Consent for Embedded Maps: The Script That Loads Before the Click

An embedded Google Map loads its scripts the moment the page loads, not when the visitor clicks. The consent check has to happen before the embed, not after it.

Cookie Consent on Single-Page Apps: The Route Change That Drops Consent

A single-page app never reloads the page, so the consent banner never reappears and the consent state never gets re-checked. The route change is where consent goes stale.

Consent or Pay: The Model the EDPB Ruled On

Pay for privacy or accept tracking: the consent-or-pay model spread across news sites, and the EDPB's Opinion 08/2024 says it fails the freely given test for large platforms. The details decide whether your version survives.

Consent for YouTube Embeds: The Video That Phones Home Before Play

A YouTube embed loads Google's trackers the moment the page loads, before anyone presses play. The fix is a two-click placeholder that holds the video until the visitor agrees.

Pre-Ticked Boxes Are Not Consent: The Fines Proved It

Pre-ticked consent boxes have been invalid since the CJEU Planet49 ruling in 2019. The CNIL fined Google 325 million euros and SHEIN 150 million in September 2025 for cookie failures, and the pattern is still everywhere.

Consent Proof: The Record That Makes Your Banner Worth Something

Consent proof is a record, not a screenshot: who consented, to what, when, and under which banner version. Export it from your CMP, store it, and check that it survives a consent change.

Consent Mode Basic vs Advanced: The Measurement Trade-Off

Consent Mode v2 has two deployments, and the choice decides what Google learns from visitors who say no. Basic blocks all tags until consent. Advanced sends cookieless pings first.

Consent for Live Chat Widgets: The Script That Loads Before Choice

The live chat widget is the script that loads before the visitor has a choice. It drops cookies and sends the page to a third party before the banner is answered. Gate it like any other tracker.

The TCF Vendor List: The Thousand-Vendor Problem on Your First Layer

The count is the story. Why the TCF vendor list got that long, and the three cuts that make it readable.

CMP Migration: The Consent Reset That Costs You Half Your Opt-Ins

Switching CMPs resets consent, and nobody budgets for it. What actually gets lost in the move, and the migration order that keeps the most.

TCF 2.2 and 2.3: Legitimate Interest Is Gone for Purposes 3 to 6, and the Vendor Count Is Now on the First Layer

TCF 2.2 removed legitimate interest as a legal basis for purposes 3 to 6 and put the vendor count on the first layer. TCF 2.3 made disclosed vendors mandatory from March 1, 2026. If your CMP still offers legitimate interest for personalised ads, it is out of date.

Analytics Without a Banner: The CNIL Exemption and the Four Conditions That Hold It Up

The CNIL lets some analytics run with no consent and no banner, but only inside a strict frame: audience measurement for the publisher alone, anonymous statistics, no cross-site tracking, no third parties. E-commerce conversion tracking is explicitly outside it.

Blog - ConsentFort

Blog

Cookiebot Alternatives: A Practical Comparison

A practical comparison of Cookiebot alternatives by scan quality, banner control, consent records, and pricing shape, for sites deciding whether to switch.

Consent on Checkout Pages: What a Banner Must Never Block

A consent banner on a checkout page carries the same legal duties and a much higher cost per mistake. What must stay reachable, what may wait, and how to test the overlap.

Your Consent Audit Log Is Only Useful If Someone Else Can Read It

Consent logs trapped in a vendor dashboard with proprietary exports fail when they are needed most: disputes, migrations and regulator requests. What a portable audit log needs.

You Added a Vendor on Tuesday. Your Consent Text Still Describes Last Month.

Vendor lists change faster than consent text. When a new vendor starts receiving data under old consent wording, the consent has a hole in it. Managing change notices properly.

Consent Records You Cannot Delete on Request Are a Liability, Not an Asset

Keeping consent proof forever sounds safe. It collides with erasure rights and storage limits. Retention rules for consent records that hold up.

Auditing Your Own Banner for Dark Patterns Before a Regulator Does

Pre ticked boxes are the easy catch. The subtler patterns, asymmetric buttons, confirm shaming, layered traps, are where audits bite.

