Waivern Consent Analyser ← Home Log

ePrivacy / GDPR Compliance Report · ePrivacy/GDPR (EU)

Consent Compliance Report

2026-04-02 14:50:58 UTC · https://www.independent.ie/ · CMP: Didomi 🤖 AI on

📍 Analysis ran from: 🇳🇱 Amsterdam, North Holland, The Netherlands · IP: 208.77.244.106 · Railway · Results reflect how this site presents to this location.

Post Reject All — compliance state

13 FAIL 15 PASS 10 MANUAL · 13 warn 0 err

CMP Interaction

Banner detected	True
Accept button	Accept
Reject button
Clicks to accept / reject	1 / 1
Reject buried in manage panel	True

Screenshots

Pre-Consent — initial page load

Post Accept All — consent baseline

Post Reject All — compliance state

Section M — Summary

Category	Result
Pre Consent Clean	✗ FAIL
No Tracking Cookies Pre Consent	✓ PASS
Tracker Globals Undefined	✗ FAIL
No Tracking Storage Pre Consent	✓ PASS
Network Blocked After Decline	☐ MANUAL
Third Party Cookies Absent	☐ MANUAL
Doc Cookie Clean Post Reject	✓ PASS
Web Storage Clean Post Reject	✓ PASS
First Party Cookies Classified	ℹ INFO
Server Side Cookies Gated	— N/A
No Cname Cloaking	✓ PASS
Tracker Globals Absent	✗ FAIL
Dom Scripts Blocked	✗ FAIL
Reject Equals Accept Clicks	✓ PASS
No Preticked Boxes	☐ MANUAL
Persistent Withdrawal Widget	✓ PASS
No Cookie Wall	✓ PASS
Consent Persists	✗ FAIL

