> Review of the consentmanager CMP: IAB TCF v2.2, Google Consent Mode v2, EU data centres in Frankfurt and Amsterdam and a consent log for GDPR audits. > > Canonical: https://www.flowconsent.com/en/services/consent-management/consent-manager Consent management # consentmanager Essential consentmanager is a Consent Management Platform operated by consentmanager AB from Stockholm, Sweden, with EU data centres in Frankfurt and Amsterdam. It supports the IAB TCF v2.2 framework, the IAB GPP signal for US privacy laws, Google Consent Mode v2 integration and an audit ready consent log stored in the EEA. consentmanager is one of the largest EU based CMPs and a frequent choice for German speaking publishers and e commerce that need strict EU data residency for the CMP layer. [Block consentmanager until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=consent) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Consent management](https://www.flowconsent.com/en/services/consent-management) - Consent Essential - Prior consent Not required - Documented cookies 4 - Third-party domains 4 - Servers consentmanager AB is based in Stockholm, Sweden. CMP script delivery and consent log storage run on EU data centres (primarily Frankfurt and Amsterdam). The platform is EU based by design with no data leaving the EEA for the CMP itself. Overview ## What does consentmanager do? ## **What consentmanager is and who operates it** consentmanager is a Consent Management Platform operated by consentmanager AB, headquartered in Stockholm, Sweden, with operating teams in Germany and Spain. The CMP combines a configurable consent banner, the IAB Transparency and Consent Framework v2.2, the IAB Global Privacy Platform signal for US privacy laws, a native Google Consent Mode v2 integration and a server side consent receipts API. consentmanager is one of the largest EU based CMPs and a frequent choice for German speaking publishers, e commerce platforms and SaaS apps that require strict EU data residency. ## **What data consentmanager processes** The banner sets a first party consent cookie on the operator domain holding the visitor preferences, an anonymous visitor identifier and a timestamp. The server side consent receipt contains the truncated IP, the user agent, the language, the TCF or GPP consent string, the list of categories and vendors accepted or refused and the source of the choice. All this data is processed and stored exclusively in EU data centres operated by consentmanager AB. No content from the page itself is collected. ## **GDPR, TTDSG and ePrivacy implications** As with every standard CMP, the consentmanager cookies are strictly necessary because they constitute the storage device required to demonstrate consent under Article 7(1) GDPR, Article 5(3) of the ePrivacy Directive and TTDSG paragraph 25 in Germany. The CMP itself does not require a separate consent prompt. The operator must ensure that every non essential service gated by the CMP only fires after granular opt in, and configure the IAB TCF v2.2 vendor list to match its actual stack. ## **EU data residency by design** consentmanager runs its CMP entirely on EU data centres located in Germany and the Netherlands. Consent receipts, truncated IPs and consent strings remain inside the EEA. The platform is therefore a strong fit for operators in high risk sectors (health, finance, public administration) and for operators with strict no transfer policies. The cross border data flow concerns are limited to the downstream IAB TCF vendors the controller decides to expose to its visitors. ## **Practical compliance steps** Sign a Data Processing Agreement with consentmanager AB. Configure the banner so that no non essential tag fires before consent, connect consentmanager to your tag manager through the Google Consent Mode v2 integration and curate the IAB TCF v2.2 vendor list to remove vendors you do not need. Document the configuration in the privacy policy with the link to consentmanager and the cookie list. Review the configuration whenever you add a new tag or change traffic regions. Compliance ## consentmanager and the GDPR - Legal basis Article 6(1)(c) GDPR (legal obligation) for storing proof of consent required by Article 7(1) GDPR. Article 6(1)(f) GDPR (legitimate interest) for fraud and abuse prevention on the consent script. - Risk level low - Applicable regulations GDPR, ePrivacy Directive, German TTDSG paragraph 25, French CNIL guidance, Spanish LSSI, IAB TCF v2.2 (consentmanager is a CMP), IAB GPP, Google Consent Mode v2 ### Impact assessment (DPIA) A DPIA is generally not required for the consentmanager CMP itself: it only processes data needed to evidence consent under Article 7(1) GDPR and the production infrastructure is fully located in the EEA. A targeted DPIA is recommended when consentmanager controls a wider IAB TCF v2.2 vendor chain with extensive profiling, when the operator activates cross domain consent, or when integration with US ad partners introduces transfers outside the CMP scope. ### Sample text for your banner > We use the consentmanager consent management platform to record your cookie and tracking preferences. consentmanager is operated from the European Union and sets a strictly necessary cookie to remember your choices. Your consent receipt is stored in EU data centres. You can change your preferences at any time through the consent button. Cookies and trackers ## What consentmanager sets and contacts - Tracking method JavaScript consent banner served from delivery.consentmanager.net, first party consent cookie on the operator domain via JavaScript, IAB TCF v2.2 transparency and consent string, IAB GPP signal for US privacy, Google Consent Mode v2 integration, server side consent receipts API - Server location consentmanager AB is based in Stockholm, Sweden. CMP script delivery and consent log storage run on EU data centres (primarily Frankfurt and Amsterdam). The platform is EU based by design with no data leaving the EEA for the CMP itself. ### Cookies set (4) | Name | Type | Duration | Purpose | | ---------------------- | ---- | --------- | -------------------------------------------------------------------------------------------------------------------------------------- | | cmpcc | http | 12 months | Stores the visitor consent state recorded by consentmanager. First party, strictly necessary to provide the consent recording service. | | cmapi\_cookie\_privacy | http | 12 months | Cache of the CMP API state for the current operator. Strictly