Consent Renewal: Asking Again Is a Timing Problem Before It Is a Design Problem
The Consent Log Is the Product: What to Keep When a Choice Is Challenged
Consent Mode Signals: What Late Banner Firing Does to Your Data
Reject Button Parity: The Second Layer Is Where Consent Goes to Die

How Long to Keep Consent Records, and What to Delete on Schedule

Keep consent proof too short and you cannot defend a campaign. Keep everything forever and the archive itself becomes the risk. A retention logic for consent logs that holds up.

Consent Banners in the Wrong Language Are Not Consent

A banner a visitor cannot read cannot produce informed consent, and a banner a keyboard cannot reach cannot produce any consent at all. Language and access checks for multilingual sites.

Consent for Pop Ups and Lead Magnets: The Signup Nobody Reads

A lead magnet signup bundles consent decisions into one hurried click. Separating marketing consent from the download, writing the line people actually see, and keeping the evidence tidy.

Cookie Consent on Mobile: Designing a Banner That Fits a Small Screen

Desktop banners pasted onto phones cover half the content and train people to tap anything. Mobile specific consent design: size, thumb reach, equal choices, and reading order.

SMS Marketing Consent: Keeping Proof That Survives a Complaint

Text message marketing runs on stricter consent rules than email in many markets. What proof to capture at signup, how double opt in helps, and records that answer a complaint.

How Consent Travels When You Switch Email Platforms

Migrating an email list is a consent problem disguised as a data problem. Which records must move, what must never be imported, and warming up without burning trust.

Cookiebot Alternatives: A Practical Comparison

A practical way to compare consent platforms side by side: blocking, records, pricing units, design control, and support, with a shortlist method any team can run.

Consent in Companion Apps for Connected Devices

Smart devices phone home through companion apps that track, sync, and share. Where consent should appear in that flow, and the dark corners most setups miss.

Consent and Email Preference Centers: Giving Subscribers Control Without Losing Them

A preference center turns an unsubscribe into a choice. Designing consent options subscribers actually use, and honoring them everywhere the data travels.

Dark Patterns in Subscription Checkout: Consent That Is Not Really Consent

Pre-ticked add ons, hidden skip links, and roach motel cancellations turn subscription consent into a trap. Naming the patterns is the first step to removing them.

Consent for Subscription Boxes: Tracking That Renews Every Month

Subscription boxes renew, swap products, and add partners over time. Consent collected at signup has to survive a relationship that keeps changing.

The Webview Gap: Consent Inside Mobile Apps That Load Web Pages

Apps that open web pages in webviews often lose the consent state set in the browser, or vice versa. How the gap forms and how to close it.

Consent and Embedded Media: Videos, Maps, and Players That Load Before the Choice

Embedded videos and maps often load trackers before any consent choice. How embeds bypass banners, what two click solutions do, and how to audit a page full of third party content.

Consent and Loyalty Programs: Tracking That Follows the Customer Home

Loyalty programs join in store purchases, app behavior, and marketing into one profile. Members agree to points, not always to the full tracking picture. How to describe and honor that bargain honestly.

Consent and Email Preference Centers: Keeping Opt-Downs Honest

Preference centers promise subscribers control, but many quietly reset choices, bundle categories, or make unsubscribing the only real exit. Honest preference management is a consent practice, not a retention trick.

Consent Banner Load Order: Why Your Tags Must Wait for the CMP

The most common consent failure is not the banner's wording; it is sequencing. Tags that fire before the consent platform initializes collect data the visitor never agreed to, and the evidence sits in your own network log.

Consent in Mobile Apps: SDK Tracking Behind the App Banner

Mobile apps collect through SDKs that most consent banners never see. This guide covers how app tracking differs from web cookies and what a real in app consent flow must govern.

Consent and Loyalty Programs: Points, Profiles, and Tracking Choices

Loyalty programs run on tracking, and members rarely realize how much. Sites owe members a clear consent story for points tracking, personalized offers, and partner sharing.