Run Log 81 entries · ⚠ 13 warning(s) · raw JSON

elapsed	level	session	message
0.0s	▶ STEP	MAIN	Run c80a5239 started {"url": "https://www.independent.ie/"}
0.0s	· INFO	MAIN	Detecting probe server location
0.2s	· INFO	MAIN	Probe location {"ip": "208.77.244.106", "city": "Amsterdam", "region": "North Holland", "country": "The Netherlands", "country_code": "NL", "org": "Railway", "latitude": 52.37403, "longitude": 4.88969}
0.2s	▶ STEP	MAIN	Starting analysis of https://www.independent.ie/ {"mode": "GDPR"}
0.7s	· INFO	MAIN	Chromium launched {"headless": true}
0.8s	· INFO	PREFLIGHT	Navigating to https://www.independent.ie/
11.0s	⚠ WARN	PREFLIGHT	Network did not reach idle state — proceeding after load event. Normal for sites with persistent connections (websockets, polling).
11.1s	▶ STEP	A	Session A start (accept path)
11.2s	· INFO	A	Navigating to https://www.independent.ie/
21.2s	⚠ WARN	A	Network did not reach idle state — proceeding after load event. Normal for sites with persistent connections (websockets, polling).
23.2s	· INFO	A	Capturing pre-consent state
23.4s	· INFO	A	Pre-consent state captured {"pre_consent_cookies": 11, "pre_consent_ad_cookies": 0, "pre_consent_tracking_storage": 0, "pre_consent_tracker_globals": ["dataLayer", "google_tag_manager"], "pre_consent_unblocked_scripts": 2, "pre_consent_capture_error": null}
32.5s	· INFO	A	Banner: found
39.9s	· INFO	A	Accept All interaction {"cmp": "Didomi", "button_text": "Accept", "clicked": true, "in_iframe": false, "error": null}
41.9s	· INFO	A	Capturing post-accept baseline state
42.2s	· INFO	A	Baseline captured {"baseline_cookies": 52, "baseline_ad_cookies": 8, "baseline_tracking_storage": 1, "baseline_tracker_globals": ["dataLayer", "google_tag_manager", "fbq", "_fbq", "hj", "_hjSettings", "twq", "twttr", "lintrk", "ttq", "snaptr"], "baseline_unblocked_scripts": 15, "baseline_capture_error": null}
42.9s	· INFO	A	Context closed, HAR saved
42.9s	▶ STEP	A	Session A complete {"pre_consent_cookies": 11, "pre_consent_ad_cookies": 0, "pre_consent_tracking_storage": 0, "pre_consent_tracker_globals": ["dataLayer", "google_tag_manager"], "pre_consent_unblocked_scripts": 2, "pre_consent_capture_error": null, "baseline_cookies": 52, "baseline_ad_cookies": 8, "baseline_tracking_storage": 1, "baseline_tracker_globals": ["dataLayer", "google_tag_manager", "fbq", "_fbq", "hj", "_
42.9s	▶ STEP	B	Session B start (reject path)
42.9s	· INFO	B	Navigating to https://www.independent.ie/
52.8s	⚠ WARN	B	Network did not reach idle state — proceeding after load event. Normal for sites with persistent connections (websockets, polling).
54.8s	· INFO	B	Capturing pre-consent state
54.9s	· INFO	B	Pre-consent B captured {"pre_consent_B_cookies": 11, "pre_consent_B_ad_cookies": 0, "pre_consent_B_tracking_storage": 0, "pre_consent_B_tracker_globals": ["dataLayer", "google_tag_manager"], "pre_consent_B_unblocked_scripts": 2, "pre_consent_B_capture_error": null}
63.9s	· INFO	B	Banner: found
64.0s	· INFO	B	Persistent widget found pre-reject (CMP fully loaded) {"found": true, "text": "Manage", "in_iframe": false}
81.1s	· INFO	B	Click symmetry measured {"accept_clicks": 1, "reject_clicks": 0}
102.0s	· INFO	B	Reject All interaction {"cmp": "Didomi", "button_text": "", "clicked": false, "clicks_required": 1, "required_manage_panel": true, "panel_navigated": false, "panel_new_frames": 0, "panel_wait_s": 6.3999999999999995, "error": "Reject button not found in manage panel after 6s. Poll trace: [{'t': 0.8, 'navigated': False, 'new_frames': 0, 'url': None}, {'t': 1.6, 'navigated': False, 'new_frames': 0, 'url': None}, {'t': 2.4,
102.0s	⚠ WARN	B	Reject interaction issue: Reject button not found in manage panel after 6s. Poll trace: [{'t': 0.8, 'navigated': False, 'new_frames': 0, 'url': None}, {'t': 1.6, 'navigated': False, 'new_frames': 0, 'url': None}, {'t': 2.4, 'navigated': False, 'new_frames': 0, 'url': None}, {'t': 3.2, 'navigated': False, 'new_frames': 0, 'url': None}, {'t': 4.0, 'navigated': False, 'new_frames': 0, 'url': None}, {'t': 4.8, 'navigated': False, 'new_frames': 0, 'url': None}, {'t': 5.6, 'navigated': False, 'new_frames': 0, 'url': None}, {'t': 6.4, 'navigated': False, 'new_frames': 0, 'url': None}]. The panel may use an unrecognised reject label, or require individual toggles to be turned off manually.
102.0s	⚠ WARN	B	Reject All was NOT successfully clicked — post-reject state captures an unmodified consent state, not a rejection.
104.0s	· INFO	B	Site accessible after reject: True
104.0s	· INFO	B	Capturing post-reject state
104.3s	· INFO	B	Post-reject captured {"post_reject_cookies": 11, "post_reject_ad_cookies": 0, "post_reject_tracking_storage": 0, "post_reject_tracker_globals": ["dataLayer", "google_tag_manager"], "post_reject_unblocked_scripts": 2, "post_reject_capture_error": null}
104.3s	· INFO	B	Persistent widget check {"found": true, "text": "Manage", "in_iframe": false}
104.3s	· INFO	B	Capturing subpages
114.3s	· INFO	B	2 subpage(s) captured {"urls": ["https://member.independent.ie/newsletter", "https://www.independent.ie/entertainment/puzzles"], "errors": []}
115.4s	· INFO	B	Context closed, HAR saved
115.4s	· INFO	B	Checking pre-ticked toggles (separate session)
115.4s	· INFO	B	Navigating to https://www.independent.ie/
125.8s	⚠ WARN	B	Network did not reach idle state — proceeding after load event. Normal for sites with persistent connections (websockets, polling).
