Every Google-Certified CMP Failed the Opt-Out Audit (All 11 of Them)
webXray scanned 7,634 California websites in March 2026 and ran every page twice: once with the Global Privacy Control opt-out signal enabled, once without. Eleven Google-certified consent management platforms were in the sample. All 11 failed. Advertising cookies fired on every site regardless of the GPC flag, exposing roughly