Test in a private session and inspect the page before and after each choice. Under an opt-in policy, the initial optional signals should be denied. After accepting or changing preferences, OptinStack sends an update matching its category mapping:
analytics_storage follows analytics.ad_storage, ad_user_data, and ad_personalization follow marketing.functionality_storage and personalization_storage follow preferences.security_storage follows necessary and remains granted.
Use browser developer tools, GTM preview, or Google's Tag Assistant to inspect the consent state and event order. Also confirm that OptinStack appears before GTM in the document.
Documentation: Consent signal mapping and Install order.