Doublick extension creates cookie despite no consent

[nouchy]

https://github.com/ampproject/amphtml/blob/11948477e786ca04b70f35290b4fcecebd19b803/extensions/amp-ad-network-doubleclick-impl/0.1/amp-ad-network-doubleclick-impl.js#L974

When no consent is given in Europe, despite the presence of TCF V2.2 and TC String in the ad call, the extension accesses/creates the _ga cookie, which it should not, because of the getOrCreateAdCid function.

[erwinmombay]

@nouchy thanks for the report. we'll prioritize this

[ychsieh]

I am assuming the consent here is the one you implement using amp-consent. Did you try blocking amp-analytics using https://amp.dev/documentation/components/amp-consent#basic-blocking-behaviors?

[nouchy]

I am assuming the consent here is the one you implement using amp-consent. Did you try blocking amp-analytics using https://amp.dev/documentation/components/amp-consent#basic-blocking-behaviors?

Obviously yes, for the GA4 module :) That's why it's such a shame to have this "_ga" cookie created by the Doubleclick module, which is blocked manually :

[erwinmombay]

@nouchy thank you so much for this report.

Found the culprit of the bug in the TCF2.2 implementation. https://github.com/ampproject/amphtml/commit/93c1e3123e8e896118acea75ddc71854b4bbd8e0

Working on a fix right now.

[erwinmombay]

following up. so I was incorrect that the TCF 2.2 implementation was the bug. I'm consulting with some internal teams to make the change safely

[erwinmombay]

update on this, we have an implementation that is in review