2 findings · 4 warnings · 3 checks passed
Tools
G-XHBBLRHVZK23147211597UA-4940055-1Violations
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_005Ensure no tracking cookies are set when consent is denied.
GCM_008Affected: broken
Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.
GCM_010Affected: Criteo, Google Analytics 4, Google Publisher Ads, R2B2, Google Universal Analytics, Adform (adform.com), Equativ, Meta, PubMatic, Inc., Revive Adserver
After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.
GCM_001Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.
GCM_003Make both the accept and the reject button update the consent state through the GTM Consent API or gtag('consent', 'update').
GCM_009Affected: Criteo, Google Analytics 4, Google Publisher Ads, Meta Pixel, R2B2, Google Universal Analytics, 33Across, LiveRamp, illumin, Adform (adform.com), Adobe, Adot, AdRoll, Open Web, Simpli.fi, Conversant, Crimtan, Deep Intent, Demandbase, Equativ, Improve Digital, Index Exchange, Inc., LoopMe, MediaMath, Inc., Microsoft
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.