What we build

Websites

Company websites and B2B platforms on WordPress or custom builds, with design, audits and speed optimisation.

Website development →

What we run

SEO

Visibility in Google and in language models. One team looks after search, your business profile and what ChatGPT and Gemini say about your brand.

Search engine optimisation →

What we run

Advertising and campaigns

Campaigns judged on net profit after returns and cost of goods, not on the ROAS in the ad platform. Creative is made in-house, so it never waits for a third supplier.

Digital marketing agency →

What we run

Analytics and data

Measurement first, decisions second. Ad, store and warehouse data in one place, so a budget conversation takes fifteen minutes, not three meetings.

Web analytics for e-commerce →
Home/Services/Digital marketing agency/Consent Mode v2

Google Consent Mode v2 for companies selling into the EU

You sell to buyers in the EU from outside it, so Google expects their consent before your tags may measure them or build remarketing lists. A cookie banner alone does not pass that choice on to the tags. We set up Consent Mode v2 in your code and tags, then test in the browser what really fires. One team in the EU, working with you in English.

Consent before the first tag

We set the default state in the page code before Tag Manager starts. Only then do the tags read the choice from the banner.

Tested in the browser, not on trust

After setup we check what goes out before the choice and after it. A green consent audit does not prove that measurement works.

Table of the four Consent Mode v2 signals: ad_storage, analytics_storage, ad_user_data and ad_personalization, denied at start, granted after consent, denied after refusal Google Google Tag Manager 4 consent signals in Consent Mode v2, two of them added in November 2023
Trusted by
Technology partners
The problem

Why does selling into the EU break your tracking?

At home your tags may fire on the first page view. For visitors from the EU, Google expects their consent first, and three things change, each one showing up in your ad accounts before anyone notices.

Google asks for consent signals

To keep using tags for measurement, ad personalization and remarketing, you must collect consent from users in the EEA and share consent signals with Google. If you do not comply, Google may limit or suspend your use of the product.

Tags fire before anyone clicks

Cookiebot installed in the page code sends an update after the choice and does not set the default state on its own. Without it Tag Manager treats advertising and analytics storage as allowed. On the preview of our own site, GA and HubSpot cookies were written before the first click.

The banner blocks the measurement itself

Cookiebot's automatic blocking mode can hold back the script that loads Tag Manager. The container never starts, while a consent audit shows green. We met this in a PrestaShop store in September 2026.

Definition

What is Google Consent Mode v2?

Google Consent Mode v2 is a Google mechanism that passes the visitor's choice from the consent banner to your tags. The choice is described by four signals: ad_storage, analytics_storage, ad_user_data and ad_personalization, the last two added in November 2023. Google tags such as GA4 and Google Ads adjust to them: when the visitor does not consent they write nothing to the browser, and some data may still reach Google in a simplified form. The mechanism does not collect consent itself. A consent management platform (CMP), for example Cookiebot, does.

Sources: Google, Consent mode overview · Google, Set up consent mode on websites · Google Ads Help, Consent mode reference · EDPB, Guidelines 3/2018 on the territorial scope of the GDPR (Article 3), version 2.1 · EDPB, Guidelines 05/2020 on consent (version 1.1)

It is not a cookie banner

The banner collects the choice. Consent Mode passes it to Google tags. You need both.

It is not legal advice

Whether consent is valid is decided by the GDPR and EDPB guidelines, not by Google. We cover the technical side, your counsel covers the legal one.

It is setup and testing

Startup settings in code, passing the choice on after the click, consent in the tags and a browser test, with a note of what goes out under which consent.

Does it apply to you?

Does the GDPR apply to a company outside the EU?

It can. The GDPR reaches a company with no EU establishment in two cases that matter for tracking. Whether you are in scope is a question for your counsel, and we say so in the first call.

You offer goods or services in the EU

Article 3(2)(a) covers processing related to offering goods or services to people in the Union, whether or not they pay. A shop that ships to EU buyers is the usual case.

You monitor behaviour in the EU

Article 3(2)(b) covers monitoring of behaviour that takes place in the Union. The EDPB lists online tracking through cookies or other tracking techniques among the examples.

Not every visit counts

The EDPB does not treat any online collection of data about people in the EU as monitoring. It looks at the purpose, in particular at behavioural analysis and profiling.

Comparison

Basic or advanced mode: what is the difference?

Google describes two modes. They differ in what the tags do before the visitor clicks anything. The choice of mode is also a legal decision, so we discuss it with your counsel.

Basic or advanced mode: what is the difference?
ElementBasic modeAdvanced mode
Google tags before the choiceWait until the visitor uses the bannerLoad when the page opens
Data before the choiceNothing reaches Google, not even the consent stateWhen consent is denied, tags send measurements without cookies
After consentTags load and write cookiesCookies and full data after consent
Conversion model in Google AdsGeneralSpecific to the advertiser
GDPR

When is consent from a banner valid?

