FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Consent management

Cookie Control

Essential

Established UK based Consent Management Platform (CMP) from Civic UK Ltd that displays a cookie banner, collects choices per purpose, blocks third party scripts, stores proof of consent and integrates with IAB TCF v2.2 and Google Consent Mode v2.

Block Cookie Control until consentScan my site
Overview

What does Cookie Control do?

What Cookie Control is

Cookie Control is a Consent Management Platform built by Civic UK Ltd, a long established UK provider for compliance with cookie law, PECR, GDPR and UK GDPR. It loads a configurable banner, lists the trackers in use, lets visitors accept or refuse purpose by purpose, blocks third party scripts before consent and stores proof of consent for accountability.

Data and cookies

Cookie Control sets a strictly necessary first party cookie (CookieControl) containing the consent decision per purpose and a version, optionally a pseudonymous identifier (ccUserId) for advanced consent log scenarios and, when TCF is enabled, the IAB euconsent-v2 string. No advertising or analytics cookie is set by Cookie Control itself.

GDPR and ePrivacy implications

The CMP cookie is required to demonstrate compliance with Article 7(1) GDPR and ICO PECR guidance, so it is exempt from prior consent under Article 5(3) ePrivacy. The banner must still meet CNIL, EDPB and ICO expectations: clear purposes, equal weight reject and accept, granular categories, easy withdrawal and proof of consent.

Consent requirements

No consent is required to load Cookie Control itself. The banner must obtain consent for any non strictly necessary tracker, expose a permanent settings entry point, support re consent and provide accessible UI controls.

Data transfers

Civic UK Ltd operates from the United Kingdom, which benefits from a European Commission adequacy decision. No transfer to a non adequate third country is required for the standard CMP service.

Practical compliance steps

Sign the DPA, configure the banner with reject and accept of equal visual weight, declare an honest vendor list, run a cookie scan to verify scripts are blocked before consent, set a sensible re consent period, store proof of consent for at least 6 months and refresh the configuration whenever a new vendor is added.

Compliance

Cookie Control and the GDPR

Legal basis
Article 6(1)(c) GDPR (legal obligation) for storing proof of consent required by Article 7(1). Article 6(1)(f) (legitimate interest) for fraud and abuse prevention on the banner script itself.
Risk level
low
Applicable regulations
GDPR, UK GDPR, ePrivacy Directive, PECR, French CNIL guidance, German TTDSG, Spanish LSSI, IAB TCF v2.2

Impact assessment (DPIA)

A DPIA is not required for the CMP itself. A short legitimate interest balancing test in the ROPA is enough, since Cookie Control only stores consent decisions and pseudonymous identifiers for accountability.

Sample text for your banner

We use Cookie Control (Civic UK Ltd) to ask for and store your consent for the cookies and trackers on this website. Cookie Control sets a strictly necessary first party cookie that contains only your choice and a technical identifier.
Cookies and trackers

What Cookie Control sets and contacts

Tracking method
JavaScript consent banner, first party consent cookie, IAB TCF v2.2 string (optional), Google Consent Mode v2 signal (optional), consent log API
Server location
United Kingdom (Civic UK Ltd)

Cookies set (3)

NameTypeDurationPurpose
CookieControlhttp6 monthsStores the consent decision per purpose, the banner version and a pseudonymous identifier so the choice can be enforced on every page view.
ccUserIdhttp6 monthsPseudonymous identifier optionally used to link the consent decision to the centralised consent log.
euconsent-v2http6 monthsIAB TCF v2.2 consent string emitted when the TCF integration is enabled.

Third-party domains contacted (3)

  • civic-uk.com
  • cc.cdn.civiccomputing.com
  • cookiecontrol.app
Questions

Frequently asked questions about Cookie Control

Can't find your question? Write to us, we answer fast.

Which cookies does Cookie Control set?

Cookie Control sets a strictly necessary first party cookie (CookieControl) storing the consent decision per purpose, optionally ccUserId for the consent log and, with TCF enabled, the IAB euconsent-v2 string. No advertising or analytics cookie is set by Cookie Control itself.

Is consent required for Cookie Control itself?

No. The CMP cookie is strictly necessary to comply with the obligation to obtain and prove consent (Article 7 GDPR, ICO PECR guidance), so it falls under the Article 5(3) ePrivacy exemption.

What is the legal basis?

Article 6(1)(c) GDPR (legal obligation) for storing proof of consent. Article 6(1)(f) GDPR (legitimate interest) for fraud and abuse prevention on the banner itself.

Does Cookie Control transfer data outside the EU?

No. Civic UK Ltd operates from the United Kingdom, which has an EU adequacy decision. No transfer to a non adequate third country occurs.

Do I need a DPIA for Cookie Control?

No. A short legitimate interest balancing test in the ROPA is enough. A DPIA may still cover the broader consent flow when high risk processing is gated by Cookie Control.

How do I implement Cookie Control compliantly?

Configure the banner with reject and accept of equal weight, expose a permanent settings entry point, list every vendor and purpose, scan the site to verify scripts are blocked before consent, set a sensible re prompt period, sign the DPA and store proof of consent for at least 6 months.

What are the alternatives?

Other CMPs include Axeptio, Didomi, OneTrust, Cookiebot, Iubenda, Sirdata, CookieFirst, Klaro, Usercentrics, Sourcepoint, Tarte au Citron and Biskoui.

How do I update the cookie policy?

Document Cookie Control as a processor in the privacy notice, describe the strictly necessary cookies it sets, link to its privacy policy, list the trackers it gates and refresh the policy whenever a new vendor is added to the configuration.

Same category

More services: Consent management

See the whole category

CrownPeak Universal Consent Platform

CrownPeak Universal Consent Platform is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. CrownPeak Universal Consent Platform manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, CrownPeak Universal Consent Platform.

Essential

Cookie Notice

Cookie Notice is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Cookie Notice manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Cookie Notice ensures worldwide privacy compliance.

Essential

Q4 Cookie Monster

Q4 Cookie Monster is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Q4 Cookie Monster manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Q4 Cookie Monster ensures worldwide privacy compliance.

Essential

ComplyAuto

ComplyAuto is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ComplyAuto supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ComplyAuto ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Essential

Usercentrics

Usercentrics is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Usercentrics integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Usercentrics helps organizations maintain robust websites that meet user expectations and technical requirements.

Essential

Borlabs Cookie

Borlabs Cookie is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Borlabs Cookie manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Borlabs Cookie ensures worldwide privacy compliance.

Essential

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site