Behavior
Control who sees the Consentful banner, opt-in vs opt-out consent by region, Do Not Track and Global Privacy Control, and when visitors are asked again.
Who sees the banner
| Setting | Shows the banner to |
|---|---|
| Everywhere | Every visitor. The safest choice if you're unsure. |
| EU only | Visitors in regulated regions — the EU/EEA, UK, Switzerland and California — plus anyone whose region can't be determined. |
| By region (Pro) | Only the regions you tick — EU, UK, Switzerland, California, rest of the US, Canada, Brazil, Australia, India or everywhere else. |
Region detection uses the visitor's time zone, which is free and private but can be fooled by VPNs. If detection is unsure, Consentful errs on the side of showing the banner.
Consent model
- Opt-in (default, GDPR) — nothing optional runs until the visitor accepts.
- Opt-out (CCPA-style) — your default categories run immediately; visitors can switch them off later from the preferences button.
- Auto — opt-in in regulated regions (EU/EEA, UK, Switzerland, California) and whenever the region is uncertain; opt-out elsewhere. One setup that's right on both sides of the Atlantic.
Privacy signals
- Respect Do Not Track — visitors whose browser sends DNT are treated as having rejected optional categories, and aren't shown the banner.
- Respect Global Privacy Control — a GPC signal opts the visitor out of advertising categories (as CCPA/CPRA and Colorado law require), leaving analytics at your defaults. Optionally show a small "opt-out honored" badge.
Asking again
- Consent expiry — how long a choice lasts before the banner reappears (180 days by default).
- Re-consent version — change it when your policy changes materially; everyone is asked again on their next visit.
- Reload on change — reload the page after a choice, for scripts that only read consent at page load.