https://veloconsent.com/blog Field notes on cookie consent, Google Consent Mode v2, lost conversions and compliant measurement, from the team behind Velo. en Tue, 10 Nov 2026 12:00:00 GMT https://veloconsent.com/blog/best-consent-management-platforms https://veloconsent.com/blog/best-consent-management-platforms Tue, 10 Nov 2026 12:00:00 GMT Ten CMPs compared: free plans, lowest prices, what each one bills on, and which are Google certified with IAB TCF support. Prices checked 10 November 2026. https://veloconsent.com/blog/why-does-a-tracking-cookie-come-back-after-rejecting-consent https://veloconsent.com/blog/why-does-a-tracking-cookie-come-back-after-rejecting-consent Tue, 10 Nov 2026 12:00:00 GMT Usually a script that is still running writes it again, or the delete missed the cookie’s domain. How to tell which, and how to make a rejection stick. https://veloconsent.com/blog/does-microsoft-clarity-need-cookie-consent https://veloconsent.com/blog/does-microsoft-clarity-need-cookie-consent Mon, 09 Nov 2026 12:00:00 GMT Yes, for visitors in the EEA, UK and Switzerland. What Clarity does with and without the signal, how to send it, and how to test that a rejection holds. https://veloconsent.com/blog/why-tags-gated-on-functionality-storage-never-fire https://veloconsent.com/blog/why-tags-gated-on-functionality-storage-never-fire Sun, 08 Nov 2026 12:00:00 GMT Your consent setup may deny these signals by default and never update them. How to confirm it in Tag Assistant, and what to change so the tag can fire. https://veloconsent.com/blog/does-hubspot-need-cookie-consent https://veloconsent.com/blog/does-hubspot-need-cookie-consent Sat, 07 Nov 2026 12:00:00 GMT Yes in the EU and UK: HubSpot lists its tracking cookies and ad pixels as non essential. How to hold them until consent, and why gating your tags misses them. https://veloconsent.com/blog/what-happens-to-a-google-ads-conversion-when-ad-user-data-is-denied https://veloconsent.com/blog/what-happens-to-a-google-ads-conversion-when-ad-user-data-is-denied Fri, 06 Nov 2026 12:00:00 GMT A denied ad_user_data does not stop the conversion happening. It changes what Google receives about it, and which counter it can land in. https://veloconsent.com/blog/should-i-block-google-tags-until-consent https://veloconsent.com/blog/should-i-block-google-tags-until-consent Fri, 06 Nov 2026 12:00:00 GMT In Advanced Consent Mode, no: Google tags enforce consent themselves. Basic keeps them blocked until consent. Why an extra check turns one into the other. https://veloconsent.com/blog/what-is-a-consent-management-platform https://veloconsent.com/blog/what-is-a-consent-management-platform Fri, 06 Nov 2026 12:00:00 GMT A consent management platform asks visitors what they allow, records it as proof and passes the choice to your analytics and ad tags. When you need one. https://veloconsent.com/blog/consent-mode-v2-plain-english https://veloconsent.com/blog/consent-mode-v2-plain-english Thu, 05 Nov 2026 12:00:00 GMT Consent Mode v2 is how your banner tells Google’s tags what a visitor allowed. What the four signals do, who needs them, and basic versus advanced mode. https://veloconsent.com/blog/how-to-fire-gtm-tags-on-the-cookie-consent-update-event https://veloconsent.com/blog/how-to-fire-gtm-tags-on-the-cookie-consent-update-event Tue, 03 Nov 2026 12:00:00 GMT cookie_consent_update is the event a consent platform pushes when a choice takes effect. How to fire Tag Manager tags on it without counting twice. https://veloconsent.com/blog/google-consent-mode-v2-built-into-velo https://veloconsent.com/blog/google-consent-mode-v2-built-into-velo Mon, 02 Nov 2026 12:00:00 GMT Consent Mode v2 is on from the first install, the banner meets Google’s requirements, scans check every page and email you about gaps, and support comes first. https://veloconsent.com/blog/is-a-tag-really-setting-cookies-before-consent https://veloconsent.com/blog/is-a-tag-really-setting-cookies-before-consent Sat, 31 Oct 2026 12:00:00 GMT Only a live page load proves it. In a private window, leave the banner alone and read the cookies and requests. Then pause the suspect