WRAPS Bundesliga Edition

6 browser windows containing symbols: a tree, the football Bundesliga icon, an accessibility icon, a lock, a heart monitor and normal web content

For the first episode of my WRAPS series, I reviewed the homepages of the 18 men’s Bundesliga football teams. The results are mixed, or to put it positively: there is still a lot of potential for improvement, and an unexpected winner emerged.

  1. Result
  2. Criteria
  3. The Homepages
  4. Summary

The Results

The evaluation of the homepages is based on five criteria. A detailed explanation of the criteria and their weighting can be found here. Specific aspects that arose in this episode are explained further below.

The results show that financial resources of the clubs do not play a role in the performance and sustainability of their websites. In this ranking, lean and efficient solutions triumph. Auto-playing videos or slideshows in the AtF almost always have a negative impact on the UX and the ecological footprint of the websites.

#TeamTOTALCarbonCWVA11yPrivacyContent
1.1. FSV Mainz 0578.63%97%100%56%27%90%
2.FC St. Pauli78.11%63%100%96%60%65%
3.RB Leipzig77.26%87%92%58%80%65%
4.TSG Hoffenheim74.34%70%100%80%60%75%
5.Eintracht Frankfurt73.18%92%73%40%67%45%
6.VFL Wolfsburg73.12%57%100%57%33%90%
7.Borussia Dortmund70.35%63%90%63%77%40%
8.FC Augsburg65.58%59%77%65%57%90%
9.FC Bayern München64.48%49%78%79%60%65%
10.VFB Stuttgart62.70%81%67%47%30%75%
11.Bayer Leverkusen58.72%63%39%60%67%90%
12.VFL Bochum55.19%67%48%47%54%45%
13.SC Freiburg52.55%35%67%82%20%90%
14.1. FC Heidenheim51.95%28%100%31%54%75%
15.Werder Bremen51.11%39%61%75%20%65%
16.Borussia M’gladbach50.83%41%60%50%57%65%
17.Holstein Kiel46.40%0%100%41%7%65%
18.1. FC Union Berlin41.36%9%97%53%0%90%

The Criteria

There are a few specific points regarding the measurement and results in the individual criteria.

Carbon Footprint

My initial idea was to use the Website Carbon rating system to calculate the score. My thought was that 100% of the points would be awarded for an A+ rating, 0% for an F rating, and a linearly decreasing value in between. Unfortunately, the measurements showed that many Bundesliga homepages – especially on the first load – received an F rating. Since this would have resulted in websites receiving the same score even though one might emit half as much CO2 per page load, I decided to use the worst score of all Bundesliga teams as the 0% threshold.

I distinguish between two scenarios: the first load and repeated loads. Since many sites hardly send any caching instructions for their resources, the data load varied greatly during repeated visits. Therefore, I made several visits at different time intervals and calculated the average.

Per initial page load the homepages cause 8.3MB of data payload on average. More than 90% of all webpages globally cause a lower payload on mobile devices. I don’t see any technical reasons why this should be justified. Thus, it needs to be called wasteful.

Core Web Vitals

This is the area where the websites performed best, with an average score of 80%. The biggest issues were due to unstable page layout. Interestingly, the high data payload does not yield to long page load times, even though not many homepages utilise resource-hints or fetchPriority. Which is evidence that browsers are extremely efficient in prioritising resources on their own.

Accessibility (a11y)

Almost all websites need to make improvements to meet the EAA requirements, which will come into force in mid-2025

Four homepages (plus Holstein Kiel since the relaunch) use a third party provider to improve accessibility. However, other homepages also score points through colour choices and plain language.

Privacy

Almost all homepages initiate connections to servers whose operators are outside the EU and, therefore, are not bound by the GDPR. Personal data is disclosed through these connections (IP address, possibly browser fingerprint and Cookies). This issue needs urgent attention.

Since all homepages use third-party cookie consent management tools, I ignored these connections (with the exception of Heidenheim. They do not display any cookie notice, which is even worse.).

The lack of security on the websites presents an additional risk factor regarding data protection. Many websites lack security headers , and some use outdated JS libraries or web server software.

Content

I found this category somewhat challenging. On the one hand, I want to penalise certain product advertisements; on the other hand, I cannot hold the websites responsible for the club’s choice of advertising partners. All homepages link to dedicated subpages that describe their commitment to sustainability and social issues. There seem to be guidelines by the DFL: The only difference was how prominently these subpages were presented. I used this as the basis for evaluation and made small deductions for certain advertising partners.

