Free GDPR cookie consent banner
Ask first. Load nothing until they say yes.
Builderify Cookie Consent is a cookie banner and a consent manager in one. It asks your visitors the way the GDPR, the UK GDPR and the US state privacy laws expect. Then it holds back your Meta Pixel, Google Analytics, TikTok and every other tracking tag until they agree, and keeps proof of every answer.
Try it on the right: reject, accept or pick categories, and watch what is allowed to load.
Most cookie banners
are decoration.
A pixel pasted into your site runs the moment the page loads, often before the banner has even appeared. By the time a visitor clicks “Reject”, the visit has already been reported and the cookie is already set. The banner asked a question it had no power to act on.
If you run ads, use analytics or sell to people in the EU, the UK or California, that gap is your problem. Not the pixel vendor’s, and not the visitor’s.
Ask first, refuse in one click
Non-essential cookies need a clear yes before they are set. A pre-ticked box is not one, the EU’s top court said in 2019. And refusing has to be as easy as accepting: France’s CNIL fined Google €150 million and Facebook €60 million in 2022 because it was not.
Google wants the signal
Since March 2024 Google expects advertisers reaching the EEA to pass Consent Mode v2 signals with every visit. Without them, remarketing and conversion measurement are restricted, so the banner is now part of how your ads perform.
Opt-out, and the browser signal
California and other US states let people opt out of the sale or sharing of their data. Browsers such as Brave, DuckDuckGo and Firefox can send a Global Privacy Control signal, which California’s rules treat as that request.
How a cookie consent manager works:
a banner, a gate and a record.
The banner asks. The gate decides what is allowed to run. The record proves what was asked and what was answered. All three read the same answer, kept in one small first-party cookie.
-
01
First page
Before anything else on the page runs, the consent tag reads the visitor’s answer. No answer yet means every non-essential tag waits.
-
02
The answer
One click to accept, one click to reject, or a switch per category. Whatever they pick is stored for the lifetime you set: six, twelve or thirteen months.
-
03
Every page after
A returning visitor’s tags are released immediately, on every page and every subdomain of your site, with no banner in their way.
-
04
A change of mind
The cookie button reopens the choice. Withdrawing deletes that category’s cookies, and if its code had already run, the page reloads once so it stops.
GDPR opt-in for some visitors,
CCPA opt-out for others.
The law depends on where your visitor is, not where you are. Pick one of four ways to ask. The smart one decides per visitor from their own device’s time zone, with no IP lookup and nothing sent anywhere. Anyone whose time zone cannot be read is asked first.
Analytics, advertising and preference cookies all wait. If they refuse, nothing non-essential ever loads for them.
How long a choice lasts
Six, twelve or thirteen months, then the visitor is asked again. France’s CNIL recommends six.
When your policy changes
“Ask everyone again” voids every stored choice, so visitors decide with the full picture.
Global Privacy Control
Honoured as an opt-out of advertising, and the preferences panel tells the visitor it was.
Your brand,
not a stock banner.
Four layouts, six palettes and every colour adjustable. The preview in your dashboard is drawn by the same code your visitors get, so what you approve is what they see. On phones the corner and floating layouts stretch to full width, and the preferences open as a sheet from the bottom.
- Words. Title, message and every button are yours to rewrite. Leave one empty and visitors get the default, already translated into 23 languages.
- Links. Privacy Policy, Cookie Policy, Terms, Imprint and Your Privacy Choices, added with one click each.
- Shape. Corner and button radius, a soft or lifted shadow, your site’s own font, compact or comfortable, and a slide or fade entrance.
- Change-your-mind button. A small cookie button that stays after a choice. Prefer a footer link? Point any link at #cookie-settings.
EU regulators check first that refusing looks as easy as accepting. Equal-weight buttons are the default for that reason.
Proof of consent,
for every single answer.
Under the GDPR it is up to you to show that a visitor agreed. Every decision is kept with what was chosen, when, under which rule and which version of your banner. The visitor sees the same consent ID in their preferences, so a data request takes a search, not an investigation.
The log also shows how your banner performs: decisions per day, the share who accept everything, and the opt-in rate for each category.
Your own analytics wait for the answer too.
“Wait for cookie consent” records only visitors who allowed analytics. If they withdraw, tracking stops and their visitor ID is erased from the browser at once.
Visitor-level analyticsOnly visitors who said yes are tested. Everyone else sees your original page and nothing is stored about them. Someone who accepts joins from their next page, never mid-page.
The A/B testing toolThe widget only remembers what the visitor did: a popup closed, a chat opened, a font size chosen. That needs no consent, and it is declared as necessary.
The website widget
Is your cookie banner
doing its job?
Eight questions, each one a thing regulators and ad platforms look at. Answer honestly for the banner you have today.
Answer the questions to see where you stand.
Every one of these is built into Builderify Cookie Consent.
-
01
Do your pixels wait until a visitor clicks Accept?
Open your site in a private window and watch the network tab before touching the banner. Anything from facebook.net or google-analytics.com already ran.
