TrustArc fix guide
TrustArc and Global Privacy Control: check your tier and your tags
TrustArc's Cookie Consent Manager detects Global Privacy Control, and TrustArc lists it as part of CCM Advanced. TrustArc doesn't publish category-level detail, so confirm your tier and setup with them, then test the live site.
Free. No account. Results in about a minute.
What TrustArc says it does
- TrustArc's Cookie Consent Manager auto-detects the GPC signal from browsers and extensions.
- TrustArc lists GPC functionality as part of CCM Advanced.
- Some related features, like remembering known users' choices, are configured by TrustArc's team rather than self-serve.
From TrustArc's own documentation, linked below.
Setting it up
TrustArc doesn't publish step-by-step GPC settings. Ask your TrustArc contact which categories the signal opts out of, then test the live site. The settings page saying it's on isn't proof that tags stop.
Why tags still fire with TrustArc
- GPC not included in your plan. If your account isn't on a tier with GPC handling, the banner can look compliant while the signal is never processed.
- Category behavior never confirmed. Ask TrustArc which categories the signal opts out of, then check that every ad tag sits in one of them.
Gaps on every consent platform
- Pixels hardcoded outside the consent platform. A Meta or TikTok pixel pasted into the theme, or injected by a store app, never asks the consent platform for permission. It fires no matter what the banner says.
- Tag manager tags with no consent condition. Google Consent Mode only governs Google's own tags. Meta, TikTok, Pinterest and other tags in Google Tag Manager need their own triggers or consent checks, or they run for everyone.
- Ad tags filed under the wrong category. The opt-out only blocks the categories it's applied to. An advertising pixel sitting in a functional or performance category keeps running after the signal.
- Tags loading other tags. One ad script can pull in several more. The consent platform may gate the first one and never see the rest.
- Server-side forwarding. Conversion APIs and server containers send data from your server, not the browser, so the browser's opt-out never reaches them unless you pass it along.
Which tags do this most? See pixels that ignore opt-outs.
Questions
Does TrustArc support Global Privacy Control?
TrustArc's Cookie Consent Manager detects Global Privacy Control, and TrustArc lists it as part of CCM Advanced. TrustArc doesn't publish category-level detail, so confirm your tier and setup with them, then test the live site.
Why do trackers still fire after GPC with TrustArc?
Usually because the tag isn't under TrustArc's control: it's hardcoded in the page, loaded by an app or another tag, or sits in a category the signal doesn't reach.
How do I test whether TrustArc honors GPC on my site?
Load the page with Global Privacy Control on, without touching the banner, and record every request. Consentinel's free scan does exactly this and names every ad vendor that ran, with the request as proof.
Sources: TrustArc: Global Privacy Control · TrustArc: GPC and known user consent
Other platforms: OneTrust · Cookiebot · Osano · Didomi
This is a technical guide, not legal advice. TrustArc is a trademark of its owner; Consentinel isn't affiliated with it.
See what TrustArc is missing on your site.
Free, about a minute. We test reject, accept and Global Privacy Control, and name every tag that ran when it shouldn't have.
Free. No account. Results in about a minute.