhere in the group was 197 ms. After the consent window closed, the median site added nothing further: the median number of companies appearing after the window is 0. On these sites the third-party contact that was going to happen had, for the median page, already happened.

Twenty-one sites, and what kind of twenty-one

The group is not a cross-section of the web. Italian publishing runs through it — repubblica.it at rank 946, 3bmeteo.com at 1451, libero.it at 2954, register.it at 3513 — alongside European hosting and domain brands: superhosting.bg at 1347, websupport.sk at 2445, loopia.se at 2448, transip.nl at 2932. The rest are developer-facing companies: revenuecat.com at 2158, gameanalytics.com at 2361, elastic.co at 2741, arduino.cc at 3615.

That concentration is worth holding onto when reading the medians. European publishers and hosting companies expect EU visitors and run the kind of commercial stack that comes with them. The medians describe that population.

The spread behind the medians

repubblica.it contacted 11 companies, 10 of them inside the consent window, first contact at 762 ms. libero.it reached 10 companies with all 10 inside the window at 627 ms. arduino.cc, the lightest of these examples, contacted 4 and all 4 fell inside the window, at 355 ms.

The other pattern is a split page. superhosting.bg contacted 6 companies with 3 inside the window; websupport.sk contacted 8 with 5 inside, and was also the latest of these examples to make any contact at all, at 1,529 ms.

Same banner product, two different loading orders. What separates them is what each site chose to load and when it chose to load it, which is a decision made in the site's own tags rather than in the consent tool.

No second banner anywhere in the group

Consent-tool detection on these 21 sites returned Iubenda and nothing else, on all 21. That is unusual enough to state plainly, because a site can carry two banner products at once — a platform's own tag plus an IAB TCF framework string, for instance — and in larger groups the tool counts overlap for that reason. Here they do not.

For anyone auditing a specific page rather than reading a summary, the per-site figures are the useful ones: how many companies, how many before the banner, how early the first request went out. MurmStack reports those three for whatever page you have open.