@kameleoon/javascript-sdk-core 5.16.1 → 5.17.0

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Change Log
 
+## 5.17.0 (2025-12-17)
+
+### Features
+
+- Fixed an issue where **[Kameleoon Data](https://developers.kameleoon.com/feature-management-and-experimentation/web-sdks/js-sdk/#data-types)** was retained beyond the configured **[`targetingDataCleanupInterval`](https://developers.kameleoon.com/feature-management-and-experimentation/web-sdks/js-sdk/#configuration-parameters)** if the **[Data API](https://developers.kameleoon.com/apis/data-api-rest/all-endpoints/post-visit-events/)** encountered internal errors. Expired data is now reliably removed in accordance with the cleanup interval.
+- Updated evaluation and tracking logic to comply with GDPR requirements when consent is not given:
+    - If behavior is **partially blocked**, the default variation will be returned.
+    - If behavior is **completely blocked**, an exception will be thrown.
+
 ## 5.16.1 (2025-10-23)
 
 ### Patch Changes
@@ -8,7 +17,7 @@
 
 ## 5.16.0 (2025-10-22)
 
-### Minor Changes
+### Features
 
 - Introduced a new [`getDataFile`](getDataFile) method. This method returns the current SDK configuration (also known as the **data file**) used for evaluation and targeting. It is **not** intended for production use to fetch variations for every feature flag in the returned list, as it is not optimized for performance. For that purpose, use [`getVariations`](getVariations) instead. `getDataFile` is mainly useful for debugging or QA, for example to let internal users manually select a variant for a specific feature flag in production.
 

package/dist/clientConfiguration/clientConfiguration.d.ts

@@ -1,7 +1,7 @@
 import { Result } from 'ts-res';
 import { KameleoonError } from '../kameleoonError/kameleoonError';
 import { SegmentType } from '../targeting';
-import { ClientConfigurationParametersType, ConfigurationType, ExperimentInfoType, ExperimentType, FeatureFlagType, MappedRuleType } from './types';
+import { ClientConfigurationParametersType, ConfigurationType, ConsentBlockingBehaviour, ExperimentInfoType, ExperimentType, FeatureFlagType, MappedRuleType } from './types';
 import { MEGroup } from '../clientConfiguration/meGroup';
 interface IClientConfiguration {
     initialize: () => Promise<Result<void, KameleoonError>>;
@@ -38,6 +38,7 @@ export declare class ClientConfiguration implements IClientConfiguration {
     private externalPackageInfo;
     private usedDefaultDataFile;
     private defaultDataFile?;
+    private blockingBehaviourMode;
     private readonly CACHE_REVALIDATE_PERIOD;
     constructor({ updateInterval, urlProvider, storage, requester, dataManager, eventSource, externalVisitorCodeManager, eventManager, externalPackageInfo, defaultDataFile, }: ClientConfigurationParametersType);
     initialize(): Promise<Result<void, KameleoonError>>;
@@ -52,6 +53,7 @@ export declare class ClientConfiguration implements IClientConfiguration {
     get holdout(): ExperimentType | null;
     get meGroups(): Map<string, MEGroup>;
     get isConsentRequired(): boolean;
+    get consentBlockingBehaviour(): ConsentBlockingBehaviour;
     get hasAnyTargetedDeliveryRule(): boolean;
     private checkShouldUpdate;
     private readStorageData;
@@ -71,5 +73,6 @@ export declare class ClientConfiguration implements IClientConfiguration {
     private makeMEGroups;
     private updateStorageData;
     private updateConsentRequired;
+    private consentBlockingBehaviourFromStr;
 }
 export {};

package/dist/clientConfiguration/constants.d.ts

@@ -1,3 +1,2 @@
-import { ClientConfigurationDataType, ConfigurationDataType } from '../clientConfiguration';
-export declare const DEFAULT_CONFIGURATION_DATA: ClientConfigurationDataType;
-export declare const DEFAULT_CLIENT_CONFIGURATION: ConfigurationDataType;
+import { ConfigurationDataType } from '../clientConfiguration';
+export declare const DEFAULT_DATA_FILE_CONFIGURATION: ConfigurationDataType;

