Your conversions silently dropped.
Smart Bidding is optimizing toward broken data. Your CMP dashboard says Consent Mode v2 is configured. Your Google Ads conversions tell a different story — 60–90% drops since July 2025 enforcement, no error message, no warning email. Run the audit. Find the suppressed signal. Restore the bidding algorithm before another month of ROAS gets eaten.
The CMP dashboard said the consent flow was healthy. The Google Ads dashboard said conversions had collapsed. Both were technically correct. The fault was in the wire format — what signals the gtag stream actually emitted, with what defaults, in what order. That's what the audit probes.
The 7 signals, explained.
The Consent Mode v2 schema the audits check against: the two new-in-v2 signals (ad_user_data and ad_personalization) are the most-common failure points because they didn't exist in v1 and most CMPs shipped them late.
ad_storage01analytics_storage02ad_user_dataNew in v203ad_personalizationNew in v204functionality_storage05personalization_storage06security_storage07Four failure modes.
In 60 seconds, on any URL.
- CMP detection — identifies OneTrust, Cookiebot, TrustArc, Didomi, Usercentrics, Iubenda, Sourcepoint, Osano, or flags that none was found
- Consent Mode default-call check— verifies a gtag('consent', 'default', …) call ships in your page HTML before relying on marketing tags
- Pixel inventory vs consent — which marketing pixels load on the page alongside (or without) a consent framework
- Fix recommendations — for each failure, plain-English remediation + a link to the v2 banner builder to generate scaffolded code
- No signup, no email gate, no credit card. Paste a URL, get the audit.
- Want per-signal depth?Connect Google Tag Manager — the 44-check GTM audit reads your container's consent configuration tag-by-tag, including the v2 signals. Free account.
The audit is free. The recovery starts within 48–72 hours of restoring the consent flow. Smart Bidding fully recalibrates in 14–28 days. Run it on your highest-spend domain first.
CMv2 FAQ.
Did Google really enforce Consent Mode v2 in July 2025?+
Yes. The enforcement deadline was March 6, 2024 originally, with a graduated enforcement period. By July 2025 Google Ads accounts in the EEA + UK that hadn't shipped the full v2 schema (with `ad_user_data` and `ad_personalization` signals) started seeing aggregated/modeled conversion data instead of the actual signal. PPC.land documented 60–90% conversion drops on real accounts during the enforcement window.
Won't my Consent Management Platform handle this?+
Your CMP (OneTrust, Cookiebot, Usercentrics, Iubenda, etc.) handles the consent collection. It does NOT automatically verify that your gtag stream is firing the right consent calls in the right order with the right parameters. The two are loosely coupled. The audit checks the GTAG stream directly — what signals fire, with what defaults, on what region — and surfaces the gap between "the CMP says it's configured" and "the wire format is actually correct."
Is the URL audit really free? What's the catch?+
Yes, free. No signup, no credit card, no email gate to see the result. Paste a URL at /scan. The catch: the URL audit covers the client-side gtag stream (which is where 80% of Consent Mode v2 failures live). To audit your GA4 configuration end-to-end — including the server-side flows and the GTM container rules — you sign up free (3 audits/month) and connect Google. Most paid-media managers run the URL audit first to triage, then the full audit to fix.
How fast can I see results from fixing Consent Mode v2?+
Smart Bidding takes 14–28 days to recalibrate after the signal quality is restored. The conversion-attribution recovery shows up in Google Ads dashboards within 48–72 hours. The hardest part is convincing the CFO not to pause spend during the recalibration window. The audit gives you a dated before/after artifact you can show internally.
My account is US-only. Do I need this?+
Less urgent, but worth running. The US doesn't have Consent Mode v2 enforcement, but California (CCPA/CPRA) requires `ad_user_data` and `ad_personalization` for users who haven't opted out via Global Privacy Control. The audit checks all three regions (EEA/UK, California, rest-of-world) and surfaces region-specific gaps.