2 findings · 3 warnings · 4 checks passed
Vendors
ByNLa_rsmOHaHpe.PKCiLZZzzSrR6M_OGvniendIOcf.h7997828674G-2LJWYWSY7ZG-Q7FR6WZHEGG-W73WW3LVS0GTM-MMH5SNV1018357598241990g8k81925jtViolations
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_005Ensure no tracking cookies are set when consent is denied.
GCM_010Affected: Criteo, Gemius, Google Ads
After a rejection the affected vendors must stop setting identifiers and sending measurement, or run only in a verified cookie-less mode.
GCM_001Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.
GCM_003Make both the accept and the reject button update the consent state through the GTM Consent API or gtag('consent', 'update').
GCM_009Affected: Criteo, Google Ads
The affected vendors set an identifier or sent measurement that is not verifiably cookie-less before the visitor chose. Load them only after consent, or configure a documented cookie-less mode that sends no identifiers.