Multi-regime, one banner
Auto-detect visitor region and serve the right banner for GDPR, CCPA/CPRA, LGPD, ePrivacy, PIPEDA, POPIA, and 40+ other regimes — no per-state config to maintain.
[ COMPLIANCE / METERED / MULTI-REGION ]
Multi-region cookie compliance,without the enterprise tax.
CookieJar is an audit-grade consent platform with plan-based jurisdiction coverage, retention, and scans. Jar includes GDPR, CCPA, UK GDPR and one extra jurisdiction — $47/mo billed annually ($59 month-to-month).
CookieJar is software, not legal advice.
- 14-day money-back guarantee
- Free audit included
- Setup in about 5 minutes
- Cancel anytime
40+ legal regimes covered
GDPR · CCPA · LGPD ready out of the box
47 consent banner languages
Geo-aware banner
GDPR mode active — Sweden visitor
AcceptReject all
Why teams switch to CookieJar
Automatic cookie scanning and consent
Every compliance headache, automated. Stop juggling spreadsheets, legal newsletters, and a different banner for every state. CookieJar is the all-in-one cookie compliance platform built for teams that want to ship — not lawyer.
Continuous cookie auditing
Daily AI-powered crawls discover every cookie, tracker and pixel. Auto-classified, auto-disclosed, and synced to your policy without dev tickets.
Audit-ready reporting
Exportable consent records, regulator-ready compliance reports, change history, and proof-of-consent for every visitor — one click to CSV or PDF.
Always up to date
We track privacy-law changes and publish updates in our changelog. Google Consent Mode v2 and IAB TCF v2.2 included.
Consent analytics
Opt-in rates by region, banner A/B tests, category breakdowns, and revenue-impact estimates — so you can optimize without legal risk.
1-line install, anywhere
Drop one tag and you're live. Works with Shopify, Salesforce Commerce Cloud, BigCommerce, WooCommerce, Magento, WordPress, Webflow, Squarespace and any custom stack. Under 8KB, async, edge-cached.
How it works
How to set up cookie consent
Live in about 5 minutes. Helps you stay compliant. Paste one script, pick your regions, publish.
01
Add the script
One line of code. No build step. Loads in under 8KB.
02
We scan your site
CookieJar discovers cookies, trackers and pixels. Jar includes 4 cookie scans / mo.
03
Visitors choose
A warm, accessible banner respects their choice and records consent for audits.
[ INTEGRATIONS ]
Cookie consent integrations
Works with the stack you already run. One script tag, no platform-specific app to install or maintain. See exactly where it goes on your stack.
Ecommerce
[ WHAT'S IN THE BOX ]
Consent management platform features
The four jobs of a CMP, all included. Every plan ships with the same compliance core — paid tiers add scale (more pageviews, more domains), not more law.
Consent Management
Geo-aware banner that shows the right notice, in the right language, the first time it's needed.
- Opt-in for GDPR/EEA, opt-out for CCPA/U.S.
- Granular per-category toggles (necessary, preferences, analytics, marketing)
- GPC + IAB TCF v2.2 signal handling
- 47 banner languages
Cookie Classification
Automatic cookie discovery + categorisation, with manual overrides for anything custom.
- Weekly recursive site scan
- Auto-tagged by category (4 standard + custom)
- Generated cookie declaration auto-updates as your site changes
- Per-vendor purpose, retention, and origin
Vendor List Handling
First-class support for the IAB TCF Global Vendor List plus your own custom vendors.
- Google-certified CMP vendor list ingestion
- Custom vendor + purpose definitions
- Per-vendor consent strings encoded server-side
- Vendor scope stored with each consent record
DSAR Support
When a visitor asks what consent you hold for them, hand it over in one click.
- Per-visitor consent log lookup by hashed identifier
- JSON + CSV export for the data subject
- 12-month rolling retention (configurable)
- Tamper-evident audit trail with timestamps
Multi-regime compliance
Geo-aware cookie consent banners
One platform. Every privacy law. Selling into the EU, California, Brazil and Canada from one site? CookieJar geo-detects each visitor and automatically applies the correct legal basis, banner copy, and data-subject rights flow.
- Per-region banner logic with prior-consent (EU) and opt-out (US) modes
- Built-in DSAR / opt-out request handling
- IAB TCF v2.2 framework + Google Consent Mode v2 signals
- Timestamped, append-only consent logs
GDPR (EU)
ePrivacy
CCPA / CPRA (California)
VCDPA (Virginia)
CPA (Colorado)
CTDPA (Connecticut)
UCPA (Utah)
LGPD (Brazil)
PIPEDA (Canada)
Quebec Law 25
POPIA (South Africa)
UK GDPR
TCF v2.2
Google Consent Mode v2
Switzerland nFADP
Australia Privacy Act
[ WHAT WE COVER LEGALLY ]
Privacy laws CookieJar supports
Every claim on this page, cited. CookieJar is a Consent Management Platform — not legal advice. Below is exactly which privacy regimes our product supports out of the box, with footnotes linking to the official statute or regulator page for each.
EU / EEA + United Kingdom
GDPR + ePrivacy[1][2]
Prior, opt-in consent banner with granular categories, audit-ready consent records, and automatic cookie classification.
California residents
CCPA / CPRA[3]
“Do Not Sell or Share My Personal Information” link, opt-out signal handling (GPC), and a 12-month consent log per visitor.