package/dist/clientConfiguration/types.d.ts

@@ -50,6 +50,10 @@ export declare enum ConsentType {
     Required = "REQUIRED",
     NotRequired = "NOT_REQUIRED"
 }
+export declare enum ConsentBlockingBehaviour {
+    PartiallyBlocked = "PARTIALLY_BLOCK",
+    CompletelyBlocked = "FULLY_BLOCK"
+}
 export type DeviationType = {
     variationId: string;
     value: number;
@@ -129,6 +133,7 @@ export type ConfigurationType = {
     realTimeUpdate: boolean;
     consentType: ConsentType;
     dataApiDomain: string;
+    consentOptOutBehavior: string;
 };
 export type ClientConfigurationParametersType = {
     urlProvider: IUrlProvider;

package/dist/javascript-sdk-core-browser.cjs.js

@@ -249,10 +249,17 @@ class KameleoonError extends Error {
                 this.message = ERROR_MESSAGES[type](secondParam, thirdParam);
                 break;
             case exports.KameleoonException.FeatureFlagVariationNotFound:
-            case exports.KameleoonException.FeatureFlagEnvironmentDisabled:
             case exports.KameleoonException.FeatureFlagVariableNotFound:
                 this.message = ERROR_MESSAGES[type](secondParam, thirdParam);
                 break;
+            case exports.KameleoonException.FeatureFlagEnvironmentDisabled:
+                if (thirdParam !== undefined) {
+                    this.message = ERROR_MESSAGES[type](secondParam, thirdParam);
+                }
+                else {
+                    this.message = secondParam;
+                }
+                break;
             case exports.KameleoonException.StorageWrite:
             case exports.KameleoonException.JSONParse:
                 this.message = ERROR_MESSAGES[type](secondParam);
@@ -308,7 +315,7 @@ exports.RequestType = void 0;
     RequestType["RemoteData"] = "remoteData";
 })(exports.RequestType || (exports.RequestType = {}));
 
-const NUMBER_OF_RETRIES = 2;
+const NUMBER_OF_RETRIES = 1;
 exports.Header = void 0;
 (function (Header) {
     Header["UserAgent"] = "User-Agent";
@@ -887,6 +894,9 @@ class UrlProvider {
         const currentDomain = this.domains[UrlType.DataApi];
         this.domains[UrlType.DataApi] = currentDomain.replace(/^[^.]+/, subDomain);
     }
+    get dataApiDomain() {
+        return this.domains[UrlType.DataApi];
+    }
     getClientConfigurationUrl(timeStamp) {
         this.isInitialized();
         const baseUrl = `https://${this.domains[UrlType.ClientConfiguration]}/v3/`;
@@ -1146,6 +1156,11 @@ var ConsentType;
     ConsentType["Required"] = "REQUIRED";
     ConsentType["NotRequired"] = "NOT_REQUIRED";
 })(ConsentType || (ConsentType = {}));
+var ConsentBlockingBehaviour;
+(function (ConsentBlockingBehaviour) {
+    ConsentBlockingBehaviour["PartiallyBlocked"] = "PARTIALLY_BLOCK";
+    ConsentBlockingBehaviour["CompletelyBlocked"] = "FULLY_BLOCK";
+})(ConsentBlockingBehaviour || (ConsentBlockingBehaviour = {}));
 
 class EventManager {
     addEventHandler(eventType, callback) {
@@ -1173,17 +1188,14 @@ exports.EventType = void 0;
     EventType["ConfigurationUpdate"] = "configurationUpdate";
 })(exports.EventType || (exports.EventType = {}));
 
