Note
This is a cached result from 18 Sept 2026. A new scan will be available on 16 Oct 2026.

herold.at

63.8s 18 Sept 2026
Verdict

1 finding · 2 warnings · 6 checks passed

Advertising assessment: Non-Compliant Grade B
76% Technical score

Vendors

8
Google Tag Manager functional
GTM-P5627ZV
Compliant

Violations

4
Critical
Tracking cookies were set before the consent decision GCM_002

Cookies: _hjSessionUser_416055, _hjSession_416055

Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.

Critical
Non-compliant tracking after consent was rejected GCM_010

Affected: Hotjar, LinkedIn Insight

After a rejection the affected vendors must stop setting identifiers and sending measurement, or run only in a verified cookie-less mode.

Warning
Non-compliant tracking before consent GCM_009

Affected: Google Analytics 4, Hotjar, LinkedIn Insight

The affected vendors set an identifier or sent measurement that is not verifiably cookie-less before the visitor chose. Load them only after consent, or configure a documented cookie-less mode that sends no identifiers.

Warning
Vendor contacted before consent without identifiers GCM_012

Affected: Google Ads, Microsoft Clarity

No identifier was observed, but the visitor's IP address and page context still reached a third party before consent. To be compliant under this check, load the vendor only after consent.

Overview

Consent Banner Exists 15/15
Consent Banner Functional 10/10
Reject Option Available 10/10
No Tracking Before Consent 8.57/20
Consent Mode Implemented 15/15
Consent Mode Correct States 10/10
No Tracking Cookies Before Consent 0/10
Consent Persists Correctly 5/5
No Tracking After Reject 2.5/5

Consent Mode