What it means

An analytics or advertising script (Google Tag Manager, Meta Pixel, TikTok, Hotjar …) is embedded and sends visitor data to its vendor.

Why it matters

Processing personal data needs a legal basis (Art. 6 GDPR). For marketing trackers that basis is almost always consent — which most builder templates never ask for.

How to fix it

Decide per tool: remove it, replace it with an EU/cookieless alternative, or gate it behind a real consent banner that blocks the script until the visitor agrees.