How the Results for Each Club Came About

You can find more details on the results in the PDF file, where you can see which points were scored in the subcategories.

The first Bundesliga WRAPS champion is 1. FSV Mainz 05. A lean, efficient homepage earns many points. However, improvements in privacy are necessary if Mainz wants to defend the title.

Core Web Vitals
Mainz scores full points in all three Core Web Vitals metrics, each well below the relevant thresholds. Excellent!
Carbon Footprint
The homepage also excels in emitted CO2e. At 1.7 MB on the first load, it is the best among the Bundesliga teams, and at 700 KB on reload, it is also among the top. This result is achieved thanks to modern image formats and lazy loading. Unfortunately, the images do come without directives for cache lifetime, leaving it to the browser to decide how long to cache them. There is still some potential here. Most resources come from green hosts, which further improves the result.
Accessibility
The only downside in accessibility is the lack of options to adjust colors and fonts.
Privacy
The site performs poorly in privacy, as it connects to several servers of American data giants without consent: LinkedIn, Google, Facebook. There is also room for improvement in security.
Content
In terms of content, Mainz prominently links to a subpage about their social commitment. However, points are deducted for the advertising partners for addictive products, which contradict this commitment.

FC St. Pauli narrowly missed out on the title. And this is due to lavish data payloads.

Core Web Vitals
St. Pauli also scores full points in all three Core Web Vitals metrics, each well below the relevant thresholds. Excellent as well!
Carbon Footprint
The site’s weak point is in emitted CO2e. It transfers 5,500 KB on the first load and 1,550 KB on repeated loads. This is average, but the fact that most resources are loaded from servers without proof of being green further diminishes the score. The use of modern image formats or lazy loading of images would have been enough to secure the overall victory.
Accessibility
St. Pauli’s website is exemplary in terms of accessibility. With Eye Able, a tool is provided that helps many visitors with impairments. The website can also be displayed in plain language.
Privacy
The site scores relatively well in privacy. The main criticism is that Google Analytics is declared a necessary evil, and visitors cannot opt out of tracking.
Content
Sustainability is less prominently accessible through a link in the submenu. A small deduction is made for the advertisement for addictive substances.

RB Leipzig delivers a good performance, even though I had concerns with their approach to including Google Tag Manager via their own subdomain, which I penalised with point deduction at first.

Core Web Vitals
RB Leipzig’s Core Web Vitals are overall solid. All three metrics are in the acceptable range, though two metrics narrowly miss the threshold, resulting in minimal deductions.
Carbon Footprint
The website performs averagely in terms of ecological sustainability. With a data volume of 3,600 KB on the first load and 819 KB on repeated loads, it ranks in the middle. There is no clear indication that the servers used are operated sustainably.
Accessibility
Accessibility for visitors with impairments is significantly hampered by the lack of options to adjust colors and fonts.
Privacy
The website uses an approach that could be considered CNAME cloaking External Link to access Google Tag Manager via its own subdomain (qm.rbleipzig.com). This makes tracking harder to detect for users and privacy tools. But RB’s Data Security Offices assured me (convincingly) that this was a privacy enhancing feature.
Content
RB Leipzig also gives the topic of sustainability a prominent place.

Champions League for TSG Hoffenheim thanks to a stable performance in all categories.

Core Web Vitals
The fourth-place team also earns full points in the Core Web Vitals. However, in two categories, the homepage is only slightly below the respective threshold, which could prove costly if it declines.
Carbon Footprint
The website requires a lot of data to load fully. Modern image formats are only partially used, and lazy loading of images and scripts would make a big difference. It’s puzzling why images are only cached for 30 seconds (JPEG) or 1 hour (WEBP). On the positive side, most resources come from green servers.
Accessibility
The site performs well in terms of accessibility. Eye Able is also used here. The only thing missing is the ability to display content in plain language.
Privacy
Privacy is the weakest category, with servers from Instagram and Google being accessed without consent, thus disclosing personal data.
Content
A link to the sustainability report is found in the submenu, aligning with the approach of most other Bundesliga teams.

Eintracht Frankfurt impresses with a good eco-balance but needs to improve in other areas. In this round, they narrowly missed a Champions League spot.

