Skip to content

Does Convultra work with a consent management platform?

Yes. When a visitor has declined tracking, the Convultra script does not run, so nothing is recorded or forwarded for them.

article |3 min |Updated Sep 2026
On this page · 5 sections

Yes. You keep your existing consent management platform (CMP), banner and consent categories; Convultra reads the visitor’s decision rather than asking for consent itself. When a visitor has declined tracking, the Convultra script does not run at all: no pageview, no conversion and no user data is recorded for them, and so nothing is forwarded to any ad platform.

What the script checks

Before it initializes, the script looks for a declined state in any of these places:

  • Your CMP’s dataLayer entry. A dataLayer item with consent: false, which is what most consent banners push when a visitor declines.
  • A cookies_declined cookie. If your banner sets cookies_declined=true when a visitor declines, Convultra honors it.
  • Do Not Track. A browser with Do Not Track switched on is never tracked.

If any of these says the visitor declined, the script stops before recording anything. If none of them does, tracking runs as normal. The check happens when the script initializes, so a visitor who accepts after the page has loaded is tracked from their next page load.

What this means for your data

  • A declined visitor produces no event at all. They do not appear in visitor counts, in the Conversions table or in the delivery log, and there is no “not forwarded” row to look for. The not_forwarded delivery status in the API covers conversions that were recorded but had no paid source to send them to, not declined visitors.
  • Conversions from visitors who accepted are forwarded as usual, with any customer data hashed with SHA-256 before it is sent to a platform. See Enhanced conversions.

Setting it up

  1. Install your CMP as you normally would, and make sure it records a denial in one of the ways above. If it does not push a consent: false entry to the dataLayer, have it set the cookies_declined=true cookie when a visitor declines.
  2. Load the CMP before the Convultra script, so the decision is already on the page when the script initializes. If you use Google Tag Manager, keep the consent initialization tag first in the firing order, ahead of the Convultra tag.
  3. Install Convultra as usual. See Installing the tracking script.
  4. Test with a fresh browser profile: decline consent, complete a test conversion, and confirm that nothing appears in Conversions. Then accept consent and repeat; the conversion should appear and show as Sent once forwarded.
  • Personal data used for enhanced conversions is hashed with SHA-256 before it is sent to any ad platform.
  • The REST API and MCP server never return IP addresses, user agents, fingerprints, coordinates or your site’s own user IDs, under any scope.
  • You can drop internal traffic entirely with IP exclusions.

Your responsibilities

Convultra gives you the controls; the consent flow itself, the legal basis for tracking and the categories you present are yours to define. If you need a data processing agreement or have questions about how consent is handled, email privacy@convultra.com. Convultra is a trading name of Further Forward Innovation Ltd, a company registered in England and Wales.

Next in Data and accuracy Deduplication →