@owlmeans/consent 0.1.18-rc.10

package/build/consts.d.ts

@@ -0,0 +1,64 @@
+import type { ConsentCategory } from './types.js';
+/**
+ * Where a visitor's choice is stored.
+ *
+ * Unchanged from the widget this package generalises, and it must stay unchanged: owlmeans.com has
+ * visitors who have already chosen, and a new key would ask every one of them again.
+ */
+export declare const CONSENT_KEY = "site_cookie_consent";
+export declare const CONSENT_COOKIE_DAYS = 365;
+/**
+ * The stored record's shape version.
+ *
+ * A record with no version predates the explicit `essential` category, when essential storage was
+ * implicitly always on. Those records are migrated in place rather than discarded — the visitor
+ * made a decision, and re-asking would be a regression they experience as the site forgetting.
+ */
+export declare const CONSENT_SCHEMA_VERSION = 2;
+/** Idempotence flag for the Consent Mode defaults. Fixed: a page may carry two bundles. */
+export declare const CONSENT_SETUP_FLAG = "cookieConsentSetup";
+/**
+ * The DOM event `applyConsent` dispatches on `window` after it finishes writing globals and
+ * pushing the Consent Mode update.
+ *
+ * A loader that already ran (a gate script that decided, on first paint, not to load yet) has no
+ * other way to hear a LATER grant — Consent Mode itself speaks only on `window.dataLayer`, which a
+ * tag that has not loaded is not listening to. `event.detail.record` carries the record that was
+ * just applied.
+ */
+export declare const CONSENT_EVENT = "owlmeans:consent";
+export declare const CONSENT_ESSENTIAL = "essential";
+export declare const CONSENT_ANALYTICS = "analytics";
+export declare const CONSENT_MARKETING = "marketing";
+/**
+ * Where an application persists an explicit interface-language choice — `@owlmeans/client-i18n`'s
+ * `owlmeans-lng`. The interface language is strictly necessary storage (the visitor asked for it by
+ * choosing it), so it is written whatever the cookie decision says and no category governs it.
+ * Repeated here rather than imported: this package has no runtime dependencies, and the linker's
+ * language part has to run in an inline `<head>` script, before any bundle exists.
+ */
+export declare const CONSENT_LANGUAGE_KEY = "owlmeans-lng";
+export declare const CONSENT_LOCALES: readonly ['en', 'pl', 'ru', 'be', 'uk', 'es', 'de', 'fr'];
+/**
+ * The categories every OwlMeans surface starts with.
+ *
+ * What owlmeans.com already asked (analytics, marketing) plus the essential row, which the original
+ * widget left implicit — making it explicit is what lets a flow require an acknowledgement before
+ * it sets a session cookie, and what tells a visitor what is being stored regardless: the consent
+ * record itself and the interface language the visitor picked.
+ */
+export declare const DEFAULT_CONSENT_CATEGORIES: ConsentCategory[];
+/**
+ * Every signal Consent Mode v2 knows, and what it defaults to before anyone has chosen.
+ *
+ * `security_storage` is granted by Google's own documented recommendation — it covers things like
+ * fraud prevention, which are strictly necessary. Everything else starts denied.
+ */
+export declare const CONSENT_SIGNAL_DEFAULTS: Record<string, 'granted' | 'denied'>;
+/** The URL parameter a decorated link carries the decision in, absent an override. */
+export declare const CONSENT_LINK_PARAM = "owlcc";
+/** How old a decorated link's timestamp may be and still be trusted, in seconds, absent an override. */
+export declare const CONSENT_LINK_MAX_AGE = 300;
+/** Clock skew allowed the OTHER way — a timestamp up to this far in the future is still trusted. */
+export declare const CONSENT_LINK_SKEW = 60;
+//# sourceMappingURL=consts.d.ts.map

package/build/consts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,WAAW,wBAAwB,CAAA;AAEhD,eAAO,MAAM,mBAAmB,MAAM,CAAA;AAEtC;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAA;AAEvC,2FAA2F;AAC3F,eAAO,MAAM,kBAAkB,uBAAuB,CAAA;AAEtD;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,qBAAqB,CAAA;AAE/C,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAC5C,eAAO,MAAM,iBAAiB,cAAc,CAAA;AAE5C;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,iBAAiB,CAAA;AAElD,eAAO,MAAM,eAAe,YAAI,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAA;AAExF;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,EAAE,eAAe,EAmBvD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAQxE,CAAA;AAED,sFAAsF;AACtF,eAAO,MAAM,kBAAkB,UAAU,CAAA;AAEzC,wGAAwG;AACxG,eAAO,MAAM,oBAAoB,MAAM,CAAA;AAEvC,oGAAoG;AACpG,eAAO,MAAM,iBAAiB,KAAK,CAAA"}

