
Regulations
GDPR & ePrivacy (EU/EEA, UK)
GDPR & ePrivacy (EU/EEA, UK)
- Consent model: prior opt-in. No non-necessary cookies or trackers before affirmative consent.
- Banner behavior: blocking mode enabled; Accept, Reject, and Preferences all shown.
- Records: every decision produces a consent receipt as proof of consent.
- Withdrawal: the preference center is re-openable at any time via the footer link or
window.TruePrivacy.showPreferences().
CCPA / CPRA (California)
CCPA / CPRA (California)
- Consent model: opt-out. Cookies may run by default; visitors must be able to opt out of the sale/sharing of personal information.
- Banner behavior: shows a “Do Not Sell or Share My Personal Information” notice and link.
- GPC: TruePrivacy honors the Global Privacy Control signal automatically, treating it as an opt-out for California visitors.
Geo-targeting
Serve different behavior from a single installation. Geo-targeting resolves the visitor’s region at the CDN edge (country-level, no IP stored):| Visitor region | Default behavior |
|---|---|
| EU/EEA, UK | Opt-in banner, blocking mode |
| California (US) | Opt-out notice, GPC honored |
| Rest of world | Configurable: opt-in, opt-out, or no banner |
Consent expiry and re-prompt
Consent does not last forever. Configure:- Consent validity period — default 12 months; configurable from 1 to 24 months. When it lapses, the visitor is re-prompted.
- Re-prompt on change — when you publish a banner configuration with new or changed categories, existing consents can be invalidated so visitors are asked again for the new purposes.
Compliance checklist
Enable blocking mode for opt-in regions
Confirm blocked-script tagging is complete via a cookie scan showing no non-necessary cookies before consent.
Publish a cookie declaration
Embed the public cookie declaration on your cookie policy page.
Schedule recurring scans
Use scheduled scans so new trackers are detected and categorized promptly.
TruePrivacy provides tooling to support compliance, but regulations depend on your specific processing activities. Consult your legal counsel for your obligations.