Google

Overview

Google is the dominant provider of web infrastructure, analytics, advertising, and security tools used across virtually every category of website. Its products span essential site functionality (reCAPTCHA, Fonts), analytics (Google Analytics), advertising (Google Ads, AdSense), and tag management (Google Tag Manager). Because Google's ecosystem is so extensive, scripts identified generically as "Google" may serve any combination of these purposes.

What This Script Does

Google scripts identified under this generic vendor entry may include any of the following:

• Google Analytics (gtag.js / analytics.js): Tracks page views, sessions, user demographics, traffic sources, and conversion events. Sets _ga, _gid, and other cookies to identify returning visitors.
• Google Ads (conversion.js / remarketing): Fires conversion pixels and builds remarketing audiences. Sets cookies to correlate ad clicks with on-site actions.
• Google Tag Manager (gtm.js): Container script that loads other tags. No data collection of its own, but acts as the loader for analytics and marketing tags.
• reCAPTCHA (recaptcha/api.js): Bot detection that analyzes browser behavior. Sets cookies to assess human vs. bot probability.
• Google Fonts: Loads typeface files from Google's CDN. No cookies, no tracking.
• Other Google APIs: Maps, YouTube embeds, Firebase, Google Sign-In, etc.

Collectively, Google scripts may set dozens of cookies including _ga, _gid, _gat, _gcl_au, _gcl_aw, IDE, ANID, NID, 1P_JAR, CONSENT, and DSID. These range from first-party analytics cookies to third-party advertising cookies with lifespans from session to 2+ years. Network requests go to google-analytics.com, googletagmanager.com, googleads.g.doubleclick.net, google.com, and many other Google domains.

Consent & Compliance

Google scripts span all four consent categories: essential, functional, analytics, and marketing.

• Essential: reCAPTCHA (bot protection) and Google Tag Manager (tag loader with no inherent data collection) can be classified as essential.
• Functional: Google Maps, Google Sign-In, and YouTube embeds provide functional features.
• Analytics: Google Analytics collects behavioral data and sets tracking cookies.
• Marketing: Google Ads conversion tracking and remarketing tags are advertising tools.

Under GDPR and ePrivacy, analytics and marketing Google scripts require explicit opt-in consent. Essential scripts (reCAPTCHA) may load without consent. Google's own consent mode (GCM) provides a framework for adjusting tag behavior based on user consent signals, sending cookieless pings when consent is denied.

Under CCPA, Google's advertising scripts involve the "sharing" of personal information for cross-context behavioral advertising, triggering opt-out requirements. Google's Restricted Data Processing mode limits data use when activated.

Google Consent Mode v2 is required for sites using Google advertising products that target EEA users. It sends ad_storage, analytics_storage, ad_user_data, and ad_personalization consent signals to Google's tags.

Should You Block This Without Consent?

Conditional. Google's ecosystem spans essential and non-essential functions. Break the generic "Google" vendor into its specific products and apply consent rules per product:

• reCAPTCHA, Google Tag Manager, Google Fonts: No blocking required (essential/functional).
• Google Analytics: Block until analytics consent is obtained.
• Google Ads, remarketing, DoubleClick: Block until marketing consent is obtained.
• Google Maps, YouTube, Sign-In: Load as functional, but be aware that some set cookies that may require consent.

If you cannot distinguish which Google scripts are loading under this generic entry, the safest approach is to block until consent is granted, as the advertising and analytics components are the most commonly deployed.