2 findings · 3 warnings · 4 checks passed
Tools
eba2747deafc4ba0b4311a0bac6fc4d1G-0HF76BT7M8G-DK3GDWHWJH3865GTM-5P3SZGSGTM-WT6XGWDH1576393572602771Violations
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_005Ensure no tracking cookies are set when consent is denied.
GCM_008Affected: broken
Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.
GCM_010Affected: Amazon Ads, Criteo, Google Ads, Google Analytics 4, Google Publisher Ads, Blockthrough, ID5 Technology, Index Exchange, Inc., Integral Ad Science, Magnite, Microsoft, OpenX Software Ltd., Ozone, PubMatic, Inc., The Trade Desk, Yahoo
After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.
GCM_001Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.
GCM_003Make both the accept and the reject button update the consent state through the GTM Consent API or gtag('consent', 'update').
GCM_009Affected: Google Ads, Google Analytics 4, Google Publisher Ads
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.