-({
-    configuration: {
-        consentType: ConsentType.NotRequired},
-});
-const DEFAULT_CLIENT_CONFIGURATION$1 = {
+const DEFAULT_DATA_FILE_CONFIGURATION = {
     customData: [],
     featureFlags: [],
     configuration: {
         realTimeUpdate: false,
         consentType: ConsentType.NotRequired,
         dataApiDomain: 'data.kameleoon.io',
+        consentOptOutBehavior: ConsentBlockingBehaviour.PartiallyBlocked,
     },
 };
 
@@ -1207,7 +1219,7 @@ class ClientConfiguration {
     constructor({ updateInterval, urlProvider, storage, requester, dataManager, eventSource, externalVisitorCodeManager, eventManager, externalPackageInfo, defaultDataFile, }) {
         this.updateConfigurationIntervalId = null;
         this.updateType = UpdateType.Polling;
-        this.configurationData = DEFAULT_CLIENT_CONFIGURATION$1;
+        this.configurationData = DEFAULT_DATA_FILE_CONFIGURATION;
         this.featureFlagsData = new Map();
         this.isTargetedDeliveryRule = null;
         this.segmentsData = null;
@@ -1216,6 +1228,7 @@ class ClientConfiguration {
         this.mappedRules = null;
         this.mappedExperiments = null;
         this.usedDefaultDataFile = false;
+        this.blockingBehaviourMode = ConsentBlockingBehaviour.PartiallyBlocked;
         this.CACHE_REVALIDATE_PERIOD = 90 * exports.Milliseconds.Minute;
         this.urlProvider = urlProvider;
         this.requester = requester;
@@ -1390,6 +1403,9 @@ class ClientConfiguration {
     get isConsentRequired() {
         return this.configuration.consentType === ConsentType.Required;
     }
+    get consentBlockingBehaviour() {
+        return this.blockingBehaviourMode;
+    }
     get hasAnyTargetedDeliveryRule() {
         if (this.isTargetedDeliveryRule !== null) {
             return this.isTargetedDeliveryRule;
@@ -1518,6 +1534,7 @@ class ClientConfiguration {
                 KameleoonLogger.info `Configuration update type was toggled to ${UpdateType[updateType]}`;
                 yield this.initialize();
             }
+            this.blockingBehaviourMode = this.consentBlockingBehaviourFromStr(clientConfigurationData.configuration.consentOptOutBehavior);
             return buildExports.Ok(toggleUpdateType);
         });
     }
@@ -1624,6 +1641,14 @@ class ClientConfiguration {
         this.visitorCodeManager.consentRequired =
             this.isConsentRequired && !this.hasAnyTargetedDeliveryRule;
     }
+    consentBlockingBehaviourFromStr(str) {
+        if (str === ConsentBlockingBehaviour.PartiallyBlocked ||
+            str === ConsentBlockingBehaviour.CompletelyBlocked) {
+            return str;
+        }
+        KameleoonLogger.error(`Unexpected consent blocking type '${str}'`);
+        return ConsentBlockingBehaviour.PartiallyBlocked;
+    }
 }
 
 function constructTypeMap(indexMap) {
@@ -2418,6 +2443,13 @@ let CustomData$1 = class CustomData {
     get name() {
         return this._name;
     }
+    /**
+     * @private
+     * @method name - an internal getter for a name of custom data
+     * */
+    get values() {
+        return this.value;
+    }
 };
 CustomData$1.UNDEFINED_INDEX = -1;
 
