Consent banners and non-US visitors

How the tag treats each visitor

• US visitors: person-level and company-level matching run by default.
• Visitors outside the US: nothing is stored or matched unless your banner records consent. With consent, we identify the company only, never the person.
• Global Privacy Control: if the browser sends it, the tag sends nothing at all.

Telling the tag about consent

When a visitor accepts marketing or analytics cookies, call:

wholayer("consent", true);

If they decline or withdraw, call wholayer("consent", false).

Require consent everywhere

If you'd rather ask everyone, including US visitors, set the site's consent mode to Require consent everywhere under Sites. Person-level matching then only runs for US visitors who consented.

Letting visitors opt out of WhoLayer on your site

Call wholayer("optout"). It sets a _wl_opt cookie for five years and the tag stops sending anything from that browser.