Returning Customer Recognition and Consent: Cookies That Remember Too Much

Recognizing returning customers is convenient, and it depends on cookies that need a lawful basis. Recognition features should respect the consent record, not quietly rebuild profiles after a refusal.

Age Verification and Cookie Consent: Two Gates That Should Not Fight

Sites that need both age verification and cookie consent often stack two blocking gates that confuse visitors and break each other. Sequencing and shared state fix the experience.

Prechecked Boxes and Consent Defaults: Why the Starting Position Is the Whole Game

A prechecked marketing box at signup is not consent in most regimes, and a banner whose default is accept all teaches the same lesson. How defaults work legally and behaviorally, and the patterns that hold up.

Consent for SMS Marketing: Written Opt Ins, Quiet Hours, and Proof That Holds Up

Text marketing runs on stricter consent rules than email in many places: express written consent, clear disclosures, easy revocation, and records that survive a dispute. The operational checklist behind a compliant SMS program.

Consent for Loyalty Programs: Tracking Members Across Visits Without Breaking the Deal

Loyalty programs run on recognition: points, tiers, and personalization all require remembering the member. That makes consent a design problem at enrollment, in the app, and at the till, not just on the website banner.

A/B Testing Your Consent Banner: What You May Vary, What You May Not, and How to Read the Result

Banner tests usually optimize acceptance rate, which is precisely the metric that must not be optimized. The legitimate test space is clarity, comprehension, and completion, and the guardrail metrics matter more than the winner.

Cookie Consent on Headless Storefronts: Where the Banner Stack Usually Breaks

Headless builds separate the storefront from the platform, and consent tooling falls into the gap: late loading banners, tags firing from the app shell, and consent state lost between routes.

Testing Your Consent Banner Like You Test Checkout: A QA Routine That Catches Real Failures

Consent banners fail silently: buttons that do not save, refusals that do not propagate, states that reset. A repeatable QA routine covering devices, states, and tag behavior.

Designing a Consent Preference Center People Can Actually Use

The preference center is where consent choices live after the banner. Clear categories, plain descriptions, and a save that works decide whether it builds trust.

Consent Audit Trails: What to Keep, How Long, and How to Prove a Choice

When consent is challenged, the record is the defense. Which fields an audit trail needs, retention periods that make sense, and common gaps.

Consent Banners on Checkout Pages: Compliance Without Tanking the Sale

A banner appearing mid checkout is the worst timed interruption in commerce. How to handle consent on checkout and landing pages lawfully, why suppressing the banner is not the shortcut it looks like, and where the real fixes live.

Consent in Subscription Stores: The Rebill Is a New Moment of Truth

Subscription commerce repeats the tracking relationship every cycle: rebills, account pages, win back emails. Where consent choices made at signup follow the customer, and where subscription flows quietly override them.

Consent Banner Placement on Mobile: Bottom, Top, or Center Without Blocking the Content

On a small screen every banner placement is a compromise between visibility, usability, and compliance. How bottom, top, and modal placements perform, what regulators actually object to, and how to choose for a mobile first audience.

Second Visits: Remembering Consent Without Nagging Returning Visitors

Returning visitors should not face the banner on every visit, but remembered consent expires, changes, and differs by device. How consent memory should work, and where it breaks.

Cookiebot Alternatives: A Practical Comparison

A practical, feature-by-feature comparison framework for evaluating Cookiebot alternatives: performance, Consent Mode v2, records, and two-year total cost.

Do-Not-Sell Links: CCPA Opt-Out Mechanics for Shopify Stores

California shoppers need a working way to opt out of sale and sharing. What the link must do, where it lives, and how to wire it to your tags.

Cookie Banner Timing: When to Show the Banner Without Breaking the Visit

Banner timing is a compliance and UX problem at once. When to display, what to delay, and the tests that prove the order is right.

The Reject Button Test: Is Your Decline Option as Easy as Accept?

Regulators now test whether rejecting cookies is as easy as accepting them. How to run the reject button test on your own banner, what the common failures look like, and the fixes.

