Also known as: CMP, Cookie Consent Platform
A Consent Management Platform is software that collects, records and enforces users' consent to tracking and data processing, typically via the cookie banner. It stores the legal proof that a user agreed before any tracking fires.
When a visitor lands, the CMP presents a consent banner and blocks tracking scripts and pixels from running until the user makes a choice. It records that choice, what was consented to, when, and in what form, as auditable proof, then releases only the categories of tags the user allowed. Affiliate tracking pixels sit in the categories that require opt-in, so they fire only for consented visitors.
This keeps a partner's tracking lawful in GDPR and similar regimes, but it also means conversions are only countable for the share of users who consent. A well-designed, clearly worded banner lifts legitimate opt-in rates and therefore trackable conversions, while a poorly configured one that fires tags early exposes the operation to enforcement and, once corrected, reveals a sudden fall in the conversions that were being over-counted.
The CMP loads before any tracking script is allowed to run.
The user is presented with clear tracking and cookie choices.
Pixels and analytics tags are held until the user decides.
The choice is logged as auditable legal proof with a timestamp.
Only the tag categories the user consented to are permitted to fire.
Affiliate pixels fire only for consenting users and count accordingly.
Why it matters for partnership: Affiliate tracking depends on cookies and pixels, which under GDPR and similar laws require valid consent. A CMP keeps a partner's tracking lawful, and its configuration directly affects how many users can be tracked and therefore how many conversions are countable.
An affiliate targeting EU traffic deploys a CMP so its tracking pixels only fire after a visitor accepts cookies, keeping the operation GDPR-compliant while still capturing consented conversions.
| Attribute | Tags firing before consent | CMP-gated tracking |
|---|---|---|
| Legal status | Breach under GDPR/ePrivacy | Lawful basis established |
| Reported conversions | Inflated, over-counted | Limited to consented users |
| Risk | Enforcement and fines | Compliant but lower coverage |
Design the consent flow to maximise legitimate opt-ins without dark patterns; a well-worded banner can lift consent rates and thus trackable conversions.
Firing tracking tags before consent is captured, which is both a compliance breach and, once fixed, a sudden drop in reported conversions.
It can reduce trackable conversions to only consented users, but it is the lawful basis for tracking at all in regulated regions.