Core Web Vitals
The first homepage to have issues with Core Web Vitals. The page takes too long to load, and interactions with it are somewhat laggy. One problem when loading the website is that CSS files block rendering while also not being cached.
Carbon Footprint
The website performs well in terms of ecological sustainability. The data volume during loading is relatively low, and green servers are in play, which is positive for the CO2-balance.
Accessibility
Accessibility for visitors with impairments is also impaired here due to the lack of options to adjust colors and fonts. The only positive aspect is that the site is displayed with high contrast and in dark mode by default.
Privacy
Only one server outside its own network is accessed, making it the best in the Bundesliga. However, there is room for improvement in security.
Content
Like all competitors, the topic of sustainability is addressed but is well hidden.

VFL Wolfsburg delivers a solid performance in almost all categories but needs to improve on privacy, narrowly missing a Champions League spot.

Core Web Vitals
The fourth-place team also scores full points in the Core Web Vitals, staying well within the thresholds. Very good.
Carbon Footprint
In comparison, the site performs well in terms of CO2 emissions, despite the lack of proof of green servers. This is mainly due to consistent caching, which makes the reload leaner. The first load suffers from massive, seemingly non-web-optimized images.
Accessibility
More points in accessibility are missing due to the lack of options to adjust colors and fonts.
Privacy
Here, too, the familiar problem: visitors are forced to connect to servers of American data giants like Google (Fonts) and Twitter.
Content
A positive aspect is that VFL Wolfsburg prominently displays its social commitment on the website. However, points are deducted for the placement of advertising for addictive substances, which does not entirely align with the sustainability strategy.

Borussia Dortmund only scores top marks in the privacy category.

Core Web Vitals
Core Web Vitals are satisfactory, though delays in interaction lead to slight deductions.
Carbon Footprint
Unfortunately, the absence of modern image formats, insufficient caching, and a lack of green servers prevent a better result.
Accessibility
Accessibility for visitors with impairments is also impaired here due to the lack of options to adjust colors and fonts. The only positive aspect is that the site is displayed with high contrast and in dark mode.
Privacy
No servers of companies outside the EU are accessed without consent. This is unique in the Bundesliga. The site also scores well in security.
Content
The topic of responsibility and sustainability is well hidden in the menu. It remains questionable how prominently placed advertising partners for addictive products fit into the concept.

FCA uses the same trick as RB Leipzig to avoid the use of Google’s servers. I did not deduct points for this approach.

Core Web Vitals
The homepage takes too long to load content. A blunder is that the LCP element is lazy-loaded. The other metrics are fine.
Carbon Footprint
An average eco-balance for this homepage. Modern image formats are lacking, and the images are also not sufficiently optimized for the web.
Accessibility
Unfortunately, there is no support for impaired users in terms of color/font adjustment, but texts in plain language are available.
Privacy
Similar approach as RB Leipzig. The Google Tag Manager is loaded via a proxy from their own network. It could be considered CNAME cloaking, but I was convinced by RB’s Data Protection Officer that no personal data is shared with Google.
Content
The topic of sustainability is linked more prominently than the advertising partner for addictive products.

FCB finds itself in the gray midfield, with the website failing to impress in any category.

Core Web Vitals
Core Web Vitals suffer mainly from slow loading times. The cause seems to be the dependency on a JS-controlled image carousel. Ironically, this carousel is not used on mobile devices, leaving the majority (I assume) of visitors waiting. Minimal cache durations for JS files could be another reason.
Carbon Footprint
Massive images keep sneaking onto the homepage, sometimes even three nearly identical ones in slightly different dimensions. These images unfortunately also negatively impact the eco-balance.
Accessibility
The website is also offered in plain language, making Bayern Munich one of only three homepages with this feature. A dark mode is also available, but it cannot be manually adjusted.
Privacy
Unfortunately, Google is informed of the visitor without consent, as the Google Tag Manager is embedded. But there isn’t much else to complain about. In terms of security, the homepage is among the best.
Content
The social commitment is linked from the submenu, with advertising partners for addictive products being promoted more prominently.

VFB has a (relatively) good eco-balance but has missed opportunities in other areas.

Core Web Vitals
The homepage stutters too much during page layout. This subcategory (CLS) received no points at all.
Carbon Footprint
4,900 KB on the first load is not insignificant (old image formats), but since the caching homework was done (which is currently the exception in the Bundesliga), it’s under 900 KB on reload. This is enough for a good score in this category.
Accessibility
Unfortunately, there is no support for impaired users in terms of color/font adjustment, which results in point deductions.
Privacy
Unfortunately, the VFB homepage also connects to external servers, including Google’s. The VFB should be aware of the importance of data protection External Link , but the lax approach to third-party providers is currently common.
Content
The topic of sustainability is linked from the submenu.

