EU GDPR, UK ICO, CCPA & Google Consent Mode v2 Compliant

GDPR & CCPA Cookie Consent Banner Generator

Free cookie consent generator & cookie popup HTML code. Build ultra-lightweight, zero-dependency banners with Google Consent Mode v2 defaults (ad_storage, analytics_storage, ad_user_data, ad_personalization) to protect your ad revenue and avoid massive privacy fines.

Banner Customizer

Website / Company Name:

Banner Position & Layout:

Bottom Floating Card Full-Width Bottom Bar

Primary Accent Color:

Legal & Consent Rules:

GDPR Mode (EU/UK Equal Reject Button) EDPB Mandate

Provides an equally prominent 'Reject All' button to prevent dark patterns and comply with UK ICO & French CNIL enforcement.

CCPA/CPRA Compliance (US Privacy) California & US

Includes a direct 'Do Not Sell or Share My Personal Information' statutory link for US visitors.

Google Consent Mode v2 Integration 2026 Core

Defaults ad_storage, analytics_storage, ad_user_data, and ad_personalization to denied before updating on consent.

https://acme-saas.com

Live Interactive Preview

We value your privacy

Acme SaaS uses cookies to optimize website performance, analyze site traffic, and personalize marketing advertisements in accordance with our Privacy Policy.

Do Not Sell or Share My Personal Information

Google Consent Mode v2 State (Simulated): Status: Default (Pre-Consent)

ad_storage denied

analytics_storage denied

ad_user_data denied

ad_personalization denied

Copy-Ready Embed Code (HTML + CSS + Vanilla JS)

Zero dependencies • Under 5KB • Place Google Consent Mode v2 script before GTM/gtag.js

1 Top of <head>

Ensure the Consent Mode v2 default block executes before Google Tag Manager or GA4 tags fire.

2 Bottom of <body>

Paste the banner HTML markup and Vanilla JS right before your closing </body> tag.

3 Re-open Trigger

Link your footer "Cookie Settings" button to window.openQuickNovaCookieSettings().

Why Google Consent Mode v2 & GDPR Compliance Matter in 2026

Operating modern SaaS websites and e-commerce stores without a compliant cookie consent banner puts your revenue at immediate risk. As of 2024–2026, Google enforces Consent Mode v2 for all advertisers targeting the European Economic Area (EEA), while regulatory bodies like the UK Information Commissioner's Office (ICO), French CNIL, and California Privacy Protection Agency (CPPA) actively audit dark patterns and non-consensual tracking.

The Risk of Non-Compliance:

Lost Google Ad Measurement: Failure to send Consent Mode v2 signals stops Google Ads conversion modeling and audience remarketing in Europe.
Severe GDPR Fines: European data protection authorities can levy fines up to €20 million or 4% of global annual turnover for non-consensual cookies.
Class Actions & US Lawsuits: CCPA/CPRA allows statutory penalties up to \$7,500 per intentional violation for failing to honor opt-out rights.

Google Consent Mode v2 Core Signals:

ad_storage: Enables storage for advertising cookies.
analytics_storage: Enables measurement cookies (GA4).
ad_user_data: Grants consent to send user data to Google for advertising.
ad_personalization: Authorizes personalized advertising and remarketing lists.

Eliminating Dark Patterns (Equal Reject Prominence)

Under EU European Data Protection Board (EDPB) directives, having an "Accept All" button while hiding rejection behind multi-step preference menus is an unlawful dark pattern. Our generator configures the Reject All button with equal visual weight, ensuring your business stays 100% audit-proof.

Frequently Asked Questions (GDPR, CCPA & Consent Mode)

What is Google Consent Mode v2 and is it mandatory in 2026?

Google Consent Mode v2 is an API standard mandated by Google for all websites running Google Ads, Analytics (GA4), or remarketing to visitors in the European Economic Area (EEA) and UK. It introduces two critical consent parameters: ad_user_data and ad_personalization (alongside ad_storage and analytics_storage). Without Consent Mode v2, Google Ads conversion tracking and audience modeling are blocked.

What makes a cookie banner fully compliant with GDPR and UK ICO rules?

Under EU GDPR, the ePrivacy Directive, and UK ICO guidance, cookie consent must be explicit, informed, and freely given before non-essential cookies load. Crucially, the "Reject All" button must have equal visual prominence (contrast, size, and styling) as "Accept All". Pre-ticked checkboxes or burying reject options inside hidden menus are classified as deceptive dark patterns and violate European law.

Does CCPA / CPRA require a 'Do Not Sell or Share My Personal Information' link?

Yes. Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, California consumers have the statutory right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. Including a conspicuous "Do Not Sell or Share My Personal Information" link inside the banner or website footer provides immediate compliance.

Where should I paste this cookie banner embed code in my website?

Paste the Google Consent Mode v2 default initialization script at the top of your webpage's <head> section BEFORE Google Tag Manager (gtm.js) or Google tag (gtag.js). Paste the banner HTML and Vanilla JS script right before the closing </body> tag. It requires zero external libraries or frameworks.