155.2s	⚠ WARN	B	Manage/preferences button not visible after 5s wait — toggle check may return 0 results
156.7s	· INFO	B	Pre-ticked toggles: 0 found {"toggles": {}}
156.7s	⚠ WARN	B	Toggle check returned 0 results — diagnostics: {"manage_button_found": false, "manage_button_text": null, "frames_scanned": [], "total_elements_found": 0, "note": "Manage/preferences button not found on page"}
156.7s	▶ STEP	B	Session B complete {"post_reject_cookies": 11, "post_reject_ad_cookies": 0, "post_reject_tracking_storage": 0, "post_reject_tracker_globals": ["dataLayer", "google_tag_manager"], "post_reject_unblocked_scripts": 2, "post_reject_capture_error": null, "accept_clicks": 1, "reject_clicks": 1, "reject_at_first_screen": false, "subpages_captured": 2}
156.7s	▶ STEP	C	Session C start (persistence check)
156.8s	· INFO	C	Navigating to https://www.independent.ie/
166.9s	⚠ WARN	C	Network did not reach idle state — proceeding after load event. Normal for sites with persistent connections (websockets, polling).
181.3s	· INFO	C	Reject for persistence test {"clicked": false, "error": "No reject button and no manage/preferences button found on layer 1. CMP may not have loaded, or uses an unrecognised button label."}
181.3s	⚠ WARN	C	Reject All failed in Session C — persistence check results will be unreliable.
183.3s	· INFO	C	Opening second tab (same-session test)
183.3s	· INFO	C	Navigating to https://www.independent.ie/
194.2s	⚠ WARN	C	Network did not reach idle state — proceeding after load event. Normal for sites with persistent connections (websockets, polling).
196.3s	· INFO	C	Same-session state captured {"persistence_1_cookies": 42, "persistence_1_ad_cookies": 4, "persistence_1_tracking_storage": 1, "persistence_1_tracker_globals": ["dataLayer", "google_tag_manager", "fbq", "_fbq", "hj", "_hjSettings", "twq", "twttr", "lintrk", "ttq", "snaptr"], "persistence_1_unblocked_scripts": 14, "persistence_1_capture_error": null}
196.4s	· INFO	C	Storage state saved, opening new context
196.5s	· INFO	C	Navigating to https://www.independent.ie/
206.6s	⚠ WARN	C	Network did not reach idle state — proceeding after load event. Normal for sites with persistent connections (websockets, polling).
208.7s	· INFO	C	New-session state captured {"persistence_2_cookies": 42, "persistence_2_ad_cookies": 4, "persistence_2_tracking_storage": 1, "persistence_2_tracker_globals": ["dataLayer", "google_tag_manager", "fbq", "_fbq", "hj", "_hjSettings", "twq", "twttr", "lintrk", "ttq", "snaptr"], "persistence_2_unblocked_scripts": 14, "persistence_2_capture_error": null}
208.7s	▶ STEP	C	Session C complete {"persistence_1_captured": true, "persistence_2_captured": true}
208.7s	▶ STEP	POLICY_RENDER	Rendering cookie policy page in browser
209.0s	· INFO	POLICY_RENDER	Standard paths not found — scanning page for policy link
215.9s	· INFO	POLICY_RENDER	Found policy link via page scan: "cookie policy" → https://www.mediahuis.ie/cookiepolicy
215.9s	· INFO	POLICY_RENDER	Navigating to policy: https://www.mediahuis.ie/cookiepolicy
223.3s	· INFO	POLICY_RENDER	Extracted 219 chars from policy page
223.4s	· INFO	POLICY_RENDER	Policy page rendered (219 chars)
223.4s	· INFO	MAIN	Browser closed
223.4s	▶ STEP	DNS	Running CNAME cloaking checks
223.4s	· INFO	DNS	Apex domain: independent.ie (from hostname: www.independent.ie)
223.9s	· INFO	DNS	Checking 4 subdomain(s) {"subdomains": ["member.independent.ie", "focus.independent.ie", "gigya-cp.independent.ie", "markup.independent.ie"]}
224.0s	· INFO	DNS	CNAME check done — 0 tracker CNAME(s) {"results": [{"sub": "member.independent.ie", "cname": null, "tracker": false, "vendor": null}, {"sub": "focus.independent.ie", "cname": null, "tracker": false, "vendor": null}, {"sub": "gigya-cp.independent.ie", "cname": null, "tracker": false, "vendor": null}, {"sub": "markup.independent.ie", "cname": null, "tracker": false, "vendor": null}]}
224.0s	▶ STEP	POLICY	Fetching cookie policy
224.0s	· INFO	POLICY	Policy found at https://www.mediahuis.ie/cookiepolicy
224.0s	· INFO	POLICY	Fetching policy, cross-referencing 49 cookie(s)
234.6s	· INFO	POLICY	Policy fetch OK {"declared": 1, "undeclared_observed": 47, "ai_used": true}
234.6s	⚠ WARN	POLICY	47 cookie(s) not in policy {"cookies": ["__eoi", "_rdt_uuid", "_ga", "DSID", "gig_canary", "guest_id_ads", "guest_id", "cto_bundle", "_mhtc_cId", "_twpid", "ttcsid", "_ain_cid", "_tt_enable_cookie", "didomi_token", "X-AB", "_fbp", "ucid", "lidc", "bcookie", "__cf_bm"]}
234.6s	▶ STEP	MAIN	Analysis complete {"error_count": 0}
234.6s	▶ STEP	C1	Running Component 1 HAR analysis
235.1s	· INFO	C1	HAR analysis complete — 1 FAIL item(s) {"total_requests": 249, "phases": ["pre_consent"], "phase_strategy": {"accept": "not_detected", "reject": "not_detected"}, "fail_items": ["B.1"]}
235.4s	· INFO	C1	Extracted 1 TCF string(s) from accept-path HAR {"purposes_found": ["All 10 core purposes CONSENTED"]}
235.4s	· INFO	C1	Running C1 on accept-path HAR for C.2/C.3 baseline
235.4s	· INFO	C1	Accept-HAR promoted 1 item(s): ['C.2'] {"phases": ["pre_consent"]}
235.4s	▶ STEP	CHECKS	Running browser-state checks
235.4s	· INFO	CHECKS	Browser checks complete — 12 FAIL item(s) {"fail_items": ["B.3", "B.5", "E.4", "G.2", "H.1", "H.3", "I.1", "I.2", "I.3", "K.1", "L.2", "L.3"], "mode": "gdpr"}

