Note

This is a cached result from 19 Sept 2026. A new scan will be available on 17 Oct 2026.

woman.at

132.7s 19 Sept 2026

Verdict

2 findings · 4 warnings · 3 checks passed

This scan does not contain a complete assessment under this policy. Grade C

64% Technical score

Vendors

7

Criteo advertising

This scan does not contain a complete assessment under this policy.

Fathom Analytics analytics

KRIAIPFK

This scan does not contain a complete assessment under this policy.

Google Ads advertising

958995003

This scan does not contain a complete assessment under this policy.

Google Analytics 4 analytics

G-2VQGYWQ1KE

This scan does not contain a complete assessment under this policy.

Google Tag Manager functional

GTM-KXJZ7D

Compliant

Meta Pixel advertising

305640583589310

This scan does not contain a complete assessment under this policy.

Microsoft Clarity analytics

Nybewcsaft3

This scan does not contain a complete assessment under this policy.

Violations

5

Consent update does not match the visitor's choice GCM_004

Affected: ad_storage

Accepting must set every consent purpose to granted, and rejecting must set it to denied, in the consent update.

New tracking cookies were created after consent was rejected GCM_005

Cookies: _fbp, _gcl_au

Ensure no tracking cookies are set when consent is denied.

Consent Mode does not update in place after the consent choice GCM_008

Affected: broken

Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.

Non-compliant tracking after consent was rejected GCM_010

Affected: Fathom Analytics, Google Ads, Google Analytics 4, Meta Pixel, Microsoft Clarity

After a rejection the affected vendors must stop setting identifiers and sending measurement, or run only in a verified cookie-less mode.

Non-compliant tracking before consent GCM_009

Affected: Fathom Analytics

The affected vendors set an identifier or sent measurement that is not verifiably cookie-less before the visitor chose. Load them only after consent, or configure a documented cookie-less mode that sends no identifiers.