Skip to content
Sealmetrics
Data Quality

Consent Mode: What GA4 Measures and What It Models

9 min readBy Rafa Jiménez

With Consent Mode, GA4 measures the visitors who accept analytics cookies. For the ones who decline, advanced mode sends cookieless pings, and GA4 estimates their users, sessions and new users with behavioural modelling once the property meets Google's thresholds. Those estimates appear in Blended reports, not in the BigQuery export, and they do not restore the source of each visit.

Key Takeaways

  • Basic mode sends nothing to Google when consent is refused. Advanced mode sends cookieless pings: timestamp, user agent, referrer, consent state and ad-click identifiers.
  • GA4 models users, sessions and new users only above a threshold: 1,000 events a day with analytics storage denied for 7 days, and 1,000 daily users with it granted for 7 of the previous 28 days.
  • Modelled data shows under the Blended reporting identity and is absent from the BigQuery export, audiences, retention reports and sequence segments.
  • Google Ads models conversions separately, in its own Conversions column, above 700 ad clicks over seven days per country and domain grouping.
  • Modelling estimates totals. It does not give each unconsented visit back its channel, which is what budget decisions need.

Consent Mode is often described as the thing that “recovers” the data the cookie banner takes away. That description is half right, and the wrong half is expensive. Consent Mode is a way for your banner to tell Google's tags what the visitor chose. What happens to the visitors who said no depends on how it is implemented, on how much traffic you have, and on which report you are looking at.

Incapto's team described the result precisely: “Consent Mode left us with a structural blind spot: we knew there was traffic we were not seeing, but we had no way to size it.” When they ran GA4 with Consent Mode next to Sealmetrics on their Shopify store for 48 days, GA4 did not record 29% of visits or 45% of pageviews. This piece explains which part of that gap Consent Mode can estimate, and which part it cannot.

The four signals, and the two implementations

Consent Mode carries four consent types: ad_storage and analytics_storage for cookies and device identifiers used for advertising and analytics, and ad_user_data and ad_personalization for sending user data to Google for advertising and for personalised ads. The last two are what version 2 added. The consent banner, your consent management platform, sets them; Google's tags read them.

How the tags behave depends on the implementation:

Basic modeAdvanced mode
Before the visitor answersGoogle tags do not run; nothing is sentTags load with consent denied by default
Visitor acceptsTags run with cookies, from that point onTags switch to cookies
Visitor refusesNothing is sent, not even the consent stateCookieless pings: timestamp, user agent, referrer, consent state, ad-click identifiers in the URL
Modelling it enablesA general conversion modelAdvertiser-specific conversion modelling; GA4 behavioural modelling when eligible

What is measured

For visitors who accept analytics cookies, GA4 works as it always has: users, sessions, events, sources and conversions, observed. For visitors who refuse, a basic implementation observes nothing. An advanced implementation observes that a hit happened, with its timestamp, browser, referrer and consent state, but without a cookie there is no identifier to tie one hit to the next, so those pings cannot be assembled into users and sessions the way consented hits are.

There is also a timing effect that applies to both modes. A visitor who accepts on the second page has already left the landing page that carried the campaign parameters, which is one of the reasons consented traffic still ends up in (direct) / (none).

What is modelled, and only above a threshold

GA4's behavioural modelling uses machine learning to estimate the behaviour of visitors who declined analytics cookies from the behaviour of similar visitors who accepted. It requires an advanced implementation on every page and a property that collects at least 1,000 events a day with analytics storage denied for at least 7 days, and at least 1,000 daily users with it granted for at least 7 of the previous 28 days. Google notes that meeting those prerequisites does not guarantee eligibility.

  • What it estimates: users, sessions and new users, blended into standard reports with observed data.
  • What it does not touch: event counts such as page_view and session_start in standard explorations.
  • Where it does not exist: the BigQuery export and other data exports, audiences, user explorer, segments with sequences, retention reports and predictive metrics.

Google Ads runs its own modelling. When a visitor does not consent, modelled conversions appear in the Conversions column and in the reports built on it, provided the account reaches 700 ad clicks over seven days per country and domain grouping. That is the number bidding runs on, and it is Google's estimate of Google's own contribution. How that plays out against measured revenue is covered in how to measure ROAS after cookie consent.