package/build/consts.js

@@ -0,0 +1,90 @@
+/**
+ * Where a visitor's choice is stored.
+ *
+ * Unchanged from the widget this package generalises, and it must stay unchanged: owlmeans.com has
+ * visitors who have already chosen, and a new key would ask every one of them again.
+ */
+export const CONSENT_KEY = 'site_cookie_consent';
+export const CONSENT_COOKIE_DAYS = 365;
+/**
+ * The stored record's shape version.
+ *
+ * A record with no version predates the explicit `essential` category, when essential storage was
+ * implicitly always on. Those records are migrated in place rather than discarded — the visitor
+ * made a decision, and re-asking would be a regression they experience as the site forgetting.
+ */
+export const CONSENT_SCHEMA_VERSION = 2;
+/** Idempotence flag for the Consent Mode defaults. Fixed: a page may carry two bundles. */
+export const CONSENT_SETUP_FLAG = 'cookieConsentSetup';
+/**
+ * The DOM event `applyConsent` dispatches on `window` after it finishes writing globals and
+ * pushing the Consent Mode update.
+ *
+ * A loader that already ran (a gate script that decided, on first paint, not to load yet) has no
+ * other way to hear a LATER grant — Consent Mode itself speaks only on `window.dataLayer`, which a
+ * tag that has not loaded is not listening to. `event.detail.record` carries the record that was
+ * just applied.
+ */
+export const CONSENT_EVENT = 'owlmeans:consent';
+export const CONSENT_ESSENTIAL = 'essential';
+export const CONSENT_ANALYTICS = 'analytics';
+export const CONSENT_MARKETING = 'marketing';
+/**
+ * Where an application persists an explicit interface-language choice — `@owlmeans/client-i18n`'s
+ * `owlmeans-lng`. The interface language is strictly necessary storage (the visitor asked for it by
+ * choosing it), so it is written whatever the cookie decision says and no category governs it.
+ * Repeated here rather than imported: this package has no runtime dependencies, and the linker's
+ * language part has to run in an inline `<head>` script, before any bundle exists.
+ */
+export const CONSENT_LANGUAGE_KEY = 'owlmeans-lng';
+export const CONSENT_LOCALES = ['en', 'pl', 'ru', 'be', 'uk', 'es', 'de', 'fr'];
+/**
+ * The categories every OwlMeans surface starts with.
+ *
+ * What owlmeans.com already asked (analytics, marketing) plus the essential row, which the original
+ * widget left implicit — making it explicit is what lets a flow require an acknowledgement before
+ * it sets a session cookie, and what tells a visitor what is being stored regardless: the consent
+ * record itself and the interface language the visitor picked.
+ */
+export const DEFAULT_CONSENT_CATEGORIES = [
+    {
+        key: CONSENT_ESSENTIAL, required: true,
+        labelKey: 'essential', descriptionKey: 'essentialDesc',
+        globalVar: 'owlConsentEssential',
+        signals: ['security_storage', 'functionality_storage'],
+    },
+    {
+        key: CONSENT_ANALYTICS,
+        labelKey: 'analytics', descriptionKey: 'analyticsDesc',
+        globalVar: 'owlConsentAnalytics',
+        signals: ['analytics_storage'],
+    },
+    {
+        key: CONSENT_MARKETING,
+        labelKey: 'marketing', descriptionKey: 'marketingDesc',
+        globalVar: 'owlConsentMarketing',
+        signals: ['ad_storage', 'ad_user_data', 'ad_personalization'],
+    },
+];
+/**
+ * Every signal Consent Mode v2 knows, and what it defaults to before anyone has chosen.
+ *
+ * `security_storage` is granted by Google's own documented recommendation — it covers things like
+ * fraud prevention, which are strictly necessary. Everything else starts denied.
+ */
+export const CONSENT_SIGNAL_DEFAULTS = {
+    ad_storage: 'denied',
+    ad_user_data: 'denied',
+    ad_personalization: 'denied',
+    analytics_storage: 'denied',
+    functionality_storage: 'denied',
+    personalization_storage: 'denied',
+    security_storage: 'granted',
+};
+/** The URL parameter a decorated link carries the decision in, absent an override. */
+export const CONSENT_LINK_PARAM = 'owlcc';
+/** How old a decorated link's timestamp may be and still be trusted, in seconds, absent an override. */
+export const CONSENT_LINK_MAX_AGE = 300;
+/** Clock skew allowed the OTHER way — a timestamp up to this far in the future is still trusted. */
+export const CONSENT_LINK_SKEW = 60;
+//# sourceMappingURL=consts.js.map

package/build/consts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,qBAAqB,CAAA;AAEhD,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAEtC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAEvC,2FAA2F;AAC3F,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAA;AAEtD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAA;AAE/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAA;AAE5C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAA;AAElD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAA;AAExF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D;QACE,GAAG,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI;QACtC,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe;QACtD,SAAS,EAAE,qBAAqB;QAChC,OAAO,EAAE,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;KACvD;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe;QACtD,SAAS,EAAE,qBAAqB;QAChC,OAAO,EAAE,CAAC,mBAAmB,CAAC;KAC/B;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe;QACtD,SAAS,EAAE,qBAAqB;QAChC,OAAO,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,oBAAoB,CAAC;KAC9D;CACF,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAyC;IAC3E,UAAU,EAAE,QAAQ;IACpB,YAAY,EAAE,QAAQ;IACtB,kBAAkB,EAAE,QAAQ;IAC5B,iBAAiB,EAAE,QAAQ;IAC3B,qBAAqB,EAAE,QAAQ;IAC/B,uBAAuB,EAAE,QAAQ;IACjC,gBAAgB,EAAE,SAAS;CAC5B,CAAA;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAA;AAEzC,wGAAwG;AACxG,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAA;AAEvC,oGAAoG;AACpG,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAA"}

package/build/consts.local.d.ts

@@ -0,0 +1,4 @@
+export declare const CONSENT_LINK_VERSION = 2;
+/** A BCP 47-shaped tag: a 2–3 letter language and up to three subtags (`pl`, `pt-BR`, `zh-Hant-TW`). */
+export declare const LANGUAGE_TAG: RegExp;
+//# sourceMappingURL=consts.local.d.ts.map

