4 findings · 4 warnings · 1 check passed
Tools
41ebe285f5f6410c8871ed0942212990cohLcA9X9N_foxWngLtw3sV3rjvB4qbWY2ycH38jWO..v7G-JNRHHJJ0B1224189511ca-pub-8804729319494140GTM-NJFZN7GGGTM-TB5T8WLUA-101329895-1Violations
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_008Affected: broken
Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.
CMP_002Affected: Criteo, Gemius, Google Ads, Google Analytics 4, Google Publisher Ads, Seznam SSP, Google Universal Analytics, onthe.io
Refusing consent must be as easy as giving it. Add a clearly visible Reject all button to the consent banner; pay-or-consent models without a free reject option may not constitute valid consent.
GCM_001Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.
GCM_003Make both the accept and the reject button update the consent state through the GTM Consent API or gtag('consent', 'update').
GCM_009Affected: Gemius, Google Analytics 4, Google Publisher Ads, Seznam SSP, Google Universal Analytics, onthe.io
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.