@@ -2435,7 +2467,7 @@ let Conversion$1 = class Conversion {
         this.negative = negative;
         this.status = exports.TrackingStatus.Unsent;
         this.id = Math.floor(Math.random() * 1000000);
-        this.metadata = metadata;
+        this._metadata = metadata;
     }
     set _id(id) {
         this.id = id;
@@ -2456,9 +2488,21 @@ let Conversion$1 = class Conversion {
                 ? UrlParameter.Metadata + this._encodeMetadata()
                 : ''));
     }
+    /**
+     * @private
+     * @method metadata - an internal getter for a metadata of conversion
+     * */
     get _metadata() {
         return this.metadata;
     }
+    /**
+     * @private
+     * @method metadata - an internal setter for setting metadata of conversion
+     * @param {number} value - an index value
+     * */
+    set _metadata(value) {
+        this.metadata = value;
+    }
     get data() {
         var _a;
         return {
@@ -3551,7 +3595,7 @@ class DataProcessor {
         this.cleanupInterval = cleanupInterval;
         this.packageInfo = packageInfo;
     }
-    mutUpdateData({ infoData, visitorCode, mutData, dataItem, }) {
+    mutUpdateData({ infoData, visitorCode, mutData, dataItem, extendTtl, }) {
         let { visitorReference, data, isReference } = this.dereferenceData(mutData, visitorCode);
         if (this.packageInfo.isServer &&
             isReference &&
@@ -3562,9 +3606,12 @@ class DataProcessor {
             delete mutData[visitorCode];
             visitorReference = visitorCode;
         }
-        const expirationTime = this.cleanupInterval
-            ? Date.now() + this.cleanupInterval
-            : 0;
+        let expirationTime;
+        if (extendTtl) {
+            expirationTime = this.cleanupInterval
+                ? Date.now() + this.cleanupInterval
+                : 0;
+        }
         switch (dataItem.data.type) {
             case exports.KameleoonData.CustomData: {
                 this.updateCustomData({
@@ -3919,13 +3966,17 @@ class DataProcessor {
         return closestCleanupTime;
     }
     updateField({ key, value, data, visitorCode, expirationTime, }) {
-        data[visitorCode][key] = Object.assign(Object.assign({}, value), { expirationTime });
+        var _a;
+        const existing = data[visitorCode][key];
+        data[visitorCode][key] = Object.assign(Object.assign({}, value), { expirationTime: (_a = expirationTime !== null && expirationTime !== void 0 ? expirationTime : (existing.expirationTime && existing.expirationTime)) !== null && _a !== void 0 ? _a : Date.now() });
     }
     createField({ key, value, data, visitorCode, expirationTime, }) {
         data[visitorCode] = Object.assign(Object.assign({}, data[visitorCode]), { [key]: Object.assign(Object.assign({}, value), { expirationTime }) });
     }
     updateNestedField({ key, nestedKey, value, data, visitorCode, expirationTime, }) {
-        data[visitorCode][key][nestedKey] = Object.assign(Object.assign({}, value), { expirationTime });
+        var _a;
+        const existing = data[visitorCode][key][nestedKey];
+        data[visitorCode][key][nestedKey] = Object.assign(Object.assign({}, value), { expirationTime: (_a = expirationTime !== null && expirationTime !== void 0 ? expirationTime : existing === null || existing === void 0 ? void 0 : existing.expirationTime) !== null && _a !== void 0 ? _a : Date.now() });
     }
     createNestedField({ key, nestedKey, value, data, visitorCode, expirationTime, }) {
         var _a;
@@ -5191,15 +5242,7 @@ exports.KameleoonStorageKey = void 0;
     KameleoonStorageKey["ForcedExperimentVariation"] = "kameleoonForcedExperimentVariation";
 })(exports.KameleoonStorageKey || (exports.KameleoonStorageKey = {}));
 const DEFAULT_CLIENT_CONFIGURATION = {
-    data: {
-        customData: [],
-        featureFlags: [],
-        configuration: {
-            realTimeUpdate: false,
-            consentType: ConsentType.NotRequired,
-            dataApiDomain: 'data.kameleoon.io',
-        },
-    },
+    data: DEFAULT_DATA_FILE_CONFIGURATION,
     lastUpdate: '',
 };
 // --- Note ---
