Notes on cookie consent
and Consent Mode
Cookie banners, Consent Mode, GA4 and the data that goes missing between them, written plainly and checked in the browser.

Does Microsoft Clarity need cookie consent?
Microsoft has enforced a consent signal for European visits since October 2025. What changes without it, how to send it, and the leftover cookie that can undo a rejection.
Read the post
Why tags gated on functionality_storage never fire
Some consent setups only update the four signals Google’s ad and analytics tags read. How to spot a tag stuck on the other two, and fix it at the right layer.
Read the post
Does HubSpot need cookie consent?
HubSpot lists its tracking cookies and ad pixels as non essential. How to hold them until a visitor consents, and why gating your Meta and LinkedIn tags can miss them.
Read the post
How do I fire GTM tags on the cookie consent update event?
Your consent platform pushes an event into the data layer the moment a choice takes effect. How to fire Tag Manager tags on it, and the three setups that make them count twice.
Read the post
Google Consent Mode v2 in Velo: what is new for Google advertisers
Consent Mode v2 switched on as you install, a banner that meets Google’s requirements, a check on every page with an email when something breaks, and support that answers first.
Read the post
How do I make Meta Signals Gateway respect cookie consent?
Your banner tells the Meta Pixel what the visitor chose. The Signals Gateway Pixel is separate code that does not hear it. How to gate it in Tag Manager or in the page, and how to test it.
Read the post
Which US state privacy laws affect your cookie banner?
Twenty states have a privacy law in force and four more are signed. What they ask of your banner, which ones require Global Privacy Control, and what regulators have fined for.
Read the post
What Peru’s data protection officer checks on your site
Peru phases in a data protection officer by company size, with midsize firms next on 30 November 2026. The five questions that officer will ask about your website.
Read the post
Are cookies personal data in Peru?
Yes. Peru’s 2024 regulation names online identifiers as personal data. What that means for analytics and advertising cookies, and how to check your site from Peru.
Read the post
Does Google tag gateway need cookie consent?
Yes. The gateway moves where your Google tag loads from, not what consent it follows. What stays the same, where load order can slip, and how to test it.
Read the post
The best consent management platforms in 2026, compared
Ten CMPs side by side: free plans, lowest prices, what each one bills on, and which are Google certified with IAB TCF support. Prices checked against each vendor’s own page.
Read the post
How AI cookie categorisation works, and where a person still decides
Vendor pages say a person should review AI suggestions. This one explains what the model reads, which cookies it cannot know, and what that review should check.
Read the post
How to add a cookie banner to WordPress without a plugin
Most guides say to paste the script into header.php. A child theme hook keeps it through updates and prints it ahead of the Google tag your plugins queue.
Read the post
What a wrong consent category does to GA4 and Google Ads
A category is not just a box. It decides which Consent Mode signal Google receives, and a wrong one quietly costs you consenting visitors or runs tags for people who said no.
Read the post
Should you block Google's own tags until someone consents
Every consent guide says to gate the tag. Google's own tags are the exception, and wrapping them in an extra consent check quietly turns Advanced Consent Mode into Basic.
Read the post
What happens when someone withdraws cookie consent
Most guidance answers whether the cookies get deleted. The harder question is what your measurement stack should do at that moment, and in what order it should do it.
Read the post
How to know if a tag is really setting cookies before consent
A container audit lists the tags with no consent condition. Only a clean page load says which of them wrote a cookie, and it usually names one that was never on the list.
Read the post
How to switch consent management platforms without breaking your tracking
The new banner is the easy half. What breaks a migration is the old platform's residue in your container: variables reading cookies that no longer exist, and the blocking rules built on them.
Read the post
How to add a cookie banner to a Webflow site
Your banner governs the container. Webflow's Apps and Integrations tab loads Google Analytics and the Meta pixel outside it, and clearing that tab is the step most setups miss.
Read the post
How to set up Google Consent Mode v2 on Shopify
Denied defaults above the container is only half of it. Shopify runs a second consent system that Google Tag Manager cannot reach, and your Custom Pixels answer to that one.
