The owner of an e-shop selling natural cosmetics opens two tabs in the morning: in one, WooCommerce shows forty orders last week; in the other, Google Ads reports just twenty-five conversions. Which number should she believe? And which one should she use to decide whether the campaign is worth it? Behind this gap there is usually cookie consent, and the tool that bridges it while respecting the visitor is called Consent Mode v2.
Measurement has changed for good, but it hasn’t disappeared. In this article you will see why your reports “underestimate” your results, how Consent Mode works in plain terms, why your own data (first-party data) keeps gaining value, and which steps, in which order, make your numbers reliable again.
At a glance
- When a visitor rejects cookies, some conversions are no longer recorded the traditional way.
- Consent Mode passes the visitor’s choice to Google’s tags, which adjust their behavior accordingly.
- For audiences in the European Economic Area, Google requires it for remarketing and audience features.
- The data you collect yourself, with the customer’s knowledge, is the most stable foundation for measurement and advertising.
Why your reports no longer match your sales
For many years, every ad click left a “trail” in the browser, and when the visitor bought something, the platform knew where they came from. Today that chain breaks at three points:
- Browsers: Safari and Firefox restrict third-party cookies by default, and many users also run ad blockers.
- Consent: European law requires permission before any non-essential cookies are used, and some visitors click “Reject.”
- Platforms: Google now explicitly requires knowing what each visitor chose; otherwise it limits certain features.
As a result, your reports show a sample of reality rather than the full picture. If you don’t take this into account, you risk cutting a campaign that is actually bringing in customers.
What is Consent Mode v2, and what changes in practice?
Consent Mode is the “interpreter” between your cookie banner and Google’s tools, such as Analytics and Google Ads. As soon as the visitor makes a choice, the banner passes it on as signals, and the tags behave accordingly. The second version added two signals that relate exclusively to advertising:
| Signal | What it controls |
|---|---|
| analytics_storage | Whether cookies for traffic statistics are allowed |
| ad_storage | Whether cookies for advertising purposes are allowed |
| ad_user_data | Whether user data can be sent to Google for advertising (new in v2) |
| ad_personalization | Whether personalized advertising and remarketing are allowed (new in v2) |
Since March 2024, Google has required these signals for users in the European Economic Area. Where they are missing, remarketing lists stop growing and conversion measurement gets thinner.
Basic or advanced implementation?
In the basic implementation, Google’s tags stay completely inactive until the visitor consents. It is the most conservative option, but visitors who decline leave no signal at all.
In the advanced implementation, the tags load with every signal set to “denied” and, if the visitor doesn’t give permission, they send anonymous, cookieless pings. Using these, Google statistically estimates the missing conversions. Modeling needs enough traffic volume, so on very small sites the benefit is limited. It’s best to choose between the two together with your legal advisor.
First-party data: the data no one can take away from you
As third-party cookies lose ground, the data you collect yourself, directly and with the customer’s knowledge, becomes more valuable. This is first-party data: orders, newsletter sign-ups, customer accounts, form requests, even appointments booked by phone.
Think of a dental practice in Glyfada, a seaside suburb of Athens. Every appointment form filled in on its site is a data point with a known source. If it is connected properly to advertising, the practice learns which campaign brings in real patients, not just visits. Third-party data, on the other hand, meaning interest profiles that others build from browsing across many sites, is less and less available, and you never know how accurate it is.
The implementation guide, step by step
1. Take an inventory of your tags
Before you change anything, list what is “running” on your site today: Analytics, Google Ads, Meta Pixel, chat, heatmaps. You will often find forgotten scripts from past partnerships that set cookies without anyone knowing.
2. Choose the right consent tool
Go for a consent management platform that supports Consent Mode natively and is one of Google’s certified partners. The banner should make declining just as easy as accepting, with equal buttons on the first layer.
3. Set the default to “denied” before any tag fires
In Google Tag Manager, the default consent state must be declared before any other tag is triggered. Tag Manager’s built-in consent overview shows you which tags respect which signals.
4. Test it the way a visitor would
Open your site in an incognito window, click “Reject,” and use Tag Assistant to confirm that the signals are sent as “denied” and that no advertising cookies are created. Then repeat with “Accept.”
5. Turn on enhanced conversions
For users who have consented, enhanced conversions send Google details such as the email address in encrypted (hashed) form, so the purchase can be matched to the click that drove it. It is one of the most effective moves for anyone running campaigns, as we also explain in our guide to sales with Google Ads.
6. Bring offline sales into the picture
If some of your customers close the deal by phone or in-store, you can import those sales into Google Ads from your CRM or from a simple file. That way, your campaigns learn to find customers, not just completed forms.
7. Consider server-side tagging, if your size justifies it
With this setup, data first passes through a server of your own and then goes on to the platforms. It gives you more control and more stable measurement, but it comes with hosting and maintenance costs. It mainly suits e-shops with a significant advertising budget.
Signs that your setup has a problem
- Cookies appear in the browser before the visitor clicks any button.
- Conversions dropped sharply the day the new banner went live and never recovered.
- Your remarketing lists in Google Ads stay flat while traffic keeps coming.
- Google Ads shows consent diagnostic warnings on your conversion actions.
We run into many of these every day, and we have described some of them in our article on digital marketing mistakes that cost you money. If you are getting ready for the big sales season, make sure your measurement is right before you raise budgets, as we also recommend in our guide to Black Friday for your e-shop.
Build an audience you own
The technical setup is half the job. The other half is giving people a reason to trust you with their details. A bakery in Chalandri, a suburb of Athens, can send out its weekend bread schedule every Friday; an e-shop can offer subscribers early access to its sales. Every relationship like this means measurement and communication that don’t depend on any browser. To learn how to nurture it, see our guide to email marketing.
What to keep in mind about the legal framework
Cookie obligations stem from European and Greek law, and the Hellenic Data Protection Authority has issued guidance for websites. Consent Mode is a technical requirement from Google and does not replace lawful consent. What we write here is measurement best practice; for your own case, consult a lawyer or your data protection officer.
How FoxWeb can help
Accurate measurement requires your website, advertising and data to work as one system. At FoxWeb we set them up and test them together, whether as part of a new website development project or on an existing site.
- Setup and audit: banner, Consent Mode v2, Analytics and conversions, tested in real-world scenarios.
- Campaigns with clean data: in our Google Ads management, we use enhanced and offline conversions.
- Reports that make sense: we separate what is measured from what is estimated, so you can make decisions with confidence.
Frequently asked questions
Is Consent Mode v2 mandatory?
It isn’t a legal obligation, but it is a Google requirement for audiences in the European Economic Area. If you want remarketing and full audience features in Google Ads, in practice you need it.
Do I lose all my data when someone rejects cookies?
Not all of it, but some. The advanced implementation and enhanced conversions help estimate or recover a significant share. No method, however, brings back the complete picture of the past.
How do I check whether Consent Mode works correctly on my site?
Use Google’s Tag Assistant and test both accepting and declining. Check that the signals change state and that no advertising cookie is stored before the choice is made.
Does a small business need server-side tracking?
Usually not at the start. A proper banner, Consent Mode and enhanced conversions cover most needs. Server-side is worth it when your advertising budget justifies the extra cost.
Conclusion
Privacy didn’t end measurement; it just set new rules. A proper banner, a tested Consent Mode v2 setup, enhanced conversions and an audience that trusts you with its details give you numbers you can believe. And with reliable numbers, every euro of your budget goes where it truly pays off.
Want to know whether your site measures correctly? Request an audit from FoxWeb or call us at +30 210 300 57 57.
