{"page":"/tools/tcf-consent-string-decoder","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Check","Severity","Rule it applies"],"rows":[["Not base64url, or a field runs past the end","Error","The bit layout in the specification"],["Version other than 2","Error","TCF v1 strings have been invalid since 30 September 2020"],["IsServiceSpecific is 0","Error","The specification calls such strings invalid"],["Policy version below 4","Error","Invalid after 30 September 2023"],["Disclosed Vendors missing, created after 28 February 2026","Error","TCF 2.3 transition rule"],["Disclosed Vendors missing, created before 1 March 2026","Note","Valid until the user renews choices"],["Vendor has consent or legitimate interest but is not disclosed","Warning","TCF 2.3: vendors check their disclosed bit"],["Legitimate interest set for purposes 3 to 6","Warning","TCF 2.2 requires those bits to be 0"],["Policy version differs from the current GVL","Warning","The GVL notes say consent must then be re-established"],["Allowed Vendors segment present","Note","Legacy global scope, deprecated in 2021"]],"sourceUrls":[[],[],[],[],[],[],[],[],[],[]]}