Read the post
Can I move a script into Google Tag Manager to make it consent gated?
Usually yes. The exceptions are scripts that have to run before the page renders or see the very first request, and gating the rest properly takes two settings rather than one.
Read the post
What to do if you get a complaint about your cookie banner
Measure the live payload before you answer. A complaint list is usually partly wrong, and the thing actually causing the leak is usually not on it.
Read the post
Cheap consent management platforms for small business
For a small single domain site a free CMP tier is often enough. What the cheap tiers withhold, when a free one is genuinely sufficient, and how to test yours in ten minutes.
Read the post
Cookie consent platform pricing: per subpage, per domain, per session or flat
Four pricing models are in the market, and two numbers about your own estate decide which is cheapest. How to work them out, and why your session count is wrong.
Read the post
Google Consent Mode on Squarespace: what the platform gives you and what it does not
Squarespace's native banner blocks analytics cookies but does not emit Consent Mode v2 signals. What it covers, the code injection that fills the gap, and four limits.
Read the post
Which consent category does each third party script belong in?
Assign consent categories by what the script does for the visitor, not by vendor. The decision test, the four genuinely ambiguous cases, and what guessing costs.
Read the post
Can you be fined for not having a cookie banner?
Not for the banner itself. Penalties attach to storing cookies that need consent without it, so a site setting only strictly necessary cookies needs no banner.
Read the post
Choosing a cookie consent platform when your agency manages multiple client sites
Judge a consent platform for a portfolio on what one policy change costs across every site, not on the feature list. The four questions that actually decide it.
Read the post
Why the Facebook pixel is still loading when your tags are blocked
Your consent tool gates the tags in your container. A pixel injected at runtime by another vendor's script was never in it, which is why gating harder changes nothing.
Read the post
What consent modelling is, and when Google actually switches it on
Google publishes the thresholds, in two different help centres and never side by side: 1,000 denied events a day for Analytics, 700 ad clicks a week for Ads. Below either bar nothing is modelled.
Read the post
How long does cookie consent last, and when should the banner ask again
The GDPR sets no expiry. What actually decides when your banner reappears is how long the browser keeps the record you stored, and on Safari that is seven days no matter what you configured.
Read the post
What happens to a Google Ads conversion when ad_user_data is denied
The conversion still happens. What a denial removes is the user data Google would have received with it, so it stops being counted and starts being estimated. Where it lands, and when nothing lands at all.
Read the post
What the gcd parameter means, and what it proves that gcs cannot
It encodes all four Consent Mode signals and how each state was reached, so it separates a signal a visitor refused from one nobody ever wired. How to read it, and its limits.
Read the post
The difference between ad_user_data and ad_personalization
One governs whether user data reaches Google for advertising, the other whether it may be used to target someone. Which stops remarketing, why gcs cannot tell you, and how to check.
Read the post
Why do tags fire before the cookie banner loads
Because another tag is sharing the trigger that was supposed to run first. What we measured on a live estate, why priority does not fix it, and how to read the real order.
Read the post
Can you still build remarketing audiences if visitors reject cookies
No, not from the visitors who rejected, and modelling does not backfill them. Which signals decide list membership, why the skew matters more than the size, and what still works.
Read the post
How to test a cookie banner before going live
Almost every published banner test is a post launch audit. The six checks to run on staging instead, in cost order, plus the three states nobody tests.
Read the post
How do you prove a visitor gave consent
You prove it with a consent record you can retrieve for one visitor on one date. The five fields it has to carry, and the retrieval test that tells you whether yours is evidence or decoration.
Read the post
How much does a consent management platform cost in 2026
Most sites pay nothing to a few hundred a month, and monthly sessions decide where you land. What the tiers cost, and the setup work that is not on the pricing page.
Read the post
What is the TCF, and does your site need it
The TCF is how the advertising supply chain records and passes consent. Most sites do not need it. Here is the test for whether yours does.
