2 findings · 3 warnings · 4 checks passed
Tools
866740237G-NPRVVBXJQV3030GTM-TK7B6ZX1511218289206949579613926126327864638oBYE2PR8dRkH6S0QGWL8a9d6fce-6560-4750-98cc-53cd22a98d6cViolations
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_004Affected: analytics_storage
Accepting must set every consent purpose to granted, and rejecting must set it to denied, in the consent update.
GCM_005Ensure no tracking cookies are set when consent is denied.
GCM_008Affected: broken
Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.
GCM_010Affected: Google Ads, Google Analytics 4, Google Publisher Ads, Meta Pixel, Microsoft Advertising (UET), Pinterest Tag, RTB House, Snapchat Pixel, arm, AudioEye, comScore, Inc., Dealer.com, Integral Ad Science, New Relic, PubMatic, Inc., Qualia, Qualtrics, Samsung
After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.
GCM_009Affected: Google Ads, Google Analytics 4, Google Publisher Ads, Meta Pixel, Microsoft Advertising (UET), Pinterest Tag, RTB House, Snapchat Pixel, LiveRamp, Akamai Technologies, arm, AudioEye, comScore, Inc., Dealer.com, Integral Ad Science, New Relic, PubMatic, Inc., Qualia, Qualtrics, Samsung
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.