> FlowConsent CMP for GDPR cookie consent, ePrivacy compliance, IAB TCF v2.2 signalling, Google Consent Mode v2 and EU hosting explained for European publishers. > > Canonical: https://www.flowconsent.com/en/services/consent-management/flowconsent Consent management # FlowConsent Essential · [Official website](https://flowconsent.com) FlowConsent is a European Consent Management Platform (CMP) hosted in the EU that collects, stores and propagates user consent for cookies and trackers in line with GDPR, the ePrivacy Directive and the IAB TCF. [Block FlowConsent until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=consent) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Consent management](https://www.flowconsent.com/en/services/consent-management) - Consent Essential - Prior consent Not required - Documented cookies 1 - Third-party domains 4 - Servers European Union (Frankfurt and Paris regions on European cloud infrastructure) Overview ## What does FlowConsent do? ## **What is FlowConsent** FlowConsent is a Consent Management Platform (CMP) built for European publishers and SaaS operators that need to comply with the GDPR, the ePrivacy Directive and national cookie rules. It displays a customisable banner, collects granular per purpose consent, stores the proof of consent, and propagates the user choice to every script on the website through the IAB Transparency and Consent Framework (TCF v2.2) and Google Consent Mode v2. The whole stack is hosted in the European Union, with no transfer to third countries by design. ## **What data does FlowConsent process** FlowConsent stores a first party cookie called fc\_consent that contains the consent state, the version of the banner shown, the timestamp and a non identifying hash. A consent receipt is generated and stored on the FlowConsent backend with the page URL, a salted hashed visitor identifier, the consent decisions per purpose, the IAB TCF string and the Google Consent Mode signal. No advertising IDs are collected. The receipt serves as proof of consent and as the audit trail required by the CNIL, the BfDI, the AEPD and the ICO. ## **GDPR and ePrivacy implications** A CMP is by design strictly necessary to comply with Article 5(3) of the ePrivacy Directive and Article 7 GDPR. The fc\_consent cookie remembers the user decision and is therefore exempt from prior consent. The legal basis for the consent receipt is Article 6(1)(c) GDPR (legal obligation, for accountability) combined with Article 6(1)(f) (legitimate interest, for fraud prevention and audit). FlowConsent should never be blocked behind another consent layer. It must, however, be transparent: the banner must list FlowConsent, its purpose and its retention period. ## **Data hosting and transfers** FlowConsent operates exclusively within the European Union, with the CMP API, dashboards and consent receipts hosted in Frankfurt and Paris. There is no transfer to third countries by the CMP itself. The downstream services governed by FlowConsent (analytics, advertising, social plugins) keep their own residency rules and may require additional Standard Contractual Clauses, but FlowConsent only stores their consent state, never the underlying personal data they process. ## **Practical compliance steps** Install the FlowConsent script as the very first tag on every page so that all other tags are blocked until consent is captured. Configure the purpose taxonomy to match your privacy notice (analytics, marketing, personalisation, social media). Enable the IAB TCF v2.2 signal and Google Consent Mode v2 to propagate consent to advertising partners and Google products. Document FlowConsent in your record of processing activities under legal obligation and review the consent receipts retention to align with the CNIL recommended six year period. Compliance ## FlowConsent and the GDPR - Legal basis Article 6(1)(c) GDPR (legal obligation) for the consent receipt and Article 6(1)(f) GDPR (legitimate interest) for the CMP cookies that are strictly necessary to remember the user choice. The CMP itself does not require user consent. - Risk level low - Applicable regulations GDPR, ePrivacy Directive (Article 5(3)), CNIL France, BfDI Germany, AEPD Spain, ICO UK PECR, IAB TCF v2.2, Google Consent Mode v2 ### Impact assessment (DPIA) Low risk. The CMP itself processes minimal personal data (consent state, hashed visitor identifier, page URL) for the purpose of compliance. Document this in the record of processing activities under legal obligation and legitimate interest. ### Sample text for your banner > FlowConsent is the Consent Management Platform that displays this banner and stores your choices. It is strictly necessary to remember your decisions and proves compliance; therefore it does not itself require consent. Cookies and trackers ## What FlowConsent sets and contacts - Tracking method JavaScript Consent Management Platform (CMP), first party consent storage, IAB TCF v2.2 and Google Consent Mode v2 signalling, server side consent receipt API - Server location European Union (Frankfurt and Paris regions on European cloud infrastructure) - Cookieless mode available Yes ### Cookies set (1) | Name | Type | Duration | Purpose | | ----------- | ------------ | --------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | fc\_consent | first\_party | 12 months | Strictly necessary cookie that stores the user consent state, banner version, timestamp and a non identifying hash so that