“Reject All” on OneTrust, and four trackers kept going
The banner looked right: Accept and Reject side by side. But nine trackers loaded before anyone chose, and after “Reject All” the Meta Pixel, Microsoft Clarity, Klaviyo and the TikTok Pixel still sent data.
D48/100
- Shop
- A Spanish menswear brand
- Consent tool
- OneTrust
- Scanned
- Visited from
- Netherlands
What we saw
- Before any choiceMicrosoft Clarity, Google Analytics, Google Ads and 6 more were active 3.3 seconds after the page loaded.
- After “Reject All”Meta Pixel, Microsoft Clarity, Klaviyo and TikTok Pixel still sent requests.
- Changing your mindAfter accepting, there was no cookie settings link or icon on the page to withdraw.
- Withdrawal buttonNo “withdraw from the contract” link on the 5 pages we checked (required in the EU since 19 June 2026).
Why it happened
The usual cause: tags loaded straight from the theme or a tag manager, not through the consent tool, so the visitor’s choice never reaches them.
How to fix it
- Load every marketing and analytics tag through the consent tool’s categories, not directly in the theme.
- In the tag manager, add a consent condition to each tag (or turn on Consent Mode defaults set to “denied”).
- Add a “Cookie settings” link in the footer that reopens the banner.
- Add a withdrawal link to the footer, pointing to a page with the withdrawal form.
A banner from a big consent tool doesn’t mean the tags listen to it.
Using OneTrust too?
Check whether your tags actually listen to it. Free, about a minute.