Consent · CMP · Regional Tracking

Most Sites Think They're Compliant. Most Aren't.

 A cookie banner is not a compliance strategy. If your cookies fire before a user accepts or your CMP isn't passing consent signals correctly, you're collecting data you shouldn't have. We audit your full consent setup across GA4, Meta Pixel, TikTok, LinkedIn, Bing, and 90+ platforms to find exactly where it breaks.

Get Custom QuoteRun Free Audit

Fixed price. We confirm fit on the kickoff call before work begins.

Pre-consent tracking checks

CMP signal validation

Regional compliance testing

A banner isn't proof. This is.

Having a consent banner is only the first step. We test what actually happens when visitors accept, reject, or haven't made a choice.

Without Proper Setup
Tracking starts before the visitor gives consent
Your banner works, but doesn't control your tracking
The same rules are applied to every visitor
Only the “Accept” journey has been tested
GA4 is checked, but other trackers are assumed to be fine
You can say you have a consent banner
With Proper Setup
Trackers wait for the appropriate consent signal
Consent signals are connected to the tags that need them
Consent behaviour is configured for the regions where you operate
Accept, Reject and Default states are tested
You have documented evidence of how your tracking behaves
GA4, Google Ads, Meta, TikTok and other trackers are checked

The problem

The banner is visible. The data collection isn't.

Most consent issues aren't obvious. Tags fire in the wrong order. Consent signals don't reach the right triggers. Regions that require opt-in are treated the same as regions that don't.

Tags can fire before consent.

Trackers can load before a user has accepted the relevant consent category, quietly collecting data before the choice is made.

Signals stop at the Consent Platform

Your consent platform may show the right state while the tags downstream never receive the signal they need to act on it.

Rules aren't region specific

Trackers can load before a user has accepted the relevant consent category, quietly collecting data before the choice is made.

What you'll discover

Four things most audits miss

Pre-consent tracking

We detect trackers firing before a user accepts data sharing across every platform on your site, not just Google Analytics.

Consent platform audit

We test your CMP- OneTrust, Cookiebot, Consentmo, and others to verify consent signals are actually reaching your tags. Connection isn't the same as configuration.

Region-based testing

We simulate visits from multiple regions to test your setup under GDPR, CCPA, LGPD, and other applicable laws. Compliance in one country doesn't mean compliance everywhere.

90+ platforms decoded

We identify what GA4, Meta Pixel, TikTok, LinkedIn, Bing, and other platforms are sending — and exactly when they send it so nothing is assumed.

The outcome

Every Cookie. Every platform. Every region.

When we're done, you have a consent implementation that holds up not just visually, but technically.

Documented

You can show how each tag is governed and explain exactly why it fires when it does.

Verified

Consent behaviour is tested rather than inferred from what the banner appears to be doing.

Region-aware

Your setup accounts for different consent requirements instead of assuming one global behaviour.

FAQ

Frequently Asked Questions

Not sure which audit option suits you best? Let’s clear things up.