Guides & Documentation
Everything you need to implement cookie consent on your website
¿Nuevo en CookieBeam?
Pon en marcha un banner de consentimiento de cookies funcional en menos de 10 minutos.
Guías destacadas
GTM Containers Are Becoming Google Tags: What It Means for Cookie Consent
Google is merging GTM and Google Tag into a unified product. Destinations replace separate gtag.js loads, settings get centralized, and the UI gets a redesign. Here's what changes for consent management and what stays the same.
Global Privacy Control (GPC) Explained: The New Standard for Opting Out
Discover what Global Privacy Control (GPC) is, how it works as a universal opt-out signal, and why compliance is now mandatory under CCPA and emerging privacy laws.
How Cookie Scanners Work: Deep Scanning, Live Monitoring, and Why Most CMPs Only Do Half the Job
Learn how automated cookie scanners detect cookies, scripts, and network connections, and why periodic scanning alone leaves compliance gaps. See how CookieBeam's two-layer detection system combines headless Chrome deep scanning with real-time client-side drift monitoring for cookies, scripts, and connections to catch every tracker, every time.
Recently Published
Ad Blockers vs Cookie Consent: Do You Still Need a Banner?
Ad blockers stop many trackers, and can even hide your banner. They still don't meet your legal obligation. Here's why you need a consent banner regardless, and how to keep it working when blockers strip it.
Jul 3, 2026Keyboard Focus in Cookie Banners
Focus is the keyboard user's cursor, and cookie banners keep losing it: no focus on open, a trap with no exit, or a sticky bar hiding the very field the user just tabbed to. Here's how to get focus right.
Jul 3, 2026Browser-Level Blocking vs Consent Management
Browsers block trackers to protect their own users. A consent manager makes your data collection lawful and documented. They do different jobs, and one can't stand in for the other.
Jul 3, 2026Cookie Consent for Online Marketplaces and Multi-Vendor Platforms
A marketplace tracks two audiences at once, buyers and sellers, and the platform and its sellers can end up as joint controllers of the same data. Here's how multi-vendor platforms handle cookie consent, controller roles, and the DSA's advertising limits.
Jul 3, 2026Is Your Analytics Vendor a Controller or Processor?
When you run Google Analytics, is Google acting on your instructions or its own? The answer decides who's liable, what contract you need, and whether the setup is even lawful. It varies by vendor, and sometimes by a single checkbox.
Jul 3, 2026What Is a Cookie Banner and How Does It Work?
A cookie banner isn't just a notice you click away. Under the hood it decides which scripts are allowed to run. Here's the anatomy of a banner and the sequence it goes through on every page load.
Jul 3, 2026Compliance
(200)Cookie Consent for Telecom and ISP Websites
The EU cookie law started as a telecoms rule. Telecom operators and ISPs carry a double obligation: consent for cookies on their websites, and consent for the traffic and location data their networks generate. Here's how to handle both.
GPP, MSPA & US State Signals: A Publisher's Guide
The US Privacy String you built for CCPA was deprecated in January 2024. GPP, the US National string, and the MSPA replaced it, and getting the signal wrong can be a misrepresentation. Here's how the new US privacy signals move through the ad stack.
Cookie Consent for Online Marketplaces and Multi-Vendor Platforms
A marketplace tracks two audiences at once, buyers and sellers, and the platform and its sellers can end up as joint controllers of the same data. Here's how multi-vendor platforms handle cookie consent, controller roles, and the DSA's advertising limits.
Laravel Cookie Consent: Blade Setup Guide 2026
Laravel renders Blade on the server, so the tag your team pasted into the master layout head fires on every request before consent. Here's how to control script placement with Blade stacks, gate server-side tracking, and read a JS-set consent cookie past Laravel's cookie encryption.
Implementing the IAB GPP __gpp() API
How the Global Privacy Platform's __gpp() function actually works: the six synchronous generic commands, the PingReturn object, applicableSections, and why the stub has to load first.
Data Portability Requests: What You Actually Have to Provide
Data portability is the most misunderstood data subject right. It is narrower than access, it only covers certain data, and a scanned PDF does not count. Here is exactly what GDPR Article 20 requires, what to leave out, and how the CCPA version differs.
Integration
(24)What Is Server-Side Google Tag Manager? (2026 Guide)
A plain-English explanation of server-side Google Tag Manager: how the two-container model works, and why it matters in 2026 for consent, first-party data, and measurement that survives ad blockers and Safari.
Meta Pixel & Conversions API: Consent Gating Done Right
Meta Consent Mode gives you fbq('consent','grant') and fbq('consent','revoke'), but the Conversions API ignores them. Here's the full consent layer for Meta: browser pixel, server events, US opt-outs, and withdrawal.
Cookie Consent for Headless & Composable Commerce
Splitting your storefront into a Jamstack frontend and a commerce API doesn't change the cookie rule. It changes where you enforce it, and it takes away some conveniences the old platform gave you for free.
