Skip to main content
OneTrust and GTMDiagnosis and fix

Why isn't OneTrust working with my Google Tag Manager?

OneTrust's integration with GTM depends on two things being right: consent groups mapped to the correct Consent Mode signals, and the OptanonWrapper callback firing the dataLayer push GTM listens for. Failures come from group IDs mapped to the wrong signal, the callback not pushing anything, geolocation rules applying a strict template where it isn't required, or defaults being set after GTM has already fired. OneTrust is more configurable than most CMPs, which means more places for it to be configured wrongly.

Free30 minutesNo obligation

OneTrust and GTM · what breaks

What this looks like when it's happening to you — OneTrust and GTM

  1. 01

    Consent state never reaching GTM

    The banner works and tags don't respond.

  2. 02

    Tags firing before the banner

    Defaults set too late.

  3. 03

    Strict consent applied to all regions

    Geolocation rules not scoped.

OneTrust and GTM · the fix

What changes once it's fixed — OneTrust and GTM

  • Groups mapped to the right signals

    So consent means what it should per category.

  • The callback pushing to the dataLayer

    So GTM hears the update.

  • Geolocation scoped

    Strict where required, appropriate elsewhere.

OneTrust and GTM · architecture

Why your conversion data was wrong in the first place — OneTrust and GTM

Fixing this specific fault is worth doing. But it is worth understanding why it happened, because the same underlying weakness produces a different symptom every few months — and the reason your conversion data is wrong is almost never the tag itself.

  1. 1

    Your conversion depends on a browser that is being restricted on purpose

    A browser-side tag has to survive the page loading, the visitor staying, the script executing and the request leaving. Every one of those is now contested. The order in your database is certain; the browser event reporting it is not, and that gap is where wrong numbers come from.

  2. 2

    Safari caps the cookie your attribution depends on

    Intelligent Tracking Prevention limits cookies written by JavaScript to seven days, whatever expiry you set. Any customer who takes longer than a week to decide comes back as a stranger, so the sale is recorded and credited to nobody. A cookie your own server writes in an HTTP response is not subject to that cap — which is the single largest practical difference between browser-side and first-party server-side tracking.

  3. 3

    Ad blockers remove the tag before it can run

    A blocked pixel does not error, retry or warn anyone. The visitor buys, the order lands in your store, and no platform ever hears about it. First-party events sent from your own subdomain aren't filtered the same way, because they are not a third-party request.

  4. 4

    Consent banners stop tags, sometimes when they didn't need to

    Where consent is genuinely required, losing the event is correct. What is not correct — and what we find repeatedly on US-majority accounts — is an EU-style prior-consent banner applied to every visitor, discarding conversions no law asked you to discard. A server container enforces the real decision at the container rather than hoping each vendor script honours a flag.

  5. 5

    The checkout can end somewhere your tag isn't

    Wallets and hosted payment pages can be abandoned after the money moves. The customer paid; the confirmation page never rendered; the browser event never fired. Sending the purchase from the order record instead means the conversion arrives whether or not anyone came back to your site.

  6. 6

    What that adds up to

    Each of these is a separate route to onetrust and gtm, and they compound. First-party server-side tracking doesn't patch them one at a time — it moves the money event off the browser entirely, so the order in your backend is what gets reported. That is why we reconcile against your own order records and put 95%+ accuracy in writing: with the event sourced from the order, the number is checkable rather than hopeful.

OneTrust and GTM · normal or broken

Some of this is supposed to happen — OneTrust and GTM

Half the time nothing is broken and the number is being read wrong. Knowing which is which stops you paying to fix something that was never a fault.

Normal, not a fault

  • Different templates per region

    That's what geolocation rules are for.

  • Tags blocked before consent where required

    Correct.

Actually broken

  • Group IDs mapped to the wrong signal

    Analytics consent granting advertising storage, or the reverse.

  • OptanonWrapper not pushing

    The callback exists and does nothing GTM can see.

  • Defaults set after GTM fires

    Both a compliance and a modelling problem.

  • Geolocation applying strict rules globally

    Discarding data no law required.

OneTrust and GTM · diagnose

How we find out why isn't onetrust working with my google tag manager

Always in this order. Each step eliminates a class of cause, so by the last one there is usually a single explanation standing.

  1. 01

    Check group-to-signal mapping

    Group IDs against Consent Mode signals.

