Hi there,
The UMP SDK writes the consent status into IAB defined TC string into SharedPreference on Android devices, which is not encrypted, so that any IAB conformed Ad networks' SDK can read it. The Google Mobile SDK encrypts the TC string when it reads it and sends the encrypted data to our server.
Best,
Jill
Google Mobile Ads SDK Team

ref:_00D1U1174p._5004Q2RwX3f:ref