1 finding · 4 warnings · 4 checks passed
Tools
981785008G-MFT2R11DFXGTM-M7V2XH5990948a2_dit2j6ufey64Violations
GCM_008Affected: broken
Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.
GCM_010Affected: Mixpanel
After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.
GCM_001Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.
GCM_003Make both the accept and the reject button update the consent state through the GTM Consent API or gtag('consent', 'update').
GCM_009Affected: Mixpanel
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.
CSP_001Affected: Google Analytics 4, Google Tag Manager, Meta Pixel
The site's script-src directive does not allow the script domains of the listed tools, so real visitors' browsers block them. Add the domains to script-src or remove the unused tags.