Uniconsent
Uniconsent is a Consent Management Platform operated by Transfon Ltd in the United Kingdom. It provides a configurable cookie banner, IAB Transparency and Consent Framework 2.2 support, Google Consent Mode v2 integration, server side consent logging, and per region rules for GDPR, CCPA and LGPD. Uniconsent acts as a privacy enhancing technology: it collects only the data needed to demonstrate consent, and does not perform marketing tracking of its own.
What does Uniconsent do?
What is Uniconsent
Uniconsent is a Consent Management Platform operated by Transfon Ltd from the United Kingdom. It belongs to the IAB Europe Transparency and Consent Framework as a registered CMP and provides a configurable banner for desktop, AMP, mobile apps and connected TV. Publishers and advertisers use Uniconsent to collect, store and signal user consent across multiple jurisdictions including the European Union, the United Kingdom, California, Quebec and Brazil.
What data does Uniconsent collect
Uniconsent collects only the data necessary to prove and propagate consent: a unique consent identifier, the IAB TC String, the timestamp of the decision, the consent UI version, the policy version, the chosen purposes and vendors, geolocation at country level, and the user agent. It does not perform behavioural tracking or build advertising profiles, and it does not share visitor identifiers with third parties beyond what the TCF requires.
GDPR and ePrivacy implications
As a CMP, Uniconsent is treated by European supervisory authorities as a privacy enhancing technology. It can be deployed on legitimate interest under Art. 6(1)(f) GDPR because it is the mechanism that ensures compliance with Art. 7 GDPR and Art. 5(3) of the ePrivacy Directive. No prior consent is therefore required for the CMP itself, provided that the banner is non manipulative and reject is as easy as accept.
Consent requirements
The Uniconsent banner must respect the EDPB Guidelines 03/2022 on consent: equal prominence between Accept and Reject, no pre ticked boxes, granular purposes, easy withdrawal at any time, and a clear vendor list. When the IAB TCF integration is enabled, the consent string must reflect the user choice and be transmitted to downstream advertising vendors through standard signals.
Data transfers outside the EU
Uniconsent is operated from the United Kingdom, covered by the EU adequacy decision adopted in 2021. Some of the underlying cloud sub processors may have US affiliates, in which case the operator must rely on Standard Contractual Clauses and document a Transfer Impact Assessment as required since Schrems II. Per region data residency options can be enabled to limit cross border flows.
Practical compliance steps
Configure Uniconsent with a clear language toggle for every market you operate in, ensure that Accept All and Reject All are symmetrical, integrate Google Consent Mode v2 to gate Google products, configure the vendor list with only vendors you genuinely use, log consent for the duration required by your supervisory authority, and document Uniconsent in your Article 30 register with the legal basis of legitimate interest.
Uniconsent and the GDPR
- Legal basis
- Legitimate interest (Art. 6(1)(f) GDPR): a Consent Management Platform is a strictly necessary technology for compliance with Art. 7 GDPR and Art. 5(3) ePrivacy Directive. No prior consent is required for the CMP itself, only for the third party tags it gates.
- Risk level
- low
- Applicable regulations
- GDPR, UK GDPR, ePrivacy Directive, TDDDG, LSSI CE, IAB TCF 2.2, Google Consent Mode v2, CCPA/CPRA
Impact assessment (DPIA)
A DPIA is generally not required for Uniconsent itself, as it is a privacy enhancing technology used to comply with consent obligations under the GDPR and ePrivacy Directive. The CMP processes only the minimum data necessary to record and prove consent choices.
Sample text for your banner
This website uses Uniconsent to record your cookie preferences and forward your consent signal to advertising and analytics partners through the IAB Transparency and Consent Framework. The platform stores your consent choices to comply with the GDPR and ePrivacy obligations.
What Uniconsent sets and contacts
- Tracking method
- Client side JavaScript SDK delivered from a CDN, IAB TCF 2.2 framework integration, server side consent record storage, Google Consent Mode v2 signal forwarding, and integration hooks for Google Tag Manager and the IAB Global Vendor List.
- Server location
- United Kingdom (operated by Transfon Ltd) with cloud infrastructure provided by major providers. Consent records and configurations are stored on EU and UK regions when the EU residency option is enabled.
- Data transferred outside the EU
- Uniconsent operates from the United Kingdom. Since 2021 the UK benefits from an EU adequacy decision, so transfers from the EEA to the UK are lawful. Cloud infrastructure underneath may involve sub processors with US operations, requiring SCCs and a Transfer Impact Assessment.
