Consent banner modes: opt-in, opt-out, informational, and do-not-sell
The four consent banner modes, opt-in, opt-out, informational, and do-not-sell-or-share, what each means, and how to pick the right one by region.
Blog
Consent, privacy, and tracker governance
Notes on consent infrastructure, enforcement, and building visitor trust from the OptinStack team.
Consent enforcement: blocking vs releasing scripts by category
What consent enforcement is, how trackers get gated by category, the common failure modes like load-order gaps, and how to verify the page actually obeys each visitor's choice.
Google Consent Mode v2, explained
What Consent Mode v2 is, the four consent signals, Basic vs Advanced mode, and how to verify your implementation. Sourced from Google's official Tag Platform and Ads documentation.
Consent records and audit trails: why you need them
What a consent record is, what it should capture, how long to keep it, and why an audit trail of every choice is the part teams most often skip. Sourced from GDPR Article 7 and ICO guidance.
First-party vs third-party trackers
The difference between first-party and third-party trackers, how the SameSite attribute ties in, why first-party proxying blurs the line, and what it means for consent.
What is Global Privacy Control (GPC) and how to respect it
What Global Privacy Control is, how the Sec-GPC header and navigator.globalPrivacyControl signal work, what California and Colorado require, and how to honor it before trackers run.
What is PII (personally identifiable information)?
What actually counts as PII, how it differs from personal data under the GDPR, and why the distinction matters for the trackers running on your site.
Tracker inventory: what is actually running on your site
What a tracker inventory is, why it matters, how trackers map to the four consent categories, and how to keep the inventory honest as your site changes.
What is a consent management platform (CMP), and do you need one?
What a consent management platform is, the components that make it work, the fixed consent categories, and how to tell whether your site needs one.