⚠️ IMPORTANT: The snippet MUST be the first tag in <head> - before GA, Meta Pixel, GTM, chat widgets. Do NOT use async or defer. ✨ Auto-update: snippet loads an external bootstrap from our CDN - any update reaches your site within ≤5 min, no need to re-copy. 🛡️ Disaster tolerance: inline blocker keeps working even if our server is down. Plus 2-CDN fallback.
Note: GTM tag must have max Trigger Priority + highest Tag Firing Priority
✅ How to verify it works
Open your site in incognito mode (clean session, no saved consent)
Cookie banner should appear in the center of the screen (or your chosen position)
Open DevTools (F12) → Application → Cookies - before clicking consent there should be NO tracking cookies (_ga, _fbp, _hjid)
Click "Accept all" - tracking cookies should appear, banner disappears
After 5 sec a floating "Cookie settings" button appears (bottom-right) - you can change consent anytime
Common issues
Banner does not show up
1) Check if the snippet is before other <script> tags in <head>. 2) Check browser console (F12) - if you see "blocked by adblocker", use Pro plan + CNAME setup. 3) Check if you have a saved consent in cmp_consent cookie - clear it and refresh.
Banner shows but tracking scripts still load before consent
Snippet has async or defer - remove these attributes. Banner must load sync so MutationObserver can block subsequent scripts.
Audit says banner is compliant but client has tracking cookies
Inline scripts (code hardcoded on page, not from <script src>) - check if you have inline Meta Pixel or GA directly in HTML. ConsentBoard blocks such scripts by patterns - check GDPR audit in panel.
Banner does not show on iPhone Safari
Apple ITP blocks 3rd-party cookies. ConsentBoard banner does NOT use 3rd-party cookies (consent stored 1st-party), so it works. If client sees problem - they may have "Hide IP from trackers" + very strict Content Blocker - then Pro plan + CNAME proxy solves it.
Daily GDPR audit shows "cookies pre-consent" - what to do?
Check in panel the list of cookies detected before consent click. If they're from a different domain than yours (e.g. .youtube.com from embed) - banner should block YouTube iframe. If they're your own - may be PHP/Laravel session cookies - classify them as "necessary" in panel.
🛠️ Don't want to do it yourself?
We will install ConsentBoard for you - free on the Starter plan. We take care of pasting the snippet on your site.
🔒 Your data stays safe - any access details are encrypted (AES-256-GCM) and stored in our PassBolt password manager, accessible only to our technical team.