package/build/consts.local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.local.d.ts","sourceRoot":"","sources":["../src/consts.local.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,IAAI,CAAA;AAErC,wGAAwG;AACxG,eAAO,MAAM,YAAY,QAA4C,CAAA"}

package/build/consts.local.js

@@ -0,0 +1,4 @@
+export const CONSENT_LINK_VERSION = 2;
+/** A BCP 47-shaped tag: a 2–3 letter language and up to three subtags (`pl`, `pt-BR`, `zh-Hant-TW`). */
+export const LANGUAGE_TAG = /^[a-z]{2,3}(?:[-_][a-z0-9]{1,8}){0,3}$/i;
+//# sourceMappingURL=consts.local.js.map

package/build/consts.local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.local.js","sourceRoot":"","sources":["../src/consts.local.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAErC,wGAAwG;AACxG,MAAM,CAAC,MAAM,YAAY,GAAG,yCAAyC,CAAA"}

package/build/gtm.d.ts

@@ -0,0 +1,72 @@
+import type { ConsentCategory, ConsentOptions, ConsentRecord } from './types.js';
+/**
+ * Push onto the tag-manager queue in the shape Google's own snippet uses.
+ *
+ * `arguments`, not an array literal. Both work with today's Consent API, but `arguments` is what
+ * `gtag.js` itself emits, and a page that carries both this and Google's snippet should not have
+ * two shapes in one queue.
+ */
+export declare function gtagConsent(..._args: unknown[]): void;
+/** Every signal the configured categories drive, at its pre-consent value. */
+export declare const consentDefaults: (categories?: ConsentCategory[]) => Record<string, 'granted' | 'denied'>;
+/** Every signal, at the value this record implies. */
+export declare const consentUpdate: (record: ConsentRecord, categories?: ConsentCategory[]) => Record<string, 'granted' | 'denied'>;
+/**
+ * Declare what is denied, before any tag can act.
+ *
+ * Idempotent through a window flag, because the page may carry this call twice — once inline in
+ * the document head, once from whatever bundle mounts the dialog — and a second `default` after a
+ * tag has loaded is worse than none: it can widen what was already narrowed.
+ */
+export declare const pushConsentDefaults: (opts?: ConsentOptions) => void;
+/**
+ * Apply a decision: globals first, then the signal update, then any per-category events.
+ *
+ * The order is load-bearing. A tag that fires on the update event reads the globals in the same
+ * turn, so writing them afterwards would let the first firing see the previous answer.
+ */
+export declare const applyConsent: (record: ConsentRecord, opts?: ConsentOptions) => void;
+/**
+ * Whether a stored decision grants tracking at all — a signal-bearing category, not merely the
+ * required essential one.
+ *
+ * "Signal-bearing" is what a required category can never be: it exists to gate whether a LOADER
+ * runs, and a required category is disclosure, not a question — everyone gets it. Only a category
+ * that both is optional and drives at least one Consent Mode signal counts, which is exactly what
+ * `googleTagHeadScript`'s `'basic'` mode gates a Google tag behind.
+ */
+export declare const trackingGranted: (record: ConsentRecord | null, categories?: ConsentCategory[]) => boolean;
+/**
+ * The inline script a document stamps ABOVE its tag-manager snippet.
+ *
+ * It exists because the defaults have to be on the queue before `gtm.js` loads, and a React bundle
+ * cannot be: by the time an island mounts, the container has been running for hundreds of
+ * milliseconds and has already decided what it may do. Emitting it from the HTML is the only
+ * ordering that holds — and it reads the stored record too, so a returning visitor's tags are not
+ * denied for the first paint of every page.
+ */
+export declare const consentBootstrapScript: (opts?: ConsentOptions) => string;
+/**
+ * Withhold a loader until a stored or later decision grants tracking.
+ *
+ * The counterpart to `consentBootstrapScript` for the `'basic'` gated loading mode
+ * (`@owlmeans/web-gtm`'s `GOOGLE_TAG_DEFAULT_MODE`): where the bootstrap always declares Consent
+ * Mode's defaults so a tag may load cookieless, this withholds the tag itself — the loader string
+ * is only ever reached once `trackingGranted` is true, either because a returning visitor's stored
+ * record already says so, or because `applyConsent` later dispatches {@link CONSENT_EVENT} with
+ * one that does. The listener removes itself on the first passing event, so the loader — which
+ * marks its own element and refuses to run twice — is asked to run at most once from here.
+ *
+ * `loaderExpr` is a complete statement or expression that runs the loader when reached — the
+ * self-invoking IIFE string `googleTagHeadScript`'s `gtagScript`/`gtmContainerScript` already
+ * produce, embedded here verbatim rather than called. It is placed inline exactly as
+ * `consentBootstrapScript`'s own output is: dynamic values (the storage key, the category shape,
+ * the event name) are JSON-encoded so nothing configured can break out of a string literal, and
+ * escaping the RESULT for HTML (`</script`, `<!--`) is left to whoever composes the final inline
+ * script — the same discipline `consentBootstrapScript` follows, and `googleTagHeadScript` already
+ * applies to the whole script it stamps.
+ */
+export declare const consentGateScript: (loaderExpr: string, opts?: ConsentOptions & {
+    categories?: ConsentCategory[];
+}) => string;
+//# sourceMappingURL=gtm.d.ts.map

