Developers

Quickstart

Start with the generated snippet, then verify endpoint decisions and downstream handoff. Complete enforcement depends on your stack.

Step 01

Create a site

Add the domain in the dashboard. Keep the domain aligned with the browser Origin that will call the endpoint.

Step 02

Accept the DPA

The product requires site-level DPA acceptance before embed generation and active signal recording.

Step 03

Install the generated snippet

Use the dashboard-generated snippet for the configured site. The public docs do not claim a separate mature SDK package.

Step 04

Send test requests

Verify both Sec-GPC and navigator.globalPrivacyControl paths, then inspect the dashboard evidence view.

Step 05

Wire downstream systems

Route HONORED decisions into your CMP, tag manager, CDP, server-side events, and ad partners.

Testing Checklist

  • Sec-GPC: 1 request returns a decision response for the configured domain.
  • navigator.globalPrivacyControl path reaches the same endpoint decision workflow.
  • Unknown origin returns a DENIED or error response instead of silently allowing processing.
  • Inactive site or missing DPA state blocks activation.
  • Dashboard evidence rows show expected source, outcome, and policy fields.
  • Downstream systems suppress the data flows your team has mapped to HONORED decisions.
API referenceGTM checklistSample evidence