Blog

The YouTube Embed That Tracks Before Anyone Presses Play

A standard YouTube embed contacts Google the second the page opens and sets tracking cookies before anyone watches anything. Switching to youtube-nocookie does not fix it either. November 14, 2026

How Long a Yes Lasts: The Six-Month Consent Clock

No statute says how long cookie consent lasts. The regulators converge on six months, the CMP libraries default to a year, and Safari deletes the record after seven days. Pick a number on purpose. November 14, 2026

White Label Cookie Consent: What It Is and How to Choose a Platform

A white-label CMP lets an agency sell consent management under its own brand. The choice is not about the banner. It is about what the client sees, what you can resell, and who carries the licence cost. November 13, 2026

Cookiebot Alternatives for 2026

Cookiebot raised its base price by about 100 percent in August 2025 and auto-upgrades plans as page counts grow. The alternatives split cleanly by what you are actually paying for. November 13, 2026

When Your CMP Changes Its Tracker List: Who Has to Consent Again

Your consent platform updated its tracker list on Tuesday. The vendors changed, the purposes changed, and nobody was asked again. The old consents cover the old list, not the new one. November 11, 2026

The Banner That Loads in the Footer: Consent After the Page Already Tracked

The consent platform script sits in the footer because that is where the developer put it. The analytics tag sits in the head. The tag wins the race every single visit. November 11, 2026

Cookie Banner Copy: The Sentence That Decides the Accept Rate

Two banners, same design, same button. One says what the site does with data. The other says the site values privacy. The accept rates are ten points apart, and the copy is the reason. November 10, 2026

The AI Chatbot on Your Site: The Widget That Tracks Before It Asks

The chatbot sits in the corner of every page, ready to help. It also loads a third-party script, sets cookies, and sends the visitor's words to a vendor, all before the banner gets an answer. November 10, 2026

Cookie Consent for US-Only Sites: What You Still Need Without EU Traffic

No European visitors, no GDPR. That does not mean no consent work. State privacy laws, the GPC signal, and the do-not-sell link still apply, and they have their own rules. November 9, 2026

Cookie Consent for WordPress Sites: Plugin vs Platform

WordPress gives you two ways to handle consent: a plugin that lives inside the site, or a platform that manages it from outside. The right choice depends on how many sites you run and who maintains them. November 9, 2026

Consent Mode v2: What the Four Signals Actually Do

Consent Mode v2 is four switches, not one: ad_storage, analytics_storage, ad_user_data, and ad_personalization. What each one gates, and why basic vs advanced mode changes what a denial means. November 8, 2026

Your CMP's Cookie Scan Misses the Trackers That Matter

A cookie scan maps cookies, not tracking. The Meta pixel in the tag manager, the server-side tag, and the fingerprinting script never appear in the report, and the gap is where the liability sits. November 8, 2026

The Consent Banner After the EAA: What June 28 Changed for CMPs

The European Accessibility Act has applied since June 28, 2025, and it makes WCAG 2.1 Level AA the enforceable standard for covered services, including the cookie banner. November 6, 2026

Cookie Banner Dark Patterns: The Fines That Say What Not to Build

Regulators have stopped debating dark patterns and started fining them. The cases name the exact designs that cost companies hundreds of millions. November 7, 2026

Consent Mode v2 and Server-Side Tagging: What Changes When Tags Move Off the Page

Server-side tagging moves the tags, not the consent. The consent signal still has to travel with the data, and most setups drop it on the way. November 7, 2026

Your CMP Script Belongs in the Head, Not at the Bottom of the Page

A consent script loaded late lets tags fire before consent exists. The fix is load order: defaults denied first, tags second, and the banner script in the head where it can enforce that. November 6, 2026

White Label Cookie Consent: What It Is and How to Choose a Platform

White label consent means the banner carries your brand, not the vendor's. The choice that matters is not the logo, it is whether the platform can block tags before consent. November 5, 2026

Checkout Sets Cookies Before Consent. That Is Where the Banner Fails.