the choice is remembered and applied across pages. | ### Third-party domains contacted (4) - `flowconsent.com` - `cdn.flowconsent.com` - `app.flowconsent.com` - `api.flowconsent.com` Questions ## Frequently asked questions about FlowConsent Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does FlowConsent set? FlowConsent sets a single first party cookie called fc\_consent that stores the consent state, the banner version, a timestamp and a non identifying hash. It does not write any third party cookie or share data with advertising networks. ### Is consent required to use FlowConsent itself? No. The fc\_consent cookie is strictly necessary to remember the user choice and to comply with the consent obligation under the GDPR and the ePrivacy Directive. It is therefore exempt from the prior consent requirement of Article 5(3) ePrivacy. ### What is the legal basis for processing through FlowConsent? Article 6(1)(c) GDPR (legal obligation) for storing the consent receipt as proof of compliance, combined with Article 6(1)(f) (legitimate interest) for fraud prevention and audit. No consent is required for the CMP itself. ### Does FlowConsent transfer data outside the EU? No. FlowConsent operates exclusively within the European Union, with the CMP API, dashboards and consent receipts hosted in Frankfurt and Paris. Sub processors are limited to EU based providers and the DPA confirms no third country transfers. ### Do I need a DPIA for FlowConsent? A formal DPIA is generally not mandatory because the CMP processes minimal personal data with a strong public interest justification. Document the legitimate interest and legal obligation analyses in your record of processing activities and align retention with national regulator recommendations. ### How do I implement FlowConsent in a GDPR compliant way? Place the FlowConsent script as the very first tag on every page so that all other tags stay blocked until consent is captured. Configure granular per purpose toggles, enable the IAB TCF v2.2 and Google Consent Mode v2 signals, document FlowConsent in your record of processing activities and align retention with the six year CNIL recommendation. ### Are there alternatives to FlowConsent? European CMPs include Didomi, Axeptio, Cookiebot (Usercentrics group), Tarte au Citron, Sourcepoint EU and Complianz. Selection criteria include EU residency, IAB TCF certification, granular per purpose blocking, A/B testing of banners, server side consent receipts and connector breadth. ### How should I update my cookie policy for FlowConsent? Mention that you use FlowConsent (CMP, EU hosting) to manage and prove cookie consent, list the fc\_consent cookie as strictly necessary, document the consent receipt retention, and explain how users can withdraw or modify their decisions through the persistent FlowConsent preferences link. Same category ## More services: Consent management [See the whole category](https://www.flowconsent.com/en/services/consent-management) ### [Borlabs Cookie](https://www.flowconsent.com/en/services/consent-management/borlabs-cookie) [Borlabs Cookie is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Borlabs Cookie manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Borlabs Cookie ensures worldwide privacy compliance.](https://www.flowconsent.com/en/services/consent-management/borlabs-cookie) [Essential](https://www.flowconsent.com/en/services/consent-management/borlabs-cookie) · ### [ComplyAuto](https://www.flowconsent.com/en/services/consent-management/complyauto) [ComplyAuto is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ComplyAuto supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ComplyAuto ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/complyauto) [Essential](https://www.flowconsent.com/en/services/consent-management/complyauto) · ### [TRUENDO](https://www.flowconsent.com/en/services/consent-management/truendo) [TRUENDO is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. TRUENDO supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, TRUENDO ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/truendo) [Essential](https://www.flowconsent.com/en/services/consent-management/truendo) · ### [Byscuit](https://www.flowconsent.com/en/services/consent-management/byscuit) [Byscuit is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Byscuit supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Byscuit ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/byscuit) [Essential](https://www.flowconsent.com/en/services/consent-management/byscuit) · ### [Ultimate GDPR & CCPA](https://www.flowconsent.com/en/services/consent-management/ultimate-gdpr-ccpa) [Ultimate GDPR & CCPA is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Ultimate GDPR & CCPA manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Ultimate GDPR & CCPA ensures worldwide privacy compliance.](https://www.flowconsent.com/en/services/consent-management/ultimate-gdpr-ccpa) [Essential](https://www.flowconsent.com/en/services/consent-management/ultimate-gdpr-ccpa) · ### [Complianz](https://www.flowconsent.com/en/services/consent-management/complianz) [Complianz is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Complianz supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Complianz ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/complianz) [Essential](https://www.flowconsent.com/en/services/consent-management/complianz) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)