@@ -5711,7 +5754,7 @@ class DataManager {
         return resultData;
     }
     storeTrackedData(data) {
-        this.storeData(data);
+        this.storeData(data, false);
         const infoResult = this.infoStorage.read();
         if (!infoResult.ok) {
             return;
@@ -5763,15 +5806,18 @@ class DataManager {
                 targetingData,
                 visitorCode: firstParameter,
                 kameleoonData: secondParameter,
+                extendTtl: true,
             });
         }
         else {
             for (const [visitorCode, kameleoonData] of Object.entries(firstParameter)) {
+                const extendTtl = typeof secondParameter[0] === 'boolean' ? secondParameter[0] : true;
                 this.mutUpdateTargetingData({
                     infoData,
                     targetingData,
                     visitorCode,
                     kameleoonData,
+                    extendTtl,
                 });
             }
         }
@@ -5888,8 +5934,8 @@ class DataManager {
         }
         return null;
     }
-    mutUpdateTargetingData({ infoData, visitorCode, kameleoonData, targetingData, }) {
-        var _a;
+    mutUpdateTargetingData({ infoData, visitorCode, kameleoonData, targetingData, extendTtl, }) {
+        var _a, _b, _c;
         for (const dataItem of kameleoonData) {
             // process custom data
             if (dataItem.data.type === exports.KameleoonData.CustomData) {
@@ -5905,16 +5951,21 @@ class DataManager {
             }
             //   process metadata of conversions
             if (dataItem.data.type === exports.KameleoonData.Conversion) {
-                (_a = dataItem._metadata) === null || _a === void 0 ? void 0 : _a.forEach((item) => this.trySetCustomDataIndexByName(item));
+                const conversion = dataItem;
+                if (((_b = (_a = conversion._metadata) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0) > 0) {
+                    conversion._metadata = (_c = conversion._metadata) === null || _c === void 0 ? void 0 : _c.filter((item) => this.trySetCustomDataIndexByName(item));
+                }
             }
             const expirationTime = this.dataProcessor.mutUpdateData({
                 infoData,
                 visitorCode,
                 mutData: targetingData,
                 dataItem,
+                extendTtl,
             });
             const nextCleanup = infoData.nextDataCleanup;
-            if (!nextCleanup || (nextCleanup && expirationTime < nextCleanup)) {
+            if (!nextCleanup ||
+                (nextCleanup && expirationTime && expirationTime < nextCleanup)) {
                 infoData.nextDataCleanup = expirationTime;
             }
             if (dataItem.data.status === exports.TrackingStatus.Unsent) {
@@ -5946,7 +5997,9 @@ class DataManager {
         var _a;
         const { data } = customData;
         const isDataValid = Boolean(data.value.length && data.value[0].length);
-        this.trySetCustomDataIndexByName(customData);
+        if (!this.trySetCustomDataIndexByName(customData)) {
+            return false;
+        }
         if (data.index == CustomData$1.UNDEFINED_INDEX) {
             data.index = customData.index;
         }
@@ -5976,13 +6029,15 @@ class DataManager {
         return true;
     }
     trySetCustomDataIndexByName(customData) {
-        if (customData.index == CustomData$1.UNDEFINED_INDEX && customData.name) {
-            const cdIndex = this.customDataIndexByName.get(customData.name);
-            if (cdIndex === undefined) {
-                return;
-            }
-            customData.index = cdIndex;
-        }
+        if (customData.index !== CustomData$1.UNDEFINED_INDEX)
+            return true;
+        if (!customData.name)
+            return false;
+        const cdIndex = this.customDataIndexByName.get(customData.name);
+        if (cdIndex == null)
+            return false;
+        customData.index = cdIndex;
+        return true;
     }
     get unsentDataVisitors() {
         const infoResult = this.infoStorage.read();
@@ -7095,6 +7150,13 @@ class Hasher {
     }
 }
 
