Google Tag Manager in (Safari) network without consent

  • Resolved marius_who

    (@marius_who)


    2 years, 5 months ago

    I always see a connection to https://www.googletagmanager.com in the networkTab of Safari when I first load the page, even without consent. But so far I have not implemented anything from Google, I was only going to use Google Site Kit and implement Google Analytics via Site Kit or Complianz (what would be better?) And especially how do I get the call of the tag manager away before I have the consent, the German DSGVO is quite strict.

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Author Aert Hulsebos

    (@aahulsebos)

    Hi @marius_who,

    googletagmanager.com is used for other Google services as well, for example Google Analytics and its gtag.js.

    If it’s currently present, but you have not configured Google with Complianz or Google Site Kit I can have a look where it’s coming from if you post your URL.

    You can only use Complianz for Google Analytics if needed, it will be blocked before consent. Including the URL.

    regards Aert

    Thread Starter marius_who

    (@marius_who)

    Actually I want to use Google Analytics, but then without googletagmanager being loaded BEFORE the consent was given. Any connection to the US without consent is a problem for the DSGVO as we had to find out by Google Fonts earlier this year by a court decision in Germany.

    As soon as I select Google Analytics or Google Tag Manager in Complianz, whether with or without Site Kit enabled, a connection to googletagmanager is established the first time the page is loaded only in Safari.

    Plugin Contributor jarnovos

    (@jarnovos)

    Hi @marius_who,

    The Complianz implementation is as listed below, it sets the gtag.js script to text/plain before explicit consent from the user, so it doesn’t execute until consent is obtained.

    <script type="text/plain" data-service="google-analytics" async data-category="statistics" src="https://www.googletagmanager.com/gtag/js?id=G-12345678"></script>

    Do you perhaps have a preload/prefetch of that URL somewhere? Maybe you can share your URL, so that we know what to look for?

    Kind regards,
    Jarno

    Thread Starter marius_who

    (@marius_who)

    I don’t want to put a non DSGVO compliant website online, therefore I don’t have a URL yet.

    I found <script type="text/plain" data-service="google-analytics" async data-category="statistics" src="https://www.googletagmanager.com/gtag/js?id="></script> before </body> which seems to be what is shown in the network-Tab as connection to googletagmanager.com whenever the page is loaded for the first time and consent is not given and pretty sure it comes from Complianz.

    Only if I activate Google Site Kit and implement the GA4 Snippet with Site Kit a <link rel='dns-prefetch' href='//www.googletagmanager.com'/> is in the <head> also another network connection to googletagmanager.com is established this time with the GA4 ID. Cookies are not set before consent.

    This must be a problem with Safari on Mac on other Websites with Complianz the same empty gtag/js is loaded

    Plugin Contributor jarnovos

    (@jarnovos)

    Hi @marius_who,

    A script with text/plain won’t be loaded by the browser. But I think I know what causes the behavior you describe with Safari.

    I’ve set this up on a test environment with Complianz implementing the Analytics script. There is no connection to googletagmanager.com prior to consent as the script is set to text/plain (you can verify this in Chrome DevTools > Network tab, check for a request to googletagmanager.com).

    Safari’s “Privacy/Tracker” feature reports that it found that URL anyway, it probably doesn’t check if the script is actually loaded, just that the URL was indeed found somewhere in the page source.

    Hope this clarifies!

    Kind regards,
    Jarno

    Thread Starter marius_who

    (@marius_who)

    Safari’s “Privacy/Tracker” probably seems to be the problem. Even with Wireshark I get a connection to googletagmaanger.com when I use Safari, but not with Chrome or Firefox. Maybe I am on the track of something big ??

    Plugin Author Aert Hulsebos

    (@aahulsebos)

    Hi @marius_who,

    What Jarno explained is correct;

    If you visit https://juggalo-3d-siza.instawp.xyz in Safari you will see

    <script type="text/plain" src="https://www.googletagmanager.com/gtag/js?id=1"></script> in the “Elements”, but not as loaded resource under “Sources”.

    To further stipulate this, I added:

    <script src="https://www.googletagmanager.com"></script> which doesn’t have a container.

    on

    https://rried-wren-jufo.instawp.xyz

    and it found a ‘tracker’, and under sources you see the URL is loaded, but because it is missing a container it throws an error. Which means Safari looks at a URL, not if the resource is actually loaded.

    https://snipboard.io/lytPEs.jpg

    In this case anything implemented with text/plain will not load. We can have a look at your URL if we can find another resource, besides text/plain.

    regards Aert

    Thread Starter marius_who

    (@marius_who)

    Exactly, so it is not a problem of Complianz but of Safari.

    The problem caused by calling the URL no matter if something is loaded or not is the same as the problem with Google Fonts in Germany. When calling a URL of a non-EU country, the IP address is stored without the consent of the user on the other server and that is illegal according to DSGVO.

    I am not an IT specialist but presumably Apple has somehow messed up here. This is something others can investigate. I will use Complianz now as it works with Chrome and Firefox because otherwise I am very happy with the plugin – thank you.

    – closed

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Google Tag Manager in (Safari) network without consent’ is closed to new replies.