tag and reload. https://veloconsent.com/blog/ga4-conversions-dropped-overnight https://veloconsent.com/blog/ga4-conversions-dropped-overnight Fri, 30 Oct 2026 12:00:00 GMT A banner change, a tag that fires too early, a region rule that flipped. The usual suspects when GA4 numbers fall and nobody touched the campaigns. https://veloconsent.com/blog/how-to-test-a-cookie-banner-before-going-live https://veloconsent.com/blog/how-to-test-a-cookie-banner-before-going-live Fri, 30 Oct 2026 12:00:00 GMT Test a cookie banner on staging before launch: it should appear, block before consent, send the right signal, record the choice and survive a return visit. https://veloconsent.com/blog/why-google-ads-and-ga4-report-different-conversions https://veloconsent.com/blog/why-google-ads-and-ga4-report-different-conversions Thu, 29 Oct 2026 12:00:00 GMT Google Ads and GA4 count different things, so a gap is normal. Which part is structural, which part is lost at the banner, and how to measure yours. https://veloconsent.com/blog/peru-data-protection-officer-and-your-website https://veloconsent.com/blog/peru-data-protection-officer-and-your-website Wed, 28 Oct 2026 12:00:00 GMT Peru phases in a data protection officer by company size, midsize firms next on 30 November 2026. What that officer will ask about your website. https://veloconsent.com/blog/gdpr-cookie-banner-requirements-2026 https://veloconsent.com/blog/gdpr-cookie-banner-requirements-2026 Wed, 28 Oct 2026 12:00:00 GMT The things a GDPR cookie banner must do in 2026, each paired with the browser check that proves your own banner actually does it. https://veloconsent.com/blog/are-cookies-personal-data-in-peru https://veloconsent.com/blog/are-cookies-personal-data-in-peru Wed, 28 Oct 2026 12:00:00 GMT Yes. Peru's 2024 regulation names online identifiers as personal data, so analytics and ad cookies need prior, express consent. What that changes on your site. https://veloconsent.com/blog/cookie-consent-platform-for-agencies-managing-multiple-client-sites https://veloconsent.com/blog/cookie-consent-platform-for-agencies-managing-multiple-client-sites Tue, 27 Oct 2026 12:00:00 GMT Judge a consent platform for a portfolio on what one policy change costs across every site, not on the feature list. The four questions that actually decide it. https://veloconsent.com/blog/how-long-does-cookie-consent-last https://veloconsent.com/blog/how-long-does-cookie-consent-last Mon, 26 Oct 2026 12:00:00 GMT Cookie consent has no GDPR expiry. Regulators set the interval, twelve months being a common default, and Safari caps a script set record at seven days. https://veloconsent.com/blog/check-cookie-banner-consent-mode-v2-signal https://veloconsent.com/blog/check-cookie-banner-consent-mode-v2-signal Sun, 25 Oct 2026 12:00:00 GMT Two reads settle it: the four consent signals inside the browser, and the state that actually reached Google on the request. Here is how to check both. https://veloconsent.com/blog/cookie-consent-pricing-per-subpage-or-flat-rate https://veloconsent.com/blog/cookie-consent-pricing-per-subpage-or-flat-rate Sat, 24 Oct 2026 12:00:00 GMT Per subpage pricing suits a small site; flat rate wins once you run several domains. Your URL count and monthly sessions decide which model is cheapest. https://veloconsent.com/blog/reject-all-one-click https://veloconsent.com/blog/reject-all-one-click Sat, 24 Oct 2026 12:00:00 GMT Regulators expect refusing consent to be as easy as giving it. Why reject all belongs on the first layer, and what a fair banner looks like. https://veloconsent.com/blog/how-to-pass-consent-signal-server-side-tagging https://veloconsent.com/blog/how-to-pass-consent-signal-server-side-tagging Fri, 23 Oct 2026 12:00:00 GMT Set Consent Mode v2 in your web container and the state reaches your server container on each request. How to gate server tags on it and check it arrived. https://veloconsent.com/blog/google-consent-mode-v2-shopify https://veloconsent.com/blog/google-consent-mode-v2-shopify Wed, 21 Oct 2026 12:00:00 GMT Set denied defaults above your container, then write the visitor's choice to both Google