Installation
HOMEPAGE | HELP GUIDES | INSTALLATION | GOOGLE TAG MANAGER

Google Tag Manager

Install Okito with the Okito CMP template from the GTM Community Template Gallery.

If Google Tag Manager (GTM) manages your tags, install Okito inside GTM with the Okito CMP template. The template sets the consent mode defaults and loads the Okito script, so you don't paste them into your site's code.

If your banner uses IAB TCF, tick My banner uses IAB TCF in the tag; see IAB TCF sites.

Add the tag

  1. In GTM, open Tags → New → Tag Configuration → Discover more tag types in the Community Template Gallery.
  2. Search for Okito CMP, open it and click Add to workspace.
  3. Fill in the tag:
    • Website Key: copy it from the Okito dashboard (Install banner).
    • Where consent is not required (e.g. Japan): use the same option as in Banner Builder (see Where consent is not required).
    • My banner uses IAB TCF: tick this if IAB TCF is on in Okito.
    • US visitors follow the opt-out model: tick this if your banner uses the US State Laws or GDPR & US State Laws template, unless your site is directed to minors (US visitors then start denied).
    • My banner shows the US State Laws notice (IAB GPP): tick this with the US State Laws template, or GDPR & US State Laws without IAB TCF.
  4. Trigger: Consent Initialization - All Pages. This trigger runs before every other tag.
  5. Save, then Submit and publish the container.

If you use the template, don't also paste the Okito script or the Consent Mode snippet into your site. With the template, GTM installs both.

The template doesn't add the early blocker. If tracking tags are written straight into your pages, paste only its line, not the rest of the installation code, as the first line inside <head>, above the GTM container:

<script src="https://cdn.okito.com/js/YOUR_WEBSITE_KEY/blocker.js"></script>

Template settings

Setting What it does Default
Website Key Which Okito website to load. —
Where consent is not required Keep measurement on: visitors outside the regions that need consent start granted. Measurement off until a choice: everyone starts denied. Keep measurement on
My banner uses IAB TCF Adds the IAB TCF API stub, so Google tags find __tcfapi even before the Okito script has loaded. Tick it when IAB TCF is on in Okito. Off
US visitors follow the opt-out model US visitors start granted (with Global Privacy Control respected by the Okito script). Leave unticked for the GDPR template and for a site directed to minors. Off
My banner shows the US State Laws notice (IAB GPP) Adds the IAB Global Privacy Platform API (__gpp), so ad tags find it even before the Okito script has loaded (see IAB TCF and US privacy APIs). Leave it off when your banner uses IAB TCF. Off
Region-specific defaults Your own default for specific regions (ISO 3166-1 countries or ISO 3166-2 subdivisions such as US-CA). A region listed here replaces the built-in default for that region. —
Wait for update Milliseconds GTM waits for Okito's consent update before firing tags that need consent. 500
Redact ads data while consent is denied Consent mode ads_data_redaction. On
Pass ad click information through URLs Consent mode url_passthrough. Off
Google Developer ID Okito's developer ID (dZGJiMm). Leave as is. dZGJiMm

GTM needs to know which consent each tag requires:

  1. Open Admin → Container Settings and enable Consent Overview.
  2. In Tags → Consent Overview (shield icon), check each tag:
    • Google tags (GA4, Google Ads, Floodlight) have built-in consent checks. Keep them.
    • Other tags (Meta, TikTok, Hotjar …): set Require additional consent for tag to fire with the matching consent type, for example ad_storage for advertising pixels and analytics_storage for analytics tools.

Okito maps its categories to consent types: Advertisement → ad_storage, ad_user_data, ad_personalization; Analytics → analytics_storage; Functional → functionality_storage, personalization_storage. See the settings reference.

IAB TCF sites

GTM does not wait for the Okito script, so Google tags in the container can start before it has loaded. If your banner uses IAB TCF, tick My banner uses IAB TCF in the tag (update the template first if you don't see the setting): the tag then adds the TCF API stub, so Google tags find __tcfapi and get the TC string once the Okito script has loaded. Without it, they follow Google Consent Mode only and debug mode warns that Google tags ran before the TCF API was available. If you turn TCF off later, untick it. Likewise, tick or untick My banner shows the US State Laws notice (IAB GPP) when you switch to or from the US State Laws template or turn IAB TCF on or off.

The template's stub has no __tcfapi locator frame, so vendors inside iframes get the TCF API only once the Okito script has loaded. If you need that from the first moment, use the installation code and the Consent Mode snippet from Install banner (the early blocker first) above the GTM container instead of the template.

Check it

Open Preview in GTM. In Tag Assistant, the Consent tab should show the default state at Consent Initialization and an update after you click in the banner. You can also add ?okito_debug=1 to your page URL; see Debug mode.

Verify on Install banner reads only your page's HTML, so it can't see the Okito tag and does not confirm a GTM install; see Verify your installation.