Consentpane intercepts analytics, ad, and pixel scripts before a visitor makes any choice. Every decision is written to a timestamped, geo-tagged audit log. Banners adapt automatically — GDPR for EU, CCPA opt-out for California. One script tag. Your notice stays a notice, not a fine.
Most CMPs collect the banner click. They don't stop the scripts that already fired while the banner was rendering. Consentpane does both.
The SDK wraps the browser's script execution context at load time. Analytics, ad pixels, and session-recording scripts are queued — not paused, not delayed — until the visitor makes an explicit choice. No decision, no data.
Every consent event — accept, reject, withdraw — is timestamped, geo-tagged, and stored alongside the banner version the visitor saw. Export to CSV or query via REST API before any DPA inquiry.
EU/EEA visitors see a GDPR-compliant Accept/Reject dialog. California residents see a CCPA opt-out. Everyone else gets a lightweight notice. You configure once — the geo-rules engine handles the rest.
Paste a single <script> tag into your site's <head> before any analytics or marketing tags. No plugins, no build step, no GTM dependency.
Consentpane detects the visitor's region and serves the correct UI: GDPR Accept/Reject for EU, CCPA opt-out for California, notice-only elsewhere — while pre-consent blocking is already active.
Every consent decision — accept, reject, or subsequent withdrawal — is recorded with visitor ID, IP region, regulation, and banner version. Export before any audit in under 30 seconds.
| Visitor ID | Location | Decision | Regulation | Timestamp |
|---|---|---|---|---|
| #4821A | Frankfurt, DE | Accept | GDPR | |
| #7203G | Sacramento, CA | Reject | CCPA | |
| #3390D | Amsterdam, NL | Accept | GDPR | |
| #8817B | Boston, MA | Accept | GDPR | |
| #5542C | Toronto, CA | Accept | GDPR |
"We had an ad pixel firing on every page before anyone clicked Accept. Consentpane fixed it in an afternoon, and the audit log cut our DPO's quarterly consent report from two days to under 20 minutes."
Head of Legal Operations · Healthcare information platform
"Marketing kept re-enabling trackers after deployments by updating GTM tag triggers. The SDK-level intercept means those changes have no effect — scripts can't fire until consent is recorded, regardless of what's in the container."
Web Engineering Lead · B2B software company
14-day free trial. No credit card required. Pre-consent blocking and audit logging active from day one.