# PrivacyPill

> PrivacyPill is a 5.2 kB gzipped, zero-dependency cookie consent banner for GDPR, ePrivacy and Google Consent Mode v2. It blocks trackers until visitors choose, sets ad_storage, ad_user_data, ad_personalization and analytics_storage automatically, and installs with one script tag. Pricing: free for 1 domain up to 5,000 pageviews/month; Lifetime €49 one-time for 1 domain with unlimited pageviews and lifetime updates; Pro €9/month or €79/year for unlimited domains and pageviews, monthly compliance rescans and EU/EEA + California geo-targeting. Prices exclude VAT.

Install: put the site's script as the first script in <head>, before any analytics:
<script src="https://privacy-pill-consent-studio.lovable.app/api/public/v1/pp.js?site=SITE_KEY"></script>
Non-Google trackers are blocked by changing them to type="text/plain" data-pp-category="analytics|marketing|functional". Google tags follow Consent Mode automatically.

## Free tool (no sign-in, no API key)
Check which cookies and trackers load on any public page before the visitor consents. Returns a verdict (pass / warning / fail), every tracker with its status (loads_before_consent, restricted_by_consent_mode, blocked_until_consent, may_be_gated_by_cmp, via_tag_manager, unclear, no_consent_needed), cookies set before consent, other sites contacted before consent (e.g. Google Fonts, CDNs) and fixes. Static check of the HTML, headers and Google Tag Manager containers (no JavaScript runs). Limit: 10 checks per hour per visitor; 429 with Retry-After when exceeded.
- REST: GET https://privacy-pill-consent-studio.lovable.app/api/public/v1/pre-consent-scan?url=https://example.com (or POST with {"url": "…"})
- MCP: call `pre_consent_scan` with {"url": "…"} on https://privacy-pill-consent-studio.lovable.app/mcp — works without signing in.

## For AI agents
- [MCP server](https://privacy-pill-consent-studio.lovable.app/mcp): Remote MCP server (streamable HTTP). pre_consent_scan works without sign-in; the account tools (get_account, list_sites, get_site, create_site, configure_banner, get_embed_snippet, run_compliance_scan, list_banner_presets) need OAuth sign-in, which the client is asked for on first use.
- [MCP server card](https://privacy-pill-consent-studio.lovable.app/mcp/server-card): Server identity, transport and protocol versions (also at /.well-known/mcp/server-card.json; listed in https://privacy-pill-consent-studio.lovable.app/.well-known/ai-catalog.json).
- [API catalog](https://privacy-pill-consent-studio.lovable.app/.well-known/api-catalog): RFC 9727 linkset pointing to the OpenAPI spec, docs and MCP server card.
- [OpenAPI 3.1 spec](https://privacy-pill-consent-studio.lovable.app/api/public/v1/openapi.json): Machine-readable REST API description. Base URL https://privacy-pill-consent-studio.lovable.app/api/public/v1; auth "Authorization: Bearer ppk_…" except the free pre-consent check.
- [OAuth protected resource metadata](https://privacy-pill-consent-studio.lovable.app/.well-known/oauth-protected-resource): Authorization server for MCP sign-in.
- [Developer docs](https://privacy-pill-consent-studio.lovable.app/developers): REST API and MCP setup for Claude Code, Cursor, VS Code, ChatGPT and other clients.

## REST endpoints
- GET /pre-consent-scan?url=…: Free: which cookies and trackers load before consent (no key)
- POST /pre-consent-scan: Same check with a JSON body { url } (no key)
- GET /account: Your account, licenses and limits
- GET /sites: List your sites
- POST /sites: Create a site, optionally with banner settings
- GET /sites/{siteId}: Get a site and its banner settings
- PATCH /sites/{siteId}: Update the banner, domain, geo-targeting or license
- DELETE /sites/{siteId}: Delete a site
- GET /sites/{siteId}/embed: Embed snippet + per-platform install steps
- GET /sites/{siteId}/scans: Recent compliance scans of a site
- POST /sites/{siteId}/scans: Scan the site now (optionally apply results to the banner)
- POST /scans: Scan any public URL for trackers and cookies
- GET /presets: Banner colour presets and allowed values (no key)

## Product
- [Home](https://privacy-pill-consent-studio.lovable.app/): Overview, live consent playground and the €49 lifetime deal.
- [Banner customizer](https://privacy-pill-consent-studio.lovable.app/customizer): Layouts (floating pill, bottom bar, modal, corner badge), colours, fonts, categories, six languages, Consent Mode v2.
- [Tracker scanner](https://privacy-pill-consent-studio.lovable.app/scanner): Detects GA4, Google Ads, Meta Pixel, Hotjar, TikTok Pixel, LinkedIn Insight Tag and more, and categorises cookies.
- [Pricing](https://privacy-pill-consent-studio.lovable.app/pricing): Free, Lifetime and Pro plans.
- [Install docs](https://privacy-pill-consent-studio.lovable.app/docs): Embed, fail-safe defaults, script blocking, dataLayer events, JavaScript API, GTM.
- [Press kit](https://privacy-pill-consent-studio.lovable.app/press): Logo (SVG, PNG), screenshots and facts.

