Google Consent Mode v2
Default-deny matrix, region scoping and the update flow.
The seven signals
Consent Mode v2 uses seven boolean storage signals: ad_storage, analytics_storage, ad_user_data, ad_personalization, functionality_storage, personalization_storage, security_storage. Each is either granted or denied.
Default-deny in EU/EEA/UK
For these regions we ship a default-deny matrix: granted for security + functionality, denied for analytics, ads and personalization until the visitor opts in.
The default-deny matrix is a sensible starting point but requires legal validation for your specific use case. See the compliance notes.
Update flow
When a visitor decides, the loader maps their category choices to consent signals using the per-category googleConsentMapping stored on cookie_categories, then calls gtag('consent', 'update', …).