Build Cookiebot
KINDAreplaces $8/mosaves $96/yrback to the verdict
A consent manager for your own site: an inventory of every script you load, gating so nothing non-essential runs before consent, an accessible banner with equal-weight accept and reject, withdrawal, Consent Mode signals and an optional consent log. First question: do you load anything non-essential at all? If not, the right build is no banner.
Before step 1
Everything below is assumed from the first step. Tick each one when you actually have it, not when you plan to.
- installfree
Why Every step below is a command you type or a file you edit.
Get it VS Code (code.visualstudio.com), Cursor or Zed. Open a folder for the project and use the editor's built-in terminal. open ↗
Verify
You can open a folder and run a command in its terminal - installfree
Why History for your code, and the way most hosts deploy.
Get it Install from git-scm.com or with your package manager, then run git init in the project folder once it exists. open ↗
Verify
git --version prints a version - have readyfree
Why Phase 1 gates them by category. You cannot gate what you have not listed.
Get it Open DevTools > Network on a cold load and write down every third-party host and what it does.
- decidefree
Why Cookieless analytics and no ad or social scripts means no banner is the correct build.
Get it Answer honestly from the inventory.
- accountfree
Why Phase 4 sends Consent Mode v2 signals if you use Google tags.
Get it Your existing container id.
Environment variables
These go in a .env file the app reads at startup. The pack's .env.example is this table as a file · copy it, never commit the filled-in version.
| Variable | Needed | Example | Where the value comes from |
|---|---|---|---|
CONSENT_LOG_ENDPOINT | optional | https://forms.yourdomain.com/consent | Optional endpoint for consent records. Empty disables logging. |
The build, in order
Inventory
scripts.json and every non-essential tag inert before consent.
Files
scripts.json
done when · tick each as it passesThe banner
Accept all, Reject all, Preferences with equal weight; stored with a version and timestamp.
done when · tick each as it passesPreferences and withdrawal
Consent Mode and the log
Verify
Keep it honestproduct builder
Catch the tag someone adds next Tuesday.
done when · tick each as it passes
That is the whole plan for Cookiebot. What it deliberately does not cover is below · check the gaps before you call it a replacement.
- Scanning for cookies you do not know about, jurisdiction-specific legal text, a regulator-familiar audit trail.
- automatic scanning that finds cookies you did not know about
- the consent log a regulator will accept
- legal text kept current across jurisdictions
- Google-certified Consent Mode integration
- A per-region default (no banner where none is required)
Need the files? The project pack on the verdict page hands your agent the whole brief · more legal.