## Setup guides
- [A GDPR cookie banner for Shopify that respects your theme — and your speed score](https://privacy-pill-consent-studio.lovable.app/integrations/shopify-gdpr-banner): Add a GDPR-compliant cookie banner to your Shopify store in minutes. Works with Shopify's Customer Privacy API, Google Consent Mode v2 and the Meta and TikTok pixels.
- [Cookie consent for Webflow, designed like the rest of your site](https://privacy-pill-consent-studio.lovable.app/integrations/webflow-cookie-consent): Add GDPR cookie consent to Webflow with one line in Head code. Consent Mode v2, script blocking for Webflow integrations and a banner that matches your design.
- [Add a GDPR cookie banner to WordPress](https://privacy-pill-consent-studio.lovable.app/integrations/wordpress-cookie-banner): Add a GDPR cookie banner to WordPress in five minutes: one script in your header via WPCode or functions.php, Google Consent Mode v2 included, works with classic and block themes.
- [Add a GDPR cookie banner to your Wix site](https://privacy-pill-consent-studio.lovable.app/integrations/wix-cookie-banner): Install a GDPR and Consent Mode v2 cookie banner on Wix: Settings → Custom Code → Head, all pages, load once. Includes how to switch off a second banner and handle Wix integrations.
- [Add a GDPR cookie banner to Squarespace](https://privacy-pill-consent-studio.lovable.app/integrations/squarespace-cookie-banner): Add a GDPR cookie banner to Squarespace with Code Injection: paste one line in the Header, switch off the built-in banner and keep Google tags in Consent Mode v2.
- [Add a GDPR cookie banner to your Framer site](https://privacy-pill-consent-studio.lovable.app/integrations/framer-cookie-banner): Add a GDPR and Consent Mode v2 cookie banner to Framer: Project Settings → Custom Code, start of <head>, run once. Works with Framer's client-side navigation.
- [Add a GDPR cookie banner to your Lovable app](https://privacy-pill-consent-studio.lovable.app/integrations/lovable-cookie-banner): Add a GDPR and Google Consent Mode v2 cookie banner to an app built with Lovable: one prompt for the Lovable agent, or one tag in the shared document head.
- [Add a GDPR cookie banner to your Bolt app](https://privacy-pill-consent-studio.lovable.app/integrations/bolt-cookie-banner): Add a GDPR and Google Consent Mode v2 cookie banner to an app built with Bolt (bolt.new): one prompt for the Bolt agent, then publish to Bolt hosting or Netlify.
- [Add a GDPR cookie banner to your v0 app](https://privacy-pill-consent-studio.lovable.app/integrations/v0-cookie-banner): Add a GDPR and Google Consent Mode v2 cookie banner to an app built with v0 by Vercel: one prompt for next/script in the root layout, then publish to Vercel.
- [Add a GDPR cookie banner to a Next.js app](https://privacy-pill-consent-studio.lovable.app/integrations/nextjs-cookie-banner): Add a GDPR cookie banner to Next.js with next/script strategy="beforeInteractive" in the root layout or _document — Google Consent Mode v2 defaults included.
- [Add a GDPR cookie banner to your Ghost site](https://privacy-pill-consent-studio.lovable.app/integrations/ghost-cookie-banner): Add a GDPR cookie banner to your Ghost publication: Settings → Code Injection → Site header, with Google Consent Mode v2 and blocking for third-party embeds.
- [Use PrivacyPill as the cookie banner on HubSpot CMS](https://privacy-pill-consent-studio.lovable.app/integrations/hubspot-cookie-banner): Use PrivacyPill as the cookie banner on HubSpot CMS: Site Header HTML, disable HubSpot's own banner and forward each choice to HubSpot with setHubSpotConsent.