Cookies set (9)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| __uc_consent | functional | 1 year | Stores the visitor consent decision, the TCF policy version, the TC string, and the list of allowed purposes and vendors. Strictly necessary to remember the user choice across pages and visits. |
| __uniconsent | first_party | 12 months | Stores the visitor consent decision per purpose and per vendor (IAB TCF v2.2 categories). Strictly necessary to prove consent under Article 7 GDPR. |
| euconsent_v2 | first_party | 12 months | IAB Transparency and Consent Framework v2.2 consent string. Read by downstream advertising and analytics vendors integrated with the TCF. |
| __uc_session | functional | session | Short lived session identifier used to coordinate the consent banner state during the current browser session and to link banner interactions with the resulting consent record. |
| __uc_geo | functional | 1 day | Caches the geographical region detected for the visitor (EU, UK, California, etc.) so that the appropriate banner variant and legal framework are applied without repeated geo lookups. |
| __uc_region | first_party | 12 months | Caches the detected regulatory region (EU, UK, US California, Brazil) so the right banner is shown on return visits. |
| __uc_gcm | first_party | 12 months | Mirrors the Google Consent Mode v2 signal (ad_storage, analytics_storage, ad_user_data, ad_personalization) for the Google tag. |
| __uc_tcstring | functional | 1 year | Mirror of the IAB TCF v2.2 transparency and consent string, exposed for downstream vendors that read the signal directly from cookie storage rather than from the CMP API. |
| __uc_uid | first_party | 12 months | Anonymous pseudonymous identifier used to link the consent log entry stored by Quirk Solutions to the cookie on this browser. |
Third-party domains contacted (6)
cmp.uniconsent.comuniconsent.comapp.uniconsent.comcdn.uniconsent.comapi.uniconsent.comconsent.uniconsent.com
Frequently asked questions about Uniconsent
Can't find your question? Write to us, we answer fast.
Which cookies does Uniconsent set on visitors?
Uniconsent sets a first party cookie storing the consent identifier and a few helper cookies for the banner UI (language preference, dismissed state). It also writes the IAB TC String to a shared cookie when the IAB TCF integration is enabled, so downstream vendors can read it.
Is consent required to load Uniconsent itself?
No. Uniconsent is a Consent Management Platform, which European authorities treat as a privacy enhancing technology. It runs on legitimate interest because it is required to gather consent for the other tags. The CMP must, however, not be used to manipulate the user choice.
What is the legal basis for using Uniconsent?
Legitimate interest under Art. 6(1)(f) GDPR: collecting and storing consent is mandatory under Art. 7 GDPR and Art. 5(3) of the ePrivacy Directive. Uniconsent processes only what is needed to record and demonstrate the consent decision.
Does Uniconsent transfer data outside the European Union?
Uniconsent is operated from the UK, which benefits from an EU adequacy decision. Cloud sub processors with US affiliates may exist and rely on Standard Contractual Clauses and a Transfer Impact Assessment. Verify the Data Processing Agreement and Sub Processor list before deployment.
Is a DPIA required when deploying Uniconsent?
A DPIA is not required for Uniconsent itself. It may still be required for the underlying advertising or analytics stack that the CMP gates, especially when large scale behavioural profiling is involved.
How do I implement Uniconsent correctly?
Configure the banner with equal prominence between Accept and Reject, expose all vendors and purposes, enable Google Consent Mode v2 forwarding, log consent records server side, set retention rules consistent with your supervisory authority, and document Uniconsent in your Article 30 register.
Are there alternatives to Uniconsent based in the EU?
Yes. Several European CMPs offer equivalent IAB TCF 2.2 support and Google Consent Mode v2 integration: Didomi (France), Axeptio (France), CookieFirst (Netherlands), Cookiebot (Denmark), Klaro (Germany) and Complianz (Netherlands). Most of them keep data inside the EU by default.
How do I update my cookie policy after enabling Uniconsent?
Mention Uniconsent as the CMP, list its strictly necessary cookies, explain that it stores your consent choice and the IAB TC String, and describe how to withdraw consent. Re trigger the consent banner if the configuration changed materially, such as new vendors or new purposes.
Efilli
Efilli is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Efilli integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Efilli helps organizations maintain robust websites that meet user expectations and technical requirements.
Spatie Laravel Cookie Consent
Spatie Laravel Cookie Consent is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Spatie Laravel Cookie Consent manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Spatie Laravel Cookie Consent ensures worldwide privacy compliance.
Klaro
Klaro is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Klaro integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Klaro helps organizations maintain robust websites that meet user expectations and technical requirements.
FlowConsent
FlowConsent is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. FlowConsent supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, FlowConsent ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
TrustArc
TrustArc is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. TrustArc integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, TrustArc helps organizations maintain robust websites that meet user expectations and technical requirements.
CookieYes
CookieYes is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. CookieYes supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, CookieYes ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.