Google CMP certification readiness
Self-assessment checklist before applying for Google Consent Mode CMP partner status.
Guide: products/consent/docs/CMP-CERTIFICATION.md
docs/CMP-SUBMISSION.md (NC-312) · Eksternt indlæg: docs/CMP-EXTERNAL-INTAKE.md (NC-329)
Eksternt Google-indlæg
Når checklisten er grøn, indsendes pakken manuelt til Googles CMP-partnerprogram. Følg trinene nedenfor — fuld runbook i docs/CMP-EXTERNAL-INTAKE.md.
Download evidence JSON (knap ovenfor)
Vedhæft staging HAR med GCM default + update
Angiv staging-URL med banner og live cookiepolitik (/policy?site=…)
Notér EU-hosting og 13 måneders log-retention
Indsend via Googles CMP-partnerformular og gem sags-ID i launch-checklisten
1. GCM default denied before tags
setGoogleConsentModeDefault() denies ad_storage, analytics_storage, ad_user_data, ad_personalization.
Open in portal →2. GCM update on accept/reject
accept-all grants storage signals; reject-all keeps denied — verify with gcm-bridge e2e.
3. Optional scripts blocked until consent
data-nc-category + type=text/plain scripts unblock only after grant.
Open in portal →4. Consent choices logged server-side
POST /api/v1/consent records choices with policyVersion and timestamp.
Open in portal →5. Cookie policy lists inventory by category
Public /policy?site=… reflects manual cookie inventory.
Open in portal →6. Playwright GCM + runtime e2e green
consent-runtime.spec.ts and gcm-bridge.spec.ts pass on staging.
7. Legal/compliance review scheduled
Document jurisdiction, retention (13 mo), and DSAR path (/privacy) before certification claim.