Consent Banner Copy That Informs Without Scaring Visitors

Two sentences is all the attention a consent banner gets. Writing the first sentence, labeling buttons with the actual choice, one-sentence purpose descriptions, and the read-it-out-loud tone test.

Re-consent cadence: how often should you re-ask visitors for cookie consent?

Consent goes stale: laws change, vendors change, and visitors forget what they agreed to. How to set a re-consent cadence that stays compliant without banner fatigue.

Multi-region consent banners: one banner or many?

EU opt-in, California opt-out, and a growing patchwork of state laws. How to run one consent banner system with regional variants instead of a mess of separate banners.

Cookie banner copy that gets real consent: wording that works

Nobody reads legal boilerplate, and regulators know it. The specific, plain wording that raises informed consent and survives scrutiny.

How to audit your own cookie banner in 20 minutes

You do not need a consultant to find the big consent gaps. A 20-minute self-audit: the tag check, the reject test, the persistence check, and the records review.

Is a cookie banner legally required?

For most websites that set non-essential cookies, yes. The EU GDPR and ePrivacy rules require opt-in consent before tracking cookies run, the UK ICO.

What is Google Consent Mode v2 and why did Google require it?

Google Consent Mode v2 is the framework Google tags use to receive a visitor's consent state and adjust their behavior accordingly. Since March 2024,.

Consent for Analytics on the Thank-You Page: The Purchase Event That Fires Before the Choice

The purchase event fires on the thank-you page, and the analytics tag fires with it, before the shopper has consented. The choice comes after the data, and that is the problem.

The Cookie Banner and the Back Button: What Happens to Consent When the Shopper Leaves

A shopper consents, buys, and hits the back button. The banner appears again, and the consent is gone, because the site stored it in a session that ended when the page changed.

Accept All and Reject All: Parity Is Not Optional Anymore

The CNIL's January 2022 fines, 150 million euros for Google and 60 million for Facebook, turned banner parity from best practice into the test regulators apply. One click to accept and five to refuse is now a documented

Embedded Maps Load Before the Choice: The Consent Leak in Every Footer

A Google Maps embed in the footer loads Google's cookies the moment the page loads, before the visitor has seen the banner. The map is the leak most sites never audit, because it sits below the fold and nobody thinks of

After Withdrawal, When May the Banner Ask Again?

GDPR Article 7 says withdrawing consent must be as easy as giving it. It says nothing about when you may ask again, so the honest answer is: not until something changes, and never on the next page load.

Consent Opt-In Rates: What a Good Number Looks Like, and What It Hides

Opt-in rates vary so much by sector, wording, and banner design that a single benchmark number is useless. The number worth tracking is your own rate against your own previous banner, with reject made equally easy.

Consent mode v2 in practice: what actually fires before consent

Ask three teams what fires before consent and you get three answers, and all three are confident. One says nothing fires. One says cookieless pings fire. One says the tags load but do not set

Consent receipts: what to store and for how long

A consent record that says a visitor consented, with no timestamp, no text version, and no list of purposes, is not a record. It is a claim, and a claim does not survive an audit. GDPR Article 7(1)

Embedded video that loads before the choice: the two click fix and why autoplay breaks it

An embedded video player is a third party service living inside your page, and the mainstream players set cookies and contact their servers the moment the embed loads, before anyone presses play. If that embed loads befo

Banner language that does not match the site: a consent validity problem, not a translation nicety

A French site showing an English banner, a German shop with consent text machine translated into legal fog: these get filed as localisation debt. They are worse than that. Consent must be informed, and information a visi

Consent timestamps and clock skew: when your proof of consent argues with itself

A consent record is evidence, and evidence with inconsistent timestamps invites questions the record was kept to answer. Records assembled from a browser clock, a server clock, and a consent platform's clock can disagree

Vendor purpose mapping errors: the tag that fires for a purpose nobody consented to

Consent categories are only as honest as the mapping underneath them. Every tag, pixel, and embedded script has to be assigned to the purpose it actually serves, and the commonest mapping error is a tool filed under the