# CookieGuard

> Consent management platform with configurable, jurisdiction-scoped controls that support privacy compliance. Flat-rate pricing, multi-site support, and Healthcare-plan controls for Washington MHMDA and Nevada SB 370.

CookieGuard helps website owners, agencies, and e-commerce businesses manage cookie consent banners across GDPR, CCPA, LGPD, MHMDA, Nevada SB 370, and 8+ other regulations. Unlike per-domain tools like Cookiebot, CookieGuard charges a flat monthly rate regardless of how many domains you manage on a given plan. Setup takes minutes on Shopify, WordPress, Webflow, Wix, WooCommerce, BigCommerce, Squarespace, and Magento.

## Product Pages

- [Home](https://cookieguard.co/): Overview of CookieGuard, key features, pricing summary, and platform integrations
- [Cookiebot Alternative](https://cookieguard.co/cookiebot-alternative): Side-by-side comparison of pricing, multi-site support, and configurable consent controls
- [Enterprise Plans](https://cookieguard.co/enterprise): Custom consent management for high-traffic websites, agencies, and multi-domain organizations. Includes dedicated support, SLA-backed uptime, consent records, and audit logs
- [Global Privacy Regulations](https://cookieguard.co/regulations): Reference guide covering GDPR, CCPA, LGPD, PIPEDA, POPIA, PDPA, PIPL, DPDP, APPI, Privacy Act, and PIPA with regional breakdowns and banner requirements
- [Contact](https://cookieguard.co/contact): Contact form for sales inquiries, support, and partnership requests
- [Privacy Policy](https://cookieguard.co/privacy): CookieGuard's own privacy policy
- [Terms of Service](https://cookieguard.co/terms): CookieGuard's terms of service

## Documentation

- [Setup Guide](https://cookieguard.co/docs/guide): Complete guide for creating and configuring consent banners — covers site setup, banner design, translations, script installation, and editing existing banners
- [Integration Recipes](https://cookieguard.co/docs/integrations): Developer reference for normalized decisions, the `window.cookieguard` API, Google Consent Mode v2 bootstrap, Tagged Script Blocking, revocation callbacks, and framework recipes
- [Framer Plugin Setup](https://cookieguard.co/docs/framer): Step-by-step instructions for installing CookieGuard via the Framer plugin

## Wiring scripts to consent (developer summary for LLMs)

Full developer reference: https://cookieguard.co/docs/integrations (also inlined in https://cookieguard.co/llms-full.txt).

CookieGuard exposes `window.cookieguard`. Queue handlers before the script loads with the async stub `window.cookieguard = window.cookieguard || { q: [], on(...a){ this.q.push(['on', a]) } }`.

- `cookieguard.on('ready', fn)` — fires once when consent state is settled; `fn` gets the consent object or `null`.
- `cookieguard.on('change', fn)` — fires on every consent change; `fn` gets the consent object.
- `cookieguard.getConsent()` — current consent object, or `null` if no decision yet.
- `cookieguard.openPreferences()` — open the preferences modal (wire to a "Manage cookies" link).
- `cookieguard.reset(options?)` — clear consent, apply denied signals, emit a null change, and optionally clear age/identifier state or reload.
- `cookieguard.registerIntegration(category, { grant, revoke })` — register idempotent vendor lifecycle callbacks.
- `cookieguard.diagnostics()` — inspect effective rule/version, Google ordering, tagged scripts, and audit delivery without personal data.
- `document.addEventListener('cookieguard:consent', e => e.detail)` — DOM event alternative.

Consent snapshots are normalized decisions: `{ decisionId, action, categories, decidedAt, bannerId, ... }`. Gate analytics on `decision?.categories.analytics` and marketing pixels on `decision?.categories.marketing`. `necessary` is always true; `sensitive` is available only when the Healthcare entitlement and visitor jurisdiction permit it.

- **Google Consent Mode v2** — enable Settings → Integration → Google Consent Mode and install the site-specific parser-blocking bootstrap before GTM/gtag/GA4/Ads. It sends a synchronous denied default, then the runtime sends updates for new and returning decisions.
- **Tagged Script Blocking** — enable Settings → Advanced → Tagged Script Blocking, then set a script's `type="text/plain"` and add `data-cookieguard="analytics|marketing|preferences|sensitive"`. This activates deliberately tagged scripts; it does not discover or block arbitrary untagged scripts.

