Google Consent Mode v2
Google Consent Mode v2 is the mechanism that tells Google whether a visitor has given consent for cookies before advertising and analytics tools start working. For a business that uses Google Ads or Google Analytics with traffic from the European Economic Area, this is no longer optional - without it, remarketing, personalized ads and part of the measurement become limited or incomplete. This article explains what Consent Mode v2 is, how it differs from GDPR cookie consent and what you need to configure so the website is correct both legally and technically.
In brief: Google Consent Mode v2 sends four consent signals to Google, two of which are new: ad_user_data and ad_personalization. It is required for websites with EEA traffic that use Google tags for Google Ads, GA4 or other Google measurement and advertising solutions. It does not replace GDPR consent. The cookie banner remains a separate legal requirement. Third-party cookies have not been removed from Chrome, but valid consent is still required regardless of that.
Contents
- What is Google Consent Mode v2 and why does it matter?
- Consent Mode and GDPR are two complementary things
- Basic or Advanced mode
- Are cookies dying in 2026?
- Requirements for the consent banner
- How to configure Consent Mode v2 in practice
- What you lose with a missing or incorrect setup
- How this connects with advertising and measurement
- Frequently asked questions
What is Google Consent Mode v2 and why does it matter?
Google Consent Mode v2 is a way for a website to pass the user's cookie choices to Google tools so those tools behave according to the given consent. When a visitor accepts, tags work normally. When the visitor refuses, tags are limited or send only anonymous signals. The goal is to keep measurement and advertising functional while respecting the user's choice.
The four consent signals
Consent Mode works with four parameters: ad_storage for advertising cookies, analytics_storage for analytics cookies, ad_user_data for sending user data to Google for advertising purposes, and ad_personalization for personalized advertising, including remarketing. Each of them can be granted or denied depending on the user's choice in the banner.
The two new parameters in version 2
The difference between the first version and Consent Mode v2 is precisely the addition of two new signals: ad_user_data and ad_personalization. They were introduced to cover the European consent framework for advertising data. Without those two signals, Google treats EEA traffic as missing consent for advertising purposes.
Who needs Consent Mode v2?
Consent Mode v2 is required for websites that target users in the European Economic Area and the United Kingdom and use Google services such as Google Ads and Google Analytics 4. Since March 2024, Google has required version 2 for EEA traffic, starting with the creation of new remarketing audiences. With an incorrect setup, accounts risk incomplete audiences, weaker conversion modeling and less accurate reporting.
Consent Mode and GDPR are two complementary things
Consent Mode is not a substitute for legal consent. It is the technical continuation of that consent. First, the user accepts or refuses through the banner. Then Consent Mode passes that choice to Google. The two steps solve different problems and should be planned together.
What the law requires
The legal regime for cookies in Bulgaria is based on the General Data Protection Regulation and the rules for electronic communications that implement the European ePrivacy framework. The practical conclusion is that non-essential cookies require prior, informed and freely given consent. Supervision is carried out by the Commission for Personal Data Protection, which publishes guidance on the application of data protection requirements.
What Consent Mode does
Consent Mode translates the legal choice into a technical signal. When the user clicks "Accept" or "Reject", the consent management platform sets the status of the four parameters and the Google tag behaves accordingly. If consent is denied, in Advanced mode Google receives only anonymous, cookieless pings instead of full data.
Why one does not replace the other
You can have a legally correct cookie banner without Consent Mode. In that case, you may be legally cleaner but lose data and functions in Google tools. You can also configure Consent Mode with a poor banner. In that case, you may satisfy part of Google's technical expectation while still violating GDPR. The correct setup is both: a lawful banner plus correct transmission of consent choices.
Basic or Advanced mode
Consent Mode has two implementation modes: Basic and Advanced. The choice directly affects how much data you preserve when a user refuses consent. Advanced mode is often the preferred option because it loses less measurement data, but both modes can be legitimate when implemented correctly.
Basic mode
In Basic mode, Google tags do not load at all until the user gives consent. If the user refuses, no information is sent: no cookies and no anonymous signals. This is simpler to implement, but it means full data loss for users who reject cookies.