  2. 02

    Check OptanonWrapper pushes to the dataLayer

    And that GTM listens for it.

  3. 03

    Clean profile, watch order

    Defaults must precede tags.

  4. 04

    Check geolocation rules per region

    Test from at least two.

  5. 05

    Deny consent and check each destination

    Blocking one and not another is common.

OneTrust and GTM · prove

How we prove it's actually fixed — OneTrust and GTM

The tag firing again proves the tag fires. These prove the numbers are right.

Source of truth

Network request log on a clean browser profile, tested from multiple regions

  • Group IDs confirmed mapped to the correct Consent Mode signals.
  • OptanonWrapper confirmed pushing consent state to the dataLayer.
  • No request before the consent default.
  • Geolocation behaviour verified from at least two jurisdictions.
  • Reconciled against network request log on a clean browser profile, tested from multiple regions for a fully closed window, matched on ID rather than on totals.
  • No record counted twice, checked across the whole window rather than spot-checked.
  • The same check repeated 30 days later, because a fix that holds once and drifts is the harder failure to catch.

OneTrust and GTM · free audit

What we check in the free audit

  • Check group-to-signal mapping
  • Check OptanonWrapper pushes to the dataLayer
  • Clean profile, watch order
  • Check geolocation rules per region
  • Deny consent and check each destination

Checked against

Network request log on a clean browser profile, tested from multiple regions

Get my free conversion tracking audit

Free30 minutesNo obligation

OneTrust and GTM · when not to buy

When you don't need us for this — OneTrust and GTM

Most of these you can do yourself, and we would rather you did.

  • You have a OneTrust implementation partner already engaged.
  • OneTrust's GTM documentation covers the standard mapping.
  • You need legal input on which regions get which template.

OneTrust and GTM · what we deliver

What we do about it — OneTrust and GTM

  • Group IDs mapped correctly

    Each OneTrust group to its Consent Mode signal.

  • OptanonWrapper pushing consent state

    The mechanism GTM reads.

  • Defaults before GTM

    Set in the container initialisation.

  • Geolocation rules reviewed

    So strict templates apply only where required.

Pricing

Pick the package that fits your ad spend

Browser-side starter

$400One-time fee · lifetime ownership

We fix the fault in your existing browser-side setup and verify it on a live transaction. Honest disclosure: this repairs what you have, it does not make it durable. If you spend $1K+/month on paid media, the fault will recur the next time Safari, a consent banner or a checkout change moves under you — the server-side tier is what stops that.

  • Root cause found and fixed, not worked around
  • Verified on a live transaction, not in preview
  • Reconciled against your own order records
  • Written handover documenting what changed and why
Fix what I have

1st-party server-side

Recommended

$800One-time fee · most popular

The tier that removes the whole class of failure rather than this instance of it. Your money events stop depending on the browser: they are sent from your order records through a first-party server container on your own subdomain, so iOS, ad blockers, consent banners and interrupted payment redirects can no longer take them away. Built in 2–4 days. You own the stack outright — no monthly SaaS.

  • First-party server container on your own subdomain
  • Purchases sent from your order records, not the browser
  • Meta, Google, TikTok, Microsoft and LinkedIn all fed server-side
  • Deduplicated on a shared event ID, verified at every destination
  • First-party cookies beyond Safari's 7-day cap on JavaScript-set cookies
  • 95%+ conversion accuracy and 8+ Meta EMQ, guaranteed in writing
Rebuild it server-side

Full 1st-party stack

$1,800One-time fee · lifetime ownership

Every paid-media channel server-side, end to end, plus the offline loop. For advertisers whose spend makes an attribution leak more expensive than the build. Pay once, own everything.

  • Everything in 1st-party server-side
  • Pinterest, Snapchat, Reddit and LinkedIn CAPI
  • CRM and offline conversion loop, so closed revenue reaches bidding
  • Refunds and cancellations reversed at every destination
  • Klaviyo identity stitching, BigQuery and Looker Studio
  • Monitoring, so the next break surfaces in days rather than a quarter
Get the full stack

FAQ

OneTrust and GTM questions, answered

It's OneTrust's callback after consent is resolved. It's where you push the consent state into the dataLayer so GTM can act on it — if it pushes nothing, GTM never hears about consent.

Free · 30 min

Get onetrust and gtm diagnosed properly

Free30 minutesNo obligation