## Comparisons
- [The Cookiebot alternative that doesn't price you by page count](https://privacy-pill-consent-studio.lovable.app/alternatives/cookiebot-alternative): Comparing Cookiebot? PrivacyPill is a ~5 kB GDPR cookie banner with Google Consent Mode v2, a tracker scanner and flat pricing that doesn't depend on your page count — or €49 once.
- [The OneTrust alternative with public prices and a self-serve checkout](https://privacy-pill-consent-studio.lovable.app/alternatives/onetrust-alternative): A lightweight OneTrust alternative: a GDPR and Consent Mode v2 cookie banner in one ~5 kB script, self-serve checkout, public prices from free to €49 lifetime.
- [The CookieYes alternative without pageview tiers](https://privacy-pill-consent-studio.lovable.app/alternatives/cookieyes-alternative): Comparing CookieYes? PrivacyPill gives you unlimited pageviews and domains on Pro for €9/month, or a €49 one-time lifetime license — with Consent Mode v2 built in.
- [The Complianz alternative that isn't tied to WordPress](https://privacy-pill-consent-studio.lovable.app/alternatives/complianz-alternative): Comparing Complianz? PrivacyPill is a one-line, ~5 kB consent banner with Consent Mode v2 on every plan that works on WordPress and every other platform — free, €9/mo or €49 once.
- [The iubenda alternative for teams that only need the banner](https://privacy-pill-consent-studio.lovable.app/alternatives/iubenda-alternative): Comparing iubenda? PrivacyPill is a lightweight Consent Mode v2 cookie banner with all six languages on every plan, unlimited pageviews on Pro and a €49 one-time option.
- [The Termly alternative built for European websites](https://privacy-pill-consent-studio.lovable.app/alternatives/termly-alternative): Comparing Termly? PrivacyPill is an EU-focused cookie banner with advanced Consent Mode v2, geo-targeting and consent exports from €9/month — or €49 once for one site.

## Guides
- [The GDPR cookie banner checklist](https://privacy-pill-consent-studio.lovable.app/guides/gdpr-cookie-banner-checklist): A practical GDPR and ePrivacy cookie banner checklist based on EDPB guidance: reject buttons, prior blocking, granular consent, withdrawal, Consent Mode v2 and proof of consent.
- [Google Consent Mode v2 generator](https://privacy-pill-consent-studio.lovable.app/generator/google-consent-mode-v2-generator): Generate a correct Google Consent Mode v2 setup: default and update commands for ad_storage, ad_user_data, ad_personalization and analytics_storage, for gtag.js and GTM.

