Works with your stack
Cookie banner for a website with US visitors
opt out, state by state
US state laws mostly let visitors opt out instead of asking first. A site that aims at the United States needs a Do Not Sell or Share link, has to honour Global Privacy Control in several states, and keeps a refusal as long as each state asks. Visitors from countries that require consent still get the strict rules.
Cookie Rocks Pro The complete plugin, every feature, free for 30 days. Here is what matters most for this kind of site. When a visitor’s browser sends the GPC signal, marketing stays refused, as several US states require. The signal also cancels an earlier yes to marketing, the cookie button says “Opt-out request honored”, and a signed-in visitor’s refusal follows their account to their other browsers. The “Do Not Sell or Share” link opens a one-click opt-out. An optional setting also records the refusals that browsers send with Global Privacy Control, without a click. Opt-out records are kept for at least 24 months, as California and Colorado require. One setting, for the whole world. Each visitor gets the rules of their own country, read from its law sheet; texts, colours and services stay shared. The rules of your own country apply to every visitor, on top of theirs, except for a site in the United States. In the EU, the UK or Brazil, that means prior consent for everyone. Try the simulator. Where the law only asks you to inform, the banner informs and lets visitors refuse: cookies work until the visitor opts out. Where your countries allow it, audience measurement set up for it can run until the visitor objects. Generated from the cookies really found on your pages, with their durations. For sites that address the United States, it also explains how the site answers browser privacy signals (Global Privacy Control, Do Not Track). The country is read on your own server or at your CDN (Cloudflare, Bunny, Kinsta, WP Engine and others), or, for a site without one, in a country database kept on your server and checked by its signature. Only one source is trusted, after a check. The visitor’s IP address is never kept or sent.What Cookie Rocks Pro does for sites for US visitors
Global Privacy Control
Refusals sent by the browser
Each visitor, their own rules
Where the law allows less
Cookie policy
Read where your site already knows it
What matters for consent with sites for US visitors
Do Not Sell or Share
When the site aims at the United States, the banner of the opt-out profile has a Do Not Sell or Share My Personal Information link, and the [cookie_rocks_link type="do-not-sell"] shortcode puts it on any page. It opens a view with one button to opt out of sale and sharing.
Global Privacy Control
A visitor whose browser sends the GPC signal gets marketing off, and Accept all keeps it off. An earlier marketing consent is withdrawn.
The refusal follows the account
A signed-in visitor who opts out keeps that refusal in another browser, through their WordPress account or an account you declare.
State by state
Each state has its law sheet. A refusal lasts as long as the state requires before the banner asks again. A US visitor whose state is not known gets the rules of California.
Visitors from elsewhere
With rules by country on, a visitor from a country that requires consent, or whose country is unknown, gets the strict rules: nothing loads before the choice.
Kinds of sites
Other kinds of sites, each with its own page.
Questions
Does a site based in Europe get the opt-out banner for US visitors?
No. A site based in the European Union keeps its strict rules for every visitor, wherever they come from.
Is rules by country needed?
No. Without it, every visitor gets the strictest rules of your countries, the most careful setting. With it, US visitors get the opt-out banner. It is off by default.
Where does the visitor’s state come from?
From your CDN, your host or a country database on your own server. See hosting and CDN.
What happens after the 30-day trial?
The banner, your visitors’ choices and your proofs of consent keep working. Without a key, most settings lock, updates and support stop. Take a key at any time and everything opens again.
For sites with US visitors
The right link, the right signal, state by state.
opt out, state by state
Every feature of the complete plugin for 30 days, no card.
- During the trial: everything, including the full settings and the scans
- After 30 days without a key: the banner, your visitors’ choices and your proofs of consent keep working
- What waits for a key: most settings, updates and support
Get your trial key
Your e-mail and your site. Your key arrives as soon as you confirm your e-mail.