What the GDPR requires
- Obtain opt-in consent, given by a clear affirmative action, before setting non-essential cookies (the UK now exempts some low-risk cookies).
- Provide clear information about what each cookie does and who receives the data.
- Make it as easy to withdraw consent as it was to give it.
- Keep a record of every consent so you can prove it was obtained lawfully.
- Allow users to change their consent preferences at any time.
- Avoid dark patterns that nudge users towards accepting all cookies.
What the banner does here
Blocks non-essential cookies until the visitor chooses, with Reject all beside Accept all at the same size, and no pre-ticked boxes.
How GrantCookie covers it
- Scheduled scans. The scanner finds the cookies and trackers your site sets, sorts them into categories and re-checks on every scheduled scan, so the banner asks about what is really there.
- Provable records. Every choice is timestamped and stored with the banner version the visitor saw. Paid plans include consent log export.
- Withdrawing consent. A re-open control stays on every page, so visitors can withdraw or change their choice at any time.
This page is general guidance. It is not legal advice. Check your specific obligations with a qualified adviser.