necessary for the banner to render correctly. | | cmapi\_gtm\_bl | http | 12 months | Blocklist used by consentmanager to control Google Tag Manager triggers based on consent state. | | euconsent-v2 | http | 12 months | Standard IAB TCF v2.2 consent string, set when the operator participates in the IAB framework. | ### Third-party domains contacted (4) - `delivery.consentmanager.net` - `cdn.consentmanager.net` - `a.delivery.consentmanager.net` - `consentmanager.net` Questions ## Frequently asked questions about consentmanager Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does consentmanager set? consentmanager sets a small set of strictly necessary cookies on the operator domain: cmpcc and cmapi\_cookie\_privacy (consent state and CMP API cache, 12 months), cmapi\_gtm\_bl (blocklist for Google Tag Manager, 12 months) and euconsent v2 (IAB TCF v2.2 string when the framework is enabled). All cookies are first party and contain no behavioural data. ### Does consentmanager itself require user consent? No. The consentmanager cookies are strictly necessary to provide the consent recording service the user has effectively requested under Article 5(3) of the ePrivacy Directive and TTDSG paragraph 25. The banner can therefore appear without prior consent. What requires consent is every non essential service the CMP gates afterwards. ### What is the legal basis for the data consentmanager processes? The legal basis is Article 6(1)(c) GDPR (legal obligation) for storing proof of consent required by Article 7(1) GDPR. A secondary Article 6(1)(f) basis (legitimate interest) covers fraud and abuse prevention on the consent script. ### Does consentmanager transfer data outside the EU? No. consentmanager operates its CMP entirely on EU data centres in Germany and the Netherlands. No visitor IP, user agent or consent string leaves the EEA for the CMP itself. Cross border data flows only happen through the IAB TCF v2.2 vendors the operator chooses to expose. ### Do I need a DPIA for consentmanager? Usually not for the CMP itself: it only processes the minimum data needed to evidence consent and is fully EU based. A DPIA is recommended when consentmanager is part of a wider tracking stack involving large scale profiling, cross domain consent or significant IAB TCF v2.2 vendor chains with non EU partners. ### How do I implement consentmanager compliantly? Block every non essential script in your tag manager and gate it on consentmanager categories. Enable Google Consent Mode v2 if the site relies on Google Ads or GA4. Curate the IAB TCF v2.2 vendor list to remove vendors you do not use. Document the configuration in the privacy policy and the cookie policy and review it at every tag or region change. ### What are the alternatives to consentmanager? Other EU friendly CMPs include Cookiebot (Cybot, Denmark), Usercentrics (Germany), Didomi (France), Axeptio (France), CookieFirst, Iubenda, Borlabs Cookie (WordPress) and Real Cookie Banner. consentmanager is one of the EU based alternatives to US owned CMPs like OneTrust, Termly or Osano. ### How do I update my cookie policy to include consentmanager? Add a section describing consentmanager as the CMP, identify consentmanager AB in Sweden as the processor and the EU data centre locations (Frankfurt, Amsterdam), list the consentmanager cookies (cmpcc, cmapi\_cookie\_privacy, cmapi\_gtm\_bl, euconsent v2) with their retention and clarify that they are exempt from consent. Document the legal basis (Article 6(1)(c) GDPR) and link to the consentmanager privacy policy. Same category ## More services: Consent management [See the whole category](https://www.flowconsent.com/en/services/consent-management) ### [Pandectes](https://www.flowconsent.com/en/services/consent-management/pandectes) [Pandectes is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Pandectes integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Pandectes helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/consent-management/pandectes) [Essential](https://www.flowconsent.com/en/services/consent-management/pandectes) · ### [Secure Privacy](https://www.flowconsent.com/en/services/consent-management/secure-privacy) [Secure Privacy is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Secure Privacy manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Secure Privacy ensures worldwide privacy compliance.](https://www.flowconsent.com/en/services/consent-management/secure-privacy) [Essential](https://www.flowconsent.com/en/services/consent-management/secure-privacy) · ### [CookieScript](https://www.flowconsent.com/en/services/consent-management/cookiescript) [CookieScript is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. CookieScript supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, CookieScript ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/cookiescript) [Essential](https://www.flowconsent.com/en/services/consent-management/cookiescript) · ### [HubSpot Cookie Policy Banner](https://www.flowconsent.com/en/services/consent-management/hubspot-cookie-policy-banner) [HubSpot Cookie Policy Banner is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. HubSpot Cookie Policy Banner manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, HubSpot Cookie Policy Banner ensures worldwide privacy compliance.](https://www.flowconsent.com/en/services/consent-management/hubspot-cookie-policy-banner) [Essential](https://www.flowconsent.com/en/services/consent-management/hubspot-cookie-policy-banner) · ### [Uniconsent](https://www.flowconsent.com/en/services/consent-management/uniconsent) [Uniconsent is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Uniconsent integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Uniconsent helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/consent-management/uniconsent) [Essential](https://www.flowconsent.com/en/services/consent-management/uniconsent) · ### [CrownPeak Universal Consent Platform](https://www.flowconsent.com/en/services/consent-management/crownpeak-universal-consent-platform) [CrownPeak Universal Consent Platform is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. CrownPeak Universal Consent Platform manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, CrownPeak Universal Consent Platform.](https://www.flowconsent.com/en/services/consent-management/crownpeak-universal-consent-platform) [Essential](https://www.flowconsent.com/en/services/consent-management/crownpeak-universal-consent-platform) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)