TikTok Pixel & Events API: Load It Only After Consent
The default TikTok Pixel snippet writes cookies the moment it loads, before anyone touches your banner. Here's how to gate both the browser pixel and the Events API on real consent, using TikTok's Cookie Consent Mode.
Server-Side vs Client-Side GTM: Performance & Privacy
A clear-eyed comparison of server-side and client-side Google Tag Manager across performance, privacy, data control, resilience, cost, and complexity, with guidance on which to choose and when.
How to Set Up a Server-Side GTM Container (Hosting & Cost)
A step-by-step guide to provisioning a server-side GTM container: hosting options from Google Cloud Run to managed tagging hosts, custom domains, wiring up your web container, and what it costs to run.
Customization
(38)How to Migrate from Cookiebot to CookieBeam (Step by Step)
A Cookiebot-specific migration guide: export consent records, map categories, remove Cookiebot's tag-based blocking, and cut over to CookieBeam's automatic script interception, connection-level blocking, and continuous drift detection without breaking Consent Mode or losing consent history.
Building a First-Party Data Strategy for a Cookieless Future
Google kept third-party cookies, but the reasons to own your data didn't go away. Here's how to build a first-party data strategy on a foundation of valid consent, using Enhanced Conversions, Customer Match, and zero-party data.
Consent Fatigue: Stop Re-Prompting Users and Losing Consent
When visitors see your banner every session, they stop reading and start reflex-clicking. Most over-prompting is a bug, not a design choice. Here's how to store consent for a sensible window, scope it right, and ask again only when the law requires it.
Mobile Cookie Banner Optimization: Consent on Small Screens
Most of your traffic is on a phone, but most banners are designed on a desktop. Here's how to size touch targets, place the reject button, and lay out a consent banner that holds up when the screen shrinks.
Facebook Ads After Consent: Signal Loss and How to Recover It
Rising cost per result and under-reported conversions on Meta usually trace back to two signal cuts: Apple's ATT prompt and web cookie consent. Here's what breaks and how to claw back the signal, honestly.
How to Measure Your Cookie Banner's Performance
A single consent rate hides five different problems. Learn to read your banner as a funnel, from impression to interaction to the accept/reject/customize split, and segment it so you know exactly where consent leaks.
Setup
(23)Cookie Consent on Drupal: Klaro and the Modules
Drupal core has no cookie banner, so consent comes from a contrib module. In 2026 the default has shifted: EU Cookie Compliance is minimally maintained and points users to Klaro, which the new Drupal CMS adopted.
WooCommerce Cookie Consent: The 2026 Setup Guide
WooCommerce's own cart and session cookies are strictly necessary and need no consent. The tracking that does need consent comes from the plugins you add: Google for WooCommerce, Meta pixels, abandoned-cart tools. Here's what to block, what to leave alone, and how not to break checkout.
Cookie Consent on Webflow: No-Code and Custom Code
Webflow has no native, granular consent manager. Here's how to add a compliant cookie banner in 2026 using custom code, get the load order right so nothing tracks before consent, and wire up Consent Mode v2.
Cookie Consent in Vue and Nuxt: Gating Scripts Right
A developer's guide to cookie consent in Vue and Nuxt apps in 2026: avoiding hydration mismatches, deferring third-party scripts until consent with Nuxt Scripts, and wiring nuxt-gtag to Consent Mode v2.
Cookie Consent on Squarespace: Native Banner or CMP
Squarespace has a built-in cookie banner, but it doesn't block non-essential scripts before consent or keep an audit log. Here's what the native banner does, where it falls short, and how to add a real CMP with Code Injection.
Cookie Consent on Shopify: Customer Privacy API Guide
How cookie consent actually works on Shopify in 2026: the built-in banner, the Customer Privacy API (setTrackingConsent, visitorConsentCollected), Google Consent Mode v2, and when to add a dedicated CMP.
Basics
(20)The Consent Mode v2 Parameters: A Plain-English Reference
All seven Google Consent Mode signals explained: what each controls, which are storage permissions versus data-use instructions, and which Google product depends on which parameter.
What Is a Cookie Banner and How Does It Work?
A cookie banner isn't just a notice you click away. Under the hood it decides which scripts are allowed to run. Here's the anatomy of a banner and the sequence it goes through on every page load.
What Happens When You Reject Cookies?
Clicking reject shouldn't break the site. Here's what actually changes when you decline cookies, what a website is still allowed to do, and what it's legally not allowed to do.
What Are Tracking Cookies and How Do They Work?
Tracking cookies recognise you across pages and sites using a unique ID that maps to a profile on someone else's server. Here's what they actually do, how the mechanism works, and why they need consent.
Session vs Persistent Cookies: What's the Difference?
Session cookies vanish when you close the browser; persistent cookies stick around until they expire. One attribute decides which is which, and it has real consequences for privacy and compliance.
Secure and HttpOnly Cookie Flags Explained
Two cookie flags do a lot of quiet security work: Secure keeps a cookie off unencrypted connections, HttpOnly hides it from JavaScript. Here's what each protects against and where the __Host- prefix fits.