C
m6.fr
58/100
Compliance score
Consent validity
20/25
Easy refusal
25/25
Transparency
12/25
Cookie behavior
1/25
Issues
4 3 critical 1 warning
2 non-essential cookie(s) deposited before any interaction
gmid (unknown), ucid (unknown)
2 non-essential cookie(s) persist after rejection
gmid (unknown), ucid (unknown)
8 tracker request(s) fired before any consent
Google Tag Services, Google DoubleClick, Google AdSense, Facebook SDK
Missing required information: "purposes"
The consent text does not mention purposes
Consent modal
Detected
Selector
.didomi-popup-containerGranular controls
✗ No
Privacy policy link
Pre-ticked checkboxes
✓ None
Buttons
| Type | Label | Font size | Contrast | Clicks |
|---|---|---|---|---|
| reject | Continuer sans accepter → | — | 21:1 | 1 |
| unknown | des tiers | 15px | 21:1 | 1 |
| unknown | tiers | 15px | 21:1 | 1 |
| unknown | Voir nos 119 partenaires | 15px | 21:1 | 1 |
| unknown | PARAMETRER MES CHOIX | 16px | 1.66:1 | 1 |
| accept | TOUT ACCEPTER | 16px | 12.63:1 | 1 |
Cookies
Before interaction
6
2 non-essential
| Name | Domain | Category | Description | Expiry | Consent |
|---|---|---|---|---|---|
didomi_token |
.m6.fr | strictly-necessary | This cookie contains consent information for personalized purposes and for personalized partners, as well as information specific to Didomi (e.g. user ID). | 6mo | No |
gig_canary |
cdns.eu1.gigya.com | unknown | Indicates whether the client is using the canary version of the WebSDK. | < 1 day | No |
gmid |
.login-gigya.m6.fr | unknown | User cookie. | 12mo | Required |
ucid |
.login-gigya.m6.fr | unknown | Unique computer identifier used for generating reports, and used by the Web SDK to get saved response. | 12mo | Required |
hasGmid |
.login-gigya.m6.fr | unknown | Internal cookie for the Web SDK | 6mo | No |
gig_bootstrap_3_hH5KBv25qZTd_sURpixbQW6a4OsiIzIEF2Ei_2H7TXTGLJb_1Hr4THKZianCQhWK
|
.m6.fr | unknown | If declined, user may be intermittently logged out. | 12mo | No |
After reject
7
2 non-essential
| Name | Domain | Category | Description | Expiry | Consent |
|---|---|---|---|---|---|
gig_canary |
cdns.eu1.gigya.com | unknown | Indicates whether the client is using the canary version of the WebSDK. | < 1 day | No |
gmid |
.login-gigya.m6.fr | unknown | User cookie. | 12mo | Required |
ucid |
.login-gigya.m6.fr | unknown | Unique computer identifier used for generating reports, and used by the Web SDK to get saved response. | 12mo | Required |
hasGmid |
.login-gigya.m6.fr | unknown | Internal cookie for the Web SDK | 6mo | No |
gig_bootstrap_3_hH5KBv25qZTd_sURpixbQW6a4OsiIzIEF2Ei_2H7TXTGLJb_1Hr4THKZianCQhWK
|
.m6.fr | unknown | If declined, user may be intermittently logged out. | 12mo | No |
didomi_token |
.m6.fr | strictly-necessary | This cookie contains consent information for personalized purposes and for personalized partners, as well as information specific to Didomi (e.g. user ID). | 6mo | No |
euconsent-v2 |
.m6.fr | unknown | This cookie contains the chain of consent for the IAB's Transparency and consent framework as well as the consent information for all IAB standards (partners and purposes). | 6mo | No |
After accept
13
| Name | Domain | Category | Description | Expiry | Consent |
|---|---|---|---|---|---|
gig_canary |
cdns.eu1.gigya.com | unknown | Indicates whether the client is using the canary version of the WebSDK. | < 1 day | No |
gmid |
.login-gigya.m6.fr | unknown | User cookie. | 12mo | Required |
ucid |
.login-gigya.m6.fr | unknown | Unique computer identifier used for generating reports, and used by the Web SDK to get saved response. | 12mo | Required |
hasGmid |
.login-gigya.m6.fr | unknown | Internal cookie for the Web SDK | 6mo | No |
gig_bootstrap_3_hH5KBv25qZTd_sURpixbQW6a4OsiIzIEF2Ei_2H7TXTGLJb_1Hr4THKZianCQhWK
|
.m6.fr | unknown | If declined, user may be intermittently logged out. | 12mo | No |
didomi_token |
