2 findings · 3 warnings · 4 checks passed
Tools
AkJL0uuONC18ULkMgHyOxJaFj7zpsM9WkC3oilJ.wNj.y7G-MZ9CJE5ELLG-XTZVRP4SF9172785668ca-pub-3557484313737602GTM-5XSLM6RViolations
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_005Ensure no tracking cookies are set when consent is denied.
GCM_008Affected: broken
Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.
GCM_010Affected: Criteo, Google Analytics 4, Google Publisher Ads, R2B2, Adform (adform.com), Etarget, Magnite, Microsoft, Monet Engine, OneTag, Outbrain (outbrain.com), RTB House (rtbhouse.com), Sovrn Holdings Inc
After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.
GCM_001Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.
GCM_003Make both the accept and the reject button update the consent state through the GTM Consent API or gtag('consent', 'update').
GCM_009Affected: Criteo, Google Analytics 4, Google Publisher Ads, R2B2, illumin, Adform (adform.com), Adsninja Affilate Network, Blis, Etarget, Magnite, Microsoft, Monet Engine, Next Millennium Media, OneTag, Outbrain (outbrain.com), RTB House (rtbhouse.com), Singtel, Sovrn Holdings Inc, Temu
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.
GCM_012Affected: Gemius
No cookie or visitor ID was stored, but the visitor's IP address and page address — personal data — reached the tool without consent (before the choice or after a rejection). To be Compliant under this check, load the tool only after consent.