Blog

Global Privacy Control in Mobile Apps: The Signal Most Teams Forget

GPC enforcement started on websites, but regulators treat the signal as technology neutral. How the opt out signal reaches native apps, and what honoring it actually requires. October 29, 2026

Data Processing Addendums for Small Vendors: The Consent Clauses That Do the Work

Big vendors hand you their DPA. Small vendors sign yours, if you have one. The clauses that matter for consent data: sub processors, deletion timelines, and breach notice windows. October 29, 2026

Consent in Connected Cars: What Drivers Agree to Share

Connected cars collect location, driving habits, and cabin data under driver consent buried in setup screens. What that consent covers, where it falls short, and the checks owners and fleets should run. October 28, 2026

Consent Receipts: What a Good One Should Contain

A consent receipt is the record a person gets when they agree to data use. What a useful receipt contains, why most confirmations fail as receipts, and how teams should issue them. October 28, 2026

Consent for School Apps: What Parents Agree to and What Schools Should Check

School apps collect student data under parent consent given in a hurry at term start. What that consent covers, where it falls short, and the checks schools should run. October 27, 2026

Consent and Workplace Monitoring: What Employee Notices Must Actually Say

Employers monitor systems for security and management, but vague handbook clauses do not inform anyone. What a proper monitoring notice covers and when consent is the wrong basis. October 27, 2026

Consent in Connected Cars: Location Data, Passengers, and Shared Vehicles

A connected car collects location, voice, and driving data on everyone who rides in it, not just the owner who tapped agree at setup. How car data consent works, and the settings every owner and regular passenger should know. October 26, 2026

Consent Records in a Business Sale: What Buyers Check and Sellers Should Prepare

When a business is sold, its marketing lists and consent records become a due diligence item. What acquirers look for, the gaps that cut valuations or kill email programmes, and how to prepare records that survive the handover. October 26, 2026

Consent and Voice Assistants in Shared Homes: Who Agreed to What

A voice assistant in a shared home records guests, children, and housemates who never saw a setup screen. How voice data consent works in practice, which settings to review, and how households can set fair ground rules. October 25, 2026

Consent Receipts: What They Are and What They Actually Prove

A consent receipt is a record given to the person who agreed, not just a log kept by the company. What a useful receipt contains, where the idea falls short, and how to ask for one. October 25, 2026

Consent and Smart TV Viewing Data: What Your Television Collects

Smart TVs track what you watch, when, and for how long, often through automatic content recognition. What consent covers viewing data, what settings actually stop it, and what a household should check. October 24, 2026

Consent Records Retention: How Long to Keep Proof of Consent

Keeping consent records forever is as risky as deleting them too soon. How to set a retention schedule for consent proof, what triggers deletion, and how legal holds change the picture. October 24, 2026

Consent and Offline Data Onboarding: Matching Store Records to Online Profiles

Shops upload till records and loyalty lists to ad platforms to find customers online. What consent covers that matching, what it misses, and how opt outs must travel with the data. October 23, 2026

Consent in Weather Apps: Location Sharing That Goes Far Beyond the Forecast

Weather apps need a location to work, then often share it with data partners. How location consent should be scoped, timed, and withdrawn in apps people open every day. October 23, 2026

Consent and Voice Assistants: Choices for Always Listening Devices

Smart speakers collect voice data in shared rooms, often from people who never agreed to anything. How consent, guest handling, and deletion should work for voice assistants. October 22, 2026

Consent in Connected Cars: Driver Data, Passengers, and Second Owners

Connected cars stream location, driving, and cabin data. Who consents when a car has several drivers, passengers, renters, and a next owner. October 22, 2026

Consent in Connected TV Apps: Choices on the Big Screen

TV apps collect viewing data through SDKs most viewers never see. How to present a real choice on a remote control interface and store the receipt. October 21, 2026

How Long to Keep Consent Records: A Practical Retention Schedule

Consent receipts cannot be kept forever or deleted early. A retention schedule tied to the life of the account, the data, and local limitation periods. October 21, 2026

