Independently verify TRUENDO in United Kingdom

The United Kingdom test

Check whether an EU-only configuration leaves the UK on a fallback. Compare the UK visitor rule with the EU rule and the global fallback. If your policy uses a storage or measurement exception, record its conditions separately before deciding which browser activity should stop.

Set expected behavior with your policy owner before testing. Business scope, data purposes, and exceptions affect that expectation. Use the ICO: online tracking guidance as a policy reference; this procedure checks browser behavior and does not certify legal compliance.

CookieTrail offers a United Kingdom country route (uk). Confirm the CMP's selected rule in the evidence before interpreting the result.

Run the same paths from a verified visitor

1. Confirm routing. Record the browser exit and the regional rule TRUENDO actually selected. Browser language, timezone, and a DevTools location override are not proof of IP-based routing.
2. Start clean. Use separate new sessions for first load, acceptance, and rejection or opt-out. Begin storage and network capture before page load; record the capture window and deployed version.
3. Read the decision. Save the banner controls used, the category or purpose values, and any Consent Mode mapping. Use this installation’s documented readback.
4. Compare and repeat. Compare observed tools with the expected policy, investigate a mismatch, and rerun the same URL, regional rule, and paths after deployment.

Read TRUENDO’s saved state

Check TRUENDO's TCF identity and the site's purpose mapping.

1. Record the TRUENDO script or plugin version, configuration identifier, and published regional rule. Check the deployed site rather than a dashboard preview.
2. If this installation enables the IAB Transparency and Consent Framework (TCF), compare its returned cmpId with 304, the ID in Google's inventory. An absent TCF API may simply mean TCF is not enabled.
3. Map each saved category or purpose to the site's actual tools. Compare those tools' storage and requests before and after the visitor's decision.

(() => {
  if (typeof window.__tcfapi !== "function")
    return { status: "TCF unavailable or disabled" };
  window.__tcfapi("addEventListener", 2, (data, ok) => {
    if (!ok || !data ||
        !["tcloaded", "useractioncomplete"].includes(data.eventStatus))
      return;
    console.log({
      cmpId: data.cmpId,
      expectedCmpId: 304,
      identityMatches: data.cmpId === 304,
      cmpStatus: data.cmpStatus,
      eventStatus: data.eventStatus,
      gdprApplies: data.gdprApplies,
      purposeConsents: data.purpose?.consents,
      purposeLegitimateInterests: data.purpose?.legitimateInterests
    });
    window.__tcfapi("removeEventListener", 2,
      () => {}, data.listenerId);
  });
})()

Compare state with observed activity

A saved denial can coexist with a tag that ran too early or never received the update. Trace the affected integration and its event timing. A network request alone does not prove a violation: Google’s advanced Consent Mode can send cookieless requests.

Unreadable state, unverified routing, or a missing capture makes the result inconclusive. Browser captures also cannot establish what a server-side integration does. Keep that investigation separate and compare evidence after the fix.