菜单
Implementing the IAB Transparency and Consent Framework v2.2 for programmatic advertising consent management. Covers CMP registration, Global Vendor List integration, TC String encoding, publisher restrictions, and compliance validation.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/mukul975/Privacy-Data-Protection-Skills --skill tcf-v2-implementation命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
基于 SOC 职业分类
正在显示 SKILL.md
| name | tcf-v2-implementation |
| description | Implementing the IAB Transparency and Consent Framework v2.2 for programmatic advertising consent management. Covers CMP registration, Global Vendor List integration, TC String encoding, publisher restrictions, and compliance validation. |
| license | Apache-2.0 |
| metadata | {"author":"mukul975","version":"1.0","domain":"privacy","subdomain":"cookie-consent-compliance","tags":"tcf, iab, consent-management-platform, tc-string, global-vendor-list"} |
The IAB Europe Transparency and Consent Framework (TCF) v2.2, released in May 2023 as an update to v2.0, provides a standardized mechanism for collecting, encoding, and distributing user consent signals across the programmatic advertising supply chain. Publishers, advertisers, and ad technology vendors use TCF to communicate consent status through the TC String — a compact, base64url-encoded data structure. TCF v2.2 introduced key changes including the removal of legitimate interest as a legal basis for cross-device targeting (Purpose 2 in part) and restrictions on certain vendor practices.
Register Pinnacle E-Commerce Ltd's CMP with IAB Europe:
| Registration Field | Value |
|---|---|
| CMP Name | Pinnacle Consent Manager |
| Publisher | Pinnacle E-Commerce Ltd |
| CMP ID | Assigned by IAB Europe upon registration (e.g., 432) |
| Supported TCF version | 2.2 |
| GVL version | Latest (auto-updated weekly) |
| CMP JavaScript URL | https://cmp.pinnacle-ecommerce.com/tcf-v2.js |
Registration requirements:
__tcfapi stub before the full CMP loadsThe GVL is published at https://vendor-list.consensu.org/v3/vendor-list.json and contains:
{
"gvlSpecificationVersion": 3,
"vendorListVersion": 287,
"tcfPolicyVersion": 4,
"lastUpdated": "2026-03-01T12:00:00Z",
"purposes": {
"1": {
"id": 1,
"name": "Store and/or access information on a device",
"description": "Cookies, device or similar online identifiers...",
"illustrations": ["..."]
}
},
"vendors": {
"755": {
"id": 755,
"name": "Google Advertising Products",
"purposes": [1, 3, 4],
"legIntPurposes": [2, 7, 9, 10],
"flexiblePurposes": [2, 7, 9, 10],
"specialPurposes": [1, 2],
"features": [1, 2],
"specialFeatures": [],
"policyUrl": "https://policies.google.com/privacy",
"cookieMaxAgeSeconds": 63072000,
"usesCookies": true,
"usesNonCookieAccess": true
}
}
}
GVL Management for Pinnacle E-Commerce Ltd:
Pinnacle E-Commerce Ltd Vendor Subset:
| Vendor ID | Vendor Name | Purposes | Legal Basis |
|---|---|---|---|
| 755 | Google Advertising Products | 1, 3, 4 | Consent |
| 91 | Criteo SA | 1, 2, 3, 4, 7 | Consent |
| 42 | Taboola Inc. | 1, 2, 3, 4, 5, 7 | Consent |
| 69 | OpenX Technologies | 1, 2, 3, 4, 7 | Consent |
| 253 | Meta Platforms, Inc. | 1, 2, 3, 4, 7, 10 | Consent |
The 11 TCF purposes and their mapping for Pinnacle E-Commerce Ltd:
| TCF Purpose | Name | Legal Basis at Pinnacle |
|---|---|---|
| 1 | Store and/or access information on a device | Consent only |
| 2 | Select basic ads | Consent only |
| 3 | Create profiles for personalised advertising | Consent only |
| 4 | Use profiles to select personalised ads | Consent only |
| 5 | Create profiles to personalise content | Consent only |
| 6 | Use profiles to select personalised content | Consent only |
| 7 | Measure ad performance | Consent only |
| 8 | Measure content performance | Consent only |
| 9 | Understand audiences through statistics or combinations of data from different sources | Consent only |
| 10 | Develop and improve services | Consent only |
