Blog
Practical guides on GDPR, cookie consent, Google Consent Mode and privacy engineering, written for the people who ship websites.
Subscribe via RSS
GDPR5 min read
Why EU consent rules apply to localStorage, tracking pixels, fingerprinting and other non-cookie technologies, based on Article 5(3) ePrivacy and EDPB Guidelines 2/2023.
GDPR5 min read
When a 'consent or pay' cookie wall can be lawful in the EU and UK, what the CJEU, EDPB, CNIL and ICO have said, and how to design one that holds up.
Engineering4 min read
Why embedded videos, maps and social posts need consent, why youtube-nocookie.com is not enough, and how to build an accessible click-to-load placeholder.
Ad tech5 min read
How to run the Meta Pixel and Conversions API with cookie consent: blocking before consent, fbq consent calls, the _fbp and _fbc cookies, Limited Data Use and GPC.
Guides4 min read
GDPR requires withdrawing consent to be as easy as giving it. How to design the withdrawal path, stop tags, delete cookies and update Consent Mode and your logs.
Guides4 min read
An agency playbook for managing cookie consent across many client sites: roles and contracts, shared baselines, onboarding, monitoring and consent records.
Engineering5 min read
Cookieless analytics options compared, from server logs to daily hashes and fingerprinting, with trade-offs and why cookieless isn't automatically consent-free.
Guides5 min read
What an audit-ready proof of consent record should contain, how long to keep it, and why tamper-evident, hash-chained consent logs hold up under scrutiny.
Engineering4 min read
Server-side tagging moves vendor tags off the browser, but consent rules still apply. Learn what changes, what doesn't, and how to pass consent to your server.
Engineering4 min read
A developer's guide to blocking third-party scripts until consent: inert script tags, activation code, tag managers, embeds and how to test that nothing leaks.
Engineering4 min read
How to handle cookie consent in React, Vue and other SPAs: shared consent state, route-change tracking, SSR hydration, gated embeds and instant withdrawal.
Engineering5 min read
How cookie banners hurt LCP, CLS and INP, and how to fix it: load consent scripts async, avoid layout shift, defer the preference center and yield in handlers.
Ad tech5 min read
What the IAB TCF 2.2 is, how the TC String and Global Vendor List work, what changed from version 2.1 and what publishers and advertisers need to do about it.
Ad tech5 min read
Basic vs. advanced Google Consent Mode compared: tag loading before consent, cookieless pings, conversion modeling, privacy risk and which one to pick.
Ad tech5 min read
How to implement Google Consent Mode v2: the four consent signals, gtag default and update commands, Tag Manager setup, regional defaults and testing.
Global privacy4 min read
What the Global Privacy Control signal is, where honoring it is legally required, and how to detect it with navigator.globalPrivacyControl and Sec-GPC.
Global privacy4 min read
How UK cookie law works: PECR consent rules, the UK GDPR consent standard, what the ICO expects from banners and the 2025 reforms to watch before you change.
Global privacy5 min read
How Brazil's LGPD applies to cookies: legal bases, when consent is needed, what the ANPD expects from cookie banners and how it differs from EU cookie rules.
Global privacy5 min read
How the CCPA and CPRA apply to cookies: when ad trackers count as selling or sharing data, the opt-out link, GPC signals and what your website needs.
Guides5 min read
A step-by-step guide to auditing cookies and trackers: scope your site, capture what loads, categorize each item, test consent behavior and fix the gaps.
Guides5 min read
A practical guide to writing a cookie policy: what the law expects, a section-by-section outline, an example cookie table, and tips for keeping it current.
Cookies5 min read
Design a cookie banner that meets GDPR expectations and respects visitors: equal choices, plain copy, accessible markup, no layout shift, easy withdrawal.
Cookies5 min read
Pre-ticked boxes, hidden reject buttons and cookie walls can invalidate consent. See which banner dark patterns regulators target and how to fix them.
Cookies5 min read
Learn which cookies qualify as strictly necessary under the ePrivacy Directive, how to test each one, and the mislabeling mistakes regulators look for.
Cookies5 min read
Learn the main types of cookies, from first- and third-party to session and persistent, and why a cookie's purpose decides whether you need consent.
GDPR5 min read
From the CNIL's fines against Google and Facebook to the Planet49 ruling, see which cookie consent mistakes regulators punish and how to check your own site.
GDPR5 min read
Legitimate interest cannot replace consent for non-essential cookies in the EU. Learn why, where it still applies, and what TCF 2.2 changed for publishers.
GDPR5 min read
A practical checklist of the GDPR conditions for valid cookie consent: freely given, specific, informed, unambiguous, provable and easy to withdraw.
GDPR5 min read
The ePrivacy Directive decides when cookies need consent; the GDPR defines what valid consent means. Here is how the two EU laws fit together in practice.
GDPR5 min read
What GDPR and the ePrivacy Directive require before you set cookies: prior opt-in consent, an equal reject option, easy withdrawal and proof of consent.
Start free on one domain. Upgrade when you need more domains, geo-targeting or custom branding.
No credit card required · Cancel anytime