package/build/gtm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gtm.d.ts","sourceRoot":"","sources":["../src/gtm.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAMhF;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAUrD;AAKD,8EAA8E;AAC9E,eAAO,MAAM,eAAe,gBACb,eAAe,EAAE,KAC7B,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAMrC,CAAA;AAED,sDAAsD;AACtD,eAAO,MAAM,aAAa,WAChB,aAAa,eAAe,eAAe,EAAE,KACpD,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAWrC,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,UAAW,cAAc,KAAG,IAO3D,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,YAAY,WAAY,aAAa,SAAS,cAAc,KAAG,IA6B3E,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,WAClB,aAAa,GAAG,IAAI,eAAc,eAAe,EAAE,KAC1D,OAEF,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,UAAW,cAAc,KAAG,MA+B9D,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,iBAAiB,eAChB,MAAM,SAAS,cAAc,GAAG;IAAE,UAAU,CAAC,EAAE,eAAe,EAAE,CAAA;CAAE,KAC7E,MAuBF,CAAA"}

package/build/gtm.js

@@ -0,0 +1,182 @@
+import { CONSENT_EVENT, CONSENT_KEY, CONSENT_SETUP_FLAG, CONSENT_SIGNAL_DEFAULTS, DEFAULT_CONSENT_CATEGORIES, } from './consts.js';
+import { consentLinkerScript } from './linker.js';
+const global = () => typeof window !== 'undefined' ? window : null;
+/**
+ * Push onto the tag-manager queue in the shape Google's own snippet uses.
+ *
+ * `arguments`, not an array literal. Both work with today's Consent API, but `arguments` is what
+ * `gtag.js` itself emits, and a page that carries both this and Google's snippet should not have
+ * two shapes in one queue.
+ */
+export function gtagConsent(..._args) {
+    const win = global();
+    if (win == null) {
+        return;
+    }
+    win.dataLayer = win.dataLayer ?? [];
+    // `arguments`, not `_args`. The rest parameter is only here to type the call sites; what goes on
+    // the queue must be the arguments object itself.
+    // eslint-disable-next-line prefer-rest-params
+    win.dataLayer.push(arguments);
+}
+const categoriesOf = (opts) => opts?.categories ?? DEFAULT_CONSENT_CATEGORIES;
+/** Every signal the configured categories drive, at its pre-consent value. */
+export const consentDefaults = (categories) => {
+    const used = new Set((categories ?? DEFAULT_CONSENT_CATEGORIES)
+        .flatMap(category => category.signals ?? []));
+    return Object.fromEntries(Object.entries(CONSENT_SIGNAL_DEFAULTS)
+        .filter(([signal]) => used.has(signal)));
+};
+/** Every signal, at the value this record implies. */
+export const consentUpdate = (record, categories) => {
+    const update = {};
+    for (const category of categories ?? DEFAULT_CONSENT_CATEGORIES) {
+        const granted = category.required === true || record[category.key] === true;
+        for (const signal of category.signals ?? []) {
+            // A signal named by two categories is granted only when every one of them is.
+            update[signal] = granted && update[signal] !== 'denied' ? 'granted' : 'denied';
+        }
+    }
+    return update;
+};
+/**
+ * Declare what is denied, before any tag can act.
+ *
+ * Idempotent through a window flag, because the page may carry this call twice — once inline in
+ * the document head, once from whatever bundle mounts the dialog — and a second `default` after a
+ * tag has loaded is worse than none: it can widen what was already narrowed.
+ */
+export const pushConsentDefaults = (opts) => {
+    const win = global();
+    if (win == null || opts?.silent === true || win[CONSENT_SETUP_FLAG] === true) {
+        return;
+    }
+    gtagConsent('consent', 'default', consentDefaults(categoriesOf(opts)));
+    win[CONSENT_SETUP_FLAG] = true;
+};
+/**
+ * Apply a decision: globals first, then the signal update, then any per-category events.
+ *
+ * The order is load-bearing. A tag that fires on the update event reads the globals in the same
+ * turn, so writing them afterwards would let the first firing see the previous answer.
+ */
+export const applyConsent = (record, opts) => {
+    const win = global();
+    if (win == null || opts?.silent === true) {
+        return;
+    }
+    const categories = categoriesOf(opts);
+    for (const category of categories) {
+        if (category.globalVar != null) {
+            win[category.globalVar] = category.required === true || record[category.key] === true;
+        }
+    }
+    gtagConsent('consent', 'update', consentUpdate(record, categories));
+    for (const category of categories) {
+        if (category.event != null && (category.required === true || record[category.key] === true)) {
+            win.dataLayer = win.dataLayer ?? [];
+            win.dataLayer.push({ event: category.event });
+        }
+    }
+    // A gate script (`consentGateScript`) that already decided NOT to load, because nothing was
+    // granted at the time it ran, has no other way to hear this. Consent Mode itself speaks only on
+    // `dataLayer`, which a tag that never loaded is not listening to.
+    if (typeof window !== 'undefined' && typeof window.dispatchEvent === 'function'
+        && typeof CustomEvent === 'function') {
+        window.dispatchEvent(new CustomEvent(CONSENT_EVENT, { detail: { record } }));
+    }
+};
+/**
+ * Whether a stored decision grants tracking at all — a signal-bearing category, not merely the
+ * required essential one.
+ *
+ * "Signal-bearing" is what a required category can never be: it exists to gate whether a LOADER
+ * runs, and a required category is disclosure, not a question — everyone gets it. Only a category
