1 finding · 2 warnings · 6 checks passed
Tools
8f3c8493e9b44fc29a24253084570d2b1312735220968041507G-BJKL76S993GTM-3XTJ318029805739962934987862089090526421121000507300063414001299K0UuV42nL5AJPLUINTmEViolations
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_010Affected: Hotjar
After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.
GCM_009Affected: Google Analytics 4, Hotjar
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.
GCM_012Affected: Google Ads
No cookie or visitor ID was stored, but the visitor's IP address and page address — personal data — reached the tool without consent (before the choice or after a rejection). To be Compliant under this check, load the tool only after consent.
CSP_001Affected: Criteo, Google Analytics 4, Google Tag Manager, Hotjar, Meta Pixel
The site's script-src directive does not allow the script domains of the listed tools, so real visitors' browsers block them. Add the domains to script-src or remove the unused tags.