Many websites have a cookie banner, but that does not always mean tracking is blocked before consent.
One common issue is that Google Analytics, GA4, Google Tag Manager, Meta Pixel, or other marketing scripts load as soon as the page opens. The banner appears visually, but the tracking has already happened.
That is a problem because consent is not just a design element. The technical behavior of the website matters.
What you are checking
You want to know whether analytics or marketing requests happen before the visitor clicks βAcceptβ.
Common signals include requests to:
- google-analytics.com
- googletagmanager.com
- doubleclick.net
- facebook.com/tr
- connect.facebook.net
- hotjar.com
- clarity.ms
Manual test
Open the website in a private browser window.
Do not click the cookie banner.
Open DevTools and go to the Network tab.
Reload the page.
Search for requests such as:
- collect
- gtag
- google-analytics
- googletagmanager
- doubleclick
- fbevents
- hotjar
- clarity
If those requests appear before consent, the website may be tracking before the user has agreed.
Why this happens
This usually happens because analytics or marketing scripts are installed outside the consent manager.
Common causes:
- GA4 is installed directly in the page
- Google Tag Manager fires tags before consent checks
- Meta Pixel is not gated behind the CMP
- Chat widgets or heatmap tools load immediately
- The cookie banner records consent, but does not block scripts
What should happen instead
Before consent, non-essential tracking should not fire.
After consent, analytics and marketing tags can load according to the consent choices the user made.
For Google tools, this often means configuring Consent Mode correctly and making sure tags respect consent states.
A cookie banner is not enough
A banner can look compliant while the website still sends tracking requests too early.
That is why it is worth testing the actual browser behavior, not just checking whether a banner appears.
Automated scanning
Iβm building GDPRChecker, a free GDPR scanner for websites that checks cookies, trackers, cookie banner signals, and pre-consent tracking behavior.
You can try it here:
https://www.gdprchecker.online/scanner
It is not legal advice, but it can help identify technical consent issues that are easy to miss.
Top comments (0)