Cookiebot
Cookiebot (by Usercentrics) is a leading European cookie consent management platform (CMP) used by millions of websites to comply with GDPR and ePrivacy cookie requirements. It automatically scans websites for cookies, categorises them, and presents a consent banner to visitors. Cookiebot is IAB TCF v2.2 certified and integrates natively with Google Consent Mode v2, Google Tag Manager, and major advertising platforms. As a Danish company with EU infrastructure, it keeps consent data within Europe.
What does Cookiebot do?
What is Cookiebot?
Cookiebot (acquired by Usercentrics) is one of Europe's leading cookie consent management platforms. It provides automatic cookie scanning, categorisation, and a customisable consent banner that presents visitors with choices about which cookie categories to accept. Cookiebot stores consent records with timestamps and is IAB TCF v2.2 certified, enabling compliant programmatic advertising consent management. It integrates natively with Google Consent Mode v2 and Google Tag Manager.
How Cookiebot works
Cookiebot crawls your website monthly to discover all cookies and tracking technologies. It categorises them into Necessary, Preferences, Statistics, and Marketing. It generates a customisable banner that blocks non-essential cookies until consent is given. Consent choices are stored as a cookie (CookieConsent) containing the visitor's choices, timestamp, and a hash for verification. These records serve as evidence of consent under GDPR Article 7.
GDPR and the CMP requirement
GDPR requires that consent be freely given, specific, informed, and unambiguous. For cookie consent, this means a CMP that: does not pre-tick boxes, does not use dark patterns, makes refusal as easy as acceptance, allows withdrawal of consent, and records evidence of consent. Cookiebot's design addresses all these requirements. The Danish DPA (Datatilsynet) has confirmed Cookiebot meets Danish GDPR implementation requirements.
IAB TCF v2.2 and advertising
Cookiebot is registered as an IAB TCF v2.2 certified CMP. For publishers using programmatic advertising, TCF certification enables passing consent signals to advertising platforms and ad exchanges. Cookiebot also supports Google Consent Mode v2 integration, allowing Google tags to operate in a privacy-preserving mode when consent is declined.
Practical compliance steps
Install the Cookiebot script in your page head. Configure categories to match your actual cookie use. Enable Google Consent Mode v2 integration. Integrate with GTM to conditionally fire tags based on consent. Customise the banner to meet your visual requirements. Run Cookiebot's monthly scan and review newly discovered cookies. Store consent records and ensure your privacy policy links from the banner.
Cookiebot and the GDPR
- Legal basis
- Cookiebot is a consent management platform: it facilitates GDPR compliance rather than creating compliance obligations. It stores and manages visitor consent choices. The Cookiebot script itself is strictly necessary for operating the consent mechanism and does not require consent to load.
- Risk level
- low
- Applicable regulations
- GDPR, ePrivacy Directive, IAB TCF v2.2 certified. Cookiebot helps websites comply with these regulations.
Impact assessment (DPIA)
A DPIA is not required for Cookiebot itself. It is a compliance enabler, not a high-risk data processor. The consent data stored in Cookiebot (consent records, timestamps, choices) is processed as part of your compliance obligations.
Sample text for your banner
This website uses Cookiebot to manage your cookie preferences. Cookiebot stores your consent choices and ensures that only the cookies you have accepted are loaded. You can change your preferences at any time by clicking the cookie icon.
What Cookiebot sets and contacts
- Tracking method
- Cookie consent management platform, automatic cookie scanning, IAB TCF v2.2 certified CMP, consent storage, consent signals to GTM and advertising platforms
- Server location
- European Union (Usercentrics/Cookiebot is a Danish/German company with EU infrastructure)
- Cookieless mode available
- Yes
Cookies set (1)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| CookieConsent | persistent | 1 year | Cookiebot consent record storing visitor cookie category choices, timestamp, and verification hash for GDPR compliance |
Third-party domains contacted (3)
cookiebot.comconsent.cookiebot.comconsentcdn.cookiebot.com
Frequently asked questions about Cookiebot
Can't find your question? Write to us, we answer fast.
What is a Cookie Consent Management Platform (CMP)?
A CMP is a tool that manages cookie consent on websites. It scans the website for cookies, presents a consent banner to visitors, records their choices, and blocks non-essential cookies until consent is given. CMPs like Cookiebot enable compliance with the ePrivacy Directive's requirement for prior consent before non-essential cookies are placed.
Does Cookiebot comply with GDPR?
Yes. Cookiebot is designed for GDPR and ePrivacy compliance. It records consent with timestamps, does not use dark patterns, makes refusal as easy as acceptance, and provides consent records as evidence under GDPR Article 7. The Danish DPA has confirmed Cookiebot meets Danish GDPR requirements.
What is IAB TCF v2.2 and why does it matter?
The IAB Transparency and Consent Framework (TCF) v2.2 is an industry standard for managing advertising consent in programmatic advertising. When a website uses a TCF-certified CMP like Cookiebot, consent signals are automatically passed to ad exchanges and demand-side platforms, enabling GDPR-compliant programmatic advertising. Without TCF consent, many advertising partners should not serve targeted ads.
What cookie does Cookiebot itself set?
Cookiebot sets the CookieConsent cookie (1 year) on the visitor's device. This cookie records the visitor's consent choices (accepted/rejected per category), the timestamp, and a verification hash. This record serves as evidence of consent under GDPR Article 7.
Does Cookiebot integrate with Google Consent Mode v2?
Yes. Cookiebot natively integrates with Google Consent Mode v2, passing consent signals for analytics_storage, ad_storage, ad_user_data, and ad_personalization to Google tags. This is mandatory for EU advertisers using Google's advertising ecosystem since March 2024.
How does Cookiebot handle cookie scanning?
Cookiebot crawls your website like a visitor to discover all cookies and tracking technologies. It categorises discovered cookies into four groups: Necessary, Preferences, Statistics, Marketing. The scan runs automatically on a monthly schedule. New cookies discovered between scans appear in a "Not categorised" list for review.
Is Cookiebot GDPR compliant itself?
Yes. Cookiebot is operated by Usercentrics (Denmark/Germany) with EU infrastructure. Consent records are stored in the EU. No SCCs are needed for Cookiebot's own data processing. Cookiebot processes consent data as a data processor. Sign the Usercentrics/Cookiebot DPA.
What are the main alternatives to Cookiebot?
Major alternatives include: Axeptio (French, EU-hosted, visual design), Didomi (French, enterprise, preference centre), OneTrust (US, enterprise-grade), TrustArc (US), Usercentrics (German, Cookiebot's parent), CookieYes (Irish), and Tarteaucitron (French, open-source). EU-headquartered alternatives are preferred by organisations with strict data residency requirements.
Funding Choices
Funding Choices is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Funding Choices integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Funding Choices helps organizations maintain robust websites that meet user expectations and.
Axeptio
Axeptio is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Axeptio supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Axeptio ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Moove GDPR Consent
Moove GDPR Consent is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Moove GDPR Consent manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Moove GDPR Consent ensures worldwide privacy compliance.
AdFixus
AdFixus is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. AdFixus supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, AdFixus ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Clym
Clym is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Clym integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Clym helps organizations maintain robust websites that meet user expectations and technical requirements.
Shopify Consent Management
Shopify Consent Management is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Shopify Consent Management manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Shopify Consent Management ensures worldwide privacy compliance.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.