Scripts read the device or store data on it before consent, beyond cookies

What it costs you

Fingerprinting and storage outside cookies need consent just like cookies, and a cookie banner that only blocks cookies does not stop them.

What to do

Load the script only after consent, or turn off the vendor's device reads until consent is given.

What it checks

• Device details read before consent
• Detailed device hints requested before consent
• Device identifying features used before consent
• Data saved on device before consent
• Connection data reused before consent

How to fix it

How to verify by hand

The event's call stack: the script and function that made the call, and whether the site needs it to show the page.

What this relies on

Reading device characteristics and using browser storage is access to the terminal equipment, which needs consent unless strictly necessary for the service the visitor asked for.