Renewing consent on returning visits without nagging: a sensible expiry schedule
Set consent to expire after 6 to 12 months, re-prompt only when your vendor list or purposes change, and let users revisit their choices from a persistent footer link in between.
Why consent has to expire at all
Consent is a snapshot of a relationship between a user, your purposes, and your vendors. All three change over time: you add tools, drop tools, and the user's expectations shift. A three-year-old accept click cannot meaningfully cover a vendor you onboarded last month.
Regulators in several jurisdictions now expect renewal windows of 6 to 13 months depending on the market. Treating consent as permanent is increasingly hard to defend.
The nagging trap
The instinct is to re-prompt aggressively, but every unnecessary banner teaches users to dismiss banners without reading. A site that asks on every visit gets higher accept rates and lower-quality consent, because the choice has become muscle memory, not a decision.
The right schedule asks rarely and means it. When the banner does appear, users actually read it, because it appears when something genuinely changed.
A practical expiry schedule
Set a default expiry of 6 months for marketing and analytics consents, 12 months for strictly functional ones. On expiry, show a compact re-confirmation rather than the full first-run banner: you already know this user, so acknowledge the history.
Always re-prompt immediately when you add a new vendor or a new purpose, regardless of the schedule. And keep a persistent 'cookie settings' link in the footer so anyone can change their mind at any time without waiting for expiry.
What to log on renewal
Each renewal is a new consent record: timestamp, the exact purposes and vendors presented, and the choice made. Keep the old records too. If a regulator asks what basis you had for processing in March, the record from the March renewal answers it, even if the user changed their mind in June.
Is 6 or 12 months the right default?
Six months for advertising and marketing purposes, twelve for functional or analytics in most jurisdictions. Check local guidance; some markets specify 13 months.
Do we have to re-prompt when we remove a vendor?
No. Removal narrows processing, which never needs fresh consent. Only additions and new purposes trigger a re-prompt.
Does a footer settings link satisfy renewal requirements?
It satisfies the always-available-choice requirement, but it does not replace scheduled expiry. Both are needed.
Get a free consent audit of your website
Free consent auditFrequently asked questions
What is the first thing to check when consent rates suddenly change?
Whether the site changed: a redesign, a new tag, or a banner update usually explains a step change in rates. Compare the banner version and tag inventory against the date the numbers moved.
Should consent settings be reachable after the banner closes?
Yes. A persistent, findable settings link, usually in the footer, is how visitors change their minds, and honoring changes easily is part of what makes the original consent trustworthy.
How long should a consent choice be remembered?
Common practice runs from six to twelve months, after which visitors are asked again. The right period depends on jurisdiction and how fast the site's tracking changes; the date of the choice should always be stored with it.