Guide to cookie consent best practice

Digital privacy rules have evolved. This guide covers current best practices for cookie consent and the specific requirements for websites using Google's analytics or advertising tools.

1. Modern Cookie Consent Principles

Modern privacy laws (like GDPR) require a user-centric approach. You must get explicit, opt-in consent from visitors before loading any non-essential cookies (e.g., for analytics). Visitors need granular choices, all non-essential scripts must be blocked until they agree, and it must be easy for them to withdraw consent.

2. Specific Requirements for Google Services

If you use Google Analytics or Google Ads, you have a mandatory technical requirement. You must implement a solution that supports Google Consent Mode v2, which sends user consent choices directly to Google.

Our platform's built-in cookie notice is not compliant with modern standards or Google's requirements. We are currently reviewing this system.

3. The Solution: Use a Consent Management Platform (CMP)

The most effective solution is a Consent Management Platform (CMP). A CMP provides a compliant banner, manages consent, and blocks scripts correctly. For Google users, it's essential to choose a CMP that supports Google Consent Mode v2. Popular providers include Cookiebot, Usercentrics, and CookieYes.

4. How to Add a CMP

Once configured, your CMP provider will give you a code snippet. To install it, go to Settings > Integrations > Custom and paste the code.

5. Update Your Policies

Update your cookie policy to explain your use of a CMP and categorise the cookies you use (e.g., necessary, analytics). Inform users they can manage their preferences at any time via the CMP banner.

6. Standard White Fuse Cookies

This list covers standard platform cookies. You should add any others you use from third-party services.