Consent Mode and Shopify's Customer Privacy API on the same click. https://veloconsent.com/blog/what-is-consent-modelling-and-when-does-it-start https://veloconsent.com/blog/what-is-consent-modelling-and-when-does-it-start Tue, 20 Oct 2026 12:00:00 GMT Consent modelling estimates what declined visitors did. It starts only when your property clears Google's published thresholds, and most sites never do. https://veloconsent.com/blog/raise-consent-accept-rates-without-dark-patterns https://veloconsent.com/blog/raise-consent-accept-rates-without-dark-patterns Tue, 20 Oct 2026 12:00:00 GMT The honest levers that raise cookie consent accept rates: plain language, equal buttons, granular categories, a fast banner and a measured baseline. https://veloconsent.com/blog/us-state-privacy-laws-and-your-cookie-banner https://veloconsent.com/blog/us-state-privacy-laws-and-your-cookie-banner Mon, 19 Oct 2026 12:00:00 GMT 19 US states have a comprehensive privacy law. None needs opt in for ordinary cookies; each expects an opt out of sale and targeted ads; 12 require GPC. https://veloconsent.com/blog/ga4-unassigned-traffic-after-cookie-banner https://veloconsent.com/blog/ga4-unassigned-traffic-after-cookie-banner Mon, 19 Oct 2026 12:00:00 GMT Unassigned is traffic GA4 received but could not attribute. A banner causes it three ways: late consent, no session_start, or denied pings given an ID. https://veloconsent.com/blog/why-the-facebook-pixel-still-loads-when-your-tags-are-blocked https://veloconsent.com/blog/why-the-facebook-pixel-still-loads-when-your-tags-are-blocked Sun, 18 Oct 2026 12:00:00 GMT Usually the pixel base code runs before the banner or the tag never required consent. If both are clean, another vendor's script is injecting it at runtime. https://veloconsent.com/blog/can-you-build-remarketing-audiences-if-visitors-reject-cookies https://veloconsent.com/blog/can-you-build-remarketing-audiences-if-visitors-reject-cookies Sat, 17 Oct 2026 12:00:00 GMT No, not from visitors who reject: denied advertising consent stores no identifier, so they never join a remarketing list. What still works, cheapest first. https://veloconsent.com/blog/cheap-consent-management-platform-for-small-business https://veloconsent.com/blog/cheap-consent-management-platform-for-small-business Fri, 16 Oct 2026 12:00:00 GMT For a small business on one domain, a free CMP tier is often enough. What the cheap tiers leave out, when free is sufficient, and how to test your tier. https://veloconsent.com/blog/do-you-still-need-a-cookie-banner-with-server-side-tagging https://veloconsent.com/blog/do-you-still-need-a-cookie-banner-with-server-side-tagging Fri, 16 Oct 2026 12:00:00 GMT Yes. Server side tagging changes where tags run, not whether you may collect the data, so the banner stays. What moves to the server and what does not. https://veloconsent.com/blog/what-does-the-gcd-parameter-mean https://veloconsent.com/blog/what-does-the-gcd-parameter-mean Thu, 15 Oct 2026 12:00:00 GMT gcd encodes all four Consent Mode signals and how each was set, so it separates a refused signal from one never wired. How to read it, and its limits. https://veloconsent.com/blog/what-happens-to-ga4-data-when-users-reject-cookies https://veloconsent.com/blog/what-happens-to-ga4-data-when-users-reject-cookies Thu, 15 Oct 2026 12:00:00 GMT With basic or no Consent Mode, GA4 gets nothing from a visitor who rejects cookies. With advanced, it gets a cookieless ping Google can partly model. https://veloconsent.com/blog/white-label-cookie-consent-for-agencies https://veloconsent.com/blog/white-label-cookie-consent-for-agencies Thu, 15 Oct 2026 12:00:00 GMT White label cookie consent for your agency? Check who each consent record names, whether one client's log exports alone, and whether tags get the signal. https://veloconsent.com/blog/can-google-analytics-work-without-cookies https://veloconsent.com/blog/can-google-analytics-work-without-cookies Wed, 14 Oct 2026 12:00:00 GMT Partly. In advanced Consent Mode, GA4 still receives cookieless pings from visitors who decline, for modelling. It cannot recognise users, sessions or