2 findings · 3 warnings · 4 checks passed
Tools
B8.gu__72w7QmM.MJX3Ripa07MPRWfgKyGTv4m63iaz.w7G-0J2L6PDQL7G-1F3S6SPNKPGTM-5NZ9N4Z2813445720897592637141873817906057752pt9phpiszcViolations
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_005Ensure no tracking cookies are set when consent is denied.
GCM_010Affected: Google Analytics 4, Hotjar, Meta Pixel
After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.
GCM_001Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.
GCM_009Affected: Hotjar, Meta Pixel
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.
GCM_012Affected: Gemius
No cookie or visitor ID was stored, but the visitor's IP address and page address — personal data — reached the tool without consent (before the choice or after a rejection). To be Compliant under this check, load the tool only after consent.