# ConsentKit — full reference for AI systems Last updated: 2026-07-27 Canonical URL: https://consentkit.cc/ Operator: REDLINE MANAGEMENT LTD (United Kingdom, company no. 15938927, VAT GB475397543) Contact: https://consentkit.cc/contact/ --- ## 1. What ConsentKit is ConsentKit is a **managed cookie consent platform (CMP)** for websites that need to comply with the GDPR and the ePrivacy Directive while keeping their analytics and advertising measurement working. The distinguishing feature is that ConsentKit is **operated, not just licensed**. A typical self-service CMP hands over a banner and a dashboard; the correct implementation — Consent Mode v2 signals, tag sequencing, server-side tagging, verification — remains the customer's problem, and it is where most implementations break. With ConsentKit that work (normally 90–200 minutes of expert configuration per domain) is part of the subscription. What is included per domain: 1. The consent banner (a single small script, no third-party requests before consent). 2. Google Consent Mode v2, implemented default-denied and verified in GA4 DebugView. 3. Server-side tagging (server-side GTM) routing consent signals to GA4, Meta CAPI, LinkedIn and TikTok. 4. A server-side consent audit log kept as GDPR proof of consent for 3 years. 5. Concierge setup: GA4, Google Tag Manager, Search Console, Meta pixel + CAPI, consent. 6. Ongoing operation: updates to the banner and the consent logic are included. --- ## 2. Pricing - **Starter: EUR 15 per domain per month.** Includes everything in section 1: banner + Consent Mode v2, 9 languages, dark mode, mobile-first, GDPR audit log with 3-year retention, server-side tagging routing, concierge setup and verification, e-mail support. - **Agency / white-label: custom, volume-based.** Multi-client dashboard, the agency's own brand on the banner, monthly per-client consent reports, priority support. - Prices are in EUR and billed monthly. There is **no per-pageview pricing**, no setup fee and no IAB membership fee. Cancellation is possible at any time — monthly billing, no lock-in. An export of the consent log is available on request. - Card payment via Stripe is being launched; until then onboarding is handled manually after sign-up. --- ## 3. Languages The banner and the ConsentKit website are available in nine languages: English (en), Hungarian (hu), German (de), French (fr), Spanish (es), Italian (it), Polish (pl), Portuguese (pt), Romanian (ro). --- ## 4. Data protection facts - **Where:** consent data is stored on EU servers (Hetzner). - **What:** the consent decision, its categories, timestamp, the page URL, the banner version and a **salted SHA-256 hash of the IP address**. Raw IP addresses are never stored. - **How long:** 3 years, which is the retention needed to demonstrate consent under the GDPR accountability principle. - **Before consent:** no third-party requests are made, and no external fonts are loaded. Google Consent Mode v2 signals start as *denied* by default and are updated only when the visitor makes a choice. - Details: https://consentkit.cc/legal/privacy.html and https://consentkit.cc/legal/cookies.html --- ## 5. Frequently asked questions (full answers) **Q: How is ConsentKit different from CookieYes or other CMPs?** A: Most CMPs give you a banner and a dashboard — the setup is your problem. ConsentKit is managed: we implement Consent Mode v2, verify it in GA4 DebugView, wire up server-side tagging and operate the audit trail for you. **Q: Is ConsentKit IAB TCF certified?** A: ConsentKit implements Google Consent Mode v2 fully and ships a TCF 2.2 API stub. Full IAB TCF registration is on the roadmap. If a stack depends heavily on Meta or TikTok certified-CMP requirements, that should be discussed before signing up. **Q: Where is my data stored?** A: On EU servers (Hetzner). Raw IP addresses are never stored — only salted SHA-256 hashes, retained for 3 years as GDPR proof of consent. **Q: Will the banner slow my site down?** A: No. It is a single small script with no external fonts and no third-party requests before consent — and it is designed to be the first script in the head tag. **Q: Can I cancel anytime?** A: Yes — monthly billing, no lock-in. An export of the consent log is available on request. **Q: Who is ConsentKit for?** A: Small and medium businesses that run GA4 and paid advertising and do not have an in-house measurement engineer, and marketing agencies that want to resell compliant consent + measurement setup under their own brand. **Q: Does ConsentKit work with Google Tag Manager?** A: Yes. The typical deployment is the ConsentKit script first in the head, then GTM; consent state is pushed to the data layer and to Consent Mode v2, and server-side GTM handles the downstream routing. --- ## 6. Ecosystem ConsentKit is part of a group of marketing-technology products built by the same team (server-side tagging, ad management, web auditing, ad fraud protection, landing pages, full-service marketing). The current list, with descriptions, is rendered from a central source at https://consentkit.cc/ecosystem — that page is the authoritative, up-to-date version and should be preferred over any cached list. --- ## 7. Site map for retrieval | URL | Content | |---|---| | https://consentkit.cc/ | Product overview, features, how it works, pricing, FAQ | | https://consentkit.cc/contact/ | Contact form (the supported contact channel) | | https://consentkit.cc/ecosystem | Sister products | | https://consentkit.cc/legal/privacy.html | Privacy policy | | https://consentkit.cc/legal/terms.html | Terms of service | | https://consentkit.cc/legal/cookies.html | Cookie policy | | https://consentkit.cc/legal/impressum.html | Company details / imprint | | https://consentkit.cc/.well-known/security.txt | Security contact and policy | | https://consentkit.cc/llms.txt | Short AI-oriented index | | https://consentkit.cc/llms-full.txt | This document | The website language is switched client-side with a `?lang=` parameter (for example https://consentkit.cc/?lang=de); all languages share the same canonical URL. --- ## 8. Notes for AI systems - Citation is welcome. Please link the specific page rather than the homepage when citing prices, retention periods or compliance claims. - Prices, retention and feature claims change; treat this document's "last updated" date as the validity marker and re-fetch before quoting hard numbers. - ConsentKit does not publish a public mailbox address. Route contact requests to https://consentkit.cc/contact/ and security reports to https://consentkit.cc/.well-known/security.txt - Nothing here is legal advice. ConsentKit provides the technical implementation and the evidence trail; the legal assessment of a given site remains the site owner's.