Detailed Findings

B. Pre-Consent State 3 FAIL 2 PASS 0 MANUAL

B.1 No tracking requests before consent banner interaction

✗ FAIL

2 tracking domain(s) made requests before any consent signal was recorded.

domain	vendor	category	request_count	first_request_time	example_url
securepubads.g.doubleclick.net	Google Publisher Ads	ADVERTISING	6	2026-04-02T14:47:46	https://securepubads.g.doubleclick.net/tag/js/gpt.js
pagead2.googlesyndication.com	Google AdSense/GAM	ADVERTISING	1	2026-04-02T14:47:51	https://pagead2.googlesyndication.com/pagead/ping?e=1

Recommendation: Third-party analytics and advertising scripts must not be loaded until after affirmative consent. Implement a consent-gate that defers all non-essential script initialisation until the TCF API reports a positive consent decision.

B.2 No analytics/marketing cookies in Storage pre-consent

✓ PASS

No advertising cookies found in Storage before consent.

B.3 JS tracker globals return undefined pre-consent

✗ FAIL

Tracker globals defined before consent: ['google_tag_manager']

global: google_tag_manager · type: __defined_object__

Recommendation: Tracker initialisation scripts must not execute before consent. Implement a consent gate that loads tracker SDKs only after the TCF API confirms a positive decision.

B.4 No tracking identifiers in localStorage/sessionStorage pre-consent

✓ PASS

No tracking keys found in web storage pre-consent.

B.5 Non-essential scripts have type=text/plain (CMP-blocked) in DOM

✗ FAIL

2 tracking script(s) in DOM without CMP-blocking type attribute.

src	type	vendor
https://securepubads.g.doubleclick.net/tag/js/gpt.js		Google Publisher Ads
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202603300101/pubads_impl.js?cb=3109751		Google Publisher Ads

Recommendation: Scripts for tracking vendors should either be absent from the DOM entirely pre-consent, or have their type attribute set to 'text/plain' to prevent execution. CMPs typically manage this; verify the CMP script-blocking configuration.

C. Baseline Capture 0 PASS 1 MANUAL

C.2 Third-party domains active after Accept All

☐ MANUAL

No post-accept phase detected. Was 'Accept All' clicked during recording?

C.3 Full cookie inventory (with expiry, HttpOnly, Secure, SameSite) after Accept All

ℹ INFO

52 cookies in storage after Accept All (full metadata).

