Finding no Matomo cookies does not prove that no tracking requests occurred. Matomo distinguishes permission to use cookies from permission to collect tracking data. The technical behaviour must match the intended integration.
requireCookieConsent restricts cookie use but does not generally prevent tracking requests. requireConsent instead gates collection until permission is provided. This distinction does not itself determine the legal assessment of a particular setup.
State observable requirements
A test plan might specify:
Before permission: no analytics requests
After permission: intended page view
After withdrawal: no further events
Earlier activity: not transmitted retrospectively
The last requirement concerns the complete integration. Queues can release previously held events when permission changes. Preventing that requires corresponding control over event generation and loading, verified through testing.
Use a fresh session and observe network activity separately from browser storage. Test rejection, acceptance and withdrawal. A remembered choice from an earlier visit changes the starting conditions and should be recorded.
Inspect other trackers independently. Matomo permission must not silently become permission for another provider. Record actual requests rather than checkbox states alone.