csfd.sk

Affected: Criteo, Gemius

After a rejection the affected vendors must stop setting identifiers and sending measurement, or run only in a verified cookie-less mode.

Make both the accept and the reject button update the consent state through the GTM Consent API or gtag('consent', 'update').

Affected: lazy_no_update

Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.

Affected: Criteo, Gemius

The affected vendors set an identifier or sent measurement that is not verifiably cookie-less before the visitor chose. Load them only after consent, or configure a documented cookie-less mode that sends no identifiers.

Affected: Google Analytics 4

No identifier was observed, but the visitor's IP address and page context still reached a third party before consent. To be compliant under this check, load the vendor only after consent.