Consent · CMP · Regional Tracking
Most Sites Think They're Compliant. Most Aren't.
A cookie banner is not a compliance strategy. If your cookies fire before a user accepts or your CMP isn't passing consent signals correctly, you're collecting data you shouldn't have. We audit your full consent setup across GA4, Meta Pixel, TikTok, LinkedIn, Bing, and 90+ platforms to find exactly where it breaks.
Fixed price. We confirm fit on the kickoff call before work begins.
- Pre-consent tracking checks
- CMP signal validation
- Regional compliance testing
A banner isn't proof. This is.
Having a consent banner is only the first step. We test what actually happens when visitors accept, reject, or haven't made a choice.
Without Proper Setup
Tracking starts before the visitor gives consent- Your banner works, but doesn't control your tracking
- The same rules are applied to every visitor
- Only the “Accept” journey has been tested
- GA4 is checked, but other trackers are assumed to be fine
- You can say you have a consent banner
With Proper Setup
Trackers wait for the appropriate consent signal- Consent signals are connected to the tags that need them
- Consent behaviour is configured for the regions where you operate
- Accept, Reject and Default states are tested
- You have documented evidence of how your tracking behaves
- GA4, Google Ads, Meta, TikTok and other trackers are checked
The problem
The banner is visible. The data collection isn't.
Most consent issues aren't obvious. Tags fire in the wrong order. Consent signals don't reach the right triggers. Regions that require opt-in are treated the same as regions that don't.
Tags can fire before consent.Trackers can load before a user has accepted the relevant consent category, quietly collecting data before the choice is made.
Signals stop at the Consent PlatformYour consent platform may show the right state while the tags downstream never receive the signal they need to act on it.
- Rules aren't region specific
Trackers can load before a user has accepted the relevant consent category, quietly collecting data before the choice is made.
What you'll discover
Four things most audits miss
Pre-consent tracking
We detect trackers firing before a user accepts data sharing across every platform on your site, not just Google Analytics.
Consent platform audit
We test your CMP- OneTrust, Cookiebot, Consentmo, and others to verify consent signals are actually reaching your tags. Connection isn't the same as configuration.
Region-based testing
We simulate visits from multiple regions to test your setup under GDPR, CCPA, LGPD, and other applicable laws. Compliance in one country doesn't mean compliance everywhere.
90+ platforms decoded
We identify what GA4, Meta Pixel, TikTok, LinkedIn, Bing, and other platforms are sending - and exactly when they send it so nothing is assumed.
The outcome
Every Cookie. Every platform. Every region.
When we're done, you have a consent implementation that holds up not just visually, but technically.
DocumentedYou can show how each tag is governed and explain exactly why it fires when it does.
VerifiedConsent behaviour is tested rather than inferred from what the banner appears to be doing.
Region-awareYour setup accounts for different consent requirements instead of assuming one global behaviour.
FAQ
Frequently Asked Questions
No. The banner is the user interface. Compliance also depends on what tags and scripts actually do before and after the user's choice, and whether the correct signals reach each platform.
No. We look across the wider tracking stack, including GA4, Meta Pixel, TikTok, LinkedIn, Bing and other platforms. The point is to find trackers that behave incorrectly, regardless of who provides them.
Yes. Region-based testing is part of the review. We simulate visits from multiple regions so the same implementation isn't assumed to work everywhere.
That's fine. An installed CMP isn't proof that the downstream setup is correct. We test platforms such as OneTrust, Cookiebot, Consentmo and other CMP implementations for the actual signal flow into your tags.
Yes. The audit identifies what is wrong and where. If you want us to implement the fixes, we can scope the work around your existing GTM, CMP and tracking architecture.
Not sure where your consent compliance is breaking?
Run a free GA4 and GTM audit to look at your consent setup across platforms and understand what's firing when it shouldn't be.