rp-online.de

Cookies: _ga, _ga_Z4XDX2NETC

Do not write analytics or advertising cookies until the visitor has made a consent choice. Load GTM/GA4 tags behind a denied consent default and let the CMP's update unblock them.

Affected: Criteo, Google Ads, Google Analytics 4, Meta Pixel

Refusing consent must be as easy as giving it. Add a clearly visible Reject all button to the consent banner; pay-or-consent models without a free reject option may not constitute valid consent.

Call gtag('consent', 'default') with denied values before GTM or GA4 loads, so the initial consent state is explicit.

Affected: lazy_reload

Call gtag('consent', 'update') immediately after the visitor's choice, with the correct values for both accept and reject. Do not rely on a page reload: it creates duplicate pageviews and breaks session attribution.

Affected: Google Analytics 4

The affected vendors set an identifier or sent measurement that is not verifiably cookie-less before the visitor chose. Load them only after consent, or configure a documented cookie-less mode that sends no identifiers.