Google Analytics Consent, Privacy and Data Retention Review (Defensive)
Check how analytics handles consent and personal data.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review privacy settings for Google Analytics as a defensive review of my own site. Consent banner behaviour, consent mode settings [VERIFY], data retention period, IP and device data handling as described, user-identifying parameters in events or URLs, links to advertising products, and who has access: [PRIVACY_SETUP]. Organise findings by flow: what is collected, when it fires relative to consent, where it is stored and for how long, who can see it, and what it is shared with. Check for personal data in URLs or event parameters (email addresses, names), tags firing before consent where it is required, long retention without need, advertising features enabled without disclosure, and broad access. Rate each by risk and state a question for the privacy owner and legal adviser. Recommend removing personal data from URLs, with an example of a better pattern. Test protocol table with Step, Action, Expected observation, Observed and Personal data seen: visit with no choice made, decline all, accept all, change the choice later, then compare requests sent and events recorded in a clean browser using the developer tools [VERIFY]. Draft a record of decisions (retention period and why, advertising features on or off and why, user access list reviewed) with a yearly review. Do not state what the law requires; recommend professional review. Flag any step you are unsure of [VERIFY].
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into ChatGPT, Gemini, Claude or another assistant.