I had enabled 'Do Not Track' in the browser, which broke the widget.
I'm sure the 3rd party provider regrets listening to the privacy nerd who insisted on supporting this header.