Vendors
d1zrQktRrA.1DMJeqrR6CpchXkFId4eUZ8HsOjyaf07.v7dvzlpkrRUVNVq6mlcjK_xuTS.jhFwcdj7O_cZQIUd_3.Y7971823631G-9QE3VCZE8ZG-SFMYV44W5BGTM-KCL7KMUA-4864776-1Violations
CMP_001Affected: Criteo, Gemius, Google Ads, Google Analytics 4, Google Universal Analytics
A consent banner is required when analytics or advertising tracking is used. Implement a Consent Management Platform (CMP) that collects consent before tracking scripts load.
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_001Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.
GCM_009Affected: Criteo, Gemius, Google Ads, Google Analytics 4, Google Universal Analytics
The affected vendors set an identifier or sent measurement that is not verifiably cookie-less before the visitor chose. Load them only after consent, or configure a documented cookie-less mode that sends no identifiers.