+var LegalConsent;
+(function (LegalConsent) {
+    LegalConsent[LegalConsent["Unknown"] = 0] = "Unknown";
+    LegalConsent[LegalConsent["Given"] = 1] = "Given";
+    LegalConsent[LegalConsent["NotGiven"] = 2] = "NotGiven";
+})(LegalConsent || (LegalConsent = {}));
+
 class VariationConfiguration {
     constructor(externalStorage, externalStorageForcedExperimentVariations, externalStorageForcedFeatureVariations, visitorCodeManager, clientConfiguration) {
         this.storage = externalStorage;
@@ -7153,9 +7215,12 @@ class VariationConfiguration {
         }
         return buildExports.Ok(featureFlagVariations);
     }
-    getVariation({ visitorCode, visitorIdentifier, featureFlag, targetingData, packageInfo, clientConfiguration, dataManager, track = true, withAssignment = false, }) {
+    getVariation({ visitorCode, visitorIdentifier, featureFlag, targetingData, packageInfo, clientConfiguration, dataManager, legalConsent, track = true, withAssignment = false, }) {
         KameleoonLogger.debug `CALL: VariationConfiguration.getVariation(visitorCode: ${visitorCode}, visitorIdentifier: ${visitorIdentifier}, featureFlag: ${featureFlag}, targetingData: ${targetingData}, packageInfo: ${packageInfo}, clientConfiguration, dataManager, withAssignment: ${withAssignment})`;
         const { rules, featureKey, id: featureFlagId, defaultVariationKey, } = featureFlag;
+        const consent = clientConfiguration.isConsentRequired
+            ? legalConsent
+            : LegalConsent.Given;
         for (const rule of rules) {
             const { segment, experimentId, id, exposition, respoolTime, variationByExposition, } = rule;
             const forcedVariationData = this.getForcedExperimentVariation(visitorCode, rule.experimentId);
@@ -7202,6 +7267,16 @@ class VariationConfiguration {
             });
             KameleoonLogger.debug `Calculated ruleHash: ${ruleHash} for code: ${visitorIdentifier}`;
             if (ruleHash <= exposition) {
+                // Checking if the evaluation is blocked due to the consent policy
+                if (consent == LegalConsent.NotGiven &&
+                    rule.type == RuleType.EXPERIMENTATION) {
+                    const behaviour = clientConfiguration.consentBlockingBehaviour;
+                    if (behaviour == ConsentBlockingBehaviour.PartiallyBlocked) {
+                        break;
+                    }
+                    return buildExports.Err(new KameleoonError(exports.KameleoonException.FeatureFlagEnvironmentDisabled, `Evaluation of ${rule} is blocked because consent is not provided for visitor '${visitorCode}'`));
+                }
+                // evaluate with CB scores if applicable
                 let variation = this.evaluateCBScores(rule, visitorIdentifier, targetingData);
                 if (!variation) {
                     const variationHash = Hasher.getHashDouble({
@@ -7563,7 +7638,6 @@ class KameleoonEventSource {
 const VISITOR_CODE_LENGTH = 16;
 const VISITOR_CODE_MAX_LENGTH = 255;
 const DEFAULT_MAX_AGE = 60 * 60 * 24 * 365;
-const ZERO_MAX_AGE = 0;
 const PATH = '/';
 