Valid consent does not depend on Google. The European Data Protection Board guidelines describe what a banner must not do. We check these five points in every banner we set up.

No pre-ticked boxes

The EDPB treats consent given through an option the banner switched on for the visitor as invalid. Silence, or simply carrying on using the service, is not consent.

Content does not depend on consent

Access to a service must not depend on consent to storing data on the device. The EDPB calls this a cookie wall.

Scrolling is not consent

Scrolling or swiping through a page is never a clear affirmative action, under any circumstances.

A separate choice for each purpose

When data serves several purposes, the visitor picks which ones to accept instead of agreeing to a bundle.

Withdrawal as easy as consent

Consent can be withdrawn at any time, as easily as it was given. The withdraw button must not sit deeper than the accept button.

Scope

What do we set up as part of Consent Mode v2?

The scope is similar on PrestaShop, WooCommerce and Shopify. What changes are the modules and the place where we hook in the code.

Audit of the current state

We check which cookies and requests go out before the banner choice and after it. The result is a list of tags with the moment each one starts.

Consent platform

We configure Cookiebot or another banner that works with Consent Mode: categories, languages and texts. You pay the platform vendor for the subscription.

Default state and update

In the page code we set consent default before Tag Manager and consent update after the choice. For returning visitors we read the stored consent.

Consent in the tags

GA4, Google Ads, the Meta pixel and Conversions API get consent as a condition to fire. Tags without their own consent handling get an additional check in Tag Manager, and we check the Microsoft UET tag in the browser test.

Rules for regions

If you sell outside Europe too, the default state can depend on the visitor's country. Google provides a region parameter for it. You agree the list of countries with your legal counsel.

Test and documentation

We check cookies and requests to Google in the browser before the choice and after it. You get a note of which event goes out under which consent.

How we work

Five stages of a Consent Mode v2 setup

Deciding which consent categories the banner needs takes the longest. The code change itself is shorter, and the test shows whether it works.

  1. 1

    Audit of the current state

    at the start

    We compare the tags, cookies and requests that go out before the banner choice with what your privacy policy promises.

  2. 2

    Consent design

    after the audit

    We settle the categories, banner texts, languages and the countries where the default state should differ. Legal decisions stay with you.

  3. 3

    Setup in code and GTM

    during setup

    We set up the banner, consent default, consent update and consent checks in the tags. Changes go to a test environment first, if you have one.

  4. 4

    Browser test

    before launch

    We check three scenarios: no choice, consent and refusal. In each we look at cookies and at requests to Google, GA4 and Meta.

  5. 5

    Read-out after 7 days

    after launch

    Google Ads shows the impact of Consent Mode only after at least seven full days. Then we check the report and record the result in the documentation.

In numbers

What can we prove, and what not yet?

We do not quote a result such as a percentage of extra conversions after Consent Mode, because it depends on the share of visitors who accept, and that differs between shops. We show what is checked: how we set up our own site, how long Google needs to show an impact, and how many markets we work in every day. We measured our own site the way we measure client sites: first the consent state before the choice, then after it, in the browser.

6 of 7

consent types are denied by default in the code of our own site before the first tag; only security_storage stays granted

7 days

is how long Consent Mode must run before Google Ads shows its impact on results

9 markets

is the reach of the e-commerce of Surf Inc., a brand we co-create; we run it on the technology and marketing side

Client reviews

How clients write about JustIdea

Ratings from three public profiles, including Clutch, which verifies each reviewer before publishing. They cover the whole agency, not this one service. AI assistants read such profiles too when they describe a company.

4.96 / 5

weighted average of 224 reviews across three platforms. Clients gave them, and each site links to the profile with the full text of every review.

Read the reviews
Certifications and partnerships

Access to consent diagnostics on the platform side

Consent Mode works on the platform side, so the platforms decide whether the signals arrived. Partner statuses give us a way to escalate when a report shows something other than the setup.

Google Premier Partner

Google, top tier of the Google Partners programme

When the consent report in Google Ads or Google Analytics shows something other than the setup, we have an escalation route on Google's side, not only our own hypothesis.

Meta Business Partner

Meta, programme for advertising agencies

We configure the Meta pixel and Conversions API separately, because Consent Mode is a Google mechanism. We check what actually arrives in the diagnostics in Meta Events Manager.

Microsoft Advertising Elite Partner

Microsoft, highest tier of the programme

The UET tag has its own consent mechanism. We read the result in the Microsoft Advertising panel, because only there can you see what reached it after the visitor's choice.

