Consent Mode v2 Under LGPD, With the Rate Measured

A Brazilian site that copies a German cookie banner typically gives up between 20 and 40 percent of its measurable traffic for no legal reason. LGPD is not GDPR. The ANPD has never required opt-in for every cookie category, and much first-party analytics can rest on legitimate interest with a documented assessment, while advertising personalisation cannot. The banner you show decides how much data you have, and most banners in this market were configured by someone copying a European default nobody re-examined. The decision that matters: Basic or advanced consent mode. Basic withholds the Google tags entirely until consent, so denied users contribute nothing at all. Advanced loads them in a denied state and sends cookieless pings, which is what makes behavioural modelling possible. Modelling needs volume: Google's documented floor is 1,000 daily events with analytics_storage denied across seven days before it will model anything, and beneath that threshold you have chosen basic without knowing it. We bring the recommendation and the exposure of each option in writing, for your counsel to sign. We do not make that call for you and we do not present it as a purely technical choice, because it is not. Implementation: All four signals wired properly. analytics_storage, ad_storage, ad_user_data and ad_personalization, set as defaults before any tag fires, then moved with the update call on the user's choice rather than by reloading the page. Region-specific defaults, so Brazilian, European and US visitors each get the treatment their jurisdiction requires instead of the strictest one applied everywhere out of nervousness. The signal has to survive the trip to the server. Where server-side tagging is in play, consent state travels with the event and the destination tags check it there, because a consent decision enforced only in the browser stops existing the moment the data leaves the browser. Then the part most implementations skip. Consent rate becomes a reported metric, split by page type, device and traffic source, sitting next to modelled versus observed conversions in GA4. When a banner change costs eleven points of consent rate, you should see it within a day, in the same place you look at revenue. Excluded: Legal advice. We are not your counsel, we do not draft your privacy notice and we do not perform the legitimate interest assessment. We implement what your legal position states, and we ask for that position in writing before starting. The CMP licence. We work with Cookiebot, OneTrust, Osano and Didomi, and with in-house banners where the requirement is simple. The subscription is yours and we hold no reselling arrangement with any of them. Retrospective repair of data collected without consent. That is a legal question about deletion, not an analytics one. Not for: Anyone who wants a banner engineered so that consent is technically obtained and practically unavoidable. Reject buried three clicks deep, pre-ticked boxes, a legitimate interest tab concealing forty vendors. The ANPD has been issuing sanctions since 2023, exposure runs to 2 percent of Brazilian revenue capped at fifty million reais per infraction, and we would be handing you that in exchange for a few points of consent rate. Anyone who has already bought a CMP for reasons they cannot articulate and wants it made to work regardless. Half the failures we are called in to fix are the tool rather than the configuration, and if replacing it is off the table, this becomes a repair we cannot finish.