Brazil
LGPD[4]
Portuguese-language consent banner, lawful-basis tracking, and exportable records for ANPD requests.
Canada
PIPEDA + Quebec Law 25[5]
Meaningful-consent banner, French + English presets, and per-purpose consent capture.
Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana + more
U.S. state laws[6]
Geo-detection auto-routes visitors to the right banner variant. New states ship as policy updates — no code change on your side.
[ FOOTNOTES ]
- [1]GDPR Art. 7 — Regulation (EU) 2016/679 — General Data Protection Regulation, Article 7: Conditions for consent. Source
- [2]ePrivacy Directive Art. 5(3) — Directive 2002/58/EC (consolidated text of 19 December 2009), Article 5(3): consent required for storing or accessing information on a user's device. Source
- [3]CCPA / CPRA — California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (Cal. Civ. Code § 1798.100 et seq.). Source
- [4]LGPD Art. 8 — Lei Geral de Proteção de Dados Pessoais (Lei nº 13.709/2018), Article 8 — consent requirements. Source
- [5]PIPEDA Principle 3 — Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5), Principle 3 — Consent. Source
- [6]U.S. state privacy laws — Active comprehensive U.S. state privacy laws as of 2026: California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), and 11 others. See IAPP State Tracker. Source
Citations are provided for transparency. CookieJar does not provide legal advice — see our legal FAQ for the full disclaimer.
[ PIXEL-PERFECT BRANDING ]
Custom-branded cookie banners
Your banner. Your design system. Drop in your URL and we'll evaluate your live CSS, typography and logo. We generate matching design tokens, preview them across three consent layouts, and let you publish straight to your site — or export the variables into your own design system.
Color tokens
Primary, surface, text — auto-contrast checked.
Typography
Headline & body fonts pulled from your CSS.
Shape & spacing
Radius, padding and border weight.
Logo & favicon
Pulled from your live site, not stock assets.
CSS variablesTailwind tokensCustom CSS override
Primary
#0A0A0A
Background
#FFFFFF
Text
#0A0A0A
Radius
8px
:root {
/* Cookie consent theme — generated from your site */
--cj-primary: 0 0% 4%;
--cj-primary-foreground: 0 0% 100%;
--cj-background: 0 0% 100%;
--cj-foreground: 0 0% 4%;
--cj-muted: 0 0% 96%;
--cj-muted-foreground: 0 0% 39%;
--cj-border: 0 0% 92%;
--cj-ring: 0 0% 4%;
--cj-radius: 8px;
--cj-font-display: "Inter Tight", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
--cj-font-body: "Inter", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
}Real-time scan powered by your live site's CSS, fonts and logo. Sign in to publish to a site.
[ REPORTING ]
Audit-ready consent records
Prove compliance in seconds, not weeks. When a regulator, customer or auditor asks for your consent records, every banner impression, choice and configuration change is logged, searchable and exportable.
Proof-of-consent records
Each decision logged with timestamp, IP hash, banner version and region.
One-click compliance reports
GDPR Article 7 and CCPA opt-out reports, scheduled to your DPO.
Unlimited CSV & PDF exports
Filter by date, region, site or visitor. No per-export fees.
Auto-generated cookie declaration
A live cookie policy that updates as the scanner finds new trackers.
Consent records, ready for any audit
Every visitor decision logged with timestamp, region and banner version. Search 12 months in milliseconds.
One-click CSV & PDF exports
Filter by date, region, site or visitor. Export the full dataset — no per-row fees, no caps.
Multi-regime reporting at a glance
Compare GDPR, CCPA, LGPD acceptance rates side-by-side. Know which regions need attention.
Timestamped, append-only logs of every change
Banner edits, scan results and policy updates are recorded with timestamps. Roll back any version.
[ BY THE NUMBERS ]
CookieJar setup time and law coverage
Enterprise outcomes, without enterprise overhead. Each number links to where it comes from.
Faster setup
about 5 minutes
from script tag to compliant banner.
[ Source: Our estimate for a one-script install — see the setup guides ]More regimes
40+
GDPR, CCPA, LGPD and beyond.
[ Source: Each regime is listed with its official source ][ PRICING ]
Cookie consent pricing
Start free. Grow into Jar. Jar is $47/month billed annually ($566/yr) and includes 3 domains included, $15/mo per extra domain, GDPR, CCPA, UK GDPR + 1 extra jurisdiction, 4 cookie scans / mo, and 2-year consent log retention.
Crumb is free with no card 14-day money-back guarantee No automatic overage charges
Audit-grade, not entry-level
Coverage scales by plan: Crumb includes GDPR + CCPA banner, while Pantry includes All 40+ supported jurisdictions.
No per-pageview surprises
We do not automatically charge overages. At 100% of your monthly page-load cap, we email the account owner. At 120%, we also show a dashboard banner.
Pricing that scales with you
Metered by pageviews and domains, not seats or features.
Clear billing choices
Jar is $59 month-to-month or $566/yr. Paid plans include a 14-day money-back guarantee.
Free download
Free cookie compliance audit checklist
Get the 32-point Cookie Compliance Audit Checklist. A self-audit for GDPR, CCPA and other cookie rules. Score your site in about 15 minutes and see where the gaps are.
- 32 checks across 7 categories
- Covers GDPR, ePrivacy, UK GDPR, CCPA/CPRA and US state laws
- Yes / No / Partly scoring with a note on each fix