Real Script & Network Beacon Blocking Before Consent
Purpose: Prevent data from leaving the browser to Google, Meta, TikTok, or Hotjar before the visitor makes a choice.
How it works: Rewrites known tracker scripts to text/plain with data-isr-category attributes and intercepts browser fetch, XMLHttpRequest, and navigator.sendBeacon calls until the required consent category is granted.
Google Consent Mode v2 & Optional Strict GTM Gate
Purpose: Keep Google Ads and GA4 conversion modeling accurate while respecting user privacy choices.
How it works: Sets default denied states for ad_storage, analytics_storage, ad_user_data, and ad_personalization prior to container load, updating them dynamically on user interaction without reloading the page.
Cryptographic Consent Proof Log with 0 PII
Purpose: Maintain verifiable proof of consent without creating a new database of personal data.
How it works: Stores only an anonymous UUID v4, policy version string, chosen categories, and an HMAC-SHA256 signature in {prefix}isr_consent_log. Zero IP addresses, names, emails, or phone numbers are ever recorded.
Privacy Policy Hash Monitor & IS 5568 Accessibility
Purpose: Alert admins when legal text changes and ensure full keyboard/screen-reader accessibility.
How it works: Computes a SHA-256 hash of your Privacy Policy page and displays an admin notice when edits occur so you can bump the consent version. Accept and Essential-Only buttons carry equal visual weight in both RTL and LTR.