Consent in Mobile Apps: Getting SDK Signals Right

App consent fails quietly when SDKs start before the choice is recorded. How to gate third party SDKs, store the receipt, and keep web and app choices in sync. October 20, 2026

Consent Audit Trails: Exporting Records a Regulator Can Actually Read

When a complaint lands, a database dump is not an audit trail. What a usable consent export contains, how to format it, and the gaps that make exports fail review. October 20, 2026

Consent Renewal Prompts: When to Re-Ask and When to Leave People Alone

Re-asking too often trains visitors to click without reading, and never re-asking leaves stale records. The triggers that justify a renewal prompt and the ones that do not. October 19, 2026

Consent for Embedded Checkout and Payment Iframes

Payment iframes, booking widgets, and embedded checkouts load third party code inside your most sensitive pages. What consent covers, what it cannot cover, and how to audit the boundary. October 19, 2026

Consent Receipts: What Proof of Consent You Actually Need to Keep

A banner log buried in a vendor dashboard is not a record. What a defensible consent receipt contains, where it should live, and how long to keep it after a visitor withdraws. October 18, 2026

Auditing the Banner Itself: Dark Patterns That Void the Consent You Collected

A technically perfect tag setup still fails if the banner steers people. The design patterns auditors flag, from buried reject buttons to pre-ticked categories, and how to test your own banner honestly. October 18, 2026

Consent After Checkout: The Tracking Nobody Audits on Account and Confirmation Pages

Audits stop at the checkout button, but confirmation, onboarding, and account pages run their own trackers. Why post-purchase consent is a blind spot and how to bring those pages into the same record. October 17, 2026

Consent Drift: How Quiet Site Changes Break the Banner You Audited Last Quarter

The banner passed its audit, then the site changed around it: a new tag here, a theme update there. How consent setups decay between audits and the monitoring habits that catch drift early. October 17, 2026

Consent Banners on Small Screens: When Truncated Choices Stop Being Choices

On phones, banner text gets cut, buttons stack, and the reject option slides below the fold. Why small screen consent design decides whether a recorded choice was ever really offered. October 16, 2026

Sampling Consent Records: How to Audit a Week of Choices Without Reading Every Log

Nobody can review millions of consent records by hand. A sampling method that checks records against real tag behavior, catches systematic failures, and produces evidence an auditor respects. October 16, 2026

Consent Banner Audits for Redesigns: What Breaks When a Site Relaunches

Relaunches quietly break consent banners more often than any other change. What to audit before, during, and after a redesign so tags, records, and choices survive the move. October 15, 2026

How to Handle Consent When a Visitor Uses Multiple Devices

A visitor accepts on a laptop and gets asked again on a phone. Why consent does not follow people across devices, what logged in sync can and cannot do, and how to keep the experience honest. October 15, 2026

Consent Records Retention: How Long to Keep Proof and What to Store

Keeping consent proof too briefly or too loosely both create risk. What a usable consent record contains, how long to retain it, and how to store it so it can actually be retrieved. October 14, 2026

Consent Mode Signals When a Visitor Declines: What Your Tags Should Actually Do

When a visitor declines, consent signals should change how every tag behaves. What each signal means, where sites leak data after a no, and how to test it. October 13, 2026

Reading your consent string: how to confirm vendors honor what the banner recorded

Your banner writes a consent string every time a visitor chooses. Most teams never read it back. How to decode the string, spot vendors ignoring it, and prove the signal chain works. October 12, 2026

Consent record retention: how long to keep proof of consent, and how to honor deletion requests

Regulators want proof of what each visitor chose, but keeping consent records forever creates its own liability. How to set retention schedules and handle deletion requests without breaking your audit trail. October 11, 2026

Consent banners and keyboard navigation: the accessibility gap that breaks opt-outs

A consent banner that works with a mouse but traps keyboard users is not a real choice. How to audit the tab order, focus states, and reject path of your banner.