Advanced mode
In Advanced mode, tags load when the page opens, but before consent they send only anonymous cookieless pings. If the user refuses, Google still receives a signal without personal data and can use it for partial conversion modeling. The result is a fuller picture of advertising performance while still respecting consent.
Which mode should you choose?
The choice depends on priority. If the goal is maximum caution and minimal data before consent, Basic mode is more suitable. If the goal is to preserve more measurement and better modeling, Advanced mode has an advantage. The table summarizes the difference.
| Feature | Basic mode | Advanced mode |
|---|---|---|
| Tag loading | Only after consent | When the page opens |
| When consent is denied | Nothing is sent | Anonymous cookieless pings |
| Conversion modeling | Limited | More complete |
| Data loss | Higher | Lower |
| Implementation complexity | Lower | Higher |
Are cookies dying in 2026?
No, third-party cookies have not been removed from Google Chrome. In 2024, Google moved away from the planned forced phase-out, and in 2025 it confirmed that it would not introduce a separate pop-up choice prompt. Users manage cookies through browser settings. However, the legal requirement for consent remains unchanged.
Google's change of direction on third-party cookies
After years of preparing to phase out third-party cookies, Google changed course. Today, they continue to work in Chrome for most users, while Google relies on user choice through settings rather than a complete ban. For businesses, this means older tracking mechanisms are not disappearing overnight, but they are not a reliable long-term plan on their own.
Why consent remains mandatory
Google's technical decision does not cancel the law. Cookie consent comes from GDPR and electronic communications rules, not from one browser's policy. Even if all browsers kept cookies, a Bulgarian website would still need a proper banner and valid consent. Tying compliance only to the fate of cookies in Chrome is the wrong approach.
Safari and Firefox already block third-party cookies
Safari and Firefox have blocked third-party cookies by default for years, which means a significant share of traffic is already practically without them. That makes conversion modeling and server-side consent handling increasingly important. Relying only on classic cookies leads to incomplete data regardless of Chrome's decision.
Requirements for the consent banner
The consent banner must provide a real choice. Accepting and rejecting should be equally easy, and non-essential cookies must not load before the user's choice. These rules come from GDPR and the practice of the European Data Protection Board and apply in Bulgaria as well.
Consent before loading
Analytics and advertising cookies should not fire before the user has given consent. If the Google Analytics script or advertising tag starts as soon as the page opens, before any choice is made, that is a problem. Tags should therefore be blocked until consent, while Consent Mode controls what happens technically.
Reject must be as easy as accept
If the first layer of the banner has an "Accept all" button, the same layer should also include "Reject all" with equal visibility. A "Settings" button next to "Accept all" is not enough if there is no equally clear "Reject all" option on the same layer. Hiding refusal behind extra menus, a paler color or more clicks is treated as misleading design and invalid consent. The choice should be equally accessible in both directions.
No pre-ticked categories
Cookie categories cannot be pre-ticked or enabled by default. Silence, inactivity or pre-selected boxes are not valid consent under GDPR. The user must take an active action to allow each non-essential category and must be able to withdraw consent as easily as it was given.
Which cookies do not require consent?
Strictly necessary cookies for login, cart functionality, secure payment and the basic operation of the site do not require consent because the service cannot function without them. Consent is required for analytics and marketing cookies. Correct categorization is the starting point, because blocking necessary cookies can break the site, while freely loading marketing cookies can violate the law.
How to configure Consent Mode v2 in practice
Consent Mode v2 is configured through a consent management platform connected to Google Tag or Google Tag Manager. The idea is that the banner shown to the user automatically sets the four consent signals without manual intervention on each visit.
Consent management platform
A consent management platform, or CMP, is the tool that displays the banner, stores the user's choice and sends the state to tags. Google maintains a list of partner CMP solutions certified for Consent Mode v2. Choosing such a solution reduces manual maintenance and lowers the risk of errors when rules change.
Connecting to Google Tag or GTM
After the CMP is installed, it is connected to Google Tag or Google Tag Manager so each advertising and analytics tag respects the consent signals. The key point is that the Google tag should not fire outside CMP control, because that bypasses the whole mechanism. The setup should be tested before data is trusted.