+ * that both is optional and drives at least one Consent Mode signal counts, which is exactly what
+ * `googleTagHeadScript`'s `'basic'` mode gates a Google tag behind.
+ */
+export const trackingGranted = (record, categories = DEFAULT_CONSENT_CATEGORIES) => record != null && categories.some(category => !category.required && (category.signals?.length ?? 0) > 0 && record[category.key] === true);
+/**
+ * The inline script a document stamps ABOVE its tag-manager snippet.
+ *
+ * It exists because the defaults have to be on the queue before `gtm.js` loads, and a React bundle
+ * cannot be: by the time an island mounts, the container has been running for hundreds of
+ * milliseconds and has already decided what it may do. Emitting it from the HTML is the only
+ * ordering that holds — and it reads the stored record too, so a returning visitor's tags are not
+ * denied for the first paint of every page.
+ */
+export const consentBootstrapScript = (opts) => {
+    const defaults = JSON.stringify(consentDefaults(categoriesOf(opts)));
+    const categories = JSON.stringify(categoriesOf(opts).map(category => ({
+        key: category.key,
+        required: category.required === true,
+        signals: category.signals ?? [],
+        globalVar: category.globalVar ?? null,
+    })));
+    const storageKey = JSON.stringify(opts?.storageKey ?? CONSENT_KEY);
+    const flag = JSON.stringify(CONSENT_SETUP_FLAG);
+    // Right after the default is pushed and before EITHER storage read below (this one, and the
+    // `consentGateScript` that is concatenated after this whole IIFE) — an adopted decision must
+    // already be in storage by the time anything reads it, so `gtm.js`'s own `page_view` never sees
+    // the parameter and a granted decision loads the tag on arrival. A page with no `opts.linker`
+    // gets an empty string here, unchanged from before this existed.
+    const linker = opts?.linker != null ? `${consentLinkerScript(opts)};` : '';
+    return `(function(w,d){` +
+        `w.dataLayer=w.dataLayer||[];function g(){w.dataLayer.push(arguments)}` +
+        `if(w[${flag}])return;g('consent','default',${defaults});w[${flag}]=true;` +
+        linker +
+        `var raw=null;try{raw=w.localStorage.getItem(${storageKey})}catch(e){}` +
+        `if(!raw){var p=('; '+d.cookie).split('; '+${storageKey}+'=');` +
+        `if(p.length===2){raw=p.pop().split(';').shift()}}` +
+        `if(!raw)return;var r;try{r=JSON.parse(raw)}catch(e){return}` +
+        `var cs=${categories},u={};` +
+        `for(var i=0;i<cs.length;i++){var c=cs[i];var ok=c.required||r[c.key]===true;` +
+        `if(c.globalVar){w[c.globalVar]=ok}` +
+        `for(var j=0;j<c.signals.length;j++){var s=c.signals[j];` +
+        `u[s]=ok&&u[s]!=='denied'?'granted':'denied'}}` +
+        `g('consent','update',u)})(window,document)`;
+};
+/**
+ * Withhold a loader until a stored or later decision grants tracking.
+ *
+ * The counterpart to `consentBootstrapScript` for the `'basic'` gated loading mode
+ * (`@owlmeans/web-gtm`'s `GOOGLE_TAG_DEFAULT_MODE`): where the bootstrap always declares Consent
+ * Mode's defaults so a tag may load cookieless, this withholds the tag itself — the loader string
+ * is only ever reached once `trackingGranted` is true, either because a returning visitor's stored
+ * record already says so, or because `applyConsent` later dispatches {@link CONSENT_EVENT} with
+ * one that does. The listener removes itself on the first passing event, so the loader — which
+ * marks its own element and refuses to run twice — is asked to run at most once from here.
+ *
+ * `loaderExpr` is a complete statement or expression that runs the loader when reached — the
+ * self-invoking IIFE string `googleTagHeadScript`'s `gtagScript`/`gtmContainerScript` already
+ * produce, embedded here verbatim rather than called. It is placed inline exactly as
+ * `consentBootstrapScript`'s own output is: dynamic values (the storage key, the category shape,
+ * the event name) are JSON-encoded so nothing configured can break out of a string literal, and
+ * escaping the RESULT for HTML (`</script`, `<!--`) is left to whoever composes the final inline
+ * script — the same discipline `consentBootstrapScript` follows, and `googleTagHeadScript` already
+ * applies to the whole script it stamps.
+ */
+export const consentGateScript = (loaderExpr, opts) => {
+    const gate = JSON.stringify(categoriesOf(opts).map(category => ({
+        key: category.key,
+        required: category.required === true,
+        hasSignal: (category.signals ?? []).length > 0,
+    })));
+    const storageKey = JSON.stringify(opts?.storageKey ?? CONSENT_KEY);
+    const event = JSON.stringify(CONSENT_EVENT);
+    return `(function(w,d){` +
+        `function ok(r){if(!r)return false;var cs=${gate};` +
+        `for(var i=0;i<cs.length;i++){var c=cs[i];` +
+        `if(!c.required&&c.hasSignal&&r[c.key]===true)return true}return false}` +
+        `function load(){${loaderExpr}}` +
+        `var raw=null;try{raw=w.localStorage.getItem(${storageKey})}catch(e){}` +
+        `if(!raw){var p=('; '+d.cookie).split('; '+${storageKey}+'=');` +
+        `if(p.length===2){raw=p.pop().split(';').shift()}}` +
+        `var r=null;if(raw){try{r=JSON.parse(raw)}catch(e){r=null}}` +
+        `if(ok(r)){load();return}` +
+        `function h(ev){if(ok(ev&&ev.detail&&ev.detail.record)){` +
+        `w.removeEventListener(${event},h);load()}}` +
+        `w.addEventListener(${event},h)` +
+        `})(window,document)`;
+};
+//# sourceMappingURL=gtm.js.map

