Marketing or analytics trackers fire before the consent banner is answered
Can you use analytics without a cookie banner? Sometimes, but the answer depends on the actual technology, purpose and applicable rules. "Cookieless" is not a blanket consent exemption. If this finding appears in a report, the scan recorded a tracking-related signal before a visitor choice. Verify the request, storage, consent state and purpose before deciding what it means. This reference page does not diagnose your website or establish a legal breach.
Why this matters
A banner alone does not show that choices control tracking. Equally, a request alone does not prove that an advertising identifier was stored. Google distinguishes basic Consent Mode, which blocks Google tags before interaction, from advanced mode, which can send cookieless pings while consent is denied. That technical behaviour is not legal certification. In the UK, the ICO describes a narrow statistical-purpose exception for aggregate service-improvement analytics, with clear information and a simple free way to object. It is not an exception for advertising, individual profiling or unrestricted analytics. Personal-data obligations still apply where relevant; other jurisdictions need their own assessment.
How to fix it
Record a fresh-browser test before any choice, after Reject, after Accept and after withdrawing consent. Compare network requests, cookies and local storage with tag settings and the privacy notice; do not inspect only third-party cookies. For a fictional site, an advertising pixel writing a persistent identifier before choice and a Google cookieless ping under denied advanced-mode settings are different observations. Identify the actual purpose and applicable requirements with the responsible owner or adviser. Gate activity that requires consent, verify default states before tags run and retest all four journeys after changes. Do not remove a banner, enable tracking or declare compliance solely to clear this finding. Use the linked Consent Mode guide for runtime verification.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.
Start Full Audit