Check what loads before anyone clicks
We check the cookies, tags, pixels, and other technologies on the pages being reviewed. For each one, we record which service it belongs to, who added it, and when it is allowed to run.
The required behavior depends on your audience, the regions you serve, the tools you use, and the privacy policy your organization has approved.
What the implementation includes
Set up the consent tool
We can work with your existing consent management platform (CMP) or help choose one. We agree on the platform, licensing, and vendor terms as part of the project.
Test the choices
Connect the controls to the scripts they govern. Test a first visit, rejection, acceptance, withdrawal, and applicable opt-out signals. Include tags installed directly in the site or through apps, not just the tag manager.
Review monthly
Monthly audits compare the current cookie and request inventory with the approved setup. We investigate new vendors and unexpected requests, implement approved changes, and repeat the affected tests.
Agree who can add a tag
Record who keeps the inventory, who approves a new vendor or campaign tag, and who checks that it respects the consent settings.
Different rules can require different controls
In California, a covered business must honor qualifying opt-out preference signals, including Global Privacy Control (GPC), as a request to opt out of the sale or sharing of personal information. See the CPPA FAQ.
In the EU, the ePrivacy Directive generally requires consent before storing information or accessing information on a user's device, subject to defined exceptions. The GDPR separately applies where personal data is processed. See the European Commission's GDPR overview and the EU ePrivacy Directive.
In the UK, the separate PECR rules apply to storage and access technologies; the UK GDPR also applies when their use involves personal data. See the ICO's storage and access guidance.
Your counsel or privacy lead should approve applicable laws, exceptions, and consent policy. dirango implements the approved technical scope; this service is not legal advice or a compliance certification.
Keep new tags from undoing the setup
A new video embed, advertising pixel, or app can change what the site sends. Our website governance work can help you decide who can add these tools and how they are checked before release.
For broader development or upkeep, explore WordPress support or Shopify design and development.
Selling only in the US?
Read our GDPR guide for US businesses for targeting, monitoring and establishment examples, plus a working consent-check demonstration.
For a practical US-state example, review California cookie requirements and Global Privacy Control, including real cases and a working local opt-out demo.
Is your banner doing what it says?
Send us the site and the consent tool you use, if you have one. Let us know which regions you serve and who handles privacy decisions for your organization.
Discuss cookie consent implementation