How to check whether it works
Testing is done with browser developer tools and Google Tag Manager preview mode. You check whether tags stop cookies when consent is rejected and whether the four parameters are set correctly. Google's official setup instructions are in the Consent Mode documentation. Testing before launch prevents silent data loss for weeks.
What you lose with a missing or incorrect setup
With a missing or incorrect Consent Mode v2 setup, you lose advertising functionality, measurement accuracy and legal confidence at the same time. The problem is subtle because the website appears to work, while losses accumulate quietly in campaigns and reports.
Remarketing audiences stop filling properly
Without correct consent signals, remarketing audiences from EEA traffic stop filling properly and existing audiences shrink over time. In practice, you lose the ability to reach people who have already visited the site, one of the most effective advertising channels for an online store.
Loss of conversion data
Without Advanced Consent Mode, visitors who reject cookies disappear from reports instead of being partly modeled. The result is an understated number of conversions and a distorted view of which campaigns work. Decisions are made on incomplete data, which makes advertising more expensive.
GDPR sanction risk
An incorrect banner, such as one without a real reject option or with cookies loaded before consent, is a GDPR violation for which the Commission for Personal Data Protection can impose sanctions. GDPR fines can reach EUR 20 million or 4% of annual global turnover, depending on the severity and circumstances. Even without maximum fines, the risk of a complaint and inspection is real.
How this connects with advertising and measurement
Correct Consent Mode v2 is the foundation for accurate measurement and effective advertising. Without it, data is incomplete and campaign optimization works partly blind. Consent setup is therefore part of the advertising strategy, not a separate technical detail.
More accurate measurement through modeling
When consent is passed correctly, Google can model part of the missing conversions from users without cookies and return a fuller picture. This does not recover all data, but it reduces the blind spot and makes decisions more reliable. The quality of modeling depends directly on correct consent signals.
Connection with Google Ads and GA4
Consent Mode v2 supports both Google Ads and Google Analytics 4. Google Ads uses it for conversions and audiences, while GA4 uses it for website behavior measurement. If you manage campaigns, see how we plan Google Ads for online stores and our broader online advertising service. This article also complements the guide to the European Accessibility Act, because both topics deal with a legally correct and technically sound website.
Frequently asked questions
Is Google Consent Mode v2 mandatory for Bulgarian websites?
It is required for websites with traffic from the European Economic Area that use Google tags for Google Ads, GA4 or other Google measurement and advertising solutions. In Google Ads, missing Consent Mode limits remarketing, personalized ads and part of the measurement. Even without Google Ads, if the website uses GA4 or Google tags, the user's consent choices should be passed correctly to Google.
Does Consent Mode v2 replace the cookie banner?
No. The banner collects the user's consent and is a legal requirement under GDPR, while Consent Mode passes that consent to Google. They work together: a banner without Consent Mode loses data in Google, while Consent Mode without a correct banner violates the law.
Did Google remove third-party cookies from Chrome?
No. In 2024, Google moved away from the forced phase-out, and in 2025 it confirmed that it would not introduce a separate choice prompt. Users manage third-party cookies through browser settings. Nevertheless, cookie consent remains required because it comes from the law, not from a browser policy.
What is the difference between Basic and Advanced mode?
In Basic mode, tags load only after consent, and if consent is denied, nothing is sent. In Advanced mode, tags load immediately, but before consent they send only anonymous cookieless pings, allowing more complete conversion modeling. Advanced mode usually preserves more data.
Which cookies require consent?
Non-essential cookies require consent, especially analytics and marketing cookies. Strictly necessary cookies for login, cart, secure payment and basic website operation do not require consent. Correct categorization is the foundation because it determines what is blocked until choice and what always works.
What are the fines for an incorrect cookie banner?
An incorrect banner is a GDPR violation for which the Commission for Personal Data Protection may impose sanctions. Under the regulation, fines can reach EUR 20 million or 4% of annual global turnover, but the exact amount depends on the severity, duration and circumstances of the violation.
Google Consent Mode v2 connects two responsibilities that are often treated separately: GDPR compliance and working measurement in Google. The safest approach is a banner with a real choice, correctly categorized cookies and a tested Consent Mode setup connected to Google Tag. If you want us to review your website setup and advertising campaigns, see our SEO optimization service or contact us through the contacts page.
Back