▶ Show all 52 rows

name	domain	expires_days	http_only	secure	same_site	classification
X-AB	sc-static.net	1.0	False	True	None	UNKNOWN
__cf_bm	.independent.ie	0.0	True	True	Lax	ESSENTIAL
gig_canary	cdns.gigya.com	0.0	True	True	None	UNKNOWN
fp.browser_session_id	.independent.ie	session	False	False	Lax	ESSENTIAL
gig_canary	cdns.eu1.gigya.com	0.0	True	True	None	UNKNOWN
gmid	.gigya-cp.independent.ie	365.0	True	True	None	UNKNOWN
ucid	.gigya-cp.independent.ie	365.0	True	True	None	UNKNOWN
hasGmid	.gigya-cp.independent.ie	183.0	False	True	None	UNKNOWN
gig_bootstrap_4_CO8231Ix1RbYi2EmMbsrlw	.independent.ie	365.0	False	True	None	UNKNOWN
sc	www.independent.ie	0.0	False	False	Lax	UNKNOWN
_mhtc_cId	.independent.ie	31.0	False	False	Lax	UNKNOWN
didomi_token	.independent.ie	366.0	False	False	Lax	ESSENTIAL
euconsent-v2	.independent.ie	366.0	False	False	Lax	ESSENTIAL
_gcl_au	.independent.ie	90.0	False	False	Lax	UNKNOWN
sessionId	www.independent.ie	0.0	False	False	Lax	ESSENTIAL
viewSq	www.independent.ie	0.0	False	False	Lax	UNKNOWN
_mhtrdisableshortname	www.independent.ie	0.0	False	False	Lax	UNKNOWN
_ttp	.tiktok.com	90.0	False	True	None	UNKNOWN
uid	.criteo.com	390.0	False	True	None	UNKNOWN
_twpid	.independent.ie	390.0	False	True	Strict	UNKNOWN
_rdt_uuid	.independent.ie	90.0	False	True	Strict	UNKNOWN
muc_ads	.t.co	400.0	False	True	None	UNKNOWN
IDE	.doubleclick.net	390.0	True	True	None	AD
_scid	.independent.ie	395.0	False	False	Lax	UNKNOWN
_scid_r	.independent.ie	395.0	False	False	Lax	UNKNOWN
guest_id_marketing	.twitter.com	400.0	False	True	None	UNKNOWN
guest_id_ads	.twitter.com	400.0	False	True	None	UNKNOWN
personalization_id	.twitter.com	400.0	False	True	None	UNKNOWN
guest_id	.twitter.com	400.0	False	True	None	UNKNOWN
sc_at	.snapchat.com	390.0	False	True	None	UNKNOWN
test_cookie	.doubleclick.net	0.0	True	True	None	UNKNOWN
bcookie	.linkedin.com	365.0	False	True	None	UNKNOWN
li_gc	.linkedin.com	180.0	False	True	None	UNKNOWN
lidc	.linkedin.com	1.0	False	True	None	UNKNOWN
_ga	.independent.ie	400.0	False	False	Lax	AD
cto_bundle	.criteo.com	390.0	False	True	None	UNKNOWN
_mhtc_sId	.independent.ie	0.0	False	False	Lax	UNKNOWN
_hjSessionUser_1713171	.independent.ie	365.0	False	True	None	ESSENTIAL
_hjSession_1713171	.independent.ie	0.0	False	True	None	ESSENTIAL
_fbp	.independent.ie	90.0	False	False	Lax	AD
_tt_enable_cookie	.independent.ie	90.0	False	False	Lax	UNKNOWN
_ttp	.independent.ie	90.0	False	False	Lax	UNKNOWN
__gads	.independent.ie	390.0	False	True	None	AD
__gpi	.independent.ie	390.0	False	True	None	AD
__eoi	.independent.ie	180.0	False	True	None	AD
cto_bundle	.independent.ie	390.0	False	False	Lax	UNKNOWN
_ga_W2EK8THFQJ	.independent.ie	400.0	False	False	Lax	AD
ttcsid	.independent.ie	90.0	False	False	Lax	UNKNOWN
ttcsid_CSN1O63C77U450RMS5E0	.independent.ie	90.0	False	False	Lax	UNKNOWN
DSID	.doubleclick.net	0.0	True	True	None	AD
_ain_cid	www.independent.ie	0.0	False	True	Strict	UNKNOWN
_ain_uid	www.independent.ie	180.0	False	True	Strict	UNKNOWN

C.4 Tracker JS globals active after Accept All (baseline)

ℹ INFO

Globals defined after consent: ['dataLayer', 'google_tag_manager', 'fbq', '_fbq', 'hj', '_hjSettings', 'twq', 'twttr', 'lintrk', 'ttq', 'snaptr']

▶ Show all 11 rows

global	type
dataLayer	__defined_object__
google_tag_manager	__defined_object__
fbq	function
_fbq	function
hj	function
_hjSettings	__defined_object__
twq	function
twttr	__defined_object__
lintrk	function
ttq	__defined_object__
snaptr	function

D. Decline Non-Essential Consent 1 PASS 0 MANUAL

D.4 Reject requires no more clicks than Accept (EDPB symmetry)

✓ PASS

Accept and Reject both require 1 click(s). Symmetric.

accept clicks: 1 · reject clicks: 1 · extra clicks to reject: 0 · reject required manage panel: True

E. Network Request Verification 1 FAIL 0 PASS 3 MANUAL

E.1 Network requests after reject-all

☐ MANUAL

No post-reject phase detected in this HAR.

