8 findings · 1 warning · 0 checks passed
Tools
1061701678828026484853484978862676012975960609G-0GV7WXFNMTG-Q0HJWP456JUA-2081664-46121658970530142580967771968059015412612729865245t2_1kuo86x1t2_m39joufo80e0cc57-badc-4895-b9dd-30594e8325a510253741324920C7KTM4O68TKN71DEGAK0nuo8ytw-nuo8y-p4pwi6e24d49e-811e-47c2-b43e-8222bd202661Violations
CMP_001Affected: Google Ads, Google Analytics 4, Google Publisher Ads, LinkedIn Insight, Meta Pixel, Microsoft Advertising (UET), Pinterest Tag, Reddit Pixel, Snapchat Pixel, Taboola, TikTok Pixel, Google Universal Analytics, X (Twitter) Pixel, Xandr, LiveRamp, AdsWizz, Claritas, Conviva, DataDome, Experian, Impact Tech, iSpot.tv, LiveIntent, Quantum Metric, Signifyd
A consent banner is required when analytics or advertising tracking is used. Implement a Consent Management Platform (CMP) that collects consent before tracking scripts load.
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_001Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.
GCM_009Affected: Google Ads, Google Analytics 4, Google Publisher Ads, LinkedIn Insight, Meta Pixel, Microsoft Advertising (UET), Pinterest Tag, Reddit Pixel, Snapchat Pixel, Taboola, TikTok Pixel, Google Universal Analytics, X (Twitter) Pixel, Xandr, LiveRamp, AdsWizz, Claritas, Conviva, DataDome, Experian, Impact Tech, iSpot.tv, LiveIntent, Quantum Metric, Signifyd
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.