TC String

A TC String’s primary purpose is to encapsulate and encode all the information disclosed to a user and the expression of their preferences for personal data processing under the GDPR. Using a Consent Management Platform (CMP), the information is captured in an encoded and compact HTTP-transferable string. This string enables communication of transparency and consent information to entities, or “vendors,” that process a user’s data. Vendors decode a TC String to determine whether they have the necessary legal bases to process a user’s data for their purposes. The concise string data format enables a CMP to persist and retrieve a user’s preferences any time they are needed and transfer that information to any vendors that need it. 

Where Does CookieHub Store the TC String?

CookieHub stores the TC String in a 1st party cookie named euconsent-v2. 

What Information Is Stored in a TC String?

A TC String contains the following information:

• General metadata
  Standard markers that indicate details about a TC String such as its encoding version, when it was last updated, and when it was initially created, as well as details about the conditions of the transparency and consent values it contains such as the Global Vendor List version used, the CMP used, etc.
• User consent
  A user’s expression of consent given for processing their data. A user’s consent is expressed on two levels: per purpose and per vendor.
• Legitimate interest
  The record of a CMP having established legitimate interest transparency for a vendor and/or purpose and whether the user exercised their “Right to Object” to it. This includes signals for purposes in general and purposes declared specifically for a given vendor.
• Publisher restrictions
  The restrictions of a vendor’s data processing for a publisher within the context of the users trafficking their digital property.
• Publisher transparency and consent
  A segment of a TC String that publishers may use to establish transparency with and receive consent from users for their legal bases in order to process personal data or to share those data with vendors if they choose to.
• Specific jurisdiction disclosures
  The country in which the publisher’s business entity is established or the legislative country of reference and a record of whether Purpose 1, “[to] store and/or access information on a device,” was disclosed to the user as some jurisdictions handle this purpose differently.