GDPR & UK GDPR
EU / EEA / UKOpt-in for non-essential cookies, granular categories, withdraw anytime.
In product: Regulation mode: GDPR · category toggles on first banner · trackers blocked until consent · geo EU/UK → GDPR
ePrivacy (Cookie Law)
EUPrior consent for non-essential storage/access where applicable.
In product: Auto-block trackers + Consent Mode defaults denied until accept
CCPA / CPRA
California, USANotice, opt-out of sale/sharing, GPC honor, Do Not Sell link.
In product: Regulation mode: CCPA · optional cookies may run until opt-out · Do Not Sell action · GPC
Other US state privacy laws
United StatesVCDPA (VA), CPA (CO), CTDPA (CT), UCPA (UT), TDPSA (TX), and similar opt-out/notice frameworks.
In product: Use CCPA-style opt-out + GPC + geo US targeting; customize banner copy for your counsel’s guidance
LGPD
BrazilLawful bases and consent for non-essential tracking.
In product: Regulation mode: LGPD · opt-in blocking · category grid on banner · geo Brazil → LGPD
PIPEDA & Law 25 (Québec)
CanadaMeaningful consent and transparency for cookies/trackers.
In product: Regulation mode: PIPEDA · meaningful-consent disclosure on banner · opt-in until accept · geo Canada → PIPEDA
Google Consent Mode v2
Global adsPass consent signals to Google tags for modeling and compliance.
In product: Widget sets Consent Mode v2 defaults on every plan. Connect GA4/GTM on Starter+
Microsoft UET & Clarity Consent Mode
Global adsad_storage / analytics consent signals for Microsoft advertising & Clarity.
In product: Widget sets UET + Clarity consent defaults/updates automatically
IAB TCF 2.2
EEA advertisingTransparency & Consent Framework for publishers and ad tech.
In product: TCF mode (Pro+): __tcfapi API, per-purpose consent layer, TC strings. IAB CMP ID registration pending — see /regulations#tcf
Certifications & roadmap
Competitors like Cookiebot, CookieYes, Enzuzo, and iubenda advertise Google CMP badges and IAB TCF. We publish an honest status instead of fake badges.
Google-certified CMP partner
Application requires production Consent Mode v2 (already shipping), reliability metrics, and Google partner review. Tracking toward submission.
IAB Europe TCF registered CMP
TCF 2.2 mode ships in the widget today: __tcfapi API, GVL vendor disclosure, per-purpose consent layer, and TC string generation. IAB Europe CMP ID registration is pending — until assigned, TC strings use CMP ID 0 (test) and are not accepted by vendors.
SOC 2 / ISO 27001
Security page + DPA published now. Formal audits planned as customer volume grows.