Note
This is a cached result from 10 Oct 2026. A new scan will be available on 7 Nov 2026.

herold.at

58.7s 10 Oct 2026
Verdict

1 finding · 2 warnings · 6 checks passed

Advertising assessment: Non-Compliant Grade B
78% Technical score

Tools

11
Google Ads Advertising Measures without consent in cookie-less mode (sends the IP address)
Warning
Google Analytics 4 Analytics Measures without consent; we saw no evidence of a cookie-less mode in this audit
G-EK9M5928E3
Non-Compliant
Google Publisher Ads Advertising
ca-pub-7558442596906284
Compliant
Google Tag Manager Functional
GTM-P5627ZV
Compliant
Hotjar Analytics Tracks visitors without consent (cookie or visitor ID)
416055
Non-Compliant
LinkedIn Insight Advertising Tracks visitors without consent (cookie or visitor ID)
2486017
Non-Compliant
Meta Pixel Advertising
404753224635123
Compliant
Microsoft Advertising (UET) Advertising
211023190
Compliant
Microsoft Clarity Analytics Measures without consent in cookie-less mode (sends the IP address)
rihoqfjmo8
Warning
Pinterest Tag Advertising
2612754029766
Compliant
United Digital Group Advertising Sends requests before consent or after it was declined
Non-Compliant

Violations

4
Critical
Tracking cookies were set before the consent decision GCM_002

Cookies: _hjSessionUser_416055, _hjSession_416055, bcookie

Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.

Critical
Non-compliant tracking after consent was rejected GCM_010

Affected: Hotjar, LinkedIn Insight, United Digital Group

After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.

Warning
Non-compliant tracking before consent GCM_009

Affected: Google Analytics 4, Hotjar, LinkedIn Insight, United Digital Group

The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.

Warning
Personal data sent to tools without consent GCM_012

Affected: Google Ads, Microsoft Clarity

No cookie or visitor ID was stored, but the visitor's IP address and page address — personal data — reached the tool without consent (before the choice or after a rejection). To be Compliant under this check, load the tool only after consent.

Overview

A consent banner is shown 15/15
The consent banner works 10/10
Consent can be rejected 10/10
No tracking before consent 10/20
Google Consent Mode is implemented 15/15
Google Consent Mode sends the correct states 10/10
No tracking cookies before consent 0/10
The consent choice persists 5/5
No tracking after rejection 2.75/5

Consent Mode