Cookie Manager · Part of Data Privacy
A cookie banner on every site. And proof of every visitor’s choice.
Cookie consent management for your websites. Cookie Manager, part of Data Privacy in Acuna GRC, puts a banner on your sites that asks visitors which cookies they allow, and keeps a record of every answer you can export as proof. Aiko suggests a category for an unknown cookie, and Swiss experts can set it up with your web team.
Cookies
2 of 3 paid sitesCorporate site
Install<script src="…"></script>Paste once in the head of every page, before any tag manager.Corporate site
DraftConsent log
Corporate site · 1,284 choices this monthThe problem
Why is a cookie banner alone not enough? You need proof of every choice.
A banner asks the question. When an authority or a visitor asks what was chosen, under which banner and when, you need a record of each answer and of the banner the visitor saw.
Our banner says one thing and the site does another.
Fix: optional scripts are tagged by category and run only after the visitor grants it.
An authority asks for proof of consent and we have nothing to show.
Fix: every choice is a consent record with its banner version, exported as CSV or PDF.
We changed the banner. Nobody can say what visitors saw last spring.
Fix: every published version stays on record, with who published it.
How Cookie Manager works
How does cookie consent management work in Acuna GRC? One line, one banner, one record per choice.
You register each website, paste one script line and tag your optional scripts, design and publish the banner, and every visitor choice becomes a consent record.
How do you put a cookie banner on your website?
Paste one script line, once, in the head of every page, before any tag manager. Then tag each optional script with its category (preferences, statistics or marketing) so the browser runs it only after the visitor grants that category. An administrator verifies each host by a DNS TXT record or a file on the site.
How do you make Reject all as easy as Accept all?
Accept all and Reject all always share one style. Choose Bar, Box or Popup, write the texts in English, German, French, Spanish or Italian and check the live preview on desktop and mobile. On every page, the Prominence check confirms that Reject all is visible and as prominent as Accept all. If your stylesheet hides it, the banner falls back to its built-in style.
How do you prove what a visitor chose?
Every choice is a consent record: the categories, the date, the banner version and cookie policy it was made under, and a random consent ID. Search by consent ID or by date, and export as CSV or PDF with a reconstruction of the banner. When a visitor asks for their record, the request arrives as a DSAR in Data Privacy.
Record of processing and DSARs in Data Privacy →What happens when you change the banner?
Every change waits in the site’s draft until someone chooses Publish version, and visitors get it within 5 minutes. Ask every visitor again is ticked and locked when the categories, their texts or the cookie list change. Each version stays on record with who published it, and every necessary cookie needs a reason before it is published.
Cookie vendors become third parties you assess in TPRM →Aiko in Cookie Manager
What does the AI assistant do in Cookie Manager? Aiko suggests, you approve.
For a cookie nobody recognizes, Ask Aiko for a suggestion proposes a category and a purpose. It is only a suggestion: a person checks it before approving.
Swiss experts
Can someone set up our cookie banner with us? Yes, with our Swiss experts.
DPO as a service, done with you: our Swiss experts set up the banner texts, categories and consent records with your web team. Your people publish each version.
Legal and compliance expert
Laura Menetrey
Data protection law
GRC Consulting team leader
Bénédicte Sévin
ISO 27001 Lead Implementer.png&w=3840&q=75&dpl=dpl_Ba6pf7ueYcNioUvDkWkKkJsULeG7)
Do it yourself
You run the program in Acuna GRC, with Aiko.
Done with youOn Cookie Manager
Guidance, reviews and audit preparation with your team.
Done for you
Our experts run it. You review.
Integrations
Does Acuna GRC connect to the tools you already use? Yes, 100+ connectors.
Cookie Manager works on your website. The rest of Acuna GRC pulls evidence from your identity, cloud and HR tools on a schedule.
Entra ID
Okta
Google Workspace
Microsoft 365
AWS
Azure
Personio
Jira- 100+ connectors in all
Missing a connector? We build it. See Integrations and API
Connects with
How does Cookie Manager fit with your privacy program? It is part of Data Privacy.
Websites link to processing activities, a visitor’s record request arrives as a DSAR, and each cookie’s vendor becomes the same third party you assess in TPRM.
FAQ
What else do people ask about cookie consent management?
Does the banner support Google Consent Mode v2?
Yes, in basic mode. Everything optional is denied before any tag runs, and each category maps to its signals once the visitor grants it.
Which languages can the banner use?
English, German, French, Spanish and Italian. A visitor whose language is not offered sees the website’s default language.
Can we add our own CSS?
Style the banner from your own stylesheet: it inherits your page font and exposes CSS custom properties and named parts. Acuna has no field to paste CSS, because pasted CSS could hide Reject all and would run on every page of your site.
What can tagging not block?
Untagged scripts, cookies your server sets, pixels and preloads written in the page, iframes already loaded and trackers loaded by another script. The help lists them so you can check them by hand.
Does it find every cookie on our site?
Cookies come from what your banner reports in visitors’ browsers, and each one waits for your review.
How many websites can we cover?
Acuna switches the add-on on with a number of paid websites, and each paid website includes a page-view allowance. Consent records are always kept, also past the allowance.
Where are consent records hosted?
Your data, consent records included, is hosted in Switzerland, the EU or the US. A record holds a truncated and hashed IP address and never holds cookie values.
Start with one step.
Bring one of your websites. We'll register it with you, design the banner and show you the consent record a visitor's choice leaves.
Hosted in Switzerland, the EU or the US