How to see how much of your GA4 is modelled

  1. Check the implementation. In Tag Assistant, load a page with consent denied. If no Google Analytics request leaves the browser, you run basic mode and nothing is modelled from pings.
  2. Switch the reporting identity. In GA4's admin, compare the same report under Blended and Observed. Blended adds modelling; Observed does not. Switching changes only the reports, not the data collected.
  3. Read the difference by metric. Users and sessions move; page views in explorations do not. A large gap in users with no gap in page views is modelling at work.
  4. Compare with the BigQuery export. The export contains observed data only. If your warehouse and the GA4 interface disagree on users, this is usually why.
  5. Reconcile against orders. Neither Blended nor Observed tells you how many visits really happened. Your real orders are the only total that no analytics tool produces; the method is in one number for marketing and finance.

What modelled data is good for, and what it is not

Modelled users and sessions are a reasonable way to keep a trend line from collapsing when consent rates change, and modelled conversions help Google Ads bid. They are not a substitute for measurement in three situations that matter to a budget owner:

  • Channel decisions. Google's documentation describes estimated users, sessions and new users. It does not describe giving each unconsented visit its own source, and the loss is not even across channels: at Incapto, Sealmetrics recorded 11% more direct traffic than GA4 but 37–52% more from paid campaigns and 133% more from organic social.
  • Anything downstream of the export. BI dashboards, data science and finance models built on BigQuery see observed data only.
  • Sites below the threshold. A property that never reaches the prerequisites gets no behavioural modelling at all, only the consented share.

The alternative: measure without needing consent

The other way to close the gap is to stop depending on analytics cookies. Sealmetrics stores nothing on the visitor's device and reads the source of every landing page from its UTMs or referrer, so each visit and each conversion is observed with its channel rather than estimated. Nothing is modelled, and the same numbers are in the dashboard, the API and the export. The architecture is explained in complete data.

It has limits of its own, and they are the reverse of Consent Mode's. Sealmetrics does not identify users, so there are no retention reports, cohorts or cross-session journeys to estimate or observe. Ad blockers can still stop the tracker unless it is served from a subdomain of your own domain. And whether analytics without cookies is exempt from consent in your market depends on your configuration and your national authority's criteria.

Related reading

Questions about Consent Mode data

What does Google Consent Mode measure when consent is denied?

It depends on the implementation. In basic mode, nothing: Google tags do not run until the visitor interacts with the banner, and a refusal sends no data at all. In advanced mode, tags load with consent denied and send cookieless pings with a timestamp, user agent, referrer, the consent state and any ad-click identifier in the URL, without reading or writing cookies.

What is the difference between basic and advanced Consent Mode?

Basic mode blocks Google tags until the visitor consents, so a refusal leaves no trace and Google can only apply a general conversion model. Advanced mode loads the tags before the banner with consent denied and sends cookieless pings, which is what allows advertiser-specific conversion modelling in Google Ads and behavioural modelling in GA4.

How much of my GA4 data is modelled?

Compare the same report under the Blended and Observed reporting identities in GA4's admin settings. Blended adds modelling when no identifier is available; Observed uses only user and device IDs. Switching changes only how reports are shown, not what is collected, so the difference between the two is the modelled share.

Does modelled consent mode data appear in BigQuery?

No. Google lists data export, including the BigQuery export, among the features that do not support modelled data, together with audiences, user explorer, segments with sequences, retention reports and predictive metrics. A warehouse built on the export therefore shows fewer users than the Blended GA4 interface.

Does Consent Mode restore traffic sources and ROAS?

Not for each visit. GA4's behavioural modelling estimates users, sessions and new users for people who declined analytics cookies, and Google Ads models conversions in its own Conversions column. Neither turns an unconsented visit back into an observed session with its own source in your analytics.

Is Consent Mode enough to be GDPR compliant?

No, on its own. Consent Mode passes the visitor's choice from your consent banner to Google tags; it does not decide whether you have a lawful basis or whether a banner is needed. Advanced mode also sends pings before consent, which is worth reviewing with your DPO against your national authority's criteria.