- vendor/leaflet.js (no more CDN dependency for JS) - direct tile.openstreetmap.org (was {s}.tile) - backend GET /api/v1/auth/consents (check if all accepted) - frontend ConsentApi.status() before showing overlay - only show overlay once