notino.sk

Cookies: __exponea_etc__, _cs_id, _cs_s, _ga, _ga_NEKBXQCDCD, _ga_XNCETB8YN6, xnpe_04ef1d3c-187f-11e7-871d-14187733e19e

Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.

Affected: analytics_storage

Accepting must set every consent purpose to granted, and rejecting must set it to denied, in the consent update.

Affected: broken

Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.

Affected: Contentsquare, Exponea, Google Analytics 4, Bambuser, Luigi's Box (luigisbox.com), New Relic

After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.

Affected: Contentsquare, Exponea, Google Analytics 4, Heureka, AppsFlyer, Bambuser, Luigi's Box (luigisbox.com), New Relic

The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.

Affected: Google Ads, Microsoft Clarity, Microsoft Advertising (UET)

No cookie or visitor ID was stored, but the visitor's IP address and page address — personal data — reached the tool without consent (before the choice or after a rejection). To be Compliant under this check, load the tool only after consent.