usatoday.com

Cookies: _ga

Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.

Affected: Google Analytics 4

After a rejection the affected vendors must stop setting identifiers and sending measurement, or run only in a verified cookie-less mode.

Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.

Make both the accept and the reject button update the consent state through the GTM Consent API or gtag('consent', 'update').

Affected: Google Analytics 4

The affected vendors set an identifier or sent measurement that is not verifiably cookie-less before the visitor chose. Load them only after consent, or configure a documented cookie-less mode that sends no identifiers.