Pricing

How much does a Consent Mode v2 setup cost?

The price depends on the number of platforms and on whether the shop runs on PrestaShop, which needs separate modules. You pay the consent platform vendor for its subscription, outside our quote.

Recommended

Consent Mode v2 setup

Consent banner, consent default and update, consent checks in the GA4, Google Ads and Meta tags, and a browser test.

from €250
one-off, net
  • Scope to choose from: GA4, Tag Manager, Meta Pixel with Conversions API, Enhanced Conversions in Google Ads and consent platform integration. The price depends on the number of platforms and the scope. We work with WordPress, WooCommerce, Shopify, Shoper, IdoSell and custom applications.
PrestaShop

PrestaShop store

PrestaShop needs modules for Tag Manager, the pixel and consent, so the workload differs from other platforms.

Quoted after a review
one-off, net
  • Included: Premium Google Tag Manager, Pixel Plus with Conversions API, GA4, Enhanced Conversions in Google Ads, a consent banner with Consent Mode and data verification after launch. Module licences are not included, and work on the shop template is quoted separately.
After launch

Tracking monitoring

A monthly check of the GA4, GTM and Meta tags and of data quality, so that a change on the site does not switch tracking off quietly.

€70
a month, net
  • Included: checks of tag correctness and completeness, review of anomalies and gaps in the data, keeping the setup technically up to date and a monthly report with recommendations. The notice period is 3 months.

See web analytics

Doubts before working together

Questions we hear before a consent setup

“We already have a Cookiebot banner”

A banner is half of the setup. We check whether it passes the choice to the tags and whether it blocks Tag Manager itself, because the automatic mode can do that.

“After a refusal we measure nothing anyway”

It depends on the mode. Basic sends nothing until the choice, while advanced sends measurements without cookies after a refusal, and Google models part of the conversions from them. You pick the mode together with your legal counsel.

“We're worried consent will cut our conversions”

A drop caused by refusals comes from visitors' choices, not from the setup, and we do not promise to reverse it. We show which signals reached Google, so you decide on numbers.

“Our developer can do this alone”

They can, if they know the order of consent default, Tag Manager and update, and consent checks in the tags. Errors most often sit in the order and in tags without checks, not in the banner. If you want us to review their work, we quote it once we see a short description of the setup.

Limits of the service

Do you need a Consent Mode v2 setup?

Short answer

Yes, if you measure or advertise in Google, Meta or Microsoft and you have visitors from Europe. If you use no marketing or analytics tags at all, you do not need this service.

Setting up the banner itself is covered in our guide Cookiebot and Consent Mode 2.0. This page covers the whole setup: default state, tags and a browser test.

When events should go out from a server, that is a separate project. Consent refused in the browser stays refused on the server too, as we explain on the server-side tagging page. Before you write to us, see what fires on your site with the free analytics scanner.

Order in the page code: consent default first, then Google tags, then the update after the choice; a banner without the default state lets tags fire without consent

This is the service

  • You use GA4, Google Ads or the Meta pixel.
  • You have visitors from the European Economic Area, the United Kingdom or Switzerland.
  • A banner is in place, but nobody has checked what fires before the choice.

Start with something else

  • You have no GA4 or Tag Manager yet: start with analytics configuration.
  • You want to move measurement to a server: that is a separate server-side tagging project.
  • You need an opinion on whether consent is valid: that is a job for a lawyer, not an agency.
FAQ

Google Consent Mode v2: questions and answers

What is Google Consent Mode v2?

It is how Google learns what a visitor agreed to. The signals are ad_storage, analytics_storage, ad_user_data and ad_personalization, and the last two were added in November 2023. The mechanism does not collect consent, a consent management platform does.

How much does a Consent Mode v2 setup cost?

A consent setup on WordPress, WooCommerce, Shopify, Shoper or IdoSell starts from €250 net, and the price depends on the number of platforms and the scope. A PrestaShop store is quoted after a review, because it needs separate modules. You pay the consent platform vendor for the subscription, and in our quotes we assume EUR 15 to 90 a month for Cookiebot.

Is Google Consent Mode v2 mandatory?

Consent from users in Europe is mandatory, and Consent Mode is how you pass its signals to Google. Without those signals Google may limit measurement, ad personalization and remarketing for EEA traffic. Google's policy also covers the United Kingdom and Switzerland.

Does the GDPR apply to a US company?

It can. The GDPR applies to a company outside the EU when its processing relates to offering goods or services to people in the EU or to monitoring their behaviour there. The EDPB lists online tracking through cookies among the examples. Whether you are in scope is for your counsel to decide, we do not give legal opinions.

What is the difference between basic and advanced mode?

