glossier.com website review

Not measured in this review.

• Fails Core Web Vitals for real visitors

  Real Chrome users on phones do not pass Google's Core Web Vitals on your site (28-day field data from the Chrome UX Report (opens in a new tab)). Google uses this in ranking.

• Real-user INP: 204 ms

  204 ms

  Real visitors wait 204 ms for the page to respond to a tap (75th percentile). Good is under 200 ms.

• Real-user CLS: 0.13

  0.13

  For real visitors the layout shifts by 0.13 (75th percentile). Good is under 0.1.

• Page weight: 6.0 MB

  6.0 MB

  Your homepage downloads 6.0 MB on a phone, 1.6 MB of it images (27%). Under 2 MB keeps phones on slow connections fast.

• 1 image far larger than shown

  207 KiB

  1 image is downloaded at several times the size a phone draws it, for example HP_Mobile_1cb10641-89b6-4fa5-9c8b-f51b422ff956.png at 2,502 px wide, shown at 390 px. Resized copies would save about 207 KiB.

  Elements (1)

• About 1.7 g of CO₂ per visit

  1.71 g

  By the Sustainable Web Design model, a visit to your homepage emits about 1.71 g of CO₂e: 205.4 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• Orphan list items

  Some list items are not inside a list.

  Elements (3)

• Interactive controls must not be nested (7 elements)

  Interactive controls must not be nested: 7 elements on the page fail this check, rated serious by axe-core.

  Elements (3)

• Malformed lists

  Some lists contain elements other than list items, which screen readers announce wrongly.

  Elements (3)

• Landmarks should have a unique role or role/label/title (i.e. accessible name) combination (1 element)

  Landmarks should have a unique role or role/label/title (i.e. accessible name) combination: 1 element on the page fails this check, rated moderate by axe-core.

  Elements (1)

• All page content should be contained by landmarks (1 element)

  All page content should be contained by landmarks: 1 element on the page fails this check, rated moderate by axe-core.

  Elements (1)

• 1 form field without a label

  1 form field has no label, so screen readers announce an empty box and autofill guesses.

  View source

• Headings should not be empty (2 elements)

  Headings should not be empty: 2 elements on the page fail this check, rated minor by axe-core.

  Elements (2)

• Headings skip levels

  Headings skip levels (h2 → h4), which makes the page harder to scan with a screen reader.

  View source

• No H1 headline

  There is no <h1>, so neither visitors nor Google get a clear main headline.

• Title is short (8 characters)

  Your title is only 8 characters: “Glossier”. Between 30 and 65 characters leaves room to say what you do and for whom.

  View source

• No structured data

  No structured data (JSON-LD), so Google can't show rich results such as your logo, ratings or FAQs.

• Meta description is short (8 characters)

  Your meta description is only 8 characters: “Glossier”. 70 to 160 characters is enough to sell the click.

  View source

• 166 internal links, 20 external

  The homepage links to 166 pages on glossier.com and 20 external pages.

• No Organization structured data

  There is no Organization (or LocalBusiness) JSON-LD, so search engines and AI assistants have no machine-readable facts about who runs the site: its name, logo, profiles and contact details.

• 1 linked page hidden from search

  /collections/fragrance is marked noindex but linked from your homepage. If it is meant to be found, remove the noindex.

  Elements (1)

• 12 pages without a meta description

  /pages/holiday-gift-guide, /collections/fragrance, /collections/makeup, /collections/skincare, /collections/balms and /collections/body and 6 others have no meta description, so Google writes the search snippet from whatever text it finds.

  Elements (8)

• 2 links to non-canonical URLs

  Your homepage links to 2 pages by a URL that isn't their canonical one, for example /products/gift-card, whose canonical is /products/gift-card?variant=43781988974837. Linking straight to the canonical URL saves crawlers a detour and keeps ranking signals on one address.

  Elements (2)

• 8 pages without an H1

  /pages/holiday-gift-guide, /collections/fragrance, /collections/skincare, /collections/balms, /collections/body and /collections/glossiwear and 2 others have no <h1> headline, so visitors and search engines get no clear main topic.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 56 found) and read each the way a search engine does.

• 16 small tap targets

  16 of 44 tappable elements near the top of the page are smaller than 24 px, hard to hit with a thumb.

• 4 JavaScript errors while loading

  4 errors were logged to the browser console while the page loaded, for example “Failed to load resource: net::ERR_CONNECTION_RESET”.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• Thin social proof

  Social proof on the homepage: 16 testimonial or review blocks. Pairing it with named testimonials or customer logos makes it far more convincing.

• No analytics detected

  No analytics or tag manager detected in the HTML, so you can't measure whether any of these fixes work.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• No risk reducer

  No guarantee or risk reducer (money-back, free trial, no credit card) is mentioned, which is often what tips a hesitant visitor.

• About 356 words of copy

  The homepage carries about 356 words of visible text.

• Email authentication score: 95/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 12 trackers load before any consent

  12

  Before a visitor clicks anything, the page loads FullStory, Google Ads, Google Analytics, Google Tag Manager and Klaviyo and 7 mores (measured from a US location before any click). A consent tool (OneTrust) is installed; check it blocks these until visitors agree where the law requires it.

• 34 cookies set on arrival

  34

  Opening the homepage sets 34 cookies (measured from a US location before any click).

• 57 other companies contacted

  Loading the homepage contacts 57 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.