CriticalChecked on every planEU · US

Tracking continues after “Reject”

What happens if trackers still load after a visitor clicks “Reject all”?

Short answer

No. “Reject all” has to stop every non-essential tag and cookie. If analytics or ad requests keep firing, you are tracking people who said no. This is what got SHEIN a €150 million fine in France in 2025.

24%of 168 European shops did this (40)
18shops kept sending Microsoft Clarity after Reject
No. 2most common critical problem in the study

Why it matters

A reject button that does nothing is worse than no banner: it misleads visitors and is direct evidence that refusals are ignored.

What we show you when we find it

TimeTrackerProof
0.2sMeta Pixelfacebook.com/tr/
0.9sMicrosoft Claritya.clarity.ms/collect
5.2sKlaviyoa.klaviyo.com/client/sessions/
6.6sTikTok Pixelanalytics.tiktok.com/api/v2/shopify_pixel

Every row opens the exact request, the cookie and a screenshot of the page at that moment. Example from an anonymised scan. See the full sample report.

How to fix it

  1. Check your consent tool is actually wired to your tags. The reject action must stop every non-essential tag.
  2. Remove duplicate copies of tracking snippets hard-coded in your theme.
  3. Make sure already-set tracking cookies are deleted on refusal.

The law behind this rule

Real case, anonymised

“Reject All” on OneTrust, and four trackers kept going

A banner from a big consent tool doesn’t mean the tags listen to it.
Read the case