audiences. https://veloconsent.com/blog/what-is-global-privacy-control https://veloconsent.com/blog/what-is-global-privacy-control Wed, 14 Oct 2026 12:00:00 GMT Global Privacy Control is a browser signal that says do not sell or share my data. Where US law makes it binding, and how to check your site honours it. https://veloconsent.com/blog/can-i-move-a-script-into-google-tag-manager-to-gate-it https://veloconsent.com/blog/can-i-move-a-script-into-google-tag-manager-to-gate-it Tue, 13 Oct 2026 12:00:00 GMT Usually yes. Move the script into a GTM tag, delete the copy in the head and set consent on the tag. Scripts that must run before render stay put. https://veloconsent.com/blog/how-much-does-a-consent-management-platform-cost https://veloconsent.com/blog/how-much-does-a-consent-management-platform-cost Mon, 12 Oct 2026 12:00:00 GMT Most sites pay nothing to a few hundred a month for a CMP; pricing guides put a small business near $20 to $50. What moves the bill, and the setup cost. https://veloconsent.com/blog/what-is-the-tcf-and-does-your-site-need-it https://veloconsent.com/blog/what-is-the-tcf-and-does-your-site-need-it Sun, 11 Oct 2026 12:00:00 GMT The TCF is how the advertising supply chain records and passes consent. Most sites do not need it. Here is the test for whether yours does. https://veloconsent.com/blog/install-cookie-banner-google-tag-manager https://veloconsent.com/blog/install-cookie-banner-google-tag-manager Sat, 10 Oct 2026 12:00:00 GMT Install your cookie banner on the Consent Initialization trigger in Google Tag Manager, with consent defaulted to denied. Then check it fired before GA4. https://veloconsent.com/blog/can-you-be-fined-for-not-having-a-cookie-banner https://veloconsent.com/blog/can-you-be-fined-for-not-having-a-cookie-banner Fri, 09 Oct 2026 12:00:00 GMT Not for the banner itself. Penalties attach to storing cookies that need consent without it, so a site setting only strictly necessary cookies needs no banner. https://veloconsent.com/blog/how-do-you-prove-a-visitor-gave-consent https://veloconsent.com/blog/how-do-you-prove-a-visitor-gave-consent Thu, 08 Oct 2026 12:00:00 GMT You prove it with a consent record you can retrieve for one visitor on one date. What the record has to contain, and the three ways it quietly goes missing. https://veloconsent.com/blog/why-do-tags-fire-before-the-cookie-banner-loads https://veloconsent.com/blog/why-do-tags-fire-before-the-cookie-banner-loads Wed, 07 Oct 2026 12:00:00 GMT Another tag shares the Consent Initialization trigger and reaches the network first. Tag priority does not fix it. How to see the real firing order. https://veloconsent.com/blog/how-to-make-meta-signals-gateway-respect-cookie-consent https://veloconsent.com/blog/how-to-make-meta-signals-gateway-respect-cookie-consent Tue, 06 Oct 2026 12:00:00 GMT The Signals Gateway Pixel runs on cbq, so fbq consent cannot be relied on to cover it. How to set its Tag Manager consent settings and test them. https://veloconsent.com/blog/does-google-tag-gateway-need-cookie-consent https://veloconsent.com/blog/does-google-tag-gateway-need-cookie-consent Mon, 05 Oct 2026 12:00:00 GMT Yes. Google tag gateway moves where your Google tag loads from, not what consent it needs. What stays the same, what can break, and how to test it. https://veloconsent.com/blog/what-happens-when-someone-withdraws-cookie-consent https://veloconsent.com/blog/what-happens-when-someone-withdraws-cookie-consent Sun, 04 Oct 2026 12:00:00 GMT Three things should happen: a new consent event recorded, a denied signal sent to every tool that takes one, and identity reset before capture stops. https://veloconsent.com/blog/switch-consent-management-platform-without-breaking-tracking https://veloconsent.com/blog/switch-consent-management-platform-without-breaking-tracking Sun, 04 Oct 2026 12:00:00 GMT Install the new CMP beside the old one, repoint every consent condition to its signal, then remove the old one last. Leftover variables break tracking. https://veloconsent.com/blog/squarespace-google-consent-mode https://veloconsent.com/blog/squarespace-google-consent-mode Sat, 03 Oct 