8 findings · 1 warning · 0 checks passed
Tools
502a548f-eab5-472b-bd19-5fb8a9f84095expiexperianprod,expi-global-prod502a548f-eab5-472b-bd19-5fb8a9f840954dc32d49-8fa4-404b-981e-972f9a7d763310427109911072108379880420905G-22YNWJN8Z2G-7EN8BHB8L8UA-49381528-944329207803604386801674886851052613147820113t2_1dtpdwsuac9d3a37-7db9-4072-8cb3-5352002424f72013164C351OU7G09F12TT9T1R0Violations
CMP_001Affected: Adobe Analytics, Adobe Experience Platform, Amazon Ads, Google Ads, Google Analytics 4, Meta Pixel, Pinterest Tag, Reddit Pixel, Snapchat Pixel, Taboola, TikTok Pixel, Google Universal Analytics, Beeswax, DataXu, Experian, Index Exchange, Inc., iSpot.tv, Magnite, Microsoft, mParticle, OpenX Software Ltd., PubMatic, Inc., RTL Group, Samsung, StackAdapt
A consent banner is required when analytics or advertising tracking is used. Implement a Consent Management Platform (CMP) that collects consent before tracking scripts load.
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_001Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.
GCM_009Affected: Adobe Analytics, Adobe Experience Platform, Amazon Ads, Google Ads, Google Analytics 4, Meta Pixel, Pinterest Tag, Reddit Pixel, Snapchat Pixel, Taboola, TikTok Pixel, Google Universal Analytics, Beeswax, DataXu, Experian, Index Exchange, Inc., iSpot.tv, Magnite, Microsoft, mParticle, OpenX Software Ltd., PubMatic, Inc., RTL Group, Samsung, StackAdapt
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.