Google Ads / DoubleClick remarketing before consent

DoubleClick / Google Ads remarketing tags drop advertising cookies to retarget visitors across the web. On page load, that is advertising processing without consent.

Why it matters

Remarketing is the definition of non-essential: it exists to profile visitors for ads. Prior consent is required, and Consent Mode’s ad_storage must default to denied — otherwise the ad cookies are set the instant the page opens.

How to fix it

Keep ad_storage denied by default in Consent Mode v2, and load the Google Ads / DoubleClick tags only after the visitor opts in to advertising. A visitor who rejects should see no doubleclick.net requests at all.

<!-- Default denied (before any Google tag) -->
gtag('consent', 'default', { ad_storage: 'denied' });

<!-- Only after opt-in to advertising -->
gtag('consent', 'update', { ad_storage: 'granted' });

Official sources

• KVKK — Law No. 6698 (official full text, mevzuat.gov.tr)
• KVKK — Kişisel Verileri Koruma Kurumu (Turkish DPA)
• GDPR — full regulation, article by article
• ePrivacy Directive 2002/58/EC — cookies, Art. 5(3)
• EDPB — guidelines on consent & cookies

Links to primary legislation for reference. PrivaScan is not affiliated with these bodies; this is information, not legal advice.

Related guides

• Stop Google Analytics from loading before consent (KVKK/GDPR) KVKK m.5 · GDPR Art. 6 · ePrivacy Art. 5(3)
• Gate Google Tag Manager behind consent KVKK m.5 · GDPR Art. 6 · ePrivacy Art. 5(3)
• Load the Meta (Facebook) Pixel only after consent KVKK m.5 · GDPR Art. 6 · Art. 26 (joint controller)
• Session recording (Hotjar, Clarity, Yandex) needs explicit consent KVKK m.5 · GDPR Art. 6 · Art. 9 risk

These guides cover automated checks for trackers, cookies and data flows. A full privacy review also needs legal input.