Note
This is a cached result from 28 Sept 2026. A new scan will be available on 26 Oct 2026.

nbs.sk

120.9s 28 Sept 2026
Verdict

2 findings · 3 warnings · 4 checks passed

Advertising assessment: Non-Compliant Grade C
68% Technical score

Tools

5
Google Analytics 4 analytics Measures without consent in cookie-less mode (sends the IP address)
G-R8X0JM00WNG-SZDFZ1K0EN
Warning
Google Tag Manager functional
GTM-PZVQFG7
Compliant
Google Universal Analytics analytics
UA-199216033-1UA-6436590-1
Compliant
Meta Pixel advertising Tracks visitors without consent (cookie or visitor ID)
1397463804084610
Non-Compliant
Microsoft Clarity analytics
qiun3p6eo0
Compliant

Violations

6
Critical
Tracking cookies were set before the consent decision GCM_002

Cookies: _fbp

Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.

Critical
Non-compliant tracking after consent was rejected GCM_010

Affected: Meta Pixel

After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.

Warning
Consent state was not restored after page reload GCM_006

Save the consent choice and restore it on subsequent page loads, before tags run.

Warning
Non-compliant tracking before consent GCM_009

Affected: Meta Pixel

The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.

Warning
Personal data sent to tools without consent GCM_012

Affected: Google Analytics 4

No cookie or visitor ID was stored, but the visitor's IP address and page address — personal data — reached the tool without consent (before the choice or after a rejection). To be Compliant under this check, load the tool only after consent.

Info
Content Security Policy blocks a tool's script CSP_001

Affected: Google Universal Analytics

The site's script-src directive does not allow the script domains of the listed tools, so real visitors' browsers block them. Add the domains to script-src or remove the unused tags.

Overview

A consent banner is shown 15/15
The consent banner works 0/10
Consent can be rejected 10/10
No tracking before consent 12.5/20
Google Consent Mode is implemented 15/15
Google Consent Mode sends the correct states 10/10
No tracking cookies before consent 0/10
The consent choice persists 2.5/5
No tracking after rejection 3.12/5

Consent Mode