## Cookie rules by country
- [Austria](https://privacy-pill-consent-studio.lovable.app/cookie-laws/austria): Telekommunikationsgesetz 2021 (Telecommunications Act 2021), § 165(3); regulator the DSB.
- [Belgium](https://privacy-pill-consent-studio.lovable.app/cookie-laws/belgium): Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, Article 10/2 (formerly Article 129 of the Electronic Communications Act); regulator the Belgian DPA.
- [Bulgaria](https://privacy-pill-consent-studio.lovable.app/cookie-laws/bulgaria): Закон за електронната търговия (Electronic Commerce Act), Article 4a; regulator the CPDP.
- [Croatia](https://privacy-pill-consent-studio.lovable.app/cookie-laws/croatia): Zakon o elektroničkim komunikacijama (Electronic Communications Act); regulator AZOP.
- [Cyprus](https://privacy-pill-consent-studio.lovable.app/cookie-laws/cyprus): Regulation of Electronic Communications and Postal Services Law of 2004 (Law 112(I)/2004), Article 99(5); regulator the Commissioner.
- [Czechia](https://privacy-pill-consent-studio.lovable.app/cookie-laws/czechia): Zákon č. 127/2005 Sb., o elektronických komunikacích (Electronic Communications Act), § 89(3); regulator the ÚOOÚ.
- [Denmark](https://privacy-pill-consent-studio.lovable.app/cookie-laws/denmark): Executive Order No. 1148 of 9 December 2011 on information and consent for storage of or access to information in end-users' terminal equipment (cookie order), §§ 3–4; regulator the Agency for Digital Government and Datatilsynet.
- [Estonia](https://privacy-pill-consent-studio.lovable.app/cookie-laws/estonia): Elektroonilise side seadus (Electronic Communications Act); regulator the AKI.
- [Finland](https://privacy-pill-consent-studio.lovable.app/cookie-laws/finland): Laki sähköisen viestinnän palveluista (Act on Electronic Communications Services, 917/2014), § 205; regulator Traficom.
- [France](https://privacy-pill-consent-studio.lovable.app/cookie-laws/france): Loi n° 78-17 du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés (Data Protection Act), Article 82; regulator the CNIL.
- [Germany](https://privacy-pill-consent-studio.lovable.app/cookie-laws/germany): Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG), § 25 — renamed from TTDSG in May 2024; regulator the German data protection authorities (DSK).
- [Greece](https://privacy-pill-consent-studio.lovable.app/cookie-laws/greece): Νόμος 3471/2006 (Law 3471/2006 on privacy in electronic communications), Article 4(5); regulator the HDPA.
- [Hungary](https://privacy-pill-consent-studio.lovable.app/cookie-laws/hungary): 2003. évi C. törvény az elektronikus hírközlésről (Act C of 2003 on Electronic Communications), § 155(4); regulator the NAIH.
- [Ireland](https://privacy-pill-consent-studio.lovable.app/cookie-laws/ireland): European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 (S.I. No. 336/2011), Regulation 5(3)–(5); regulator the DPC.
- [Italy](https://privacy-pill-consent-studio.lovable.app/cookie-laws/italy): Decreto legislativo 196/2003, Codice in materia di protezione dei dati personali (Privacy Code), Article 122; regulator the Garante.
- [Latvia](https://privacy-pill-consent-studio.lovable.app/cookie-laws/latvia): Informācijas sabiedrības pakalpojumu likums (Law on Information Society Services), Section 7¹; regulator the DVI.
- [Lithuania](https://privacy-pill-consent-studio.lovable.app/cookie-laws/lithuania): Lietuvos Respublikos elektroninių ryšių įstatymas (Law on Electronic Communications), Article 73(4) — formerly Article 61(4); regulator the VDAI.
- [Luxembourg](https://privacy-pill-consent-studio.lovable.app/cookie-laws/luxembourg): Loi modifiée du 30 mai 2005 concernant la protection de la vie privée dans le secteur des communications électroniques (Act of 30 May 2005, as amended), Article 4(3)(e); regulator the CNPD.
- [Malta](https://privacy-pill-consent-studio.lovable.app/cookie-laws/malta): Processing of Personal Data (Electronic Communications Sector) Regulations, Subsidiary Legislation 586.01, Regulation 5; regulator the IDPC.
- [Netherlands](https://privacy-pill-consent-studio.lovable.app/cookie-laws/netherlands): Telecommunicatiewet (Telecommunications Act), Article 11.7a; regulator the ACM and the AP.
- [Poland](https://privacy-pill-consent-studio.lovable.app/cookie-laws/poland): Prawo komunikacji elektronicznej (Electronic Communications Law of 12 July 2024), Article 399, with the consent standard in Article 400; regulator the UKE and the UODO.
- [Portugal](https://privacy-pill-consent-studio.lovable.app/cookie-laws/portugal): Lei n.º 41/2004 (Law 41/2004 on privacy in electronic communications), Article 5; regulator the CNPD.
- [Romania](https://privacy-pill-consent-studio.lovable.app/cookie-laws/romania): Legea nr. 506/2004 (Law 506/2004 on privacy in electronic communications), Article 4(5)–(6); regulator the ANSPDCP.
- [Slovakia](https://privacy-pill-consent-studio.lovable.app/cookie-laws/slovakia): Zákon č. 452/2021 Z. z. o elektronických komunikáciách (Electronic Communications Act), § 109(8); regulator the Regulatory Authority.
- [Slovenia](https://privacy-pill-consent-studio.lovable.app/cookie-laws/slovenia): Zakon o elektronskih komunikacijah (ZEKom-2, Electronic Communications Act), Article 225; regulator the Information Commissioner.
- [Spain](https://privacy-pill-consent-studio.lovable.app/cookie-laws/spain): Ley 34/2002 de servicios de la sociedad de la información y de comercio electrónico (LSSI), Article 22(2); regulator the AEPD.
- [Sweden](https://privacy-pill-consent-studio.lovable.app/cookie-laws/sweden): Lag (2022:482) om elektronisk kommunikation (Electronic Communications Act), Chapter 9, § 28; regulator PTS.
- [United Kingdom](https://privacy-pill-consent-studio.lovable.app/cookie-laws/united-kingdom): Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), regulation 6 — as amended by the Data (Use and Access) Act 2025; regulator the ICO.
- [Switzerland](https://privacy-pill-consent-studio.lovable.app/cookie-laws/switzerland): Fernmeldegesetz / Loi sur les télécommunications (Telecommunications Act), Art. 45c(b); revised Federal Act on Data Protection (FADP), in force since 1 September 2023; regulator the FDPIC.

## Optional
- [Privacy policy](https://privacy-pill-consent-studio.lovable.app/privacy)
- [Terms](https://privacy-pill-consent-studio.lovable.app/terms)