gloverall.com website review

Not measured in this review.

• Tap response (INP) got 15% slower for real visitors

  +15%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' tap response (inp) went from 112 ms to 137 ms at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• Largest content (LCP) got 16% slower for real visitors

  +16%

  Over the last 25 four-week periods to 2026-10-31, real Chrome visitors' largest content (lcp) went from 1.7 s to 2.0 s at the 75th percentile (Chrome UX Report (opens in a new tab) history).

• An image on the first screen is lazy-loaded

  Mens_Duffle_Coats_c1970af7-ec40-4c93-8dda-1d0f136cd838.jpg is on the first screen but marked loading="lazy", so the browser waits before fetching it and the page looks finished later. Load it eagerly (and give it fetchpriority="high" if it is the main image).

  Elements (1)

• About 0.6 g of CO₂ per visit

  0.55 g

  By the Sustainable Web Design model, a visit to your homepage emits about 0.55 g of CO₂e: 66.3 kg a year at 10,000 visits a month. It scales with page weight, so every byte cut lowers it.

• 16 text elements with low contrast

  16 text elements don't have enough contrast against the background to read easily, especially outdoors on a phone.

  Elements (3)

• All page content should be contained by landmarks (1 element)

  All page content should be contained by landmarks: 1 element on the page fails this check, rated moderate by axe-core.

  Elements (1)

• Meta description is long (173 characters)

  Your meta description is 173 characters; Google truncates after about 160, so the end of your pitch is cut.

  View source

• No XML sitemap

  No XML sitemap at https://www.gloverall.com/sitemap.xml, so Google discovers your pages only by following links.

• 507 internal links, 5 external

  The homepage links to 507 pages on gloverall.com and 5 external pages.

• 2 linked pages hidden from search

  /collections/all and /collections/gloverall-collections are marked noindex but linked from your homepage. If they are meant to be found, remove the noindex.

  Elements (2)

• 2 pages share a meta description

  /policies/shipping-policy and /policies/refund-policy use the same meta description. A description written for each page earns more clicks.

• 5 pages without an H1

  /collections/all, /collections/men, /collections/gloverall-collections, /collections/new-arrivals and /collections/heritage have no <h1> headline, so visitors and search engines get no clear main topic.

• 15 internal pages checked

  We fetched 15 pages linked from your homepage (of 96 found) and read each the way a search engine does.

• Short HSTS lifetime

  HSTS is set, but max-age is 91 days; one year is the recommended minimum.

• 2 links through redirect chains

  2 links go through two or more redirects, for example https://facebook.com/gloverall.

• No Referrer-Policy

  No Referrer-Policy header, so full URLs can leak to the sites you link to.

• No Permissions-Policy

  No Permissions-Policy header to switch off camera, microphone and location for embedded content.

• Deprecated X-XSS-Protection

  X-XSS-Protection is set to “1; mode=block”; the header is deprecated and can introduce bugs. Use 0 or remove it.

• No security.txt

  There is no /.well-known/security.txt telling researchers how to report a security problem to you.

• No direct contact details

  No phone number or email link on the homepage, so ready-to-buy visitors have one fewer way to reach you.

• No risk reducer

  No guarantee or risk reducer (money-back, free trial, no credit card) is mentioned, which is often what tips a hesitant visitor.

• About 3,731 words of copy

  The homepage carries about 3,731 words of visible text.

• DMARC is monitor-only (p=none)

  DMARC is set to p=none, so mail pretending to be gloverall.com is still delivered. Reports are on, so moving to quarantine is the next step.

• Email authentication score: 70/100

  Email authentication: SPF record 25 points, plus 15 when it ends in -all (10 for ~all); DMARC record 25, plus 25 for a reject policy (15 for quarantine); a DKIM key on a common selector 10.

• 5 trackers load before any consent

  5

  Before a visitor clicks anything, the page loads Google Ads, Google Tag Manager, Klaviyo, Microsoft Clarity and Pinterest Tag (measured from a US location before any click). No consent tool was detected. Visitors from the EU, UK and several US states must be asked first.

• 10 cookies set on arrival

  10

  Opening the homepage sets 10 cookies (measured from a US location before any click).

• No consent tool detected

  No known cookie consent tool loads with the page. Some sites build their own banner, and some only show one to visitors from the EU.

• 21 other companies contacted

  Loading the homepage contacts 21 hosts run by other companies (fonts, scripts, analytics, ads), each of which sees the visitor's IP address.