Privacy finding
The banner offers a choice that the site does not honour
Privacy Error Severity: High
Part of the audit The banner promises a choice the site does not honour. Finding id: privacy.bannerVsBehaviour.
What it costs you
The visitor was told there is a choice and the site acts as if there was none.
What to do
Make every tag follow the choice, and make the choice hold on every page and subdomain.
What it checks
- Trackers run after rejection
- Choice forgotten on next page or subdomain
- Banner says no cookies but some are set
How to fix it
Store the choice for the whole site
- Check on which domain the consent tool stores the choice. A choice stored for one host is not seen on another subdomain.
- Check that no cache or script clears the stored choice between pages.
How to check: Make a choice in a private window, open another page and another subdomain, and see whether the banner returns. Then run this rule again.
Remove the cookie or change the text
- Find what sets the cookie [group key] and remove it, or change the text to say what is set.
How to check: Run this rule again.
Make the tag follow the choice
A real case
France's data protection authority found that when visitors to shein.com clicked Refuse all, or withdrew their consent, new cookies were still placed and cookies already there were still read. In September 2025 it fined the company 150 million euros.
How to verify by hand
The tag manager's consent settings for the tag that fired.
What this relies on
The banner states the intended behaviour; a tag was added outside the consent setup.