What it means

Tracking scripts fire on page load and no consent banner exists (or it loads too late). Data flows before the visitor had any choice.

Why it matters

Consent must come first — § 25 TDDDG and Art. 6 GDPR. A banner that appears after the scripts already ran protects nobody, including you.

How to fix it

Add a consent management tool and wire every tracking script through it (most have a 'blocking' mode). Then re-test: open your app fresh and watch the network tab — nothing third-party should load pre-consent.