Skip to content

Works with your stack

Cookie banner for a website with UK visitors

five exceptions, the rest asks first

← Cookie Rocks for your stack

Visitors from the United Kingdom are covered by PECR and the UK GDPR. A site asks before it stores or reads anything on their device, unless one of five exceptions applies, such as statistics or appearance, with clear information and a simple way to object. Advertising always needs consent. Cookie Rocks is sold in the United Kingdom.

Cookie Rocks Pro

What Cookie Rocks Pro does for sites for UK visitors

The complete plugin, every feature, free for 30 days. Here is what matters most for this kind of site.

  • Equal choice

    Accept and reject on the first layer, with the same weight. No pre-ticked boxes, no consent by scrolling.

  • Laws of your countries

    The rules of 248 jurisdictions with their official texts, and your settings checked against them. Country by country, too: proof of consent (248 jurisdictions), storing data in the country (218), hosting abroad (246), the local representative where one is needed, AI chatbots (50) and accessibility (99). The law sheets also give the language the banner must speak, the age of digital consent, the rule on cookie walls, the highest fine and recent decisions of the authorities.

  • Register of proofs

    Every choice is recorded on your site and kept for the months you choose, never less than the choice itself plus 12 months, or what a country you target requires. Then it is deleted automatically. An optional daily or weekly copy goes to your own storage: Dropbox, a WebDAV server, a signed webhook or an e-mail address. It goes straight from your site, never through ours.

    Google Consent Mode v2

    Default and update set at the very top of the page, on every page view. Basic or advanced mode, with a recommendation for your site.

  • Each visitor, their own rules

    One setting, for the whole world. Each visitor gets the rules of their own country, read from its law sheet; texts, colours and services stay shared. The rules of your own country apply to every visitor, on top of theirs, except for a site in the United States. In the EU, the UK or Brazil, that means prior consent for everyone. Try the simulator.

  • Cookie policy

    Generated from the cookies really found on your pages, with their durations. For sites that address the United States, it also explains how the site answers browser privacy signals (Global Privacy Control, Do Not Track).

Every feature →

What matters for consent with sites for UK visitors

Consent first, five exceptions

A site asks before it stores or reads anything on the visitor’s device, unless one of five exceptions applies: sending a communication, what is strictly necessary for what the visitor asked for, statistics, appearance, and emergency assistance.

Statistics

Aggregate statistics on how the site is used, only to improve it, shared only with a provider acting for the site. The visitor gets clear information and a simple, free way to object. Not for tracking individuals, conversions or advertising.

Appearance

Language, screen size, dark mode, fonts used only to display the text. Clear information and a simple, free way to object. Not for content chosen from interests or browsing history.

Advertising always asks

Online advertising, including its measurement, frequency capping and click-fraud detection, always needs consent.

Reject as easily as accept

Consent is a clear positive action, purpose by purpose: continued browsing, pre-ticked boxes and toggles set to on are not consent. The ICO shows Accept all and Reject all with equal prominence as good practice.

Withdraw, and wait before asking again

Withdrawing must be as easy as consenting, and the banner says how. After a refusal, the ICO recommends waiting before asking again.

Proof of each choice

Keep who, as a random identifier, when, what was chosen, and which version of the banner was shown.

Questions

Can I sell Cookie Rocks to a UK business, or buy it from the UK?

Yes. Cookie Rocks is sold in the United Kingdom. Prices are shown without tax: give your VAT number at checkout, and the VAT is reverse-charged.

Does a site outside the UK need a UK representative?

A site established outside the UK that offers its products or content to people in the UK, whether they pay or not, or monitors them, must appoint a UK representative in writing. An EU company has no exception.

Can I block my site until visitors accept?

The ICO says a take it or leave it wall in most cases does not give freely given consent. Consent or pay can comply if the price is fair and the versions are equivalent.

Does the banner have to be in a given language?

No UK law sets the language of a cookie banner. The information must be clear and comprehensible.

Who enforces the rules?

The Information Commission, which replaced the Information Commissioner and kept the ICO name for the office. A cookie breach can be fined up to a share of worldwide annual turnover.

What happens after the 30-day trial?

The banner, your visitors’ choices and your proofs of consent keep working. Without a key, most settings lock, updates and support stop. Take a key at any time and everything opens again.

For sites with UK visitors

The UK rules, exceptions included.

five exceptions, the rest asks first

Every feature of the complete plugin for 30 days, no card.

  • During the trial: everything, including the full settings and the scans
  • After 30 days without a key: the banner, your visitors’ choices and your proofs of consent keep working
  • What waits for a key: most settings, updates and support

How the trial works, in detail

Get your trial key

Your e-mail and your site. Your key arrives as soon as you confirm your e-mail.

One trial per domain. Local and staging sites never use up your key.

We keep your e-mail address to send your key and help you with it, as explained in our privacy policy. No newsletter, nothing else.