Cookie rules differ sharply between Europe and the US. We audit the trackers on your site, sort them by purpose, and write a cookie notice and consent configuration that match the rules where your visitors are. Your marketing team keeps the tools it needs, set up correctly.
At a glance
- Practice
- Privacy
- Pricing
- Flat fee, quoted before we start
- Included
- 6 deliverables
- Process
- 3 steps, one named attorney
- Where we work
- Slack, email or a call
When founders call us
The moments that usually bring a company to us for this work.
- 01
You added analytics or ad pixels and are not sure what consent you need
- 02
You started getting traffic from the EU or UK
- 03
Your consent banner does not respond to Global Privacy Control signals
- 04
A customer security review flagged your cookie setup
What you get
Scoped in writing before we start. One flat fee for all of it.
- Tracker inventory sorted into necessary, analytics, functional and advertising
- Cookie notice describing each category, purpose and provider
- Consent and opt-out configuration guidance for your consent management tool
- US opt-out of sale or sharing mechanism, including Global Privacy Control handling
- Region-specific banner logic for EU, UK and US visitors
- Alignment check with your privacy policy
How it works
- 1
Scan and review
We review the cookies, pixels and SDKs that fire on your site and app.
- 2
Notice and settings
We draft the cookie notice and specify consent settings for each region.
- 3
Verify
After your team configures the banner, we check that trackers behave as the notice says.
Mistakes we help you avoid
The ones we see most often, and catch before they cost you.
- Avoided
Firing analytics or advertising cookies before EU visitors give consent
- Avoided
Consent banners where rejecting is harder than accepting
- Avoided
Ignoring Global Privacy Control signals that California treats as a valid opt-out
- Avoided
A cookie notice that lists trackers your site no longer uses, or misses new ones
Cookie Notices: questions founders ask
US law generally does not require opt-in consent for cookies the way EU law does. However, several state laws require a way to opt out of the sale or sharing of personal information, which often includes ad tracking. If you have EU or UK visitors, consent rules may apply to them.
Under EU and UK rules, cookies that are not strictly necessary to provide the service the user asked for generally need prior consent. That usually includes analytics and advertising cookies. Strictly necessary cookies, such as those for login sessions, do not.
It is a browser signal that tells websites the user wants to opt out of the sale or sharing of their data. California regulators treat it as a valid opt-out request, and some other states require it to be honored too. Your site should detect and apply it.
They are related but different. The privacy policy covers all personal data you handle, while the cookie notice explains the specific trackers on your site and how to control them. Many companies publish the cookie notice as a section of the privacy policy or as a linked page.
Get a flat-fee quote for Cookie Notices.
A short call with an attorney. You leave with a written scope and one fixed price.
Book a call