2026 12:00:00 GMT Squarespace's native banner blocks analytics cookies but sends no Consent Mode signals. The code injection that adds them, and four limits of the platform. https://veloconsent.com/blog/what-consent-category-should-a-script-go-in https://veloconsent.com/blog/what-consent-category-should-a-script-go-in Thu, 01 Oct 2026 12:00:00 GMT Assign each script a consent category by what it does, not by vendor. The decision test, the four ambiguous cases, and what a wrong guess costs. https://veloconsent.com/blog/how-does-ai-cookie-categorisation-work https://veloconsent.com/blog/how-does-ai-cookie-categorisation-work Sat, 26 Sep 2026 12:00:00 GMT AI cookie categorisation suggests a consent category for cookies a scan cannot match. What the model reads, what it cannot know, and what a person should check. https://veloconsent.com/blog/how-to-add-a-cookie-banner-to-wordpress-without-a-plugin https://veloconsent.com/blog/how-to-add-a-cookie-banner-to-wordpress-without-a-plugin Thu, 24 Sep 2026 12:00:00 GMT Paste your consent tool's script into the site head through a child theme, load it before the Google tag, and keep theme updates from deleting it. Six steps. https://veloconsent.com/blog/recover-conversions-lost-to-cookie-consent https://veloconsent.com/blog/recover-conversions-lost-to-cookie-consent Wed, 23 Sep 2026 12:00:00 GMT Not as observed conversions. What Google can model after a cookie refusal, the thresholds it needs, and how to set up Consent Mode so modelling can start. https://veloconsent.com/blog/what-happens-if-a-cookie-is-in-the-wrong-consent-category https://veloconsent.com/blog/what-happens-if-a-cookie-is-in-the-wrong-consent-category Wed, 23 Sep 2026 12:00:00 GMT Filed too strictly, GA4 drops visitors who said yes and Google Ads stops building audiences; filed too loosely, tags run after a no. How to check yours. https://veloconsent.com/blog/basic-vs-advanced-consent-mode-which-am-i-running https://veloconsent.com/blog/basic-vs-advanced-consent-mode-which-am-i-running Wed, 23 Sep 2026 12:00:00 GMT Deny consent in a private window and watch the network. A Google request that still fires means advanced Consent Mode; none means basic, or a broken tag. https://veloconsent.com/blog/where-34-percent-of-sessions-go https://veloconsent.com/blog/where-34-percent-of-sessions-go Wed, 23 Sep 2026 12:00:00 GMT Visitors who decline cookies still browse and buy. What consent removes from GA4 and Google Ads, what Consent Mode sends instead, and what to check. https://veloconsent.com/blog/do-i-need-a-cookie-banner-on-my-website https://veloconsent.com/blog/do-i-need-a-cookie-banner-on-my-website Tue, 22 Sep 2026 12:00:00 GMT When your website needs a cookie banner, when it does not, and the question the checklists skip: whether the banner quietly costs you analytics data. https://veloconsent.com/blog/what-to-do-if-you-get-a-complaint-about-your-cookie-banner https://veloconsent.com/blog/what-to-do-if-you-get-a-complaint-about-your-cookie-banner Tue, 22 Sep 2026 12:00:00 GMT Measure the live payload before you answer. A complaint list is usually partly wrong, and the real cause is usually not on it. https://veloconsent.com/blog/do-cookie-banners-slow-down-your-website https://veloconsent.com/blog/do-cookie-banners-slow-down-your-website Tue, 22 Sep 2026 12:00:00 GMT A cookie banner can slow your site, but the banner script is rarely the expensive part. What it releases on accept is. How to measure both paths honestly. https://veloconsent.com/blog/how-to-add-a-cookie-banner-to-a-webflow-site https://veloconsent.com/blog/how-to-add-a-cookie-banner-to-a-webflow-site Tue, 22 Sep 2026 12:00:00 GMT Paste the banner in Site settings Custom code above your container, then clear Webflow's native Analytics and Pixel fields, which load outside your tag manager. https://veloconsent.com/blog/ad-user-data-vs-ad-personalization https://veloconsent.com/blog/ad-user-data-vs-ad-personalization Fri, 07 Aug 2026 12:00:00 GMT Google's consent docs: ad_user_data gates sending user data for ads, ad_personalization gates personalised ads. Both stop remarketing, at different points.