Privacy regimes CookieJar supports.

GDPR

cookiejar is engineered around the GDPR's core principles: lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and accountability. You can switch us on and meet Article 7's prior, specific, informed and freely-given consent bar without writing a line of code.

CCPA / CPRA

We honour the California Consumer Privacy Act and its CPRA amendments end-to-end — including the often-skipped Global Privacy Control (GPC) signal that the California AG has confirmed must be respected as a valid opt-out preference.

ePrivacy

The ePrivacy Directive (the so-called 'Cookie Law') sits on top of the GDPR for any reading or writing of information on a user's device — which means every cookie, every pixel, every localStorage write. Our default behaviour is the conservative one: nothing non-essential fires until prior consent.

Per-state rules

California, Virginia, Colorado, Connecticut, Utah, Iowa, Indiana, Tennessee, Texas, Florida, Montana, Oregon, Delaware, New Hampshire, New Jersey, Kentucky, Maryland, Minnesota, Rhode Island — each comes with its own definitions, opt-out rights, sensitive-data carve-outs and effective dates. Our jurisdiction engine layers them automatically on top of the federal baseline.

Security and assurance

CookieJar is not yet certified. This page reflects our current assurance status without implying third-party certification.