E.2 Network requests after reject-all

☐ MANUAL

No post-reject phase detected in this HAR.

E.3 Network requests after reject-all

☐ MANUAL

No post-reject phase detected in this HAR.

E.4 No tracking activity on subpages after reject-all

✗ FAIL

Tracking activity detected on 2 subpage(s) after reject.

page	global	phase
https://member.independent.ie/newsletter	ga	subpage_1
https://member.independent.ie/newsletter	_gaq	subpage_1
https://member.independent.ie/newsletter	google_tag_manager	subpage_1
https://member.independent.ie/newsletter	GoogleAnalyticsObject	subpage_1
https://www.independent.ie/entertainment/puzzles	google_tag_manager	subpage_2

F. Cookie Verification (Third-Party) 2 PASS 1 MANUAL

F.1 No non-essential cookies after reject-all

☐ MANUAL

No post-reject phase detected.

F.2 document.cookie contains only essential cookies post-reject

✓ PASS

No advertising cookies visible in document.cookie post-reject.

doc cookie snippet: didomi_token=eyJ1c2VyX2lkIjoiMTlkNGVhYTItNDcyOC02ZDhlLWFjNDItOGU1MjJjMTMwZDFlIiwiY3JlYXRlZCI6IjIwMjYtMDQtMDJUMTQ6NDc6NDYuNTQ2WiIsInVwZGF0ZWQiOiIyMDI2LTA0LTAyVDE0OjQ3OjQ2LjU0NloiLCJ2ZXJzaW9uIjpudWxsfQ==; fp.browser_session_id=e692cf5c-f9ec-4b16-b0f8-c32678d1ab84; gig_bootstrap_4_CO8231Ix1RbYi2EmMbsrlw=gigya-cp_ver4; sc=9336507d-c303-42aa-aae7-0118ce5b85c6.1; _mhtc_cId=b1e8ffcf-1cd4-499d-afd7-6d5d65

F.3 No tracking identifiers in web storage post-reject

✓ PASS

No tracking identifiers found in localStorage/sessionStorage post-reject.

G. First-Party Cookie Classification 1 FAIL 5 PASS 0 MANUAL

G.1 Complete first-party cookie inventory with full metadata

ℹ INFO

34 first-party cookies in Storage after Accept All.

▶ Show all 34 rows

name	domain	expires_days	http_only	secure	same_site	classification
__cf_bm	.independent.ie	0.0	True	True	Lax	ESSENTIAL
fp.browser_session_id	.independent.ie	session	False	False	Lax	ESSENTIAL
gmid	.gigya-cp.independent.ie	365.0	True	True	None	UNKNOWN
ucid	.gigya-cp.independent.ie	365.0	True	True	None	UNKNOWN
hasGmid	.gigya-cp.independent.ie	183.0	False	True	None	UNKNOWN
gig_bootstrap_4_CO8231Ix1RbYi2EmMbsrlw	.independent.ie	365.0	False	True	None	UNKNOWN
sc	www.independent.ie	0.0	False	False	Lax	UNKNOWN
_mhtc_cId	.independent.ie	31.0	False	False	Lax	UNKNOWN
didomi_token	.independent.ie	366.0	False	False	Lax	ESSENTIAL
euconsent-v2	.independent.ie	366.0	False	False	Lax	ESSENTIAL
_gcl_au	.independent.ie	90.0	False	False	Lax	UNKNOWN
sessionId	www.independent.ie	0.0	False	False	Lax	ESSENTIAL
viewSq	www.independent.ie	0.0	False	False	Lax	UNKNOWN
_mhtrdisableshortname	www.independent.ie	0.0	False	False	Lax	UNKNOWN
_twpid	.independent.ie	390.0	False	True	Strict	UNKNOWN
_rdt_uuid	.independent.ie	90.0	False	True	Strict	UNKNOWN
_scid	.independent.ie	395.0	False	False	Lax	UNKNOWN
_scid_r	.independent.ie	395.0	False	False	Lax	UNKNOWN
_ga	.independent.ie	400.0	False	False	Lax	AD
_mhtc_sId	.independent.ie	0.0	False	False	Lax	UNKNOWN
_hjSessionUser_1713171	.independent.ie	365.0	False	True	None	ESSENTIAL
_hjSession_1713171	.independent.ie	0.0	False	True	None	ESSENTIAL
_fbp	.independent.ie	90.0	False	False	Lax	AD
_tt_enable_cookie	.independent.ie	90.0	False	False	Lax	UNKNOWN
_ttp	.independent.ie	90.0	False	False	Lax	UNKNOWN
__gads	.independent.ie	390.0	False	True	None	AD
__gpi	.independent.ie	390.0	False	True	None	AD
__eoi	.independent.ie	180.0	False	True	None	AD
cto_bundle	.independent.ie	390.0	False	False	Lax	UNKNOWN
_ga_W2EK8THFQJ	.independent.ie	400.0	False	False	Lax	AD
ttcsid	.independent.ie	90.0	False	False	Lax	UNKNOWN
ttcsid_CSN1O63C77U450RMS5E0	.independent.ie	90.0	False	False	Lax	UNKNOWN
_ain_cid	www.independent.ie	0.0	False	True	Strict	UNKNOWN
_ain_uid	www.independent.ie	180.0	False	True	Strict	UNKNOWN

