The pixel that goes in the night before
Here's a pattern we see every fourth quarter. It's a composite, not any one site. A holiday campaign needs a new pixel. The launch is tomorrow, the tag manager has a review step nobody has time for, and someone with site access pastes the pixel straight into the page template. The campaign goes out on time.
Black Friday is November 27 this year. Between now and then, that scene will repeat on a lot of sites.
Why nothing looks broken
Nothing errors. The banner still shows. The consent platform still records every choice a visitor makes. It just has no say over the new tag, because nobody wired that tag to it.
A consent platform governs the tags it knows about. A tag added straight to the template isn't one of them, so it fires whatever the visitor chooses. We covered the routes tags take around the platform in The Trackers That Never Pass Through Your Tag Manager. This post is about when that gap opens: the weeks when deadlines win.
What the index already shows
Of 47,420 sites scored between January and November 2026, 1,472 had a consent platform the scanner could see. In the report's words:
"195 sites tracked before the visitor touched the banner."
That's tracking before any choice was made, on sites that had already bought and installed a platform. The index records one recent scan per site, so this isn't a holiday figure. It's the baseline the rush starts from.
Rule one: every campaign tag goes through the container
No exceptions for deadlines. If a tag can't go through the tag manager and its consent settings in time, it waits for the next launch. A tag that skips the container is a tag the consent platform will never govern.
Agree this before the rush, in writing, with everyone who has access to the site template. Agencies and vendors included.
Rule two: rerun a refusal test the day after each launch
Testing at go-live isn't enough when tags keep arriving after it. The day after every campaign launch, run the refusal test again:
- Open a private browser window with developer tools on the Network tab.
- Load the site and click reject.
- Browse to the campaign landing page and one other page.
- Look for requests to analytics and advertising domains, especially any new ones.
The full version, with what to look for, is in Your Consent Banner Passed Launch Day. That Was The Easy Test..
Name one owner for the season
Rules without an owner don't survive November. Pick one person who signs off every campaign tag between now and January, and add four lines to the launch checklist:
- Added through the tag manager, not the template.
- Consent category assigned.
- Refusal test rerun the day after launch.
- A removal date for when the campaign ends.
The last line matters more than it looks. Holiday tags have a way of staying for years after the holiday.
Do it before the rush, not during it
If your site is already heading into a code freeze, Fix Your Tracking Before the Holiday Code Freeze covers what to change while you still can. The free privacy scan shows what fires on your site before a visitor answers, today.
Source: Rawsoft Website Privacy Index, 47,506 sites scanned and 47,420 scored, January to November 2026. The crawl covers restaurant, hospitality and independent ecommerce sites, so it is not a sample of the whole web.
Rawsoft provides technical implementation and analysis, not legal advice. Please confirm any regulatory interpretation with your counsel.