> How Cookie Script delivers GDPR and ePrivacy compliant consent management with EU hosting, cookie scanning and IAB TCF support. > > Canonical: https://www.flowconsent.com/en/services/consent-management/cookie-script Consent management # Cookie Script Essential Cookie Script is a European consent management platform that scans cookies, displays a banner, blocks non essential scripts and stores consent records on EU infrastructure. [Block Cookie Script until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=consent) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Consent management](https://www.flowconsent.com/en/services/consent-management) - Consent Essential - Prior consent Not required - Documented cookies 2 - Third-party domains 3 - Servers European Union, primarily Germany (Hetzner) with EU edge endpoints Overview ## What does Cookie Script do? ## **What Cookie Script is** Cookie Script is a European consent management platform widely used by small and mid market sites in the EU. The product scans the website for cookies, generates a categorised cookie policy, displays a configurable banner and blocks non essential scripts before consent. The consent record is stored in a first party cookie so the same decision is reused across pages and visits. ## **Cookies and data collected** Cookie Script writes a CookieScriptConsent first party cookie that records which categories the visitor has accepted, plus a session cookie used internally by the banner. No marketing or analytics data is collected by the platform itself. The destinations gated by Cookie Script can still set their own cookies after consent. ## **GDPR and ePrivacy compliance** The CookieScriptConsent cookie is strictly necessary because its purpose is to record the visitor consent decision. It can be loaded under legitimate interest. The non essential cookies of the destinations behind the banner remain subject to article 5(3) of the ePrivacy Directive and must be blocked until consent is captured. ## **Configuration** Configure default reject for non essential categories, expose granular controls, prevent banner pre acceptance through scrolling, store the consent record server side for audit, and integrate the IAB TCF where you serve display advertising. Document the cookie scan in your records of processing activities. ## **Data transfers and storage** Cookie Script hosts on Hetzner data centres in Germany. No US sub processors are used for the consent record or the banner delivery, which keeps the privacy footprint inside the EEA. ## **Practical compliance steps** Sign the Cookie Script DPA, configure default reject, document the cookie scan, integrate the consent state with your tag manager so destinations are properly gated, and re scan the site quarterly to catch new tags. Compliance ## Cookie Script and the GDPR - Legal basis Legitimate interest (Art. 6(1)(f) GDPR) for the consent management cookie itself, since its purpose is to record the visitor consent decision; the destinations it gates require their own consent - Risk level low - Applicable regulations GDPR, ePrivacy Directive, IAB TCF v2.2, French Loi Informatique et Libertés, German TTDSG ### Impact assessment (DPIA) A DPIA is generally not required for the consent management role itself. It becomes appropriate when the operator pairs Cookie Script with extensive advertising and analytics tags, when consent is the only suppression mechanism for those tags, or when the deployment serves children below age fifteen. ### Sample text for your banner > We use Cookie Script to ask for your consent and to remember your decision across our pages. The platform stores a small consent cookie on your device and does not collect any additional personal data. Cookies and trackers ## What Cookie Script sets and contacts - Tracking method JavaScript consent management platform that scans the page for cookies, displays a banner, blocks non essential scripts before consent and stores the consent record in a first party cookie - Server location European Union, primarily Germany (Hetzner) with EU edge endpoints ### Cookies set (2) | Name | Type | Duration | Purpose | | ----------------------- | ------------------ | -------- | -------------------------------------------------------------------------------------------------- | | CookieScriptConsent | Strictly necessary | 6 months | First party cookie that records the visitor consent decisions managed by the Cookie Script banner. | | cookie\_script\_session | Strictly necessary | Session | Internal session cookie used by the Cookie Script banner to maintain its UI state. | ### Third-party domains contacted (3) - `cookie-script.com` - `cdn.cookie-script.com` - `report.cookie-script.com` Questions ## Frequently asked questions about Cookie Script Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Cookie Script set? Cookie Script writes a CookieScriptConsent first party cookie with the visitor consent decision and a session cookie used by the banner. No marketing or analytics cookies are set by the platform itself. ### Do I need consent to use Cookie Script? The Cookie Script banner can be loaded as strictly necessary because its purpose is to capture the consent decision. The destinations it gates require their own consent under article 5(3) of the ePrivacy Directive. ### What is the legal basis for processing data through Cookie Script? Legitimate interest under article 6(1)(f) GDPR for the consent record itself, or a legal obligation when documenting consent. Each destination behind the banner needs its own legal basis, typically consent for analytics and advertising. ### Does Cookie Script transfer data to the United States? No. Cookie Script hosts on Hetzner data centres in Germany and does not use US sub processors for the consent record or the banner. ### Do I need a DPIA for Cookie Script? In general no for the consent function itself. A DPIA may be appropriate when Cookie Script is paired with extensive advertising tags, when consent is the only suppression mechanism for those tags, or when the deployment serves children. ### How do I implement Cookie Script compliance correctly? Configure default reject, document the cookie scan, store the consent record server side, integrate the consent state with your tag manager and re scan the site quarterly to keep the cookie list accurate. ### What are the alternatives to Cookie Script? Other EU friendly CMPs include Cookiebot, Didomi, Axeptio, Iubenda, OneTrust, Sourcepoint and open source projects such as Klaro and Orestbida. ### How should I update my cookie policy when I deploy Cookie Script? List the CookieScriptConsent cookie alongside the cookies of the destinations the banner gates, name Cookie Script as a processor located in the EU, and document the configuration of default reject and any IAB TCF support. Same category ## More services: Consent management [See the whole category](https://www.flowconsent.com/en/services/consent-management) ### [Legal Monster](https://www.flowconsent.com/en/services/consent-management/legal-monster) [Legal Monster is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Legal Monster supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Legal Monster ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/legal-monster) [Essential](https://www.flowconsent.com/en/services/consent-management/legal-monster) · ### [hubSpot consent banner](https://www.flowconsent.com/en/services/consent-management/hubspot-consent-banner) [hubSpot consent banner is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. hubSpot consent banner manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, hubSpot consent banner ensures worldwide privacy compliance.](https://www.flowconsent.com/en/services/consent-management/hubspot-consent-banner) [Essential](https://www.flowconsent.com/en/services/consent-management/hubspot-consent-banner) · ### [AdRoll CMP System](https://www.flowconsent.com/en/services/consent-management/adroll-cmp-system) [AdRoll CMP System is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. AdRoll CMP System supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, AdRoll CMP System ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/adroll-cmp-system) [Essential](https://www.flowconsent.com/en/services/consent-management/adroll-cmp-system) · ### [Moove GDPR Consent](https://www.flowconsent.com/en/services/consent-management/moove-gdpr-consent) [Moove GDPR Consent is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Moove GDPR Consent manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Moove GDPR Consent ensures worldwide privacy compliance.](https://www.flowconsent.com/en/services/consent-management/moove-gdpr-consent) [Essential](https://www.flowconsent.com/en/services/consent-management/moove-gdpr-consent) · ### [Axeptio](https://www.flowconsent.com/en/services/consent-management/axeptio) [Axeptio is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Axeptio supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Axeptio ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/axeptio) [Essential](https://www.flowconsent.com/en/services/consent-management/axeptio) · ### [Funding Choices](https://www.flowconsent.com/en/services/consent-management/funding-choices) [Funding Choices is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Funding Choices integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Funding Choices helps organizations maintain robust websites that meet user expectations and.](https://www.flowconsent.com/en/services/consent-management/funding-choices) [Essential](https://www.flowconsent.com/en/services/consent-management/funding-choices) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)