G.2 All observed cookies declared in cookie policy

✗ FAIL

47 cookie(s) observed but not found in cookie policy at https://www.mediahuis.ie/cookiepolicy.

▶ Show all 30 rows

cookie_name	status
__eoi	observed but not in cookie policy
_rdt_uuid	observed but not in cookie policy
_ga	observed but not in cookie policy
DSID	observed but not in cookie policy
gig_canary	observed but not in cookie policy
guest_id_ads	observed but not in cookie policy
guest_id	observed but not in cookie policy
cto_bundle	observed but not in cookie policy
_mhtc_cId	observed but not in cookie policy
_twpid	observed but not in cookie policy
ttcsid	observed but not in cookie policy
_ain_cid	observed but not in cookie policy
_tt_enable_cookie	observed but not in cookie policy
didomi_token	observed but not in cookie policy
X-AB	observed but not in cookie policy
_fbp	observed but not in cookie policy
ucid	observed but not in cookie policy
lidc	observed but not in cookie policy
bcookie	observed but not in cookie policy
__cf_bm	observed but not in cookie policy
sc	observed but not in cookie policy
_ga_W2EK8THFQJ	observed but not in cookie policy
gmid	observed but not in cookie policy
hasGmid	observed but not in cookie policy
gig_bootstrap_4_CO8231Ix1RbYi2EmMbsrlw	observed but not in cookie policy
_hjSession_1713171	observed but not in cookie policy
viewSq	observed but not in cookie policy
sc_at	observed but not in cookie policy
IDE	observed but not in cookie policy
test_cookie	observed but not in cookie policy

G.3 Strictly necessary two-part test (AI-assisted)

✓ PASS

AI analysis: 0 cookie(s) fail the strictly-necessary test and should be absent after reject-all. Summary:

G.4 Server-side analytics/ad cookies identified in Set-Cookie headers

✓ PASS

No advertising cookies observed in Set-Cookie response headers.

G.5 No CNAME cloaking detected (first-party subdomains resolving to tracker infrastructure)

✓ PASS

No CNAME cloaking detected across 4 subdomain(s).

subdomain	cname_target	is_tracker	vendor	error
member.independent.ie	(no CNAME / A record only)	False	None	None
focus.independent.ie	(no CNAME / A record only)	False	None	None
gigya-cp.independent.ie	(no CNAME / A record only)	False	None	None
markup.independent.ie	(no CNAME / A record only)	False	None	None

G.6 Non-essential first-party cookies absent after reject-all

✓ PASS

All advertising cookies absent from Storage post-reject.

G.9 No tracking keys in first-party localStorage/sessionStorage post-reject

✓ PASS

No tracking identifiers found in first-party web storage post-reject.

H. JS Global Object Verification 2 FAIL 0 PASS 0 MANUAL

H.1 Tracker JS globals (ga, gtag, fbq, hj, etc.) return undefined post-reject

✗ FAIL

Tracker globals still defined after reject-all: ['google_tag_manager']

global: google_tag_manager · type: __defined_object__

H.2 Tracker globals not merely defined without values

ℹ INFO

See H.1 — same evidence applies.

global: google_tag_manager · present: True

H.3 window.dataLayer absent or contains no tracking events post-reject

✗ FAIL

dataLayer contains 3 tracking event(s): ['gtm.js', 'gtm.dom', 'pageview']

event
didomi-consent
didomi-ready
gtm.js
gtm.dom
gtm.load
user-ready
pageview
gtm.click

I. DOM / Source Inspection 3 FAIL 0 PASS 0 MANUAL

I.1 Tracker script tags have type=text/plain (CMP-blocked) in DOM post-reject

✗ FAIL

2 tracker script(s) in DOM without CMP type-blocking post-reject. 0 script(s) correctly blocked.