Payment steps, account areas, embedded chat, and media on checkout pages all set cookies, and most consent scans never look at them. A scan that only reads public pages blesses a banner that misdescribes the rest of the site. November 5, 2026

Consent Banners on Mobile: The Bottom Sheet Problem Nobody Tests

Most consent testing happens on desktop. On phones the banner becomes a bottom sheet that covers the page, fights the sticky cart bar, and gets dismissed by reflex. What to check on a small screen. November 4, 2026

Records of Consent: The Fields You Will Be Asked to Produce

When a regulator or a platform asks you to prove consent, a percentage in a dashboard is not proof. The record fields that make a consent receipt defensible, and how long to keep them. November 4, 2026

Testing Consent Mode in the Denied State, Not Just the Granted One

Most consent mode checks stop at the banner looking right. The denied state is where measurement quietly breaks: signals that stay granted, tags that fire early, and defaults nobody set on purpose. November 3, 2026

Your Redesign Changed Your Cookies. Rescan Before You Announce It.

A redesign swaps templates, embeds, and vendors in one release. The cookie list from the old site describes a site that no longer exists, and the banner keeps promising it anyway. November 3, 2026

White Label Cookie Consent: What It Is and How to Choose a Platform

Agencies and platforms resell consent tooling under their own brand. White label cookie consent sounds like a logo swap, but the real questions are data ownership, subdomain coverage, and who carries the compliance record. November 2, 2026

Cookiebot Alternatives for 2026

Sites leave a consent platform for ordinary reasons: price per pageview, scan limits, banner control, or support. A grounded look at what to compare when weighing alternatives, and what a migration has to preserve. November 2, 2026

Consent for Iframe Embeds: The Video Player That Sets Cookies Before Anyone Clicks Play

Embedded videos, maps, and booking widgets load third party cookies on page view, not on play. How embed consent gating works and where the common builds leak. November 1, 2026

Consent Mode Signal Loss: Diagnosing the Gap Between Banner Clicks and What Ads Platforms See

The banner records consent. The ad platform reports a fraction of it. Where the signal dies between the click, the tag, and the platform, and how to trace it in order. November 1, 2026

Consent Banner Keyboard Focus: The Tab Order Audit Most Teams Never Run

Screen reader and keyboard users meet your banner in DOM order, not visual order. How focus traps, skipped reject buttons, and banner overlays fail WCAG in production. October 31, 2026

Cookiebot Alternatives for 2026

Teams looking beyond Cookiebot in 2026 usually want simpler pricing, lighter scripts, or better consent records. The features that actually differ between alternatives, and how to shortlist without a rebuild. October 28, 2026

Consent on Subscription and Paywall Sites: Keeping Access and Choice Separate

Paywall sites often tangle login consent, marketing consent, and cookie consent into one wall. How to separate access from tracking choices so subscribers stay in control and regulators stay calm. October 28, 2026

White Label Cookie Consent: What It Is and How to Choose a Platform

Agencies resell consent tools under their own brand. What white label cookie consent includes, what to check in a platform, and the questions to ask before signing. October 27, 2026

Consent for Iframe Embeds: Videos, Maps, and Social Posts That Phone Home

Embedded videos, maps, and social posts load third party trackers before a visitor clicks anything. How to audit embeds and load them only after consent. October 27, 2026

Consent and Live Chat Widgets: The Tracker Hiding in Your Support Tool

Live chat feels like customer service, so teams forget it is also a tracker that loads before consent and records conversations. How chat widgets collect data, and how to configure one without breaking consent rules. October 26, 2026

Auditing Consent on Lead Generation Landing Pages

Landing pages are built fast, cloned often, and loaded with pixels from every campaign they have ever run. A practical audit method for consent on lead gen pages, from page speed of the banner to the form itself. October 26, 2026

Cookie Consent for Online Booking Tools: The Embed Nobody Scans

Scheduling and booking embeds load their own cookies and trackers inside your pages, often outside your consent platform's categories. How agencies find, categorise, and control booking tool tracking on client sites. October 25, 2026