B04 has issues with Core Web Vitals. The rest is average.

Core Web Vitals
The homepage takes too long to load content. Here, it seems that loading a slideshow delays the display of images. Additionally, the content jumps during (re-)rendering.
Carbon Footprint
The data volume is massively worsened by autoplay videos. At least these are cached, albeit only for a day. Otherwise, caching works well, so some points were still earned.
Accessibility
Unfortunately, there is no support for impaired users in terms of color/font adjustment, but at least there is high contrast and a dark mode.
Privacy
Only one external server, whose connection can be reasonably justified as necessary. In terms of security, like many others, improvements are needed.
Content
The topic of sustainability is linked more prominently than the advertising partner for addictive products.

VFL has similar issues as B04. It stutters during rendering, and videos play automatically.

Core Web Vitals
The video takes too long to download. To improve the LCP, the poster attribute for the video should be utilized. The stuttering in rendering also needs to be eliminated.
Carbon Footprint
The data volume is massively worsened by the autoplay video. At least it’s cached, albeit only for a day. Otherwise, caching works well, so some points were still earned.
Accessibility
There is a dark mode, which can even be toggled manually. Unfortunately, a small bug makes finding the switch quite difficult.
Privacy
Only the use of Google Tag Manager stands out negatively, as it does with many others. There are also security issues, again like many others.
Content
The topic of sustainability is very well hidden.

SCF sends the most data to first-time visitors. The green servers prevent them from slipping into the relegation zone.

Core Web Vitals
The content loads a bit too slowly, but the main issue is the stuttering during rendering.
Carbon Footprint
Nearly 15 MB are transferred on the first load, with nearly 2 MB on the second load. Fortunately, the green servers help earn some points.
Accessibility
The Eye Able accessibility tool helps achieve a good result here.
Privacy
Several data giants are accessed, including Google and Instagram. But connections to other servers of American companies also negatively impact the privacy score.
Content
The topic of sustainability is linked more prominently than the advertising partner for an addictive product.

FCH excels in Core Web Vitals but falters in data volume.

Core Web Vitals
The page loads quickly, stably, and is highly responsive to interactions. Excellent!
Carbon Footprint
A data load of 13,500 KB on the first load results in the second-to-last place; since no green servers are used, the CO2 emissions are the worst. The reload isn’t as bad, but still not good. Caching would help here.
Accessibility
Last place also in the accessibility category. No support for color/font adjustment or alternative languages results in point deductions.
Privacy
Only YouTube is accessed without consent. Speaking of consent, Heidenheim’s homepage is the only one that does not display a cookie notice. Bold move.
Content
The topic of sustainability is linked from the submenu.

SVW lands in the relegation zone, but it wasn’t due to a lack of accessibility.

Core Web Vitals
The only homepage that exceeds the thresholds in all three subcategories. The worst issue is the stuttering during loading (CLS), which seems to be caused by the cookie notice. Here, one would need to get creative or switch providers.
Carbon Footprint
Modern image formats are missing, caching is set too short at one day, and a lot of data is pulled from third parties.
Accessibility
Accessibility is more than satisfactory thanks to Eye Able.
Privacy
This homepage connects to servers from Google, myfonts, signalize, and jwplayer, among others. And those are just the servers of companies outside the EU.
Content
The topic of sustainability is linked more prominently than the advertising partner for an addictive product.

BMGB delights visitors with an auto-playing video. This causes problems on several levels, ultimately resulting in a relegation spot.

Core Web Vitals
The video prevents a good LCP loading time. At the very least, the poster attribute should be used to prevent the worst. The video element also causes stuttering during rendering.
Carbon Footprint
The video massively worsens the eco-balance, especially since no caching instructions are given to the browser. If things go wrong, the video will be sent to the client again on the next visit. At least the host is green.
Accessibility
Unfortunately, there is no option to adjust colors and fonts. While the site is partially in dark mode, this color scheme isn’t consistently applied across the homepage, resulting in no points.
Privacy
Unfortunately, this homepage also connects to a Google server without giving visitors a choice. Otherwise, the privacy missteps are relatively minor. Like many others, the homepage’s security is weak.
Content
Sustainability can also be found in the submenu, while advertising partners for addictive products are more easily found.