package/build/gtm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gtm.js","sourceRoot":"","sources":["../src/gtm.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,uBAAuB,EACvE,0BAA0B,GAC3B,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAIjD,MAAM,MAAM,GAAG,GAAyB,EAAE,CACxC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAkC,CAAC,CAAC,CAAC,IAAI,CAAA;AAE3E;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAG,KAAgB;IAC7C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAChB,OAAM;IACR,CAAC;IACD,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAA;IACnC,iGAAiG;IACjG,iDAAiD;IACjD,8CAA8C;IAC9C,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;AAC/B,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,IAAqB,EAAqB,EAAE,CAChE,IAAI,EAAE,UAAU,IAAI,0BAA0B,CAAA;AAEhD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,UAA8B,EACQ,EAAE;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,0BAA0B,CAAC;SAC5D,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;IAE/C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC;SAC9D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAe,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC,CAAA;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,MAAqB,EAAE,UAA8B,EACf,EAAE;IACxC,MAAM,MAAM,GAAyC,EAAE,CAAA;IACvD,KAAK,MAAM,QAAQ,IAAI,UAAU,IAAI,0BAA0B,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAA;QAC3E,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAC5C,8EAA8E;YAC9E,MAAM,CAAC,MAAM,CAAC,GAAG,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;QAChF,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAqB,EAAQ,EAAE;IACjE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,IAAI,GAAG,IAAI,IAAI,IAAI,IAAI,EAAE,MAAM,KAAK,IAAI,IAAI,GAAG,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7E,OAAM;IACR,CAAC;IACD,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACtE,GAAG,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAA;AAChC,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAqB,EAAE,IAAqB,EAAQ,EAAE;IACjF,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,IAAI,GAAG,IAAI,IAAI,IAAI,IAAI,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QACzC,OAAM;IACR,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAErC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;YAC/B,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAA;QACvF,CAAC;IACH,CAAC;IAED,WAAW,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;IAEnE,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAA;YACnC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,4FAA4F;IAC5F,gGAAgG;IAChG,kEAAkE;IAClE,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,UAAU;WAC1E,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;QACvC,MAAM,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;IAC9E,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,MAA4B,EAAE,UAAU,GAAsB,0BAA0B,EAC/E,EAAE,CAAC,MAAM,IAAI,IAAI,IAAI,UAAU,CAAC,IAAI,CAC7C,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,CACvG,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,IAAqB,EAAU,EAAE;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpE,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,KAAK,IAAI;QACpC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;KACtC,CAAC,CAAC,CAAC,CAAA;IACJ,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,IAAI,WAAW,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;IAC/C,4FAA4F;IAC5F,6FAA6F;IAC7F,gGAAgG;IAChG,8FAA8F;IAC9F,iEAAiE;IACjE,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAE1E,OAAO,iBAAiB;QACtB,uEAAuE;QACvE,QAAQ,IAAI,kCAAkC,QAAQ,OAAO,IAAI,SAAS;QAC1E,MAAM;QACN,+CAA+C,UAAU,cAAc;QACvE,6CAA6C,UAAU,QAAQ;QAC/D,mDAAmD;QACnD,6DAA6D;QAC7D,UAAU,UAAU,QAAQ;QAC5B,8EAA8E;QAC9E,oCAAoC;QACpC,yDAAyD;QACzD,+CAA+C;QAC/C,4CAA4C,CAAA;AAChD,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,UAAkB,EAAE,IAA0D,EACtE,EAAE;IACV,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9D,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,KAAK,IAAI;QACpC,SAAS,EAAE,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;KAC/C,CAAC,CAAC,CAAC,CAAA;IACJ,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,IAAI,WAAW,CAAC,CAAA;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;IAE3C,OAAO,iBAAiB;QACtB,4CAA4C,IAAI,GAAG;QACnD,2CAA2C;QAC3C,wEAAwE;QACxE,mBAAmB,UAAU,GAAG;QAChC,+CAA+C,UAAU,cAAc;QACvE,6CAA6C,UAAU,QAAQ;QAC/D,mDAAmD;QACnD,4DAA4D;QAC5D,0BAA0B;QAC1B,yDAAyD;QACzD,yBAAyB,KAAK,cAAc;QAC5C,sBAAsB,KAAK,KAAK;QAChC,qBAAqB,CAAA;AACzB,CAAC,CAAA"}

