This is an anonymised sample of a ConsentScan report. Domain and findings are fictional but representative of a real scan.
ConsentScan
Cookie compliance report
GDPR & ePrivacy scan · sample
Generated 19 September 2026
at 10:14
at 10:14
F
acme-health.ie
Scanned on 19 Sept 2026, 10:14 · 13 pages · Verdict: fail
What to change (in order)
- Make Reject stop the tags that ignore it. Google Ads, Google DoubleClick, Microsoft Advertising (UET), Hotjar kept firing after OneTrust “Reject All”. In your consent platform and tag manager, make sure each of these tags waits for consent and stops when the visitor rejects; this alone is why the site gets an F.
- Gate Google Analytics 4 behind consent. Assign the GA4 tag to your consent platform’s analytics category so it fires only after the visitor accepts analytics cookies.
- Gate the advertising tags: Meta Pixel, Google Ads, Google DoubleClick and Microsoft Advertising (UET). Assign them to the advertising or marketing category and make their tag-manager triggers wait for that consent.
- Move Hotjar to explicit opt-in. Load its script only after consent, either through your tag manager (recommended) or by wrapping the snippet in a consent check.
10
Before consent
4
After Reject
6
Vendors
13
Pages scanned
Consent Management Platform: OneTrust (installed but not blocking cookies)
After Reject
OneTrust “Reject All” clicked. 4 of the 6 vendors kept firing: Google Ads, Google DoubleClick, Microsoft Advertising (UET), Hotjar. This alone means an F.
Cookies detected (11)
Advertising 7 · Analytics 3 · Necessary 1
| Cookie | Category | Party |
|---|---|---|
| Google Analytics 4 · 2 cookies | ||
| _ga .acme-health.ie | Analytics | 1st party |
| _ga_9K3H2X7L .acme-health.ie | Analytics | 1st party |
| Meta Pixel · 1 cookie | ||
| _fbp .acme-health.ie | Advertising | 1st party |
| Google Ads · 2 cookiesafter Reject | ||
| _gcl_au .acme-health.ie | Advertising | 1st party |
| _gcl_aw .acme-health.ie | Advertising | 1st party |
| Google DoubleClick · 2 cookiesafter Reject | ||
| IDE .doubleclick.net | Advertising | 3rd party |
| test_cookie .doubleclick.net | Advertising | 3rd party |
| Microsoft Advertising (UET) · 2 cookiesafter Reject | ||
| _uetsid .acme-health.ie | Advertising | 1st party |
| _uetvid .acme-health.ie | Advertising | 1st party |
| Hotjar · 1 cookieafter Reject | ||
| _hjSessionUser_1234 .acme-health.ie | Analytics | 1st party |
| Cloudflare (bot protection) · 1 cookie | ||
| __cf_bm .acme-health.ie | Necessary | 1st party |
Pages scanned
- https://acme-health.ie/
- https://acme-health.ie/services
- https://acme-health.ie/pricing
- https://acme-health.ie/contact
- https://acme-health.ie/about
- https://acme-health.ie/team
- https://acme-health.ie/locations
- https://acme-health.ie/book-appointment
- https://acme-health.ie/insurance
- https://acme-health.ie/blog
- https://acme-health.ie/blog/winter-health-tips
- https://acme-health.ie/careers
- https://acme-health.ie/privacy
Methodology
We loaded 13 pages as a first-time EU visitor, recorded what fired before a choice, then clicked Reject and checked again. How we grade →
ConsentScan · a product of Cycubix Ltd · Dublin, Ireland
This report is a diagnostic aid, not legal advice. Consult a data protection professional for compliance sign-off.
This report is a diagnostic aid, not legal advice. Consult a data protection professional for compliance sign-off.
consentscan.io