Cookies and electronic marketing

Reviews tracking and marketing flows against their actual consent, purpose and local legal context.

cookies-electronic-marketing

See how it helps

When is it useful?

Use before changing consent banners, analytics collection or promotional email behavior.

What does it help you do?

Inventories browser storage, server tracking and the purposes they serve.
Distinguishes necessary functionality, optional tracking and transactional versus promotional messages.
Checks consent withdrawal, unsubscribe behavior and tracking pixels for specialist review.

Try asking this

Review our signup analytics and newsletter journey; show what runs before consent and after withdrawal. Capture requests before acceptance, after refusal and after withdrawal. Produce an evidence table for review rather than inferring compliance from the banner's appearance.

Detailed documentation

Read the skill’s original instructions, examples and checks in their authored language.

Details…Show less

Cookies & Electronic Marketing

Align cookie disclosures, consent management behavior, and direct marketing flows with ePrivacy rules (such as Art. 5(3) ePrivacy Directive and national implementations) and GDPR consent standards.

Terminal Equipment Storage & Tracking Audit

Inventory Every Client-Side & Server-Side Tracker:
- Inspect codebase scripts, tag managers, SDKs, cookies, localStorage, sessionStorage, IndexedDB entries, and tracking pixels.
- Record for each item: exact name/key, provider (first-party vs. third-party), technical purpose, lifespan/expiry, and data recipients.
Strictly Necessary vs. Consent-Required Classification:
- Strictly necessary (exempt from prior consent): Session authentication, CSRF security tokens, load balancing, shopping cart state, and storing the user's own privacy/cookie preference.
- Requires prior opt-in consent: Analytics and telemetry not exempted by strict national rules, session replay, A/B testing, advertising/retargeting pixels, social media embeds, and cross-site attribution.
Consent Banner & Technical Enforcement:
- Verify in code that non-essential scripts, SDKs, and cookies do not load or fire before the user grants affirmative opt-in consent.
- Check banner UX against dark-pattern prohibitions (EDPB Guidelines 03/2022):
  - Equal visual prominence and single-layer symmetry for "Accept" and "Reject / Necessary only" actions.
  - No pre-ticked boxes for non-essential categories.
  - No deceptive color contrast or nudging, and a persistent link/control allowing users to withdraw or change consent at any time with equal ease.

Electronic Direct Marketing & Communications

Separate Transactional from Marketing Messages:
- Transactional / service messages: Password resets, security alerts, billing receipts, mandatory contract updates — sent without marketing consent, must remain free of promotional upsell.
- Direct marketing (newsletters, promos, product announcements): Requires prior opt-in consent (with unbundled checkbox and double opt-in where required or recommended) or verified compliance with narrow statutory "soft opt-in" conditions for existing customers' similar products.
Unsubscribe & Email Tracking Pixels:
- Verify that every marketing message contains a functional, frictionless, free-of-charge unsubscribe mechanism (including one-click List-Unsubscribe headers) that immediately updates suppression lists.
- Audit whether outbound emails embed open/click tracking pixels; disclose them accurately and verify whether consent is required in target jurisdictions.

Included files 1

SKILL.md