-
02
Is “Reject all” on the first screen, as easy as “Accept all”?
France’s CNIL fined Google €150 million and Facebook €60 million in 2022 for making refusal take more clicks than acceptance.
-
03
Are optional categories unticked until the visitor ticks them?
The EU’s top court ruled in Planet49 (2019) that a pre-ticked box is not consent.
-
04
Can visitors change their mind later, from any page?
GDPR Article 7(3): withdrawing consent must be as easy as giving it.
-
05
Do you keep a record of each visitor’s decision?
GDPR Article 7(1) puts the burden of proving consent on you, not the visitor.
-
06
Do your Google tags receive Consent Mode v2 signals?
Since March 2024 Google expects them for advertisers reaching the EEA; without them remarketing and measurement are restricted.
-
07
Do you honour Global Privacy Control for US visitors?
California’s regulations treat the browser’s GPC signal as a valid request to opt out of sale or sharing.
-
08
Does your banner link to your privacy policy?
Consent only counts when it is informed. The policy has to be one click away from the choice.
Add a cookie banner to any website
with one line in the head.
The banner comes with the Builderify snippet you may already have. The consent tag goes first in your <head>, so it decides before any other tag on the page runs. It is small, cached, and carries your settings inside it.
<head> <script src="https://app.builderify.com/consent/your-site-id.js" data-cfasync="false"></script> <!-- …everything else in your head -->
On Shopify each choice is also passed to Shopify’s Customer Privacy API. Switch off any other cookie banner, including your site builder’s own, so visitors are only asked once.
Free to start. No monthly fee.
What it is not.
Better you read it here than find it out later. This page is general information, not legal advice.
-
Not compliance in a box
It enforces the choice and keeps proof. Whether you collect only what you need, and say so in an accurate privacy policy, is still yours to decide.
-
Not a certified CMP
It does not implement the IAB’s TCF and is not Google-certified. If you show Google ads on your own site through AdSense, Ad Manager or AdMob, Google asks for a certified one.
-
Not psychic about cookies
The scanner sees the cookies page scripts can read. HttpOnly and third-party cookies have to be added by hand.
-
Not first unless it is first
A tag placed above the consent tag in your head has already run. Put the consent tag first.
Cookie consent, before you ask.
You can start free. The banner ships inside the Builderify widget, so it runs on the 250 Usage Credits every account gets each month, and page loads with the widget on them cost 10 credits per 1,000. Consent decisions, the consent log, the cookie scanner and the consent tag use no credits of their own. If you need more, one-time packs start at $9 and never expire.
No banner can do that on its own, and Builderify does not claim to. It gives you the controls regulators look at first: nothing non-essential runs before a yes, refusing takes one click like accepting, choices can be changed at any time and every decision is logged. You still need an accurate privacy policy and to decide what you collect. This is general information, not legal advice.
Either paste the pixel's ID into Cookie Consent and delete its code from your site, so Builderify loads it only for visitors who allowed its category, or keep your code and change the script to type="text/plain" with data-bdf-consent="marketing" or "analytics". Thirteen tags can be connected by ID, including Meta, TikTok, Google Ads, GA4, LinkedIn and Microsoft Clarity.
Yes. The consent tag sets all seven Consent Mode signals, including ad_user_data and ad_personalization, before your Google tags run, and updates them the moment a visitor decides. Builderify is not a Google-certified consent platform, so if you show Google ads on your own site through AdSense, Ad Manager or AdMob, Google asks you to use a certified one for that.
Paste the one-line consent tag first in the head of your site, next to the Builderify snippet, then design the banner in the dashboard and switch it on. It works on Shopify, WordPress, Wix, Squarespace, Webflow, Framer and plain HTML. On Shopify each choice is also passed to the Customer Privacy API, so Shopify's own tracking follows it.
They reopen their choices from the small cookie settings button or any link to #cookie-settings. Withdrawing a category deletes the cookies declared for it, reloads the page once if its code had already run, and is logged as a withdrawal with the same consent ID.
Sources
- TechCrunch · France fines Google and Facebook over cookie consent dark patterns (Jan 2022)
- Bird & Bird · Planet49: CJEU rules on cookie consent (Oct 2019)
- GDPR · Article 7: Conditions for consent
- Termly · What is Google Consent Mode v2?
- Baker McKenzie · User-enabled privacy controls under the CCPA regulations
- AFS Law · CNIL guidelines on cookies and other trackers
More on your site · What visitors see and touch
- Bubble All-in-one website widget A floating hub in the corner of every page.
- Popups Free popup builder Thirteen templates, edited visually.
- Accessibility Free accessibility widget A toolkit your visitors control themselves.
- Notifications Website announcement widget Announcements that take themselves down.
- Translations Free website translation widget Your site in twenty-seven languages.
Stop losing the visitors
you already paid for.
More leads from the traffic you already have, and follow-up that sends itself. Free to start. No card, no monthly fee.