Provider
Google AdsSee all Google Ads cookies →Google Consent Mode v2 cookie that captures the gclid (Google Click Identifier) at click time when ad-storage consent has been granted. Pairs with _gcl_gs for delayed attribution.
90 days
Google LLC
_gcl_gf is a advertising cookie. Under Art. 5(3) ePrivacy Directive and the GDPR, it must not be set before the visitor has given prior, informed, freely-given consent.
If your scanner finds _gcl_gf on a page before the visitor interacts with your consent banner, that's a violation — the cookie loaded without a legal basis.
Fix: gate the script that sets this cookie behind your CMP, so it only fires after the relevant consent category is accepted.