Read the post
GDPR cookie banner requirements in 2026, and the check that proves each one
The things a GDPR cookie banner must do in 2026, each paired with the browser check that proves your own banner actually does it.
Read the post
Why Google Ads and GA4 report different conversion numbers
Google Ads and GA4 count different things, so a gap is normal. Which part of it is structural, which part is consent, and how to tell how much of yours is which.
Read the post
How to pass the consent signal to a server side tagging container
Consent is decided in the web container and rides to the server on the request. The wiring, how to verify it arrived, and the failure that puts the identifier back.
Read the post
How to check your cookie banner is sending the Consent Mode v2 signal
Two reads settle it: the four consent signals inside the browser, and the state that actually reached Google on the request. Here is how to check both.
Read the post
Can Google Analytics work without cookies
Yes, but only in a narrower sense than the question implies. GA4 still collects without cookies; what it stops doing is recognising anyone. Here is what survives.
Read the post
Do you still need a cookie banner with server side tagging
Yes. Server side tagging moves where your tags run, not whether you may collect the data, so the banner and the consent duty stay. Here is what moves and what does not.
Read the post
Why your GA4 traffic shows as Unassigned after adding a cookie banner
Unassigned is traffic GA4 collected and could not attribute. After a banner it has three causes: late consent, a missing session start, or denied pings being identified.
Read the post
White label cookie consent for agencies: what actually matters
White labelling a cookie banner is the easy part. What decides a client roster is who owns the consent record, where the logs go, and whether measurement survives.
Read the post
What is Global Privacy Control, and do you have to honour it
Global Privacy Control is a browser signal that says do not sell or share my data. What it is, which US states make it binding, and how to check your own site honours it.
Read the post
Do cookie banners slow down your website
A cookie banner can slow your site, but the banner script is rarely the expensive part. What it releases on accept is. How to measure both paths honestly.
Read the post
How to raise cookie consent accept rates without dark patterns
The honest levers that raise cookie consent accept rates: plain language, equal buttons, granular categories, a fast banner and a measured baseline.
Read the post
Do you actually need a cookie banner on your website
When your website needs a cookie banner, when it does not, and the question the checklists skip: whether the banner quietly costs you analytics data.
Read the post
What happens to your GA4 data when users reject cookies
With basic or no Consent Mode, GA4 gets nothing from a visitor who rejects cookies. With advanced, it gets a cookieless ping Google can partly model.
Read the post
What is a consent management platform (and when do you need one)
A consent management platform captures what visitors allow, proves it, and passes that choice to your analytics and ad tags. What it does, and when you need one.
Read the post
Basic vs advanced Consent Mode: which one are you running
Deny consent in incognito and read the gcs parameter on Google's request. A request that still fires is advanced Consent Mode; nothing means basic, or a broken tag.
Read the post
How to install a cookie banner with Google Tag Manager
Install your consent banner as the first thing Tag Manager does, on the Consent Initialization trigger, defaulted to denied. Plus how to check it fired before GA4.
Read the post
Can you recover conversions lost to cookie consent?
Not as observed conversions. What Google can model after a cookie refusal, the thresholds it needs, and how to set up Consent Mode so modelling can start.
Read the post
Where the sessions behind your cookie banner go
Visitors who decline cookies still browse and buy. What consent removes from GA4 and Google Ads, what Consent Mode sends instead, and what to check.
Read the post
What is Consent Mode v2? A plain English guide
Consent Mode v2 is how your banner tells Google’s tags what a visitor allowed. What the four signals do, who needs them, and basic versus advanced mode.
Read the post
Why your GA4 conversions dropped overnight
A banner change, a tag that fires too early, a region rule that flipped. The usual suspects when GA4 numbers fall and nobody touched the campaigns.
Read the post
Reject all should be one click, here is why
The banner design choice regulators keep flagging, what a fair banner looks like, and why a clearer first view tends to lift consent rates rather than lower them.
Read the postNothing here yet. Try another topic.
See what consent
was hiding
Run the free scan and find out what your banner is doing to your measurement.


