analytics_storageMeasurement
Allows setting analytics cookies, such as those of Google Analytics, to count visits and understand browsing.
If denied: Analytics sets no cookies; in advanced mode, it sends cookieless signals for modeling.
Complete guide · updated November 2026
What changes, who needs it, how to set it up and the mistakes that make a site lose measurement and ads in Europe. With ready-made examples and ConsentMode's automatic check.
What it is
The visitor chooses in the banner what they accept: measurement, ads, use of data for ads and personalization. Consent Mode is the way to tell Google tags (Analytics, Google Ads, AdSense, Ad Manager, Floodlight) about that choice, in real time, before any cookie is set.
With the answer in hand, each tag changes its behavior on its own. If the person accepted, the tag sets cookies and measures normally. If they declined, the tag sets nothing and, in advanced mode, sends only a cookieless signal, which Google uses to estimate the conversions that were no longer measured.
Version 2 arrived in 2024 with two new signals, ad_user_data and ad_personalization, required by the European Union's Digital Markets Act (DMA). Without them, Google does not use the data of European visitors to build audiences, do remarketing or personalize ads.
The signals
Each can be granted or denied. The last two are the new ones in version 2.
analytics_storageAllows setting analytics cookies, such as those of Google Analytics, to count visits and understand browsing.
If denied: Analytics sets no cookies; in advanced mode, it sends cookieless signals for modeling.
ad_storageAllows setting advertising cookies, used to measure conversions and limit how many times an ad appears.
If denied: no ad cookie is set or read.
ad_user_datanew in v2Says whether the visitor's data can be sent to Google for advertising purposes, such as measuring a purchase made after a click.
If denied: that person's data does not enter ad measurement or audience lists.
ad_personalizationnew in v2Says whether the person accepts seeing ads based on what they did before, such as remarketing and similar audiences.
If denied: the person is not included in remarketing and only sees non-personalized ads.
The two modes
Both respect the visitor's choice. The difference is in what happens before the response and after a refusal.
Google tags only load after the person responds to the banner. If they decline, nothing is sent to Google.
Tags load from the start with everything denied. While there is no consent, they send only cookieless signals that do not identify the person.
Rule of thumb: if the site invests in Google Ads or depends on conversion reports, advanced mode is usually worth it. If the site only shows AdSense ads and makes little use of Analytics, basic mode is enough.
Timeline
The dates that most affect those with visitors in Europe.
The ad_user_data and ad_personalization signals arrive, to meet the European Union's Digital Markets Act.
To show personalized ads from AdSense, Ad Manager and AdMob in the European Economic Area and the United Kingdom, the site now needs a CMP certified by Google and integrated with the IAB TCF.
Without the new signals, Google stops using EEA visitor data for audiences, remarketing and personalization in Google Ads.
The certified CMP requirement for personalized ads now also applies to visitors from Switzerland.
The certified CMP requirement now applies to connected TV inventory. In the same month, advertisers reported that accounts without v2 lost measurement features for EEA and UK traffic.
Who needs it
If the site receives visits from Europe, the United Kingdom or Switzerland, it needs a certified CMP with TCF to keep personalized ads. Consent Mode completes the setup when the site also uses Analytics or Google Ads.
Those who measure conversions or build audiences with European visitors must send the 4 signals. Without them, campaigns lose remarketing and part of the measurement.
It is not mandatory for visitors from other countries, but the setup must use regions. Denying everything to the whole world, or showing the European message in Brazil, drops measurement and ads for no reason.
How to implement
// 1. Padrão: negado no EEE, Reino Unido e Suíça
gtag('consent', 'default', {
ad_storage: 'denied',
ad_user_data: 'denied',
ad_personalization: 'denied',
analytics_storage: 'denied',
region: ['AT', 'BE', 'DE', 'ES', 'FR', 'IT', 'PT', … 'GB', 'CH'],
wait_for_update: 500
});
// 2. Resto do mundo
gtag('consent', 'default', {
ad_storage: 'granted',
ad_user_data: 'granted',
ad_personalization: 'granted',
analytics_storage: 'granted'
});
// 3. Quando o visitante escolhe (a CMP faz isso)
gtag('consent', 'update', {
ad_storage: 'granted',
ad_user_data: 'granted',
ad_personalization: 'denied',
analytics_storage: 'granted'
});
The full list of regions has the 27 European Union countries, plus Iceland, Liechtenstein, Norway, the United Kingdom and Switzerland. Check with your legal team whether other countries in your audience also require prior consent.
Common errors
All appear on real sites and go unnoticed, because the banner keeps appearing normally.
gtag.js or GTM load before the default command. In that gap, cookies were already set without consent.
The site sends ad_storage and analytics_storage, but not ad_user_data and ad_personalization. For Google, it is as if the European visitor had declined personalized ads.
Without regions, visitors from Brazil or the United States also start with everything denied. Measurement drops with no legal requirement for it.
The CMP shows the TCF message to people who are not in Europe. This gets in the way of browsing and reduces the number of visitors who see ads.
There is only an Accept button, or Decline is hidden on another screen. In Europe, declining must be as easy as accepting.
An ordinary cookie plugin is not enough for personalized ads in the EEA, the UK and Switzerland. Without a certified CMP, AdSense and Ad Manager show only limited or non-personalized ads.
In ConsentMode
Frequently asked questions
No. The banner (the CMP) asks and stores the choice. Consent Mode only carries that choice to Google tags. One does not work without the other.
If you have visitors from Europe, the United Kingdom or Switzerland and use Google ads or Analytics, yes, for those visitors. For the Brazilian audience, the LGPD also asks for transparency, but Google does not require Consent Mode. Use regions so you do not deny everything in Brazil.
Not by itself. What reduces revenue is not having a certified CMP in the EEA, UK and Switzerland, or denying consent worldwide unnecessarily. Set up with regions, the rest of the traffic goes on as normal.
TCF is the industry standard (IAB Europe) that certified CMPs use to record consent and pass it to all ad partners. Consent Mode is Google's way of receiving that information in its own tags. A certified CMP usually takes care of both.
Open the site in an incognito tab, use Google Tag Assistant and see whether the default appears before the tags and the update right after the click on the banner. Or run an audit in ConsentMode, which does this check as a visitor from Europe and from outside it.
It sends cookieless signals that do not identify the person, but the interpretation varies by country. Explain this use in the privacy policy and validate with your legal team before turning it on.
The audit reads the whole site like Google, without changing anything, and shows exactly what to fix.
Official sources: About consent mode (Google Ads) · Consent Mode guide for developers · European regulations for publishers (AdSense) · Google-certified CMPs.