Why isn't Cookiebot working with my Google Tag Manager?
Cookiebot and GTM fail together in two opposite ways. Either Cookiebot loads after GTM so tags fire before any consent state exists, or Cookiebot's auto-blocking is left on alongside GTM's consent handling and tags get blocked twice — once correctly and once permanently. Pick one mechanism: use Cookiebot's GTM template to set Consent Mode defaults and updates, and turn its automatic script blocking off for anything GTM manages, so there is exactly one thing deciding whether a tag runs.
Free30 minutesNo obligation
Cookiebot and GTM · what breaks
What this looks like when it's happening to you — Cookiebot and GTM
- 01
Tags firing before the banner appears
Cookiebot loading too late.
- 02
Tags never firing even after acceptance
Blocked by two mechanisms at once.
- 03
Consent state never reaching GTM
The update fires and nothing hears it.
Cookiebot and GTM · the fix
What changes once it's fixed — Cookiebot and GTM
One consent mechanism
So a tag's state is unambiguous.
Nothing firing before consent
Verified on a clean profile.
Tags firing after acceptance
Which is the half people forget to test.
Cookiebot and GTM · architecture
Why your conversion data was wrong in the first place — Cookiebot and GTM
Fixing this specific fault is worth doing. But it is worth understanding why it happened, because the same underlying weakness produces a different symptom every few months — and the reason your conversion data is wrong is almost never the tag itself.
- 1
Your conversion depends on a browser that is being restricted on purpose
A browser-side tag has to survive the page loading, the visitor staying, the script executing and the request leaving. Every one of those is now contested. The order in your database is certain; the browser event reporting it is not, and that gap is where wrong numbers come from.
- 2
Safari caps the cookie your attribution depends on
Intelligent Tracking Prevention limits cookies written by JavaScript to seven days, whatever expiry you set. Any customer who takes longer than a week to decide comes back as a stranger, so the sale is recorded and credited to nobody. A cookie your own server writes in an HTTP response is not subject to that cap — which is the single largest practical difference between browser-side and first-party server-side tracking.
- 3
Ad blockers remove the tag before it can run
A blocked pixel does not error, retry or warn anyone. The visitor buys, the order lands in your store, and no platform ever hears about it. First-party events sent from your own subdomain aren't filtered the same way, because they are not a third-party request.
- 4
Consent banners stop tags, sometimes when they didn't need to
Where consent is genuinely required, losing the event is correct. What is not correct — and what we find repeatedly on US-majority accounts — is an EU-style prior-consent banner applied to every visitor, discarding conversions no law asked you to discard. A server container enforces the real decision at the container rather than hoping each vendor script honours a flag.
- 5
The checkout can end somewhere your tag isn't
Wallets and hosted payment pages can be abandoned after the money moves. The customer paid; the confirmation page never rendered; the browser event never fired. Sending the purchase from the order record instead means the conversion arrives whether or not anyone came back to your site.
- 6
What that adds up to
Each of these is a separate route to cookiebot and gtm, and they compound. First-party server-side tracking doesn't patch them one at a time — it moves the money event off the browser entirely, so the order in your backend is what gets reported. That is why we reconcile against your own order records and put 95%+ accuracy in writing: with the event sourced from the order, the number is checkable rather than hopeful.
Cookiebot and GTM · normal or broken
Some of this is supposed to happen — Cookiebot and GTM
Half the time nothing is broken and the number is being read wrong. Knowing which is which stops you paying to fix something that was never a fault.
Normal, not a fault
Tags blocked before consent in the EU
Correct behaviour.
Some visitors declining
Expected, and modelled where Consent Mode is wired.
Actually broken
Cookiebot loading after GTM
Tags fire into a vacuum.
Auto-blocking and Consent Mode both active
Double-blocking that never releases.
Categories mapped wrongly
Analytics under marketing, declined far more often.
The Cookiebot script itself blocked
Ad blockers block common CMP scripts, leaving the default state permanently.
Cookiebot and GTM · diagnose
How we find out why isn't cookiebot working with my google tag manager
Always in this order. Each step eliminates a class of cause, so by the last one there is usually a single explanation standing.
- 01
Clean profile, watch load order
Cookiebot must precede GTM.