In basic mode, Google tags wait to load until the visitor uses the banner and send nothing to Google, not even the consent state. In advanced mode they load when the page opens and send measurements without cookies after a refusal. The mode has legal consequences, so we discuss it with your counsel.

Is a cookie banner enough?

No. The banner only records the visitor's decision, and the tags must still receive it: startup settings before the first tag and an update after the click. Without that, tags start as if consent were already given. In some banners the automatic blocking mode can also stop Tag Manager itself.

Is Cookiebot enough for Consent Mode v2?

Not on its own. Cookiebot placed in the page code (except the Cookiebot app for Shopify, which sets the default state on its own) sends only the update after the choice and does not supply the starting settings, which we saw on our own site. The default state and consent in the tags have to be set separately. Our guide to Cookiebot covers the banner setup.

How do I check that Consent Mode works?

Open your site without making a choice in the banner and check cookies and requests to Google in the browser tools. No GA cookies should be written before the choice, and the GA4 request should carry a gcs parameter with the consent state. Parameters such as gcs and gcd can change, so treat them as a hint. Then repeat the test after consent and after refusal.

How long until Consent Mode shows an impact in Google Ads?

At least seven full days after launch. That is how long Google Ads requires before it shows the impact of Consent Mode on results, and only when the data passes a minimum threshold. Google does not state that threshold as a number.

How does GA4 consent mode work?

GA4 reads the analytics_storage signal. While it is denied, GA4 does not write analytics cookies. In advanced mode it still sends measurements without cookies after a refusal, and Google models part of the data from them, while in basic mode it sends nothing until the visitor chooses. You can see the state in the GA4 request, in the gcs parameter.

Does Consent Mode work with the Meta pixel?

Consent Mode is a Google mechanism and does not control the Meta pixel. We configure the Meta pixel and Conversions API separately, so that events go out after the visitor's consent. We check that part in the same browser test.

Can you make our analytics GDPR compliant?

We set up the technical part that GDPR-compliant analytics needs: consent before the first tag, consent in every tag and a browser test. Whether your setup as a whole complies is for your counsel to decide.

Do you give legal opinions on consent?

No. We describe the technical effect of every setting and leave the question of whether the banner meets the GDPR to your legal counsel. We rely on EDPB guidelines and Google documentation, and the sources are listed on this page.

Banner, consent platform and Consent Mode: how they differ

Three different things

A banner is the window with the choice. A consent management platform records the choice and the proof of consent. Consent Mode passes the choice to Google tags. Each can work without the others, but measurement that follows the visitor's choice needs all three.

Why the default state comes before Tag Manager

Google says to call consent default before any command that sends measurement data. If the consent code is called out of order, the starting settings will not apply, so it goes at the very top of the page code, above the GTM snippet.

Countries, regions and the wait time for the banner

The default state can be set separately for regions, using ISO 3166-2 codes. The wait_for_update parameter, given in milliseconds, gives the banner time to read the stored choice before any data is sent.

What Consent Mode does not do

It does not make a banner legally valid, replace a privacy policy or control tags from outside Google. The validity of consent is judged by the law and EDPB guidelines, not by Google.

Related services

Services we combine with consent setup

Consent decides what you may measure. These services handle the rest of measurement: sending events, counting them and running the campaigns that use them.

Server-side tagging

Events sent from a server instead of the browser. Consent refused in the browser stays refused on the server.

View ›

Web analytics

The whole measurement setup: GA4, Tag Manager, e-commerce events and consent in one project.

View ›

Google Ads

A Google Ads agency that asks about margin, returns and shipping cost before a budget decision.

View ›

E-commerce data warehouse

Ads, shop and warehouse in one database, with profit counted after product cost and returns.

View ›

Let's check what fires on your site without consent

On the call we open your site without a banner choice and look at cookies and requests to Google. We tell you what to fix and where to start. After it you get a quote for the setup.

Book a consent review The first call is free and without obligation
Contact

A conversation about your numbers: 30 minutes

The call is led by a new business specialist. When we get into the details of an account, the specialist for that channel joins in. We reply within one business day.

A quick review of your tracking and campaignsThree priorities for the next quarterA written summary that stays with you

Before the meeting we review your website, your visibility and what your campaigns show from the outside. We will not open with “so, what does your company do?”.

Our rating: 4.96 out of 5, 224 reviews on Google, Facebook and Clutch
By sending the form you agree to the processing of your data in line with our Privacy Policy.

What happens after you send it
01
within 1 business day

We reply to your email

The reply comes from the same new business specialist who will run the call. No qualification form and no call from an unknown number.

02
this week

A 30-minute conversation

We go through your numbers and your questions. If it turns out we are not the right fit, we will tell you straight away.