05 · Privacy, transparency & control

Make your processing auditable and keep control over cookies, indexing and transfers.

Bring transparency to your processing

Enabled by default

Displays the settings you apply in the browser, so users can verify your practices (cookies disabled without consent, proxying...).

Technical detail

GTM processing is by nature invisible and cannot be audited remotely. This option exposes the parameters applied in the configuration inside the browser, for transparency purposes.

Block cookies without consent

Enabled by default

When a refusal signal is present, prevents server-side tags from setting cookies.

Technical detail

When a choice signal is present, blocks cookie writing through server-side GTM tags in case of a non-consent signal. Relies on the effective presence of a choice signal.

Allowed cookies (whitelist)

The list of essential technical cookies to keep, even in case of refusal or global blocking.

Technical detail

Strictly necessary cookies created or kept even if consent is refused or global blocking is active. Comma-separated. The * character acts as a wildcard.

Examples: auth_*, *_pref, app*_v*.

Cookie lifetime extender

Extends the lifetime of first-party cookies to work around Safari/iOS (ITP) restrictions on many marketing services. You can add your own cookie patterns to the standard list.

Technical detail

Extends the lifetime of first-party cookies to work around ITP (Safari/iOS): Google Analytics & Ads, DV360, Meta, TikTok, Criteo, LinkedIn, Bing, Pinterest, Hubspot, Matomo, Snapchat, etc.

Consent is always checked, except for ABconsent's euconsent-v2 cookie, treated as an essential technical cookie. Additional patterns accepted with the * wildcard.

Search engine crawlers

Recommended: limited access

Controls crawler access (Google, Bing...) to the technical tracking subdomain. Limited access is recommended.

Technical detail

• Limited access — only allows .js / .html files and resources required by tags.

• Block everything — prevents indexing.

• Allow everything — prevents nothing.

Automatically updates the subdomain's robots.txt, with no manual intervention.

Proxy Google Analytics pings

Routes Google Analytics data through a proxy that pseudonymises it before transfer.

Technical detail

Proxies Google Analytics pings with pseudonymisation before transfer, driven by a dedicated Sirdata Analytics Helper configuration.

Going further

• robots.txt configuration

• GA4 proxyfication

• Security

• GTM Helper layer