Consent management for Squarespace
Squarespace gives you a site, not a consent platform. Consent Studio adds the banner through Code Injection, signals Google Consent Mode v2 from every answer, and tells you each week what your pages are really loading.
- Added through Code Injection
- Consent Mode v2 built in
- Weekly scan of every reachable page
From โฌ10 a month. No credit card, no per-visitor billing.
A cookie banner that works with Squarespace
Squarespace has no consent interface of its own, so nothing here is handed to the platform. The banner governs what runs, directly.
Google Consent Mode v2, wherever it is installed
Most of what needs governing on a Squarespace site is Google: Analytics, Ads, the Google tag. Consent Studio sets the denied defaults before any of them run and sends the update the moment your visitor chooses, and none of that depends on the platform underneath.
- Denied then updated
- Built in
Third-party embeds wait, once you mark them
A map, a chat widget, a video, a booking tool. Mark the embed in your code block with the category it belongs to and Consent Studio releases it only once that category is granted. It is a change you make rather than something that happens on its own, which is worth being precise about.
- Per-category release
- You mark the embed
A weekly crawl, because nothing else will tell you
Squarespace will not report what a template, a block or an embed quietly added. Consent Studio scans every page it can reach each week, classifies what it finds, and keeps your cookie declaration current from the result rather than from a list somebody wrote once and never revisited.
- Every page, weekly
- Declaration stays current
Serving California as well as the EU?
The GDPR and the CCPA ask for opposite defaults, and a banner built for one of them quietly gets the other wrong.
Opposite defaults, one banner
The GDPR wants marketing denied until a visitor agrees. The CCPA runs the other way, as an opt-out. Region rules give each visitor the right starting state, so one banner answers both without a second install for the US.
Global Privacy Control is respected
California treats a browser opt-out signal as a request you have to honour. Consent Studio reads GPC and can apply it before the banner is ever shown, on every plan.
One record, both regimes
Whichever default a region gets, the decision goes into the same consent log. There is nothing separate to keep in step when an auditor asks for one history.
One answer controls every tool on your site
A banner that only governs the platform leaves everything you added on top of it running. Consent Studio speaks to the tools around it as well, and by default holds anything it does not recognise until the visitor says otherwise.
Discover All IntegrationsChoose how to install the cookie banner
Every route ends with the same banner and the same consent record. Pick the one that fits how your site is built.
Direct code
Recommended RoutePaste the snippet into Settings, Advanced, Code Injection, in the header field. It applies to every page on the site at once, and there is no template to edit and nothing to republish.
- Full control
- No dependencies
Google Tag Manager
Already running a container? Add our official tag from the Community Template Gallery on the Consent Initialization trigger, and nothing goes into Squarespace at all.
- Official tag template
- No site deploy
How to set up cookie consent for Squarespace
Two fields and one paste. Code Injection is a Business plan feature on Squarespace, which is the one prerequisite worth checking first.
Add your site in Consent Studio
Create the site and the banner is generated for your domain, with your categories, your text and your styling. All of it lives here rather than in Squarespace, so changing the wording or the colours later never means going back into Code Injection.
Paste the snippet into Code Injection
In Squarespace, open Settings, then Advanced, then Code Injection, and paste the snippet into the header field. It applies site-wide from that moment, so there is no per-page work and no template to edit. Load your site in a private window afterwards to confirm the banner appears.
Mark the embeds you want held back
Anything you added yourself through a code block, a map, a chat widget, an embedded video, will keep loading until you tell it not to. Mark each one with the consent category it belongs to and Consent Studio releases it only once your visitor grants that category. This step is the difference between a banner that shows and a banner that governs.
Read the first scan
Within a week Consent Studio has crawled your pages and listed what they actually load. Read it once properly. A Squarespace site usually carries more than its owner expects, because a block, a template or an embed can bring something along, and this is the only place that shows up.
A cookie banner alone is not enough
Most sites are leaking before anyone notices. Not through malice, but through a tag somebody added in a hurry, a vendor that changed its script, a plugin that phones home.
- Unconsented tracking
- Unwanted overseas transfers
- Consent records you cannot produce
- Scripts you never approved
The Full Consent Stack.
Three products, one consent record. What a visitor agreed to in the banner is what every downstream tag sees.
Which plan Squarespace needs, and why
Essential covers this page completely. Nothing here is an add-on or a higher tier, because nothing here depends on a platform integration.
Essential is enough
โฌ10/month
- Google Consent Mode v2 and Microsoft UET
- Consent-gated blocking for your embeds
- Unlimited pages, 200,000 consent actions a month
What Professional adds
โฌ36/month
Worth it once the site grows past what you can check by eye.
- More depth: HTTP consent cookies, accessibility, re-prompting
- On-demand scans, right after a change
- Sitemap scanning, for every page you publish
- Unlimited collaborators, Essential includes two
Every plan includes
Trusted by organisations that care about privacy
Frequently asked questions about Squarespace
Does Squarespace have a built-in cookie banner?
Squarespace offers a cookie banner, and it is a notice rather than a consent platform. It can display a message and set a preference; what it does not do is hold a per-visitor record of what was agreed, produce that record on request, or govern the embeds and tags you added yourself.
How do I add a cookie banner to a Squarespace site?
Paste the Consent Studio snippet into Settings, Advanced, Code Injection, in the header field. It applies to every page immediately, with no template to edit and nothing to republish. Code Injection requires a Squarespace Business plan or above.
Does Squarespace need a cookie banner under the GDPR?
If your site sets cookies that are not strictly necessary, yes, and most do. Analytics, embedded video, maps and chat widgets all fall outside the exemption, so consent has to be obtained before they load. The platform does not change the obligation.
Will Consent Studio block embeds on Squarespace automatically?
Not on its own. Each embed you added is held once you mark it in your code block with the consent category it needs, and Consent Studio then releases it when that category is granted. Google tags are different: those are governed by Consent Mode v2 without any marking.
Can I use Google Tag Manager on Squarespace instead?
Yes. If you already run a container, add our official tag from the Community Template Gallery on the Consent Initialization trigger and nothing goes into Squarespace at all. Worth knowing that an ad blocker which blocks Tag Manager blocks the banner with it, where Code Injection loads regardless.
Get Started with the Full Consent Stack
Everything you need in one bundle. Consent Studio provides you with a consent banner, scanner and client-side tag manager that guarantees no data ever gets transferred overseas.
Read the documentation
Our help center walks through every integration, plugin and template step by step, with screenshots. It is written and kept current by the people who build Consent Studio.










