2 findings · 3 warnings · 4 checks passed
Tools
yvZHATdkh5u0JBtclMwUIgRkPuuSwLsrH7MYKx9pWjP.G7.W01Xyup1S26.wmsXu93IMTYfXTNA68LZb49g9FAi8r.R7cjg7K8O8VLqJgof5kmhFz5aFTM4FtoQHnckauPaOGHX.y7pxY63vMyZ2pI8i1VC3Jfb2a0.mMZNvuB6YCbvDNdAof.Z7939042599G-4PRCPPJEJZG-GNW0LC86SZ31040149GTM-N6DFGS2UA-169612499-1UA-7895305-1101017291583199848069274078612846672155858488223353960363Violations
GCM_002Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.
GCM_004Affected: analytics_storage
Accepting must set every consent purpose to granted, and rejecting must set it to denied, in the consent update.
GCM_005Ensure no tracking cookies are set when consent is denied.
GCM_010Affected: Gemius, Google Analytics 4, Google Publisher Ads, LinkedIn Insight, Piano, Taboola, Google Universal Analytics, Adform (adform.com), ConnectAd, Index Exchange, Inc., JW Player, Magnite, Outbrain (outbrain.com), PubMatic, Inc.
After a rejection the listed tools must stop storing visitor IDs and sending measurement, or run only in a verified cookie-less mode.
GCM_001Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.
GCM_009Affected: Google Analytics 4, LinkedIn Insight, Piano, Google Universal Analytics
The listed tools stored a visitor ID or sent measurement before the visitor chose, without a verified cookie-less mode. Load them only after consent, or configure a documented cookie-less mode that sends no IDs.