Gravidade: AltaResponsável: Admin CMPTempo para corrigir: 1-2 h
Inconsistência no Google Consent Mode
Corrija casos em que as tags Google se comportam como se o consentimento tivesse sido concedido apesar de o estado runtime indicar denied.
Abrange: consent_mode_mismatch, consent_mode_default_granted, consent_mode_runtime_conflict
Porque isto importa
Se o Consent Mode sinaliza denied mas pedidos de Analytics ou Ads continuam a carregar, o site apenas cria uma aparência de conformidade. Normalmente defaults, tags ou updates runtime estão configurados de forma inconsistente.
Como verificar manualmente
- Open the site in a fresh session and inspect Google requests before any banner interaction.
- Check whether Consent Mode defaults are set to denied before Google tags initialize.
- Compare runtime consent state against actual network behavior after Accept and Reject.
Causas típicas
- Consent defaults are set too late, after Google tags already loaded.
- GTM tags ignore consent checks even though Consent Mode is enabled.
- Banner updates UI state but does not send a matching consent update to Google.
Correção no GTM
- Use Consent Initialization for your default denied state before any analytics or ads tags run.
- Require consent checks on GA4, Google Ads, Floodlight, and remarketing tags.
- Audit custom HTML tags that may load Google scripts outside GTM consent controls.
Correção em WordPress ou plugins CMP
- Enable Consent Mode integration in your CMP plugin if available.
- Verify that plugin-generated consent events fire before GA4 or Ads plugins load.
- Disable duplicate analytics plugins that bypass the CMP integration.
Correção genérica para developers
- Initialize Google tags only after a denied-by-default consent state is established.
- Send explicit consent updates on accept and reject actions.
- Ensure fallback defaults are denied whenever consent state is unknown.
Como confirmar que a correção funciona
- Reject optional consent and confirm that Google analytics or ads requests do not fire.
- Accept consent and confirm requests start only after the consent update.
- Run a fresh scan and verify the mismatch finding disappears.
Próximo passo
Execute uma nova análise após o deploy para confirmar que o comportamento real em runtime mudou e não apenas o texto do banner.