This website scored a solid seventh place before its relaunch last month. Since then it’s very wasteful with its data consumption and hence has a terrible carbon footprint.

Core Web Vitals
Core Web Vitals are perfect. The website could load faster, but it’s fast enough to receive full points in this category.
Carbon Footprint
Holstein Kiel went from second-best value for CO2 emissions to last place. It has unoptimized images, no lazyloading not even for Youtube content, loads lots of unused CSS and does not use cache-control headers.
Accessibility
Unfortunately, the website is not multilingual, but it has Eye Able installed which makes it highly adaptable in terms of fonts and colors.
Privacy
A lot of Google domains along with a few other third party domains are used without visitors’ consent. Unfortunately, this website also needs to improve in security.
Content
Social projects are linked in the submenu, with Lotto being promoted more prominently.

Union earns almost full points in Core Web Vitals, but the rest results in the red lantern.

Core Web Vitals
The homepage responds more slowly to interactions than desired, but nothing that results in significant point deductions. What doesn’t come across well in the statistics is the frustration of first-time visitors. After interacting with the cookie notice, a reload occurs.
Carbon Footprint
13,500 KB on the first load and 3,500 KB on the repeated load result in the worst overall score; not even the green host can make up for it.
Accessibility
Unfortunately, there is no option to adjust colors and fonts. This results in point deductions.
Privacy
The homepage fails in terms of privacy. It connects to Twitter, Google, Facebook, Flockler, and several other servers without consent. Large security gaps are also revealed.
Content
The topic of sustainability is linked more prominently than the advertising partners for addictive products.

Conclusion

The title race was very close. In the end, Mainz narrowly secured victory, thanks to their strong performance in the heavily weighted eco-balance category. This was precisely where second place FC St. Pauli faltered. Third place RB Leipzig was not far behind either.

Behind them, three websites competed for the last Champions League spot, with a margin of less than 1.25% between fourth and sixth place. In the end, Hoffenheim prevailed. Frankfurt and Wolfsburg managed to secure spots in international competitions.

The midfield is populated by the top four teams from last season’s Bundesliga. They all lacked efficiency, robustness, or speed, which caused the two most heavily weighted categories to suffer.

The relegation battle was almost as tight as the race for the Champions League spots: there was less than a 2% difference between 13th and 16th place. All the teams at the bottom had weak eco-balance scores. Gladbach ultimately landed in the relegation playoff spot. Kiel and Berlin were firmly anchored at the bottom, scoring (almost) no points in both the privacy and eco-balance categories.

I’m curious to see what changes will happen on these websites in the coming months. The EAA will force many Bundesliga teams to take action. But increasingly frequent data privacy lawsuits could also bring about significant changes.

P.S. Personal conclusion: Although working on this project was fun, it required more effort than I had anticipated. For the next episode, I will need to automate, document, and organise more efficiently.

  • I once solved a similar problem for a client by using the cookie consent tool’s events to delay the display of the cookie notice until the measured layout shift had occurred. The frustrating thing about this CLS value is that it isn’t even visible to the user. Arrow Up Right
Tagged #wraps

More Posts

6 browser windows containing symbols: a tree, an icon of a heart hovering above two hands, an accessibility icon, a lock, a heart monitor and normal web content
WRAPS - Non-Government-Organisations (NGOs)

For the third part of the WRAPS series, I looked at the websites of well-known NGOs focusing on environmental and climate protection. he results show that even climate organisations do not have sustainability on their radar when it comes to web development.

The meme of two stands where one has a huge queue the other doesn't have any visitors. The headline reads 'DIGITAL PRODUCTS'. The busy stand says 'US product collecting all your data' the empty one says 'EU product respecting your privacy'
US Big Tech Products Should Be Avoided. There Are Good Alternatives.

Sticking to US products make us dependent on, be influenced by, and expose private data to an increasingly hostile opponent.

Futurama Blernsball Player Gets a Pie in His Face, Having Expected to Catch a Blernsball. Caption: WHEN YOU PRELOAD FONTS WITHOUT CROSSORIGIN
Everything You Never Wanted to Know About CORS and Font Preloads

Font Preloads and CORS, it's complicated. Especially because inconsistent browser behaviour can lead into a dilemma, which causes useless data transfer and reduces performance.