Consent Banner Accessibility: Making the Banner Work With Screen Readers

A banner that keyboard and screen reader users cannot operate collects consent that is not worth much. Focus order, labels, contrast, and language checks that make a consent banner genuinely usable by everyone. October 25, 2026

White Label Cookie Consent: What It Is and How to Choose a Platform

Agencies resell consent tooling under their own brand so clients see one provider, not a chain of vendors. What white label consent includes, what to check in the contract, and where the model breaks down. October 24, 2026

Cookie Consent on School Websites: Keeping Pupil Data Out of Trackers

School sites run prospectus pages, parent portals, and embedded videos that quietly set trackers. How schools and their web partners should audit cookies with safeguarding, not just marketing, in mind. October 24, 2026

Cookie Scanner False Positives: A Triage Routine That Keeps Notices Accurate

Scanners mislabel cookies, invent categories, and miss context. A monthly triage routine for scanner reports that separates real findings from noise without ignoring either. October 20, 2026

Cookie Consent for Webinars and Event Registration Pages

Webinar platforms, registration forms, and reminder tools stack trackers onto a single signup page. Sorting what needs consent, what the registration itself covers, and where the pixels hide. October 19, 2026

Consent and Age Verification Overlays: Two Gates, Two Different Jobs

Age gates and cookie banners often collide on the same first screen. Keeping the legal checks separate, sequencing them so neither corrupts the other records, and auditing what loads before either is answered. October 19, 2026

Cookie Consent on Shopify After Checkout Extensibility: What Changed for Tracking

Shopify's checkout changes moved where pixels run and how consent gates them. What store teams need to recheck in their banner setup now that checkout runs on the new extensibility model. October 18, 2026

What Your Consent Banner Costs in Page Speed, and How to Get It Back

Consent platforms load early, block rendering, and chain tag managers behind them. Measuring the real performance cost of your banner and the configuration changes that claw most of it back. October 18, 2026

Cookie Consent on Careers Pages: The Recruitment Trackers Nobody Told Compliance About

Applicant tracking systems, recruitment marketing pixels, and embedded job widgets load on careers pages outside the main audit. What runs there, why candidate data raises the stakes, and how to govern it. October 17, 2026

Cookie Consent for Real Estate Sites: Portals, Map Widgets, and Mortgage Calculators

Property sites stack listing feeds, map tiles, valuation tools, and mortgage calculators, each with its own tracking. How consent applies when the page is mostly other companies' embeds, and what portals get wrong. October 17, 2026

Consent Inside SaaS Products: Embedded Tools, Subprocessors, and the Banner Nobody Sees

SaaS apps embed analytics, support chat, session replay, and billing tools that track users inside the product. Why app consent is harder than website consent and how to structure it honestly. October 16, 2026

Cookie Consent Handoff: The Checklist Agencies Should Leave Behind

When an agency launches a site, the consent setup usually leaves with them. A handoff checklist covering accounts, records, scanning cadence, and banner ownership so the client can run it after go live. October 15, 2026

Cookie Consent for Webinars and Virtual Events

Webinar platforms embed players, registration forms, and a crowd of tracking pixels on pages brands do not fully control. How consent works for event pages, embedded video, and follow up marketing. October 15, 2026

Cookie Consent for SaaS Free Trials: Banners Before Signup and Inside the App

SaaS trials cross from anonymous browsing into logged in use, and consent often breaks at the seam. How to handle banners on marketing pages, at signup, and inside the product. October 14, 2026

White Label Cookie Consent: What It Is and How to Choose a Platform

Agencies keep getting asked for cookie consent under their own brand. What white label consent actually covers, the features that matter for client work, and how to evaluate platforms. October 12, 2026

The consent pre-sales audit: what to check before you quote the project

Consent projects blow up when the quote is written before anyone has seen the actual tracking. A pre-sales audit checklist for agencies: what to scan, what to ask, and the red flags that change the price. October 11, 2026

Subprocessor disclosure pages: the consent evidence agencies forget to build

Agencies document the banner and forget the subprocessor list. Why a public, versioned subprocessor disclosure page is the consent evidence enterprise clients ask for first.

