Proof of what each visitor actually chose

Months later, when somebody asks what one particular visitor agreed to, you can answer with what they actually saw and what they actually picked.

  • Written at the moment of choice
  • Tied to the banner version
  • Exportable

From €10 a month. No credit card, no per-visitor billing.

The question arrives long after the choice

Nobody asks about a consent record on a good day. It is asked for months later, by somebody with a reason.

  1. A visitor asks what you hold

    A data subject request arrives and one of the things it covers is what they agreed to and when. Answering with your current banner settings answers a different question, because those settings may have changed twice since.

  2. A regulator asks you to demonstrate it

    The obligation is not to have asked, it is to be able to show that consent was freely given, specific and informed. A record with no link to the wording the visitor actually saw does not show that.

  3. The banner text changed in between

    You reworded a category, added a vendor, or translated the panel into a fourth language. A record that says only yes to marketing cannot tell you what marketing meant on the day it was agreed to.

  4. The record itself becomes a liability

    Some tools solve proof by storing enough about the visitor to identify them later. That turns a compliance record into a personal data store, and it is a worse problem than the one it fixes.

What gets written down, and what does not

  • The choice, with a timestamp

    Which categories were accepted and which were refused, at the moment the visitor decided, and again if they came back and changed their mind. Withdrawal is recorded the same way granting is.

    • Per category
    • Grant and withdrawal
    • Server timestamp
  • The banner text they saw

    Every record points at the version of the wording that was on screen. Change a category description and new records point at the new version while old ones keep pointing at the old one.

    • Versioned wording
    • Per language
    • Immutable once written
  • Not who they were

    The record proves a choice was made without building a profile of the person who made it. A consent log that identifies visitors is a pile of personal data collected to prove you are careful with personal data.

    • No profile built
    • No cross-site identity
    • Data minimised
  • Available when somebody asks

    Search and export from the dashboard, so answering a request does not mean opening a support ticket with us. Enterprise customers can have it delivered to their own systems.

    • Search and export
    • Self service
    • API on Enterprise

How the record builds itself

  1. A visitor decides

    They accept, refuse or pick categories. Nothing else has to happen for the record to exist.

  2. It is written immediately

    Stored server side at the moment of the choice, against the banner version on screen.

  3. It stays as written

    A later change to your banner text creates new versions rather than editing old records.

  4. You export it when asked

    Search the log and take out what you need, in a form you can hand to somebody.

Consent logging is on every plan

Every choice, the banner wording it was made against, and an export you can hand to a reviewer. Ten euro a month, on every plan.

Essential

€10/month

For a single site that has to be compliant, and stay that way.

  • Unlimited pages and displays
  • 200,000 consent actions a month
  • The full stack, not a starter tier
Try Essential for FreeNo credit card required. 7 day free trial.
  • Professional

    €36/month

    For growing teams that run on data, and the agencies serving them.

    Try Professional for Free
  • Enterprise

    From €250/month

    For a volume, or an obligation, a standard plan cannot answer.

    Explore Enterprise
  • Agencies & Resellers

    Buy at a partner rate and resell client sites at your own price.

    Discover Partner Programme
  • Public Sector

    Government, healthcare and education run on Enterprise.

    See Enterprise

Keeping records for organisations like these


  • Philips, the Dutch electronics group, using Consent Studio for cookie consent
  • Gemeente Leiden, a Dutch municipality running Consent Studio on its public websites
  • Erasmus Universiteit Rotterdam, managing cookie consent with Consent Studio
  • America Today, a fashion retailer using Consent Studio across its webshop
  • Van Vulpen, an infrastructure contractor using Consent Studio for cookie consent
  • EuroParcs, a European holiday park operator running Consent Studio on its booking sites
  • Optica, a Dutch opticians chain using Consent Studio for consent management
  • Movisie, the Dutch social policy institute, managing cookie consent with Consent Studio
  • Jeans Centre, a Dutch fashion retailer using Consent Studio for cookie consent
  • Mondiaen, a Tilburg primary school foundation, running Consent Studio across its school websites
  • Nederlands Jeugdinstituut, the Dutch national youth institute, running Consent Studio on its websites
  • Fiterman Pharma, a pharmaceutical company using Consent Studio for cookie consent
  • Eddie Rockets, a hospitality group managing cookie consent with Consent Studio
  • Veneta, a kitchen retailer using Consent Studio for consent management
  • MS Mode, a fashion retailer running Consent Studio across its European webshops

Questions about the record

How long is a consent record kept?

For as long as you need to be able to evidence it, which in practice means past the point where the consent itself has expired or been withdrawn. Retention is configurable, because the right answer depends on your own retention policy rather than on ours.

Does the log identify individual visitors?

No, and that is deliberate. The record proves a choice was made against a specific version of the banner without building a profile of who made it. Solving proof by storing enough to identify somebody later creates a bigger problem than it solves.

Can I export the log?

Yes, from the dashboard, without asking us. That matters more than it sounds: if answering a data subject request means opening a support ticket with your vendor, the thirty day clock is running while you wait. Enterprise customers can also have records delivered to their own systems.

What happens when I change the banner text?

A new version is created and new records point at it. Existing records keep pointing at the wording that was actually on screen when they were written, which is the only thing that makes them evidence rather than an assertion.

Is a consent log legally required?

The GDPR requires you to be able to demonstrate that consent was given, which in practice means keeping a record, though it does not prescribe a format. This is a general explanation rather than legal advice, and what your organisation needs depends on what else it processes.

What does Consent Studio cost?

Ten euro a month per domain, with no limit on pages and no billing per visitor. That covers the banner, the tag manager and the weekly scan together, because all three are on every plan. Agencies and organisations running many domains have a partner rate, and organisations outside the fair use range have an Enterprise plan.

Where is our consent data stored?

In Amsterdam, on infrastructure owned and operated by Scaleway, a French company. That matters beyond the map pin: Scaleway is independently French rather than a European subsidiary of a US parent, so neither they nor we fall under the US CLOUD Act. Consent Studio itself is built and owned in the Netherlands by Vallonic.

Get Started with the Full Consent Stack

Everything you need in one bundle. Consent Studio provides you with a consent banner, scanner and client-side tag manager that guarantees no data ever gets transferred overseas.

Read the documentation

Our help center walks through every integration, plugin and template step by step, with screenshots. It is written and kept current by the people who build Consent Studio.

Which privacy policy?

We publish two, and they cover different audiences. Pick the one that describes you.