Consent modes
Consent tools for the laws that actually apply. The banner does not make a site compliant by itself.
EU consent tools
Opt-in before non-essential cookies, by category, with a record of the choice
PIPEDA notice and consent
Clear notice before tracking. Federal PIPEDA is still in force.
Quebec Law 25 consent
Opt-in for non-essential tracking, with English and French
What the banner actually does
The banner can block non-essential cookies until a visitor chooses, store that choice, and show the notice in more than one language. Those are tools. They do not replace a privacy notice, a privacy officer, or a check that your scripts wait for the choice.
Scripts you add can stay off until opt-in
Scripts you add in the builder as analytics or marketing stay off until the visitor opts in. The banner cannot block cookies set by other code on the page. A tag that loads first, or a script you did not add here, can still set a cookie.
Opt-in is a setting, not every law
EU mode waits for opt-in before non-essential cookies. Quebec can use a Pro geo rule for the same idea. PIPEDA can allow implied consent for non-sensitive analytics when the notice is clear. California mode is an opt-out of sale or sharing, not the EU opt-in. You pick the mode. The product does not decide the lawful basis for you.
Consent logs are not on every plan
Pro Annual and Enterprise can store a consent log. The free plan and one-time Pro do not. A log is a record of the choice. It is not a filing with a regulator, and it does not prove the rest of the site is compliant.
What is built in
- Scripts you add: Analytics and marketing scripts added in the builder stay off until opt-in.
- Categories: Essential, functionality, analytics, and marketing.
- Change of mind: The visitor can reopen the choices.
- Languages: English, French, and 14 other languages. French text is not Law 25 compliance by itself.
- Expiry: You set how long the choice is stored. It is not a 12-month GDPR timer or a 24-month PIPEDA timer.
- Hosted script: Design changes publish from the dashboard. A statute change does not rewrite the banner.
Which laws have a mode
A mode is default copy and a default opt-in or opt-out. It is not a legal opinion.
- Canada: A PIPEDA-style notice. There is no Alberta PIPA mode and no BC PIPA mode.
- CASL: Canada's anti-spam law. This product does not send email and has no CASL mode.
- Quebec Law 25: Pro can force opt-in for visitors in Quebec, and the banner can be in French. The banner does not appoint a privacy officer.
- EU: Opt-in before non-essential cookies.
- California: Opt-out of sale or sharing. Not a full CCPA program.
More on the modes: privacy laws and this banner.
How do I check the banner?
There is no compliance certificate in the dashboard. You can check the behaviour yourself:
- Open the site in a browser with DevTools.
- Before a choice, confirm the scripts you added have not run.
- Accept, and confirm those scripts run.
- Reject, and confirm they stay off.
On Pro Annual or Enterprise, the consent log shows the choice that was stored. It does not grade your banner text. See how the banner works.
If the law changes
The hosted script can change when we ship a product update. That is not a legal update. One-time Pro does not include features shipped later. Annual does. Neither plan rewrites the banner when a statute changes. Review the mode and the words on the banner yourself. The Terms say the tool does not guarantee full legal compliance.
What this is not
This is a banner you configure. It is not a tenant API, a scanner that blocks every cookie on the page, or a service that files with a regulator.
Next
Set the mode for the visitors you serve, then confirm the scripts you added follow that choice.
- Block the scripts you added until opt-in, where you chose an opt-in mode
- EU and a Quebec geo rule wait for opt-in. California is an opt-out. PIPEDA is a notice, not CASL
- Consent logs are on Pro Annual and Enterprise
- English and French, plus 14 other languages
- You still write the privacy notice and review the setup when the law changes
Conclusion
- A banner does not keep you compliant. It can record a choice and hold back scripts you added.
- Modes, not every statute. Canada, the EU, and California. No Alberta mode, no BC mode, no CASL mode.
- No automatic legal updates. A statute change does not rewrite the banner.
- Check it in the browser. The dashboard does not grade the banner against a law.
Next steps:
- Create a banner in the dashboard
- Match the design to the site
- Paste the async script
- Check in the browser that the scripts you added wait for the choice
Frequently Asked Questions
Will this cookie banner keep me compliant with GDPR?
For visitors in the EU, the banner can block non-essential cookies until someone opts in, offer choices by category, record the choice, and let them change it later. Those are GDPR and ePrivacy consent tools. They do not, by themselves, make a site GDPR compliant. You still need a privacy notice, a lawful basis for each use, and a check that the scripts actually wait for consent.
Does this work for PIPEDA compliance in Canada?
PIPEDA is still the federal law. Bill C-36, introduced on 15 June 2026, is not in force. The banner can present a clear notice and collect consent before tracking cookies run. Meaningful consent also depends on the words you show and on whether the information is sensitive. Implied consent can be enough for non-sensitive analytics when the notice is clear. Quebec visitors are under Law 25, which is stricter.
How do I verify my cookie banner is compliant?
Open the site and use the browser storage panel. Before a choice, scripts you added in the builder should not have run. Consent logs exist on Pro Annual and Enterprise. The dashboard does not grade the banner against a statute.
What happens if privacy laws change?
Privacy law changes, and a banner does not update itself into compliance. UK PECR changed on 5 February 2026: low-risk statistics and appearance cookies can use an opt-out, while advertising still needs consent. EU law did not make that change. When a rule changes, review the banner settings and the copy against the current rule. The Terms say the tools do not guarantee full legal compliance.
Does this cover Quebec Law 25 requirements?
Law 25 has been fully in force since September 2024. The banner can require opt-in before non-essential identification or profiling technologies run, and it can be shown in English and French. Law 25 also requires a published privacy officer, privacy impact assessments in the cases the Act lists, and a contract with service providers. The banner does not do those.
How does this compare to other cookie banner solutions?
The banner can block non-essential cookies by default, ask for a choice by category, and keep a record of that choice. It does not read a statute and reconfigure itself when the law changes. UK PECR and EU GDPR diverged on 5 February 2026, so a single worldwide opt-in is a stricter setting, not a statement that every country requires it.
Do I need to configure anything for compliance?
You choose the consent model for the visitors you serve. EU visitors need opt-in before non-essential cookies. UK advertising cookies still need prior consent. UK statistics can use the February 2026 opt-out only if the use stays inside that exception and people can object for free. Quebec visitors need Law 25 opt-in. The words on the banner are part of the notice, so they need to match what the site actually does.
What if I have users in multiple countries?
The banner can vary behaviour by location: opt-in for the EU, Law 25 opt-in for Quebec, meaningful consent for the rest of Canada, and an opt-out of sale or sharing for California, including Global Privacy Control. UK visitors are not EU visitors. Since 5 February 2026, PECR allows an opt-out for low-risk statistics and appearance cookies. Advertising still needs consent. Location detection does not replace a decision about which rule you are following.