.m6.fr | strictly-necessary | This cookie contains consent information for personalized purposes and for personalized partners, as well as information specific to Didomi (e.g. user ID). | 6mo | No |
euconsent-v2 |
.m6.fr | unknown | This cookie contains the chain of consent for the IAB's Transparency and consent framework as well as the consent information for all IAB standards (partners and purposes). | 6mo | No |
test_cookie |
.doubleclick.net | unknown | This cookie is set by DoubleClick (which is owned by Google) to determine if the website visitor's browser supports cookies. | < 1 day | No |
__gads |
.m6.fr | advertising | This cookie is used by Google for a variety of purposes (e.g., ensuring Frequency Caps work correctly). It includes AdSense if you have AdSense enabled. This cookie is associated with the DoubleClick for Publishers service from Google. Its purpose is to monitor the showing of advertisements on the site, for which the owner may earn some revenue. The main purpose of this cookie is targeting/advertising. | 13mo | Required |
__gpi |
.m6.fr | advertising | Collects information on user behaviour on multiple websites. This information is used in order to optimize the relevance of advertisement on the website. | 13mo | Required |
__eoi |
.m6.fr | unknown | This cookie is used for security authenticate users, prevent fraud, and protect users as they interact with a service. | 6mo | No |
_fbp |
.m6.fr | advertising | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers | 3mo | Required |
dicbo_id |
www.m6.fr | unknown | Collects statistics concerning the visitors' use of the website and its general functionality. This is used to optimize and compile reports on the website for comparison through a third party analysis service. | < 1 day | No |
Network trackers
37 8 before consent| Tracker | Category | Phase | URL |
|---|---|---|---|
| Google Tag Services | advertising | before consent |
https://www.googletagservices.com/tag/js/gpt.js
|
| Google DoubleClick | advertising | before consent |
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m20260…
|
| Google DoubleClick | advertising | before consent |
https://securepubads.g.doubleclick.net/pagead/managed/dict/m2026022…
|
| Google AdSense | advertising | before consent |
https://pagead2.googlesyndication.com/pagead/js/rum.js
|
| Google AdSense | advertising | before consent |
https://pagead2.googlesyndication.com/pagead/gen_204?id=ama_stats&s…
|
| Facebook SDK | social | before consent |
https://connect.facebook.net/fr_FR/sdk.js
|
| Facebook SDK | social | before consent |
https://connect.facebook.net/fr_FR/sdk.js?hash=1d43b1045098adf3ab81…
|
| Google AdSense | advertising | before consent |
https://pagead2.googlesyndication.com/pagead/ping?e=1
|
| Google AdSense | advertising | after-reject |
https://pagead2.googlesyndication.com/gampad/ads?pvsid=762805352401…
|
| Google AdSense | advertising | after-reject |
https://pagead2.googlesyndication.com/gampad/ads?pvsid=762805352401…
|
| Google AdSense | advertising | after-reject |
https://4a1e3b07473ddec5fc49fc6f8d362ece.safeframe.googlesyndicatio…
|
| Tracking Pixel | pixel | after-reject |
https://collect.tealiumiq.com/event
|
| Tracking Pixel | pixel | after-reject |
https://collect.tealiumiq.com/event
|
| Tracking Pixel | pixel | after-reject |
https://collect.tealiumiq.com/event
|
| Google AdSense | advertising | after-reject |
https://pagead2.googlesyndication.com/bg/7-JEQqPqQyEGd3nK0JmL7-npQZ…
|
| Google Tag Services | advertising | after-accept |
https://www.googletagservices.com/tag/js/gpt.js
|
| Google DoubleClick | advertising | after-accept |
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m20260…
|
| Google DoubleClick | advertising | after-accept |
https://securepubads.g.doubleclick.net/pagead/managed/dict/m2026022…
|
| Facebook SDK | social | after-accept |
https://connect.facebook.net/fr_FR/sdk.js