src	type_attr	vendor
https://securepubads.g.doubleclick.net/tag/js/gpt.js		Google Publisher Ads
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202603300101/pubads_impl.js?cb=3109751		Google Publisher Ads

I.2 Non-essential scripts blocked (type=text/plain)

✗ FAIL

See I.1 — same check.

src	type_attr	vendor
https://securepubads.g.doubleclick.net/tag/js/gpt.js		Google Publisher Ads
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202603300101/pubads_impl.js?cb=3109751		Google Publisher Ads

I.3 No tracker JS files in executed sources post-reject

✗ FAIL

Based on DOM script inventory; full Sources tab verification requires Chrome DevTools protocol introspection (beyond current scope).

src	type_attr	vendor
https://securepubads.g.doubleclick.net/tag/js/gpt.js		Google Publisher Ads
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202603300101/pubads_impl.js?cb=3109751		Google Publisher Ads

J. Safari-Specific Considerations 1 PASS 2 MANUAL

J.1 ITP setting

☐ MANUAL

Requires manual browser configuration check.

J.2 ITP-off re-test

☐ MANUAL

Requires manual browser configuration check.

J.3 Server-side cookie-setting identified where ITP would block client-side

✓ PASS

No obvious ITP-bypass server-side cookies detected.

K. Consent Mechanism UX Compliance 1 FAIL 2 PASS 2 MANUAL

K.1 Reject All at same prominence and level as Accept All

✗ FAIL

Reject All not directly accessible from first consent screen — requires entering Manage Preferences. EDPB guidelines require equal prominence.

accept visible at first screen: True · reject visible at first screen: False · reject requires extra layer: True · accept button text: Accept · reject button text:

Recommendation: Add a 'Reject All' button directly to the first consent layer (same screen as 'Accept All'). Do not require users to navigate to a preferences panel to decline.

K.2 Non-essential categories default to OFF

☐ MANUAL

Could not open preferences panel to check toggles.

K.3 No dark patterns in consent banner (colour, visual hierarchy)

☐ MANUAL

DOM-level button detection completed. Full visual assessment of colour contrast, typography prominence, and deceptive visual hierarchy requires screenshot review. See screenshots in report.

K.5 Persistent consent withdrawal mechanism accessible after interaction

✓ PASS

Persistent consent widget found: 'Manage'

found: True · text: Manage · in iframe: False

K.6 Site fully accessible after declining consent (no cookie wall)

✓ PASS

Site content accessible after declining consent.

accessible: True

L. Consent State Persistence 2 FAIL 0 PASS 0 MANUAL

L.2 Consent choice respected on second tab (same session)

✗ FAIL

Advertising cookies found in second tab — consent state may not be persisted.

consent cookie found: False · ad cookies found: True · tcf available: True · tcf display status: None

L.3 Declined state maintained after closing and reopening (simulate new session)

✗ FAIL

Advertising cookies found on return — consent state not correctly maintained.

ad cookies on return: True · total cookies: 42

Additional Findings 2 PASS 1 MANUAL

ADD.1 Persistent identifier bridging across consent states

✓ PASS

No persistent cross-phase identifiers detected in POST bodies.

ADD.2 TCF consent string analysis (all phases)

ℹ INFO

No TCF consent strings detected in query parameters.

phase	post_accept
domain	cm.g.doubleclick.net
timestamp	2026-04-02T14:47:35
summary	Accept-all (purposes 1–10 consented, CMP: Unknown CMP (ID 7))
is reject all	False
is accept all	True
cmp	Unknown CMP (ID 7)
tcf policy version	5
purpose consents	All 10 core purposes CONSENTED
li claims	2791011
decode error	None

ADD.3 Session ID bridging across consent and rejection phases

✓ PASS

No session ID bridging detected across consent states.

ADD.4 Vendor userId transmission post-reject

☐ MANUAL

No post-reject phase detected.

Test Details 0 PASS 0 MANUAL

META Site URL, test date, CMP platform

ℹ INFO

CMP identified as: Didomi

url	Crosswords and Sudokus - Online Games and Puzzles - Irish Independent
test date	2026-04-02
test time utc	2026-04-02T14:47:45
cmp detected	Didomi
total requests	249
phases detected	pre_consent
phase strategy	{'accept': 'not_detected', 'reject': 'not_detected'}

run_id: c80a5239 · raw log · ⬇ report JSON · all runs · ← Home

🤖 AI-Enhanced Analysis

Add regulatory citations, risk ratings, enforcement precedents, and a remediation roadmap using Claude AI. Results are cached — generation only runs once per report.

🤖 View AI Report