Consent Mode v2 default snippet

<!-- Consent Mode v2 default — must run BEFORE the Google tag / GTM snippet. -->
<script>
  window.dataLayer = window.dataLayer || [];
  function gtag(){ dataLayer.push(arguments); }
  // Default: nothing granted until the CMP says so. The two v2 signals (ad_user_data, ad_personalization) are required for EEA/UK ads features since March 2024.
  gtag('consent', 'default', {
    ad_storage: 'denied',
    ad_user_data: 'denied',
    ad_personalization: 'denied',
    analytics_storage: 'denied',
    functionality_storage: 'denied',
    personalization_storage: 'denied',
    security_storage: 'granted',
    wait_for_update: 500
  });
  // Optional: only default-deny where the law requires it, grant elsewhere. Remove the block above and use this one instead if that is your policy.
  // gtag('consent', 'default', { ad_storage: 'denied', ad_user_data: 'denied', ad_personalization: 'denied', analytics_storage: 'denied', region: ['EEA', 'UK', 'CH'], wait_for_update: 500 });
  // gtag('consent', 'default', { ad_storage: 'granted', ad_user_data: 'granted', ad_personalization: 'granted', analytics_storage: 'granted' });
</script>
<!-- Your Google tag or GTM snippet goes here, after the default. -->
<script>
  // Called by your CMP when the user chooses. Map its categories to the four signals; every signal must be present.
  function onConsentChoice(c) {
    gtag('consent', 'update', {
      ad_storage: c.marketing ? 'granted' : 'denied',
      ad_user_data: c.marketing ? 'granted' : 'denied',
      ad_personalization: c.marketing ? 'granted' : 'denied',
      analytics_storage: c.analytics ? 'granted' : 'denied'
    });
  }
</script>