- 02
Accept the banner and check tags fire
The commonly untested half.
- 03
Check whether auto-blocking is on
Alongside Consent Mode is the conflict.
- 04
Check category mapping
Analytics should not sit under marketing.
- 05
Test with an ad blocker
If the CMP is blocked, the page sits in its default state.
Cookiebot and GTM · prove
How we prove it's actually fixed — Cookiebot and GTM
The tag firing again proves the tag fires. These prove the numbers are right.
Source of truth
Network request log on a clean browser profile
- Cookiebot confirmed loading before GTM.
- No advertising or analytics request before the consent default.
- Tags confirmed firing after acceptance, per destination.
- Exactly one blocking mechanism active.
- Reconciled against network request log on a clean browser profile for a fully closed window, matched on ID rather than on totals.
- No record counted twice, checked across the whole window rather than spot-checked.
- The same check repeated 30 days later, because a fix that holds once and drifts is the harder failure to catch.
Cookiebot and GTM · free audit
What we check in the free audit
- Clean profile, watch load order
- Accept the banner and check tags fire
- Check whether auto-blocking is on
- Check category mapping
- Test with an ad blocker
Checked against
Network request log on a clean browser profile
Free30 minutesNo obligation
Cookiebot and GTM · when not to buy
When you don't need us for this — Cookiebot and GTM
Most of these you can do yourself, and we would rather you did.
- Cookiebot's own GTM template documentation covers most of this.
- You can check load order in the network tab yourself.
- You need a legal view on categories rather than an implementation.
Cookiebot and GTM · what we deliver
What we do about it — Cookiebot and GTM
Cookiebot loaded before GTM
So a consent state exists before any tag can run.
Cookiebot's GTM template used
Setting Consent Mode defaults and updates properly.
Auto-blocking disabled for GTM-managed tags
One decision-maker, not two.
Pricing
Pick the package that fits your ad spend
Browser-side starter
$400One-time fee · lifetime ownership
We fix the fault in your existing browser-side setup and verify it on a live transaction. Honest disclosure: this repairs what you have, it does not make it durable. If you spend $1K+/month on paid media, the fault will recur the next time Safari, a consent banner or a checkout change moves under you — the server-side tier is what stops that.
- Root cause found and fixed, not worked around
- Verified on a live transaction, not in preview
- Reconciled against your own order records
- Written handover documenting what changed and why
1st-party server-side
Recommended$800One-time fee · most popular
The tier that removes the whole class of failure rather than this instance of it. Your money events stop depending on the browser: they are sent from your order records through a first-party server container on your own subdomain, so iOS, ad blockers, consent banners and interrupted payment redirects can no longer take them away. Built in 2–4 days. You own the stack outright — no monthly SaaS.
- First-party server container on your own subdomain
- Purchases sent from your order records, not the browser
- Meta, Google, TikTok, Microsoft and LinkedIn all fed server-side
- Deduplicated on a shared event ID, verified at every destination
- First-party cookies beyond Safari's 7-day cap on JavaScript-set cookies
- 95%+ conversion accuracy and 8+ Meta EMQ, guaranteed in writing
Full 1st-party stack
$1,800One-time fee · lifetime ownership
Every paid-media channel server-side, end to end, plus the offline loop. For advertisers whose spend makes an attribution leak more expensive than the build. Pay once, own everything.
- Everything in 1st-party server-side
- Pinterest, Snapchat, Reddit and LinkedIn CAPI
- CRM and offline conversion loop, so closed revenue reaches bidding
- Refunds and cancellations reversed at every destination
- Klaviyo identity stitching, BigQuery and Looker Studio
- Monitoring, so the next break surfaces in days rather than a quarter
FAQ
Cookiebot and GTM questions, answered
Consent Mode for anything GTM manages, because it preserves cookieless pings and lets Google model the gap. Auto-blocking sends nothing at all.
Usually two mechanisms blocking and only one releasing. Removing the duplicate resolves it.
Yes, via its GTM template. Confirm all four signals are being set — v1-era configurations often lack the two v2 added.
The page stays in its default state. That's an argument for a denied default in required regions rather than a permissive one.
Free · 30 min
Get cookiebot and gtm diagnosed properly
Free30 minutesNo obligation