|
| Facebook SDK | social | after-accept |
https://connect.facebook.net/fr_FR/sdk.js?hash=1d43b1045098adf3ab81…
|
| Google AdSense | advertising | after-accept |
https://pagead2.googlesyndication.com/pagead/ping?e=1
|
| Google DoubleClick | advertising | after-accept |
https://cm.g.doubleclick.net/partnerpixels?gdpr_consent=CQgVeAAQgVe…
|
| Google DoubleClick | advertising | after-accept |
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=15503692787…
|
| Google DoubleClick | advertising | after-accept |
https://securepubads.g.doubleclick.net/gampad/ads?pvsid=15503692787…
|
| Google AdSense | advertising | after-accept |
https://a8e9d96076a113cd5b9a721e0f16f85d.safeframe.googlesyndicatio…
|
| Outbrain | advertising | after-accept |
https://amplify.outbrain.com/cp/obtp.js
|
| Facebook SDK | social | after-accept |
https://connect.facebook.net/en_US/fbevents.js
|
| Tracking Pixel | pixel | after-accept |
https://collect.tealiumiq.com/event
|
| Tracking Pixel | pixel | after-accept |
https://collect.tealiumiq.com/event
|
| Tracking Pixel | pixel | after-accept |
https://collect.tealiumiq.com/event
|
| Google AdSense | advertising | after-accept |
https://pagead2.googlesyndication.com/bg/7-JEQqPqQyEGd3nK0JmL7-npQZ…
|
| Outbrain | advertising | after-accept |
https://wave.outbrain.com/mtWavesBundler/handler/00244a93dd4b6c51b6…
|
| Outbrain | advertising | after-accept |
https://amplify.outbrain.com/topics
|
| Outbrain | advertising | after-accept |
https://tr.outbrain.com/unifiedPixel?au=false&bust=0028185788252543…
|
| Outbrain | advertising | after-accept |
https://tr.outbrain.com/cachedClickId?marketerId=00244a93dd4b6c51b6…
|
| Facebook SDK | social | after-accept |
https://connect.facebook.net/signals/config/1660821730768627?v=2.9.…
|
| Google AdSense | advertising | after-accept |
https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=252&…
|
IAB TCF
TCF v2 CMP 7Informational only — does not affect the compliance score.
| Property | Value |
|---|---|
CMP API (__tcfapi) |
✓ Present |
Locator frame (__tcfapiLocator)
|
✓ Present |
| Consent string cookie | — |
| CMP ID | 7 |
Decoded consent string
| Field | Value |
|---|---|
| Version | TCF v2 |
| Created | 2026-02-28 |
| Last updated | 2026-02-28 |
| CMP ID | 7 |
| CMP version | 1 |
| Consent language | EN |
| Vendor list version | 147 |
| TCF policy version | 5 |
| Service specific | Yes |
| Publisher country | AA |
No purposes with explicit consent.
Recommendations
3- 1 Do not set any non-essential cookie before consent. Gate the initialisation of third-party scripts on the acceptance callback.
- 2 Complete the modal information: processing purposes, identity of sub-processors, retention period, right to withdraw.
- 3 Remove or block non-essential cookies after rejection, and verify consent handling server-side.
Compliance checklist
12 rules 8 ✓ 3 ✗ 1 ⚠| Category | Rule | Status | Detail |
|---|---|---|---|
| Consent | Consent modal detected | ✓ Compliant | Detected (.didomi-popup-container) |
| No pre-ticked checkboxes | ✓ Compliant | None detected | |
| Unambiguous accept label | ✓ Compliant | TOUT ACCEPTER | |
| Easy refusal | Reject button at first layer | ✓ Compliant | Continuer sans accepter → |
| Reject ≤ clicks than accept | ✓ Compliant | Accept: 1 · Reject: 1 | |
| Button size symmetry | ✓ Compliant | Comparable sizes | |
| Transparency | Granular controls available | ⚠ Warning | No granular controls |
| Privacy policy in modal | ✓ Compliant | https://www.m6.fr/politique-de-confidentialite/cookies-partenaires | |
| Privacy policy on page | ✓ Compliant | https://www.m6.fr/politique-de-confidentialite/cookies-partenaires | |
| Cookie behavior | No non-essential cookie before consent | ✗ Non-compliant | 2: gmid, ucid |
| Non-essential cookies removed after reject | ✗ Non-compliant | 2 persisting | |
| No tracker before consent | ✗ Non-compliant | 8 tracker(s) |