TikTok Pixel has become a standard part of the ad stack for e-commerce and D2C brands, usually installed the same way Meta Pixel or Google Ads tags are — and treated with exactly the same (wrong) assumptions about consent.
It's not covered "automatically" by your CMP
Most cookie-banner tools (Cookiebot, Usercentrics, Complianz, CookieYes) ship with built-in recognition for the big names: Google Analytics, Meta Pixel, Google Ads. TikTok Pixel is newer to most of these catalogs, and depending on how it was installed, it can slip past a CMP's auto-blocking entirely:
- Installed via TikTok's own events API snippet, pasted directly into the site's
<head>by an agency or in-house marketer — this never passes through the CMP's script-blocking layer at all - Installed via Google Tag Manager, but as a custom HTML tag without a consent-trigger condition attached — GTM will happily fire it regardless of what the CMP says
- Installed through a Shopify/WooCommerce marketing app that doesn't know your CMP exists
In all three cases, the banner shows up, "Reject" is clickable, and the pixel fires anyway.
What TikTok Pixel actually collects
Past the obvious page-view/conversion tracking, TikTok's Pixel (and its server-side Events API counterpart) can capture email and phone number hashes for Advanced Matching, device and browser fingerprint data, and on-site behavioral events (add-to-cart, content view) — all of it standard third-party advertising data under GDPR's definition, requiring the same prior-consent standard as any other ad pixel. "It's newer than Meta" is not a legal exemption.
How to check if yours is actually gated
- Open DevTools → Network tab
- Reload the page without accepting the cookie banner
- Filter for
analytics.tiktok.comorbusiness-api.tiktok.com - Any hits here before a consent decision is a real finding, not a technicality
Fixing it
If the pixel was added via Tag Manager, add a consent-trigger condition matching the rest of your ad tags. If it was pasted directly into the theme or <head>, it needs to move into your CMP's script-blocking system (most CMPs support a type="text/plain" data-category="marketing" pattern for exactly this) rather than loading unconditionally.
Bannerproof checks for TikTok Pixel specifically, alongside Meta Pixel, Google Ads, LinkedIn Insight Tag and others, as part of every scan — including whether it respects a "Reject" click, not just whether a banner is present. First scan is free.
This article is informational, not legal advice. Bannerproof is an independent scanning tool, not a law firm or a data protection authority — see our Terms of Service for details.