Start without consent
Behavior while consent is disabled
The SDK:- clears stored click attribution;
- clears queued browser events;
- does not decorate outbound links;
- rejects tracking calls with
consent_required.
bq_id still present in the current URL and resumes queue delivery. It cannot recover a click ID that has already been removed from both the page and storage.
Script-tag setup
Consent versus manual startup
These options solve different problems:consent: falseprevents attribution storage, outbound decoration, and event delivery.manualStart: truedelays navigation listeners and automatic queue flushing untilstart()is called on the SDK instance.
Server-side tracking
Browser consent state does not automatically control your backend. Before calling@biqli/sdk, biqli/sdk, or the server tracking API, your application must check the consent or legal-basis state stored for that user.
Do not trust a browser checkbox alone for this decision. Persist consent through your authenticated application flow, enforce it again on the server, and retain any records your applicable policy requires.
