1 finding · 3 warnings · 5 checks passed
Tools
d34034fdacd945bd874de48a7777205b1fab09b4-08bd-11e7-b919-14187733e19eG-YY1BTFFJVSGTM-N8DRNWLy3M3zlN8ewZIugqkpI4WViolations
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_004Affected: analytics_storage
Accepting must set every consent purpose to granted, and rejecting must set it to denied, in the consent update.
GCM_008Affected: broken
Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.
GCM_010Affected: Exponea, Google Analytics 4, Heureka, Bambuser, Luigi's Box (luigisbox.com), New Relic
After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.
GCM_009Affected: Exponea, Google Analytics 4, Heureka, AppsFlyer, Bambuser, Luigi's Box (luigisbox.com), New Relic
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.