How Mailocator works
The key factor is how and where the Mailocator snippet is implemented on the page – whether it is embedded directly into the website’s code or loaded via a tool like GTM (Google Tag Manager).
Snippet loaded via GTM linked to cookie consent:
Mailocator launches only after consent is granted – all campaigns will appear only after consent is given. In some cookie consent implementations, the change takes effect only on the next page (after a reload), so the campaign may not appear immediately after consent is granted.
Snippet embedded directly into the page (independent of consent):
Mailocator runs immediately - campaign display is determined by settings at the individual campaign level.
In both cases, you comply with GDPR regulations; the only difference is the degree of flexibility in using Mailocator.
Advantages and disadvantages of each approach
Launch via GTM after consent
Simple setup
Automatic compliance with consent
No campaigns can be displayed without consent or with limited consent
Disadvantages - Without consent, you cannot display even neutral content, such as informational boxes, general announcements, or campaigns that do not involve personal data
Launch independent of consent (by embedding the snippet directly into the page)
In this case, you should align each campaign with the required consent level.
Maximum flexibility
Ability to display neutral campaigns without consent
Precise control over marketing campaigns
How to set up consent correctly
Consider how to implement the snippet
either via GTM – consent management is handled globally
or directly on the page – consent management is handled at the campaign level
Limit activation to individual campaigns
marketing campaigns require consent
informational campaigns can run even without consent
Best practice
For maximum control:
implement Mailocator directly on the page (outside the GTM container)
and manage consent at the campaign level
This will allow you to:
display neutral campaigns even without consent
trigger marketing campaigns only after consent is granted
comply with GDPR regulations