Real Cookie Banner is installed.
Does it block?
Real Cookie Banner holds back what a content blocker matches. A script no rule matches loads before consent or after “Reject”.
The most common causes
The service is set up, the banner asks, and data still goes out. Usually no content blocker matches the place where the script is added.
| What | EU reference |
|---|---|
| No content blocker for the script A content blocker works through a URL rule (for example *googletagmanager.com/gtag/js*) or a selector rule and is linked to a service. Under Cookies, Content Blocker, add a blocker whose rule matches the script's address. | Art. 5(3) Directive 2002/58/EC |
| Inline script without an address Code written straight into the theme has no URL. Use a keyword from the code as the rule, such as *window.dataLayer* or *fbq(*. | Art. 5(3) Directive 2002/58/EC |
| Tag in Google Tag Manager A tag without “Require additional consent” (Advanced settings) fires whatever was chosen in the banner. | Art. 5(3) Directive 2002/58/EC |
| The same service added twice A plugin adds the pixel, the theme adds it again. The blocker catches one, the other loads. | Art. 5(3) Directive 2002/58/EC |
| Google Fonts from the theme Easiest is to host them locally; then you need neither a service nor a blocker. | Art. 5(3) Directive 2002/58/EC |
Step by step
Measure
Open the page without consenting and note which services load; then click “Reject” and look again. The report does this for you, with the address of each service.
Add a content blocker
Under Cookies, Content Blocker, add a blocker, link it to the matching service and enter the script's address as a URL rule, for example *connect.facebook.net*.
Catch inline code
For code without an address, use a keyword from the code as the rule, such as *window.dataLayer* or *fbq(*.
Measure again
Check again without consent and after “Reject”. Only when the service is gone in both runs is it held back.
Questions
Why does a service load although it is set up in Real Cookie Banner?
The service alone holds nothing back. Only a content blocker whose rule matches the script's address or code stops it from loading.
What do I enter as the URL rule?
The address the script loads from, with an asterisk before and after, such as *googletagmanager.com/gtag/js*. The report gives this address for every service.
What a scan shows
It opens your page without consenting, notes every service with the address it loads from, then clicks Reject and measures again. That address is exactly the URL rule your content blocker needs. Free as well: check your email sender.
As of 11 October 2026. We name the reference so you can read it yourself; this is not legal advice.
More guides
- Cookies before consent: what ePrivacy requires
- Price information in web shops: unit price and shipping
- Accessibility checker for web shops: EAA and WCAG
- Cookiebot not blocking?
- Usercentrics not blocking?
- Borlabs Cookie not blocking?
- Complianz not blocking?
- Check your cookie banner yourself in three steps
- Google Fonts: which plugin loads them?
- Dark patterns in online shops: five patterns and the fix
- EU withdrawal button: what your shop needs
- Unit price and the “order with obligation to pay” button
- GPSR: manufacturer information in your web shop
- Google Consent Mode v2: how to check and set it up
- Cookie check for web shops: free, with the reject test