Everything on this site sits in one of five areas. They are not arbitrary buckets — each one is a distinct failure surface, and most compliance problems we see live in exactly one of them.
Pre-consent tracking
What fires before anyone has agreed to anything. This is the most litigated failure in the field and almost never the consent tool’s fault: a pixel pasted into a theme, a tag added in a tag manager that nobody gated, a third-party component loading its own dependency. Detection methods, real examples and what regulators have penalised. Read these.
Google Consent Mode
Implementation detail for Google’s consent signals: all seven of them, the parameters most setups miss — wait_for_update, ads_data_redaction, url_passthrough — and the silent ways a v2 deployment ends up behaving like v1. Read these.
GDPR & privacy law
What the rules actually require, traced to the instrument that says so. ePrivacy versus GDPR, what the Digital Omnibus would change and how far it has got, US state law, and enforcement as it happens rather than as vendors describe it. Read these.
Cookie banners & CMPs
The tools themselves: open-source and commercial, how each blocks scripts, what certification requirements mean in practice, and why a correctly configured banner still leaves gaps. Read these.
Cookie audits & scanners
Verifying what a site does rather than what it claims. Scanning methods and their limits, why audits disagree with each other, and how to check a consent implementation yourself. Read these.