1 finding · 4 warnings · 4 checks passed
Tools
vlmvlmediazIfgjThTtwrdwzw4Y4DprpdRDkaUqs_g95aNpkqWstH..7816238455G-964J8J74CQG-SW47JB56DVG-VLMSGTM159427363ca-pub-2263612067088920GTM-TGXTRC27673207935302491140709865545450804Violations
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_004Affected: analytics_storage
Accepting must set every consent purpose to granted, and rejecting must set it to denied, in the consent update.
GCM_008Affected: broken
Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.
GCM_010Affected: Criteo, Ecomail, Google Analytics 4, Adform (adform.com), Index Exchange, Inc., Integral Ad Science, Magnite, Microsoft, Outbrain (outbrain.com), PubMatic, Inc., RTB House (rtbhouse.com), Seznam, TripleLift, Inc., WP
After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.
GCM_009Affected: CPEx, Criteo, Ecomail, Gemius, Google Analytics 4, Adform (adform.com), Index Exchange, Inc., Integral Ad Science, Magnite, Microsoft, Outbrain (outbrain.com), PubMatic, Inc., RTB House (rtbhouse.com), Seznam, TripleLift, Inc., WP
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.
GCM_012Affected: Google Ads
No cookie or visitor ID was stored, but the visitor's IP address and page address — personal data — reached the tool without consent (before the choice or after a rejection). To be Compliant under this check, load the tool only after consent.