Cookie Rocks covers all of them. Tick one setting and each visitor gets the rules that apply to them, on your site, automatically.
The country is read on your own server: no visitor address goes to a third party. One setting, the whole world · Which documents do you need?
The big ones: European Union · United Kingdom · United States · Canada · Brazil
- Less strictStricter
- Not yet studied
- Disputed territory: no rules shown
- Ask first (prior consent)
- Opt-out (allowed until the visitor opts out)
- Notice only, no consent
- Not yet studied
- Disputed territory: no rules shown
- Required
- Recommended
- No rule
- Not yet studied
- Disputed territory: no rules shown
- Required
- Recommended
- No rule
- Not yet studied
- Disputed territory: no rules shown
- No
- Under conditions
- Yes
- Not yet studied
- Disputed territory: no rules shown
- Set by law
- EU rule: renew at appropriate intervals
- No legal duration
- Not yet studied
- Disputed territory: no rules shown
- Required
- Recommended, or for some sites
- No specific rule
- Not yet studied
- Disputed territory: no rules shown
- Required
- In some cases, or something similar
- No rule found
- Not yet studied
- Disputed territory: no rules shown
- Required
- In some cases
- No rule found
- Not yet studied
- Disputed territory: no rules shown
- Required
- In some cases
- No specific rule
- Not yet studied
- Disputed territory: no rules shown
- Required
- For some sites only
- No specific rule
- Not yet studied
- Disputed territory: no rules shown
- Required
- Recommended
- No specific rule
- Not yet studied
- Disputed territory: no rules shown
- Required
- For some sites only
- No specific rule
- Not yet studied
- Disputed territory: no rules shown
- Required
- Recommended
- No rule
- Not yet studied
- Disputed territory: no rules shown
- 16 or older
- 14 or 15
- 13 or younger, or no age set
- Not yet studied
- Age of majority: no age in the data protection law
- Where the data protection law sets no age, we show the age of majority (usually 18): a minor then needs a parent’s consent.
- Disputed territory: no rules shown
Zoom with the buttons, a double click, a pinch or Ctrl and the wheel. Drag to move. Small countries are dots.
Occupied and disputed territories are shown as the United Nations sees them.
Equal Earth projection: every country at its true size.
How we score strictness
Each country gets a score from 0 to 100, from its rules in force today. Each rule counts from 0 (no rule) to 2 (the strictest rule), multiplied by its weight:
- Prior consent or opt-out: weight 3
- Rejecting as easy as accepting: weight 1
- Withdrawing consent at any time: weight 1
- Analytics without consent: weight 1
- How long a choice lasts: weight 1
- Cookie walls: weight 1
- Proof of each choice: weight 1
- Language of the banner: weight 0.5
A rule we have not studied yet is left out of the score instead of lowering it. A law already passed but not yet in force counts now, and the map shows its start date. Fines and enforcement are not part of the score: they measure the risk, not the rule. The age of a child’s consent is left out too, because in many countries it is simply the age of majority.
Data last checked: 7 November 2026. Source: our legal watch, from official texts.
Every country has its page
Asked firstFree to refuseInformed
- Afghanistan
- Albania
- Algeria
- Andorra
- Angola
- Antigua and Barbuda
- Argentina
- Armenia
- Aruba
- Australia
- Austria
- Azerbaijan
- Bahrain
- Bangladesh
- Barbados
- Belarus
- Belgium
- Belize
- Benin
- Bermuda
- Bhutan
- Bolivia
- Bosnia and Herzegovina
- Botswana
- Brazil
- British Virgin Islands
- Brunei
- Bulgaria
- Burkina Faso
- Burundi
- Cabo Verde
- Cambodia
- Cameroon
- Canada
- Chad
- Chile
- China
- Colombia
- Comoros
- Costa Rica
- Croatia
- Cuba
- Curaçao
- Cyprus
- Côte d’Ivoire
- Democratic Republic of the Congo
- Denmark
- Djibouti
- Dominica
- Ecuador
- Egypt
- El Salvador
- Equatorial Guinea
- Eritrea
- Estonia
- Eswatini
- Ethiopia
- Faroe Islands
- Fiji
- Finland
- France
- French Polynesia
- Gabon
- Georgia
- Germany
- Ghana
- Gibraltar
- Greece
- Greenland
- Grenada
- Guatemala
- Guernsey
- Guinea
- Guinea-Bissau
- Guyana
- Haiti
- Honduras
- Hong Kong
- Hungary
- Iceland
- India
- Indonesia
- Iran
- Iraq
- Ireland
- Isle of Man
- Israel
- Italy
- Jamaica
- Japan
- Jersey
- Jordan
- Kazakhstan
- Kenya
- Kiribati
- Kosovo
- Kuwait
- Kyrgyzstan
- Laos
- Latvia
- Lebanon
- Lesotho
- Liberia
- Libya
- Liechtenstein
- Lithuania
- Luxembourg
- Macao
- Madagascar
- Malawi
- Malaysia
- Maldives
- Mali
- Malta
- Marshall Islands
- Mauritania
- Mauritius
- Mexico
- Micronesia (Federated States of)
- Moldova
- Monaco
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- New Caledonia
- New Zealand
- Nicaragua
- Niger
- Nigeria
- North Korea
- North Macedonia
- Norway
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Poland
- Portugal
- Puerto Rico
- Qatar
- Republic of the Congo
- Romania
- Russia
- Rwanda
- Saint Kitts and Nevis
- Saint Lucia
- Saint Vincent and the Grenadines
- Samoa
- San Marino
- Saudi Arabia
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Sint Maarten (Dutch part)
- Slovakia
- Slovenia
- Solomon Islands
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- Sudan
- Suriname
- Sweden
- Switzerland
- Syria
- São Tomé and Príncipe
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor-Leste
- Togo
- Tonga
- Trinidad and Tobago
- Tunisia
- Turkey
- Turkmenistan
- Tuvalu
- Uganda
- Ukraine
- United States
- Uruguay
- Uzbekistan
- Vanuatu
- Vatican City
- Venezuela
- Vietnam
- Yemen
- Zambia
- Zimbabwe
- the Bahamas
- the Cayman Islands
- the Central African Republic
- the Czech Republic
- the Dominican Republic
- the European Union
- the Gambia
- the Netherlands
- the Philippines
- the United Arab Emirates
- the United Kingdom
States and provinces
Your country is not listed, your visitors come from everywhere, or your site is hosted abroad? The subtleties, in plain words.