Simple Cookie Compliance solution for your business.

If your business uses analytics or advertising services and is located in the European Union (EU), or your website is visited by people located in the EU, then your business is subject to GDPR.  Additionally, if your website generates revenue from selling ad space, or from selling products and services to customers internationally, then your business is likely subject to GDPR.

If your website uses analytics or advertising services, and your business is located in the State of California (US), or your website is visited by people who may be residents of California, then your business is likely subject to CCPA.  Additionally, if your website generates revenue from selling ad space, or from selling products and services to customers from California, then your business is likely subject to CCPA.

Regulations like those found in Australia (Australian Privacy Principles), China (Cybersecurity Law, Consumer Protection Law and E-Commerce Law), and Japan (Act on the Protection of Personal Information), provide the lowest levels of choice, control and context. In these Moderate jurisdictions, there is no requirement to capture user consent prior to collecting their data, no guidelines for how to provide users with control over their data, and limited requirements for the types of information that must be accessible to users. 

Regulations like those found in California, USA (CCPA, soon to be replaced by the California Consumer Privacy Rights Act), Canada (PIPEDA, soon to be replaced by the Consumer Privacy Protection Act), and South Korea (Personal Information Protection Act) provide some level of choice, control and context. In these Robust jurisdictions, there are defined requirements to capture consent using an opt-out process, there are some guidelines for how users can opt-out, and there are established information requirements that must be provided to users during the consent process. 

Regulations like those found in the European Union (GDPR, soon to be updated by the ePrivacy Regulation), the United Kingdom (UK-GDPR and the Privacy and Electronic Communications Regulation), and India (Personal Data Protection Bill, soon to be enacted into law), provide the highest level of choice, control, and context. In these Heavy jurisdictions, there are defined requirements to capture consent using an opt-in process, there are established guidelines for how users can opt-in, and there are significant information requirements that must be provided to users during the consent process. 

EU privacy law requires that internet users be given “equal options” regarding cookies. Cookie banners without an initial “reject” or “reject all” option in the first layer violate the GDPR consent requirement. The Cookie Compliance banner gives three (3) equal choices that represent different configurations of consent, with the “reject all” option selected by default in the first layer.

No. Pre-selecting cookie categories for users violates the Informed Principle of GDPR, which expressly states in its recitals that pre-ticked boxes should not constitute consent.

With Cookie Compliance, configuration is set to ensure that all cookie category toggles are turned off by default, and dynamically toggles cookie categories based on the visitor’s selection in the first layer.

Legitimate Interests are a form of consent that a business can use as a legal basis for processing data, but only when that processing is necessary. Any indication that a company relies on legitimate interests, rather than on consent, for its use of cookies violates EU privacy law. Cookie Compliance is setup to show the banner to all site visitors, regardless of whether they are located in a jurisdiction where affirmative opt-in consent is not required.

Yes, we store data to help you comply with Proof-of-Consent requirements in the GDPR ( Article 7, Recital 42) and other data privacy regulations. These requirements say that if your website collects data on site visitors, including anonymized data for analytics, you are required to maintain a record that proves a site visitor consented to certain processing activities. 

Cookie Compliance export format is based on current work to establish a compliant consent record structure from International Organization for Standardization and the International Electrotechnical Commission (ISO/IEC 27560). 

Through the Autoblocking feature, 3rd-party services are blocked until consent is captured. It recognizes 282 tracker patterns from 181 providers, including Google Analytics and Facebook Pixel. A blocked script may still download, but it does not run. Two limits: a script that an already-allowed script adds later is not held (for example a tag fired by Google Tag Manager while Google Consent Mode lets it run), and on the Free plan blocking stops once the site passes its visit limit for the current cycle.

Yes. Cookie Compliance includes an easy integration with WordPress. Just install the Cookie Compliance for WordPress plugin and follow a few simple steps.

Yes, Cookie Compliance allows manual integration with any website, regardless of the technology it is created with, and provides instructions for how to add the necessary code to your website.

Yes. We refund the first payment of a subscription if you ask within 14 days of that payment. Billing errors and duplicate charges are also refunded; see our Terms of Service.

Yes. Cookie Compliance fully supports Google Consent Mode v2, and has since plugin version 2.4.14. When a visitor sets their consent, the banner emits all four v2 consent signals to Google via gtag(‘consent’, …) — ad_storage, analytics_storage, ad_user_data, and ad_personalization — so Google Ads, GA4, and remarketing behave according to the visitor’s actual choice. It also supports Facebook and Microsoft consent modes, and Global Privacy Control (GPC). You enable and configure these from the Consent Signals panel on the plugin’s Cookie Consent tab. (Note: IAB TCF is not supported.)

Yes. Connect Claude, ChatGPT, Cursor, GitHub Copilot or another MCP-capable assistant to the Cookie Compliance MCP server. With no account it can show a preview of the banner on your site; the preview records no consent. Once you sign in, it can install and configure your real banner. On WordPress, use the plugin rather than a pasted snippet. Platform-by-platform recipes are in the agent manual.