{"page":"/blog/gpp-tcf-implementation","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Field","Value","What it tells the buyer"],"rows":[["regs.gdpr","1","GDPR applies; read the TC String before using any identifier"],["user.consent","CQtaoIAQ… (core) .IF5wAw… (Disclosed Vendors)","A TCF 2.3 string: the part after the dot is the mandatory Disclosed Vendors segment"],["Decoded core","Created 9 November 2026; GVL 184; policy version 5; purposes 1, 2, 3, 4 and 7 consented; legitimate interest transparency for 2, 7, 9 and 10","Matches the live vendor list on 5 November 2026 (GVL v3)"],["Decoded vendors","Consent for vendors 52 and 755; legitimate interest for 755; disclosed vendors 10, 52 and 755","Vendor 10 was disclosed but carries neither a consent nor a legitimate interest signal"],["regs.gpp","DBABM header, then the same TC String","Header DBABM declares exactly one section, ID 2"],["regs.gpp_sid","[2]","The EU TCF section is the one in force"],["device.ip","Last octet zeroed","A common minimisation step for EU traffic"]],"sourceUrls":[[],[],["https://vendor-list.consensu.org/v3/vendor-list.json"],[],[],[],[]]}