 /**
@@ -8031,7 +8105,7 @@ class Tracker {
             this.dataManager.storeTrackedData(updatedData);
         }
         else {
-            this.dataManager.storeData(updatedData);
+            this.dataManager.storeData(updatedData, false);
         }
     }
     getUnsentVisitorData(visitorCode, isConsentProvided) {
@@ -8383,16 +8457,23 @@ class KameleoonClient {
         const variations = new Map();
         const featureFlags = this.clientConfiguration.featureFlags;
         for (const featureFlag of featureFlags.values()) {
-            const variation = this._getFeatureVariation({
-                visitorCode,
-                featureKey: featureFlag.featureKey,
-                track,
-            });
-            if (variation.ok) {
-                if (!onlyActive || variation.data.key !== OFF_VARIATION_KEY) {
+            try {
+                const variation = this._getFeatureVariation({
+                    visitorCode,
+                    featureKey: featureFlag.featureKey,
+                    track,
+                });
+                if (variation.ok &&
+                    (!onlyActive || variation.data.key !== OFF_VARIATION_KEY)) {
                     variations.set(featureFlag.featureKey, variation.data);
                 }
             }
+            catch (err) {
+                if (err instanceof KameleoonError &&
+                    err.type !== exports.KameleoonException.FeatureFlagEnvironmentDisabled) {
+                    throw err;
+                }
+            }
         }
         KameleoonLogger.info `RETURN: KameleoonClient.getVariations(visitorCode: ${visitorCode}, onlyActive: ${onlyActive}, track: ${track}) -> (variations: ${variations})`;
         return variations;
@@ -8712,25 +8793,16 @@ class KameleoonClient {
                 path: PATH,
             });
         }
-        else {
-            if (this.visitorCodeManager.consentRequired) {
-                setData({
-                    visitorCode: '',
-                    key: exports.KameleoonStorageKey.VisitorCode,
-                    maxAge: ZERO_MAX_AGE,
-                    path: PATH,
-                });
-            }
-        }
         KameleoonLogger.info `RETURN: KameleoonClient.setUserConsent(visitorCode: ${visitorCode}, consent: ${consent}, setData: ${setData})`;
     }
     updateConsentData(visitorCode, consent) {
         const readResult = this.consentDataStorage.read();
+        const legalConsent = consent ? LegalConsent.Given : LegalConsent.NotGiven;
         if (!readResult.ok) {
             if (readResult.error.type === exports.KameleoonException.StorageEmpty) {
                 this.consentDataStorage.write({
                     [visitorCode]: {
-                        consent,
+                        consent: legalConsent,
                     },
                 });
             }
@@ -8738,28 +8810,36 @@ class KameleoonClient {
         }
         const data = readResult.data;
         data[visitorCode] = {
-            consent,
+            consent: legalConsent,
         };
         this.consentDataStorage.write(data);
     }
+    getLegalConsent(visitorCode) {
+        KameleoonLogger.debug `CALL: KameleoonClient.getLegalConsent(visitorCode: ${visitorCode})`;
+        let legalConsent;
+        const consentDataResult = this.consentDataStorage.read();
+        legalConsent = consentDataResult.ok
+            ? this.extractLegalConsent(consentDataResult.data[visitorCode])
+            : LegalConsent.Unknown;
+        KameleoonLogger.debug `RETURN: KameleoonClient.getLegalConsent(visitorCode: ${visitorCode}) -> (legalConsent: ${legalConsent})`;
+        return legalConsent;
+    }
+    extractLegalConsent(consentData) {
+        if (consentData === undefined)
+            return LegalConsent.Unknown;
+        if (typeof consentData === 'boolean') {
+            return consentData ? LegalConsent.Given : LegalConsent.NotGiven;
+        }
+        const value = consentData.consent;
+        if (typeof value === 'boolean')
+            return value ? LegalConsent.Given : LegalConsent.NotGiven;
+        return value;
+    }
     _isConsentProvided(visitorCode) {
         KameleoonLogger.debug `CALL: KameleoonClient._isConsentProvided(visitorCode: ${visitorCode})`;
         const { isConsentRequired } = this.clientConfiguration;
-        const consentDataResult = this.consentDataStorage.read();
-        let isConsentProvided = false;
-        if (!isConsentRequired) {
-            isConsentProvided = true;
-        }
-        else if (consentDataResult.ok) {
-            const consentData = consentDataResult.data[visitorCode];
-            // for consistency with the old data in the storage
