The Signal Blog
Deep dives into server-side tracking, algorithmic telemetry orchestration, and GDPR/ePrivacy engineering frameworks.
IAB TCF vs a Regular Cookie Banner: Which Do You Need?
TCF is built for publishers that sell ads programmatically. What it changes in your banner, how Google tags read it, and when a regular CMP is enough.
What the $2.75M Disney CCPA Settlement Requires
What California found, what §7025(c)(1) requires for cross-platform opt-outs, and what changed in California privacy law since the settlement.
How to Audit a "Cookieless" Analytics Tool in DevTools
Four checks that reveal what a cookieless analytics tool stores, which APIs it reads, what the server sets, and how long it remembers visitors.
Google Consent Mode v2 Under GDPR: Basic vs Advanced
What Consent Mode v2 sends to Google before consent in Basic and Advanced mode, how EU and UK rules apply, and how to set up each one in GTM.
ES6 in GTM Custom HTML: What text/gtmscript Really Does
GTM rejects ES6 in Custom HTML. type="text/gtmscript" gets modern code past the compiler, untranspiled and unvalidated. How it works and how to test it.
Tracking Google AI Overviews: What opi and ved Can't Tell You
Google sends only its origin as the referrer, so opi and ved never reach your analytics. What you can measure from AI Overviews and AI Mode instead.
Do Cookieless Analytics Need Consent in the EU and UK?
Whether analytics without cookies need a consent banner, country by country, and what the UK's 2026 analytics exception actually covers.