__tcfapi is defined before GPT with a real no-consent TC string from berlingske.dk.
GPT reads this during its init. In TC string mode we do NOT override limitedAds
manually — if GPT doesn't trigger lrm=50 from the TC string, the OMG LI should win. That confirms the fix.
__tcfapi to say GDPR doesn't apply + forces limitedAds=false + NPA=0.
Eliminates every privacy signal. If the LI still doesn't win here → the problem is structural (ad unit path, nvt=1, or LI targeting mismatch) — not CMP/lrm.
TC string mode: most realistic production test. Force lrm=50 OFF: belt-and-suspenders.
Force lrm=50 ON: confirms LI is blocked when lrm is active.
securepubads.g.doubleclick.net/gampad/ads —
check prev_scp for KVPs and these params:
ltd=1 = lrm=50 active |
nvt=1 = non-validated traffic (test domain not authorized) |
npa=1 = non-personalized ads |
gdpr=1 = GDPR applies.
In Full Bypass mode, ltd, gdpr, and npa should all be absent or 0.