package/build/i18n/be.json

@@ -0,0 +1,36 @@
+{
+    "title": "Налады файлаў cookie",
+    "description": "Мы выкарыстоўваем файлы cookie, каб палепшыць ваш досвед прагляду, паказваць персаналізаваную рэкламу ці змесціва і аналізаваць наш трафік. Націскаючы «Прыняць усе», вы пагаджаецеся на выкарыстанне файлаў cookie.",
+    "essential": "Неабходныя файлы cookie",
+    "essentialDesc": "Патрэбныя для працы сайта — уваход, бяспека і захаванне вашага выбару адносна файлаў cookie і мовы інтэрфейсу. Іх нельга адключыць.",
+    "analytics": "Аналітычныя файлы cookie",
+    "analyticsDesc": "Дапамагаюць нам паляпшаць наш вэб-сайт, збіраючы і паведамляючы інфармацыю пра яго выкарыстанне.",
+    "marketing": "Маркетынгавыя файлы cookie",
+    "marketingDesc": "Выкарыстоўваюцца для адсочвання наведвальнікаў на розных вэб-сайтах дзеля паказу актуальнай і цікавай рэкламы.",
+    "required": "Абавязкова",
+    "acceptAll": "Прыняць усе",
+    "acceptAndContinue": "Прыняць і працягнуць",
+    "savePreferences": "Захаваць налады",
+    "policyLink": "Палітыка файлаў cookie",
+    "openPreferences": "Налады файлаў cookie",
+    "close": "Закрыць",
+    "loginReason": "Уваход захоўвае сеансавы файл cookie. Прыміце неабходныя файлы cookie, каб працягнуць.",
+    "manage": "Змяніць налады",
+    "policyTitle": "Палітыка файлаў cookie",
+    "policyIntro": "Гэтая старонка апісвае файлы cookie і падобныя сховішчы, якія выкарыстоўвае гэтая праграма, і як імі кіраваць.",
+    "policyStorage": "Ваш выбар захоўваецца ў гэтым браўзеры пад ключом «{{key}}» — і ў лакальным сховішчы, і ў файле cookie.",
+    "policyRetention": "Запіс захоўваецца {{days}} дзён, пасля чаго мы спытаем зноў.",
+    "policyOperator": "Гэтая праграма належыць {{operator}}.",
+    "policyContact": "Азнаёмцеся з іх палітыкай прыватнасці і ўмовамі карыстання, каб даведацца, як яны апрацоўваюць вашы даныя.",
+    "policyServicesOf": "Сэрвісы — {{category}}",
+    "policyOtherServices": "Іншыя сэрвісы",
+    "policyOtherServicesDesc": "Сэрвісы, якія гэтая праграма выкарыстоўвае па-за пералічанымі вышэй катэгорыямі.",
+    "policyProvider": "Пастаўшчык",
+    "policyPurpose": "Мэта",
+    "policyCookies": "Файлы cookie",
+    "policyServicePrivacy": "Палітыка прыватнасці: {{provider}}",
+    "privacy": "Палітыка прыватнасці",
+    "terms": "Умовы карыстання",
+    "domains": "Гэты выбар распаўсюджваецца на {{domains}}.",
+    "policyDomains": "Гэты выбар распаўсюджваецца на наступныя дамены:"
+}

package/build/i18n/de.json

@@ -0,0 +1,36 @@
+{
+    "title": "Cookie-Einstellungen",
+    "description": "Wir verwenden Cookies, um Ihr Surferlebnis zu verbessern, personalisierte Anzeigen oder Inhalte bereitzustellen und unseren Datenverkehr zu analysieren. Indem Sie auf „Alle akzeptieren\" klicken, stimmen Sie der Verwendung von Cookies zu.",
+    "essential": "Notwendige Cookies",
+    "essentialDesc": "Erforderlich, damit die Website funktioniert — Anmeldung, Sicherheit und das Speichern Ihrer Cookie-Auswahl und der Oberflächensprache. Sie lassen sich nicht abschalten.",
+    "analytics": "Analyse-Cookies",
+    "analyticsDesc": "Helfen uns, unsere Website zu verbessern, indem sie Informationen zur Nutzung sammeln und melden.",
+    "marketing": "Marketing-Cookies",
+    "marketingDesc": "Werden verwendet, um Besucher über Websites hinweg zu verfolgen und relevante, ansprechende Werbung anzuzeigen.",
+    "required": "Erforderlich",
+    "acceptAll": "Alle akzeptieren",
+    "acceptAndContinue": "Akzeptieren und fortfahren",
+    "savePreferences": "Einstellungen speichern",
+    "policyLink": "Cookie-Richtlinie",
+    "openPreferences": "Cookie-Einstellungen",
+    "close": "Schließen",
+    "loginReason": "Bei der Anmeldung wird ein Sitzungs-Cookie gespeichert. Akzeptieren Sie die notwendigen Cookies, um fortzufahren.",
+    "manage": "Einstellungen verwalten",
+    "policyTitle": "Cookie-Richtlinie",
+    "policyIntro": "Diese Seite beschreibt die Cookies und ähnliche Speicher, die diese Anwendung verwendet, und wie Sie sie steuern können.",
+    "policyStorage": "Ihre Auswahl wird in diesem Browser unter „{{key}}\" gespeichert — sowohl im lokalen Speicher als auch als Cookie.",
+    "policyRetention": "Der Eintrag wird {{days}} Tage aufbewahrt, danach werden Sie erneut gefragt.",
+    "policyOperator": "Diese Anwendung wird von {{operator}} betrieben.",
+    "policyContact": "Sehen Sie in deren Datenschutzerklärung und Bedingungen nach, wie Ihre Daten verarbeitet werden.",
+    "policyServicesOf": "Dienste — {{category}}",
+    "policyOtherServices": "Weitere Dienste",
+    "policyOtherServicesDesc": "Dienste, die diese Anwendung außerhalb der oben genannten Kategorien nutzt.",
+    "policyProvider": "Anbieter",
+    "policyPurpose": "Zweck",
+    "policyCookies": "Cookies",
+    "policyServicePrivacy": "Datenschutzerklärung von {{provider}}",
+    "privacy": "Datenschutzerklärung",
+    "terms": "Nutzungsbedingungen",
+    "domains": "Diese Wahl gilt für {{domains}}.",
+    "policyDomains": "Diese Wahl gilt für die folgenden Domains:"
+}