Consent monitoring retainers: the agency recurring revenue hiding in compliance

Consent work decays the moment a site launches. How agencies package monthly monitoring into a retainer clients keep paying for, and what the retainer should actually cover. October 9, 2026

Renewing consent on returning visits without nagging: a sensible expiry schedule

Consent should not last forever, but asking every visit trains users to click accept blindly. Here is an expiry schedule that respects both privacy and sanity. October 8, 2026

One email that protects your agency: documenting consent decisions in writing

The handover email that turns project decisions into a paper trail. What to document, why email beats the project doc, and the five sections every agency should send. October 7, 2026

The consent handover pack: what agencies should give clients before go-live

Most consent fallout happens after the agency hands the keys back. A proper handover pack documents the setup so the client's team cannot silently undo it. October 6, 2026

The settings that revert: how CMS and theme updates undo consent configurations

A theme update, a plugin reinstall, a staging push: routine site maintenance silently reverts consent settings. The revert patterns agencies see most, and the re-check routine that catches them. October 5, 2026

Consent scope creep: the five phrases that turn a banner setup into an unpaid project

Consent projects expand one reasonable-sounding sentence at a time. The five phrases clients use to double the scope of a banner setup, and the priced answer for each one. October 4, 2026

When a client asks to remove the reject button: how agencies say no and keep the account

Every agency gets the request eventually: take the reject button off the banner. Why clients ask, the answer that keeps the account, and the design middle ground that works. October 3, 2026

How agencies should price consent work: fixed fee, retainer, or bundled

Consent work is too technical to give away and too invisible to sell easily. The three pricing models that match how consent actually behaves, and how to sell them without a scare pitch. October 2, 2026

The consent discovery questionnaire agencies should send before the build starts

Most consent problems on client sites are scoped in, not coded in. A discovery questionnaire that surfaces trackers, regions, and sign-off owners before the build keeps the agency out of free rework. October 1, 2026

The consent re-audit retainer: turning one-time setups into recurring agency revenue

Cookie consent decays after handover as clients add tags and vendors. How agencies package quarterly consent re-audits as retainers: scoping, pricing, and the report clients actually read. September 30, 2026

Consent on multilingual client sites: the banner has to speak every language

A consent banner in English on a Spanish landing page is a finding, not a translation gap. How agencies ship consent that works in every locale a client site runs, from banner copy to policy links. September 29, 2026

The consent handover document every agency should ship with a client site

Agencies configure consent during a build, then clients change things and break it. A one-page handover document that records the setup, the blocking logic, and the rules for keeping it intact. September 28, 2026

The client's marketing team wants the blocked tracker back: an agency's pushback playbook

2026-09-27. When a client marketer asks you to re-enable a blocked tracker, don't answer with a flat no. Translate the request into business risk, offer the compliant alternative, and get the decision in writing.

Who owns cookie consent on a client site: the agency liability question

2026-09-26. When a client site breaks cookie rules, who is liable: the agency that built it or the client that runs it? How agencies should document consent ownership before it becomes a dispute.

What should an agency do when a client site shows two cookie banners?

2026-09-25. Two banners on one site means two systems firing while neither one fully blocks. Find which banner actually works, keep the consent records, and consolidate to one.

Frequently asked questions

What does this blog cover?

Cookie consent in practice: banners, consent records, CMP choices, and the trackers that fire before anyone agrees. The posts are written for the team that owns the banner, with the numbers and the rules attached.

How long does a yes last?

About six months is the working ceiling before asking again, per CNIL good practice. Consent-free audience measurement cookies get a 13-month maximum, and Chrome caps cookies at 400 days while Safari deletes JavaScript-set cookies after 7 days.

Why does the banner come back after I clear cookies?

Clearing cookies deletes the consent record itself, so the site has no memory of the choice and has to ask again. The same thing happens when the record expires, the banner version changes, or the visitor switches devices.

What is the most common consent mistake?

Firing trackers before consent. A YouTube embed, a chat widget, or a tag manager side-load can set cookies on page load while the banner is still waiting for an answer. The fix is blocking before consent, not logging after it.