Marketing pixel sprawl: the internal process gap that quietly breaks consent

Consent breaks most often inside the company, not in the banner code. How marketing teams add pixels without review, and the process that keeps every new tracker inside your consent records. October 9, 2026

Consent audit trails for finance teams: reconciling marketing pixels against vendor invoices

Finance sees the vendor invoices; marketing sees the pixels. A consent audit trail reconciles the two so you only pay for tracking you actually consented to run. October 8, 2026

Reject all should stay rejected: the vendor resync problem

Your banner records the rejection, but vendor list updates quietly re-enable trackers. How the resync problem works and how to test for it. October 7, 2026

Your banner ignores the global privacy signal: consent and the opt-out broadcast

The GPC signal broadcasts a user's opt-out choice to every site they visit. If your consent setup ignores it, your banner is making promises it does not keep. October 6, 2026

Consent on checkout pages: the trackers your funnel adds after the banner

Checkout and account pages load payment, fraud, and analytics scripts that were never in your consent inventory. How to find them and bring them under the banner. October 5, 2026

Consent for embedded content: the iframe, video, and form embeds that bypass your banner

Embedded YouTube videos, maps, review widgets, and third-party forms load their own trackers the moment the page renders. How to find them, block them before consent, and keep them working. October 4, 2026

Legitimate interest is not a consent shortcut: the claims that fail audits

Legitimate interest sounds like a legal shield for tracking, but regulators treat it as a claim you have to prove. The banner claims that fail, and what to write instead. October 3, 2026

The consent drift detector: how to spot when your banner stops matching your tags

Consent setups decay after launch as tags, plugins, and vendors change. A lightweight weekly detector that diffs your site's tracking behavior catches drift before an auditor does. October 2, 2026

Switching consent platforms: how to migrate without losing your consent records

Changing consent vendors is common, and losing your proof of past consent choices in the move is the classic mistake. How to export records, map categories, and cut over without creating a gap regulators can see. October 1, 2026

The quarterly consent re-check: keeping your banner honest after launch

Consent setups decay after launch as tags, plugins, and vendors change. A quarterly re-check routine that catches banner drift, orphaned trackers, and broken blocking before regulators or customers do. September 30, 2026

Consent receipts: keeping proof of what each visitor actually chose

Regulators no longer ask whether you have a banner. They ask what a specific visitor consented to, and when. Consent receipts are the evidence layer that answers that question, and most sites are not keeping them. September 29, 2026

The pre-launch consent audit: 12 checks before your new site goes live

A redesigned or rebuilt site quietly resets your consent setup. The twelve checks that catch banner misconfigurations, orphaned tags, and tracking that fires before choice, before visitors do. September 28, 2026

Dark pattern consent banners are getting fined: what the 2026 decisions punish

Regulators spent 2026 fining consent banners that nudge, hide, and exhaust visitors into clicking accept. The design tricks that drew penalties and how to audit your own banner. September 27, 2026

First-party cookies can violate consent too

First-party cookies are not automatically exempt from consent rules. How analytics, ad tech and plugins use first-party storage for tracking, and how to audit it. September 26, 2026

Your cookie banner said no, but your server sent the data anyway

Server-side tracking moves data collection off the browser and out of sight of your consent banner. How to find these backend flows, disclose them, and bring them under real consent. September 25, 2026

Your scan found trackers nobody recognizes: what now?

Mystery trackers in a scan report are normal, not evidence of a breach. How to identify them, trace them to their source, and decide whether to disclose, block, or remove them.

Shadow trackers: how new marketing tools quietly add cookies to your site

Every new marketing tool someone adds to your site usually brings its own cookies and trackers along, and most of them start firing before anyone updates the consent setup. A scan from three months ago will not catch the

Why do trackers keep firing before consent?

Trackers fire before consent because tag managers and embeds load on their own schedule, independent of the consent banner.

How do I find out what cookies my website sets?

The fastest way is a browser check: open your browser's developer tools, visit your own site, and look at the cookies set under Application or.

How often should you scan your website for cookies?

At minimum, scan after every site change that touches scripts, plugins, themes, or embeds, and on a recurring schedule even when nothing obvious.