Guides & Documentation
Everything you need to implement cookie consent on your website
Showing 212 guides in Compliance
How to Add Cookie Consent to a React App: The 2026 Developer Guide
A practical guide to implementing cookie consent in React applications. Covers script loading strategies, consent state management with React Context, conditional rendering of tracking scripts, Google Consent Mode v2 integration, and one-line CookieBeam setup.
Microsoft Consent Mode for Clarity and Bing Ads: Complete Setup Guide
Set up Microsoft Consent Mode for both Clarity and Bing Ads in one go. Covers how consent signals work, what happens when visitors decline, and how CookieBeam handles it automatically alongside Google Consent Mode v2.
Google Tag Manager Consent Mode: Step-by-Step Setup Guide for 2026
Configure Google Consent Mode inside Google Tag Manager so your tags respect visitor consent choices. Covers default state, update commands, tag behavior, and verification.
GDPR Cookie Compliance Checklist: 15 Steps Every Website Must Follow in 2026
A practical, auditable checklist for GDPR cookie compliance. Covers prior consent, banner design, reject buttons, consent records, cookie scanning, Consent Mode, vendor management, and regular audits.
Cookie Policy Template: How to Write One That Actually Protects You
A practical guide to writing a cookie policy that satisfies GDPR requirements and actually protects your business. Includes a template structure, common mistakes, and how to keep it updated.
Cookie Consent for SaaS: What B2B Platforms Actually Need
SaaS platforms face unique consent challenges: sub-processors, embedded analytics, third-party integrations, and customers in multiple jurisdictions. Here's what you actually need to get right.
Cookie Consent Audit: How to Check If Your Website Is Actually Compliant
A practical audit checklist you can run right now to find cookie consent gaps on your website. Covers the 10 things regulators check first, with instructions for testing each one yourself.
CCPA/CPRA Cookie Consent: California Privacy Law Guide for Website Owners
Everything website owners need to know about California's CCPA and CPRA cookie consent requirements, from opt-out mechanisms to GPC support and enforcement penalties.
Prior Blocking: How to Actually Stop Scripts Before Consent
A banner that renders correctly but doesn't stop tracking scripts from running isn't compliant. This guide covers the client-side and server-side mechanisms for actually blocking non-essential scripts until consent, and why the most common ones quietly fail.
Cookie Consent for Telecom and ISP Websites
The EU cookie law started as a telecoms rule. Telecom operators and ISPs carry a double obligation: consent for cookies on their websites, and consent for the traffic and location data their networks generate. Here's how to handle both.
GPP, MSPA & US State Signals: A Publisher's Guide
The US Privacy String you built for CCPA was deprecated in January 2024. GPP, the US National string, and the MSPA replaced it, and getting the signal wrong can be a misrepresentation. Here's how the new US privacy signals move through the ad stack.
Cookie Consent for Online Marketplaces and Multi-Vendor Platforms
A marketplace tracks two audiences at once, buyers and sellers, and the platform and its sellers can end up as joint controllers of the same data. Here's how multi-vendor platforms handle cookie consent, controller roles, and the DSA's advertising limits.
Laravel Cookie Consent: Blade Setup Guide 2026
Laravel renders Blade on the server, so the tag your team pasted into the master layout head fires on every request before consent. Here's how to control script placement with Blade stacks, gate server-side tracking, and read a JS-set consent cookie past Laravel's cookie encryption.
Implementing the IAB GPP __gpp() API
How the Global Privacy Platform's __gpp() function actually works: the six synchronous generic commands, the PingReturn object, applicableSections, and why the stub has to load first.
Data Portability Requests: What You Actually Have to Provide
Data portability is the most misunderstood data subject right. It is narrower than access, it only covers certain data, and a scanned PDF does not count. Here is exactly what GDPR Article 20 requires, what to leave out, and how the CCPA version differs.
Is Your Analytics Vendor a Controller or Processor?
When you run Google Analytics, is Google acting on your instructions or its own? The answer decides who's liable, what contract you need, and whether the setup is even lawful. It varies by vendor, and sometimes by a single checkbox.
Cookie Data Retention: How Long Should You Keep the Data?
GDPR's storage limitation principle says personal data can't sit around forever. This guide covers how long cookies should live, how long the data they collect can be kept, and how to write a retention schedule that survives a regulator's question.
Consent Receipts and ISO/IEC 27560: A Standard for Provable Consent
GDPR Article 7 says you must be able to demonstrate consent. ISO/IEC 27560 gives that record a defined structure, and a receipt you can hand back to the user. Here's what the standard covers and how to use it without over-engineering.
The California Delete Act and DROP: 2026 Data Broker Rules
California's Delete Act lets consumers erase their data from every registered broker with one request through DROP. Here is how it works, who counts as a broker, and the 2026 deadlines.
YouTube & Vimeo Embeds: Consent Without Breaking Video
A standard YouTube or Vimeo embed connects to Google or Vimeo and sets storage before the visitor does anything. Here is how to gate video embeds properly, including what youtube-nocookie and dnt=1 actually do.
Virginia VCDPA Cookie Compliance for 2026
Virginia was the second state after California to pass a broad consumer privacy law, live since January 1, 2023. It uses an opt-out model, requires opt-in for sensitive data, and, unlike Colorado or Texas, does not make you honor the Global Privacy Control.
Cookie Consent for Video Game Studios
Epic Games paid $520 million to the FTC over Fortnite, and Genshin Impact's developer paid $20 million in 2025. Here's how game studios handle cookie consent on their marketing sites, web stores, and account pages, with COPPA and age-gating built in.
Verifying a Data Subject's Identity for a Privacy Request
Verify too little and you hand someone's data to an impostor. Verify too much and you break the law you are trying to follow. This is how to set the identity bar correctly under GDPR and the CCPA, including the requests where you are not allowed to verify at all.
Answering Vendor Privacy Questionnaires Without the Panic
Enterprise deals stall on a spreadsheet: the security and privacy questionnaire. Here's what SIG and CAIQ ask, which documents actually close the loop, and how the cookie consent questions get answered from your logs instead of a guess.