Consent

Apex is bring-your-own consent. You run the banner. Apex reads the signal and decides what to do when no signal arrives.

Open Settings → Workspace → Privacy.

Default when nothing arrives

• Conservative (the default): missing signal means denied. Outbound ads and audiences stay off until your banner grants the purpose.
• Inferred: missing signal means granted. Use this only when your counsel says inferred consent is legal for you.

Apex does not sell a consent product. Naming OneTrust, Cookiebot, or GCM here is about the signal you already send, not an Apex feature.

Marketing vs transactional

Marketing letters and ad audiences honor this policy. Transactional letters (receipts, password resets, invites the person asked for) still send. Do not use a transactional letter to do marketing work around a deny.

What you will see

The Privacy page also shows which channel last sent a signal, so you can tell whether your banner is actually talking to Apex.