-            if (typeof consentData === 'boolean') {
-                isConsentProvided = consentData;
-            }
-            else {
-                isConsentProvided = consentData && consentData.consent;
-            }
-        }
+        const isConsentProvided = !isConsentRequired ||
+            this.getLegalConsent(visitorCode) == LegalConsent.Given;
         KameleoonLogger.debug `RETURN: KameleoonClient._isConsentProvided(visitorCode: ${visitorCode}) -> (isConsentProvided: ${isConsentProvided})`;
         return isConsentProvided;
     }
@@ -8787,22 +8867,32 @@ class KameleoonClient {
             if (!featureFlag.environmentEnabled) {
                 continue;
             }
-            const evalExp = this._evaluate({
-                visitorCode,
-                featureFlag,
-                track: false,
-                save: false,
-            });
-            if (evalExp.variationKey !== OFF_VARIATION_KEY) {
-                activeVariations.push({
-                    variationKey: evalExp.variationKey,
-                    variationId: evalExp.variationId,
-                    experimentId: evalExp.experimentId,
-                    featureFlagId: featureFlag.id,
-                    featureKey: featureFlag.featureKey,
-                    rule: null,
-                    isTargetedRule: evalExp.ruleType === RuleType.TARGETED_DELIVERY,
+            try {
+                const evalExp = this._evaluate({
+                    visitorCode,
+                    featureFlag,
+                    track: false,
+                    save: false,
                 });
+                if (evalExp.variationKey !== OFF_VARIATION_KEY) {
+                    activeVariations.push({
+                        variationKey: evalExp.variationKey,
+                        variationId: evalExp.variationId,
+                        experimentId: evalExp.experimentId,
+                        featureFlagId: featureFlag.id,
+                        featureKey: featureFlag.featureKey,
+                        rule: null,
+                        isTargetedRule: evalExp.ruleType === RuleType.TARGETED_DELIVERY,
+                    });
+                }
+            }
+            catch (err) {
+                if (err instanceof KameleoonError) {
+                    if (err.type != exports.KameleoonException.FeatureFlagEnvironmentDisabled) {
+                        KameleoonLogger.error `Unexpected error: ${err}`;
+                    }
+                    continue;
+                }
             }
         }
         KameleoonLogger.debug `RETURN: KameleoonClient._getActiveFeatureVariations(visitorCode: ${visitorCode}) -> (activeVariations: ${activeVariations})`;
@@ -8823,6 +8913,7 @@ class KameleoonClient {
         else if (this._isVisitorNotInHoldout(visitorCode, track, save, featureFlag, visitorData) &&
             this._isFFUnrestrictedByMEGroup(visitorCode, featureFlag, visitorData)) {
             const visitorIdentifier = this._getCodeForHash(visitorCode, featureFlag.bucketingCustomDataIndex, visitorData);
+            const legalConsent = this.getLegalConsent(visitorCode);
             const variationData = this.variationConfiguration
                 .getVariation({
                 visitorCode,
@@ -8834,6 +8925,7 @@ class KameleoonClient {
                 clientConfiguration: this.clientConfiguration,
                 dataManager: this.dataManager,
                 packageInfo: this.externalPackageInfo,
+                legalConsent,
             })
                 .throw();
             evalExp =
@@ -8952,6 +9044,14 @@ class KameleoonClient {
         }
         KameleoonLogger.debug `CALL: KameleoonClient._isVisitorNotInHoldout(visitorCode: ${visitorCode}, track: ${track}, save: ${save}, featureFlag: ${featureFlag}, visitorData: ${visitorData})`;
         let isNotInHoldout = true;
+        // Checking if the evaluation is blocked due to the consent policy
+        const legalConsent = this.getLegalConsent(visitorCode);
+        if (legalConsent == LegalConsent.NotGiven) {
+            const behaviour = this.clientConfiguration.consentBlockingBehaviour;
+            if (behaviour == ConsentBlockingBehaviour.CompletelyBlocked) {
+                throw new KameleoonError(exports.KameleoonException.FeatureFlagEnvironmentDisabled, `Evaluation of holdout is blocked because consent is not provided for visitor '${visitorCode}'`);
+            }
+        }
         const codeForHash = this._getCodeForHash(visitorCode, featureFlag === null || featureFlag === void 0 ? void 0 : featureFlag.bucketingCustomDataIndex, visitorData);
         const holdoutHash = Hasher.getHashDouble({
             visitorIdentifier: codeForHash,