package/build/i18n/en.json

@@ -0,0 +1,36 @@
+{
+    "title": "Cookie Preferences",
+    "description": "We use cookies to enhance your browsing experience, serve personalized ads or content, and analyze our traffic. By clicking \"Accept All\", you consent to our use of cookies.",
+    "essential": "Essential Cookies",
+    "essentialDesc": "Required for the site to work — signing in, security, and remembering your cookie choices and interface language. They cannot be switched off.",
+    "analytics": "Analytics Cookies",
+    "analyticsDesc": "Help us improve our website by collecting and reporting information on its usage.",
+    "marketing": "Marketing Cookies",
+    "marketingDesc": "Used to track visitors across websites to display relevant and engaging advertisements.",
+    "required": "Required",
+    "acceptAll": "Accept All",
+    "acceptAndContinue": "Accept & continue",
+    "savePreferences": "Save Preferences",
+    "policyLink": "Cookie Policy",
+    "openPreferences": "Cookie preferences",
+    "close": "Close",
+    "loginReason": "Signing in stores a session cookie. Accept essential cookies to continue.",
+    "manage": "Manage preferences",
+    "policyTitle": "Cookie Policy",
+    "policyIntro": "This page describes the cookies and similar storage this application uses, and how you can control them.",
+    "policyStorage": "Your choice is stored in this browser under \"{{key}}\", both in local storage and as a cookie.",
+    "policyRetention": "The record is kept for {{days}} days, after which you will be asked again.",
+    "policyOperator": "This application is operated by {{operator}}.",
+    "policyContact": "See their privacy policy and terms for how they handle your data.",
+    "policyServicesOf": "Services — {{category}}",
+    "policyOtherServices": "Other services",
+    "policyOtherServicesDesc": "Services this application runs outside the categories above.",
+    "policyProvider": "Provider",
+    "policyPurpose": "Purpose",
+    "policyCookies": "Cookies",
+    "policyServicePrivacy": "{{provider}} privacy policy",
+    "privacy": "Privacy Policy",
+    "terms": "Terms & Conditions",
+    "domains": "This choice applies to {{domains}}.",
+    "policyDomains": "This choice applies across these domains:"
+}

package/build/i18n/es.json

@@ -0,0 +1,36 @@
+{
+    "title": "Preferencias de cookies",
+    "description": "Utilizamos cookies para mejorar tu experiencia de navegación, ofrecer anuncios o contenido personalizados y analizar nuestro tráfico. Al hacer clic en «Aceptar todo», aceptas nuestro uso de cookies.",
+    "essential": "Cookies esenciales",
+    "essentialDesc": "Necesarias para que el sitio funcione: inicio de sesión, seguridad y recordar tus decisiones sobre cookies y el idioma de la interfaz. No se pueden desactivar.",
+    "analytics": "Cookies analíticas",
+    "analyticsDesc": "Nos ayudan a mejorar nuestro sitio web recopilando e informando sobre su uso.",
+    "marketing": "Cookies de marketing",
+    "marketingDesc": "Se utilizan para rastrear a los visitantes en distintos sitios web y mostrar anuncios relevantes y atractivos.",
+    "required": "Obligatorias",
+    "acceptAll": "Aceptar todo",
+    "acceptAndContinue": "Aceptar y continuar",
+    "savePreferences": "Guardar preferencias",
+    "policyLink": "Política de cookies",
+    "openPreferences": "Preferencias de cookies",
+    "close": "Cerrar",
+    "loginReason": "Iniciar sesión guarda una cookie de sesión. Acepta las cookies esenciales para continuar.",
+    "manage": "Gestionar preferencias",
+    "policyTitle": "Política de cookies",
+    "policyIntro": "Esta página describe las cookies y el almacenamiento similar que utiliza esta aplicación, y cómo puedes controlarlos.",
+    "policyStorage": "Tu elección se guarda en este navegador bajo «{{key}}», tanto en el almacenamiento local como en una cookie.",
+    "policyRetention": "El registro se conserva {{days}} días, tras los cuales se te preguntará de nuevo.",
+    "policyOperator": "Esta aplicación está gestionada por {{operator}}.",
+    "policyContact": "Consulta su política de privacidad y sus términos para saber cómo tratan tus datos.",
+    "policyServicesOf": "Servicios — {{category}}",
+    "policyOtherServices": "Otros servicios",
+    "policyOtherServicesDesc": "Servicios que esta aplicación utiliza fuera de las categorías anteriores.",
+    "policyProvider": "Proveedor",
+    "policyPurpose": "Finalidad",
+    "policyCookies": "Cookies",
+    "policyServicePrivacy": "Política de privacidad de {{provider}}",
+    "privacy": "Política de privacidad",
+    "terms": "Términos y condiciones",
+    "domains": "Esta elección se aplica a {{domains}}.",
+    "policyDomains": "Esta elección se aplica a los siguientes dominios:"
+}