Does Taboola require cookie consent?

Consent is normally required when the tracker stores or accesses non-essential device information, collects analytics identifiers, powers advertising, records sessions, or transmits personal data before a user has opted in.

How does ConsentLens detect Taboola?

ConsentLens checks known network domains, JavaScript globals, script source patterns, and inline script snippets, then compares the matched tracker against the page load timing and consent banner state.

How often does Taboola fire before consent?

In the latest public ConsentLens scan dataset, 0% of sites where Taboola was detected fired it before consent.

MarketingHigh consent risk

Taboola GDPR compliance and consent risk

Taboola is a content discovery and native advertising platform. This page combines ConsentLens detection rules with live public scan data so you can see how often Taboola appears, whether it fires before consent, and which compliance issues it tends to create.

Scan your website View global tracker stats

Of scanned sites

1 of 444 public sites include Taboola.

Fire before consent

0 detected sites fired it before a user could consent.

Seen after rejection

No post-rejection evidence found in public scan data.

HIGH

Consent risk

Marketing tracker classified from ConsentLens tracker database.

How ConsentLens detects Taboola

Domains

cdn.taboola.com
trc.taboola.com

Globals

window._taboola

Script patterns

taboola.js

ConsentLens combines these signals with request timing. If Taboola sends a data request during the first 500ms of page load, it is treated as a pre-consent tracking risk and connected to the relevant scan evidence.

Common compliance issues

Advertising / remarketing trackers detected

Pre-consent tracking guide Cookie consent requirements How scoring works

Example public scans detecting Taboola

Domain	Score	Consent timing
iqbrainpro.com	20/100	No early fire