| 11 | Use limited data to select content | Consent only |
Special Purposes (always allowed, no consent required):
Features (declared, not consented to individually):
Special Features (require explicit consent):
The TC String is a base64url-encoded binary string containing:
Core String Segments:
| Field | Bits | Description |
|---|---|---|
| Version | 6 | TCF version (value: 2) |
| Created | 36 | Deciseconds since 01/01/2020 00:00:00 UTC |
| LastUpdated | 36 | Deciseconds since 01/01/2020 00:00:00 UTC |
| CmpId | 12 | CMP ID (Pinnacle: 432) |
| CmpVersion | 12 | CMP version number |
| ConsentScreen | 6 | Screen number in CMP where consent was given |
| ConsentLanguage | 12 | ISO 639-1 language code |
| VendorListVersion | 12 | GVL version used |
| TcfPolicyVersion | 6 | TCF Policy version (value: 4) |
| IsServiceSpecific | 1 | 1 = publisher-specific TC String |
| UseNonStandardStacks | 1 | Whether non-IAB standard stacks are used |
| PurposeConsents | 24 | Bitfield for purpose consent (purposes 1-24) |
| PurposeLegitimateInterests | 24 | Bitfield for purpose LI |
| PurposeOneTreatment | 1 | 0 = purpose 1 was disclosed; 1 = not |
| PublisherCC | 12 | ISO 3166-1 alpha-2 publisher country code |
Vendor Consent Section: Variable-length encoding of per-vendor consent using either a bitfield or range encoding, depending on which is more compact.
Publisher Restrictions Section: Overrides vendor-declared legal bases at the publisher level.
Pinnacle E-Commerce Ltd applies publisher restrictions to enforce consent-only for all purposes:
{
"publisherRestrictions": [
{
"purposeId": 2,
"restrictionType": 1,
"vendorIds": [91, 42, 69]
},
{
"purposeId": 7,
"restrictionType": 1,
"vendorIds": [91, 42, 69, 253]
},
{
"purposeId": 9,
"restrictionType": 1,
"vendorIds": [91, 42, 69]
},
{
"purposeId": 10,
"restrictionType": 1,
"vendorIds": [91, 42, 69, 253]
}
]
}
Restriction types:
The __tcfapi must be available before any vendor scripts load:
Stub Implementation (loads first):
(function() {
var queue = [];
var tcfapi = function(command, version, callback, parameter) {
if (command === 'addEventListener') {
queue.push({ command: command, callback: callback });
} else {
queue.push({ command: command, version: version, callback: callback, parameter: parameter });
}
};
tcfapi.queue = queue;
window.__tcfapi = tcfapi;
})();
Supported Commands:
| Command | Description |
|---|---|
| getTCData | Returns the TC String and parsed consent data |
| ping | Returns CMP status and loading state |
| addEventListener | Registers a callback for consent changes |
| removeEventListener | Removes a registered callback |
| getInAppTCData | Returns TC data for in-app (mobile) contexts |
getTCData Response:
{
"tcString": "CPyXXYAPyXXYAAGABCENB4CgAP_AAH_AAAAAHfoBpDxkBSFCAGJoYtkgAAAGxwAAICACABAAoAAAABoAIAQAAAAQAAAgBAAAABIAIAIAAABAGEAAAAAAQAAAAQAAAEAAAAAAIQIAAAAAAiBAAAAAAAAAAAAAAABAAAAAAAAAAgAAAAAAAQAA",
"tcfPolicyVersion": 4,
"cmpId": 432,
"cmpVersion": 1,
"gdprApplies": true,
"eventStatus": "useractioncomplete",
"purpose": {
"consents": { "1": true, "2": false, "3": false, "4": false, "7": true },
"legitimateInterests": {}
},
"vendor": {
"consents": { "755": true, "91": false, "42": false },
"legitimateInterests": {}
},
"publisher": {
"restrictions": { "2": { "91": 1, "42": 1, "69": 1 } }
}
}
| Requirement | Verification Method |
|---|---|
| CMP registered with IAB Europe | Check CMP ID in IAB registry |
| GVL version current (within 7 days) | Parse TC String VendorListVersion field |
| TC String decodes correctly | Use IAB reference decoder |
| Purpose 1 consent collected before device storage | Verify no cookies set pre-consent |
| Publisher restrictions encoded | Decode TC String restrictions segment |
__tcfapi responds to ping | Call __tcfapi('ping', 2, callback) |
| Consent UI shows all declared purposes | Compare UI with GVL purposes |
| Vendor list matches GVL subset | Compare displayed vendors with GVL |
| TC String transmitted in bid requests | Inspect OpenRTB consent field |