## How to configure a banner (summary for LLMs)

Full instructions are at https://cookieguard.co/docs/guide. Key steps:

1. **Create a site** — Dashboard → Sites → Add Site → enter domain
2. **Create a banner** — open a site → Banners → New Banner
3. **General tab** — set banner name and default language
4. **Design tab** — choose layout (Bar / Floating / Modal), position, theme preset or validated colors, typography, spacing, button style (filled/outlined/ghost), and an HTTPS logo
5. **Content tab** — edit translations per language: title, description, button labels (Accept All, Reject All, Customize, Save), cookie category descriptions, Privacy Policy and Cookie Policy links
6. **Add languages** — Content tab → Add Language → enter a language code (e.g. fr, de, es) → fill in translations
7. **Install** — copy the script tag from the Installation tab and add it to your site's `<head>`

### Script tag format
```html
<!-- First script in head, before Google and all optional tags -->
<script src="https://cookieguard.co/api/v1/bootstrap/YOUR_SITE_ID?key=YOUR_PUBLISHABLE_SITE_KEY&language=auto"></script>
```

### Design options reference

| Option | Values | Notes |
|--------|--------|-------|
| Layout | bar, floating, modal | Bar = full-width strip; Floating = corner card; Modal = centered overlay |
| Position (bar) | top, bottom | |
| Position (floating) | bottom-left, bottom-right | |
| Theme | light, dark, accessible, blue, green | Presets that set all colors at once |
| Font family | system, inter, roboto, lato, open-sans | |
| Font size | 12–18px | |
| Button style | filled, outlined, ghost | Per button (Accept All / Reject All / Customize) |
| Show Reject All | true | Required for strict-jurisdiction choice parity |
| Show Customize | true | Required for granular strict-jurisdiction choice |
| Animation | slide, fade, none | |
| Logo URL | HTTPS URL | Displayed above the banner title |

### Supported auto-detected browser languages
en-US, en-GB, de, fr, es, it, pt-BR, zh, ja, ko, th, hi

## Pricing (as of 2026)

- [Basic (Free)](https://cookieguard.co/#pricing): 1 website, 1 banner, up to 2,000 monthly pageviews, all global regulations included, free forever — no credit card required
- [Essential ($8/month)](https://cookieguard.co/#pricing): 1 website, 2 banners, up to 10,000 monthly pageviews, advanced customization, priority support. 14-day free trial
- [Professional ($18/month)](https://cookieguard.co/#pricing): 3 websites, 3 banners per site, up to 30,000 monthly pageviews, advanced customization, priority support. 14-day free trial
- [Enterprise ($68/month)](https://cookieguard.co/#pricing): 10 websites, 3 banners per site, up to 100,000 monthly pageviews, dedicated support, consent records and audit logs, multi-user access. 14-day free trial
- [Healthcare (custom-quoted, from $299/month)](https://cookieguard.co/healthcare): Custom tier for US health-data sites. 3 websites, 3 banners per site, up to 50,000 monthly pageviews (custom volumes available). Adds MHMDA (Washington) + Nevada SB 370 controls, a sensitive / health-data category with explicit opt-in for eligible WA and NV requests, and exportable server-normalized consent evidence with unlimited retention. Customer configuration and legal review remain required.
- [Custom (contact for quote)](https://cookieguard.co/enterprise): Unlimited or high domain count, custom visitor volumes (200k–millions), SLA, dedicated onboarding

## Supported Regulations

All regulations are included on every plan, including the free tier.

- [GDPR](https://cookieguard.co/regulations): European Union — explicit opt-in consent, granular categories, right to withdraw
- [CCPA/CPRA](https://cookieguard.co/regulations): California, USA — opt-out model, "Do Not Sell" link, data access and deletion rights
- [LGPD](https://cookieguard.co/regulations): Brazil — GDPR-inspired opt-in consent, data subject rights
- [PIPEDA](https://cookieguard.co/regulations): Canada — consent for collection, use, and disclosure of personal information
- [POPIA](https://cookieguard.co/regulations): South Africa — eight conditions for lawful processing
- [PDPA](https://cookieguard.co/regulations): Singapore and Thailand — consent and purpose limitation requirements
- [PIPL](https://cookieguard.co/regulations): China — GDPR-like protections with Chinese regulatory characteristics
- [DPDP / DPDPA](https://cookieguard.co/regulations): India — Digital Personal Data Protection Act 2023
- [PIPA](https://cookieguard.co/regulations): South Korea — personal information protection
- [Privacy Act / APPs](https://cookieguard.co/regulations): Australia — Australian Privacy Principles
- [APPI](https://cookieguard.co/regulations): Japan — Act on Protection of Personal Information
- [MHMDA](https://cookieguard.co/regulations): Washington, USA — My Health My Data Act, opt-in consent for consumer health data, private right of action. Healthcare plan only
- [Nevada SB 370](https://cookieguard.co/regulations): Nevada, USA — consumer health data opt-in, separate consent to share, AG enforcement. Healthcare plan only

## Platform Integrations

- Shopify, WordPress, WooCommerce, Webflow, Wix, Squarespace, BigCommerce, Magento
- Any custom HTML/JavaScript site via a single script tag

## Getting Started

- [Sign Up Free](https://cookieguard.co/signup): Free plan is permanent, no credit card required
- [Start a 14-Day Trial](https://cookieguard.co/signup): All paid plans include a 14-day free trial
- [Contact Sales](https://cookieguard.co/contact): For enterprise inquiries, migration help, or custom volume quotes