7 warnings · 2 checks passed
Vendors
d02b8IN6COt4PD42zfgclZcPj_iIFhrcneNVBaHnUoL.a7d02bkoN6CKJylD5WVRwU3pev7zGIVtssB5iFYa78QqX.X7G-QVHQW2JSLRCA6DB33D7CF713243Violations
GCM_004Affected: ad_storage
Accepting must set every consent purpose to granted, and rejecting must set it to denied, in the consent update.
GCM_010Affected: Seznam Sklik
After a rejection the affected vendors must stop setting identifiers and sending measurement, or run only in a verified cookie-less mode.
GCM_006Save the consent choice and restore it on subsequent page loads, before tags run.
GCM_009Affected: Seznam Sklik
The affected vendors set an identifier or sent measurement that is not verifiably cookie-less before the visitor chose. Load them only after consent, or configure a documented cookie-less mode that sends no identifiers.
GCM_012Affected: Gemius, Google Analytics 4
No identifier was observed, but the visitor's IP address and page context still reached a third party before consent. To be compliant under this check, load the vendor only after consent.
CSP_001Affected: Criteo, Google Analytics 4, JHMT iCheck
The site's script-src directive does not allow the listed vendors' script domains, so real visitors' browsers block them. Add the domains to script-src or remove the unused tags.