Skip to main content

Getting Started with Cookie Consent

  • Updated

This article summarizes how to setup your first Osano Cookie Consent Configuration (Cookie Popup)

Creating your cookie consent implementation is simple and takes just a few minutes. 

Creating your Configuration

Navigate to the "Cookie Consent" tab in Osano and create a new configuration. In the configuration settings, add the following: 

  • Name - Internal identifier for this configuration. 
  • Root Domain - If you own, but your website is hosted on, you will want to enter only Osano automatically works with subdomains of your website with no additional configuration.
  • Policy Link URL - The URL link to the aforementioned policy.
  • Additional Settings
  • Policy Link Text - The text displayed on the cookie popup that links the customer to one of the following policies: 
    • Cookie Notice, Cookie Policy, Data Storage Policy, Privacy Notice, Privacy Policy.

Global Privacy Control

  • When enabled, end users using a GPC compatible browser or browser extension will have any GPC signals respected. When off, GPC signals will be ignored. [For more information, see Global Privacy Control (GPC).]

IAB GPP &  EU TCF 2.0 Frameworks (Premier Only) 

  • When enabled, this switch changes all cookie popups in the EU to IAB-defined and compliant popups. [For more information, see Osano and the IAB Framework .]

IAB US Privacy String Notice Confirmation

  • By enabling this toggle, Customer is confirming that they have provided consumer notice and Do Not Sell or Share links under applicable regulations and laws. Enabling this toggle will result in a Y being sent in the second character position of the IAB US Privacy string. 

Google Consent Mode

  • When enabled, this switch will allow the Osano CMP to interact with Google Consent Mode (beta). [For more information, see Google Consent Mode.]

Legacy Browser Support 

  • When turned ON, Osano will generate an osano.js that supports legacy browsers and modern browsers. When OFF, Osano will generate an osano.js that only supports modern browsers. [For more information, see Legacy Browser Support.]

Curated Block List

  • When enabled, Osano will automatically block specific scripts and cookies in regions where their usage has been declared illegal by legislation. When off, Osano will respect existing classification settings. [For more information, see Block List.]

First Layer Categories (Business+, Premier) 

  • By default, Osano utilizes a popup containing all opt-in categories for users accessing from the EU and other select locales. When disabled, this option counteracts this setting and turns the popup into a "Manage Preferences" popup. [For more information, see First Layer Categories | Manage Preferences .]

Add Manage Preferences Button

  • When enabled, a Manage Preferences button will be present on banner templates: 1 and 3. When disabled, banner templates 1 and 3 will have no Manage Preferences button.

US State Level Legislation Opt-Out Banner Format (Premier Only)

  • By default, Osano utilizes an Opt-In dialog for users accessing from California, Colorado, Connecticut, and Virginia. When enabled, this option counteracts this setting and turns the opt-in dialog into an opt-out. This option is compliant with US state level legislation. [For more information, see US State Level Legislation Opt-Out Banner Format.]

Cross-Domain (Premier Only) 

  • When enabled, the cross-domain switch, you have the option to add multiple domains into your configuration settings, which enable initial consents to be shared across unrelated domains owned by the same entity. Simply add a domain, "tab," and add additional domains. (Some domain restrictions apply). [For more information, see Cross-Domain Support .]

Create Configuration and Publish

Get Code for Installation

Once published, use the "get code" button to copy your osano.js and paste it into the header <head> for all pages you wish to monitor. Ensure that the osano.js is the first script that loads on your site. 

Cookie Consent - Get Code

It is recommended to remain in Discovery/Listener until you have added the osano.js into your site and have discovered and classified all relevant scripts. In Discovery/Listener mode, the consent manager will NOT block any scripts or beacons, it will NOT delete cookies, and it will NOT display dialogs to your visitors. In other words, it will not alter your site in any way. You can use Discovery/Listener mode and another CMP if you are migrating away from another provider. This will ensure no gaps in compliance.

Once the osano.js is placed in your site's <head>, it can take a few minutes to a few hours before the script has captured and reported all cookies, scripts, and local storage items that exist across your sites. [Osano is Tag Manager agnostic, meaning that no additional configuration is necessary for the blocking to occur]. 

Once you have collected enough reports from osano.js, you can work with your other business units to identify any unknown cookies/scripts/and local storage items to ensure that no "strictly necessary" scripts, cookies, or local storage are blocked by categorizing them appropriately in "Script Classification."

After you have categorized each script and cookie appropriately, you can enable  Permissive or Strict Mode and publish these changes. 


*** NOTE: You cannot publish into Permissive or Strict mode without having at least ONE (1) script classified or ONE (1) script rule in place. We recommend classifying ALL scripts/cookies prior to publishing in Strict or Permissive. ***


You will now see the consent dialog on your website!

Compliance Mode Definitions

Cookie Consent - Modes

      • Discovery/Listener Mode - Osano will gather script and cookie information for categorization, but the consent dialog will not appear on your webpage, and no blocking will occur.
      • Permissive Mode -  The consent dialog will appear on your website, and all uncategorized scripts will be identified and allowed regardless of consent given. All categorized scripts will be accepted or denied based on user selection. Compliance can be reached in Permissive Mode but is less certain and sustainable than Strict.
      • Strict Mode - The consent dialog will appear on your website, and all uncategorized scripts will be blocked until they have been classified. (Recommended - Most compliant)


Within the Consent Manager Configuration screen, you will find the "Customizations" tab. The Customizations tab allows you to customize certain aspects of your Consent Manager's appearance.

From here, you can customize dialog type, placement, and coloration. You have the option to customize your consent management overlay by choosing one of the Osano pre-generated themes or by setting all colors individually.

Additional Customization Settings:

      • Banner Timeout - this switch allows you to enable or disable the automatic timeout of banners that are on a timer. If you disable the banner timeout, a site visitor will need to make a selection on the banner in order to make the banner disappear.
      • Notification Dialogue Timeout Duration (Slider) - some regional consent dialogues appear on a timer (ex. they appear for a set amount of time before disappearing). This option allows you to set how long the dialog persists on the page before disappearing. This timer ONLY applies to popups without buttons (implied consent popups). All popups with buttons will persist until the end-user interacts with those buttons. 
      • Show Policy Link in Drawer - this switch allows you to display a link to your privacy policy/cookie policy/data storage policy in your storage preferences as well as on the initial cookie popup. 
      • Text Customization - [Premier Only] - out of the Box, Osano provides text and language translations that meet necessary privacy standards. If you would like to change or adjust this language, you can do so within the Osano platform. Read more about text customization

If there are specific customizations that you would like to employ on your consent manager overlay, you can do this using CSS. See a full list of Osano Classes.

Use the world map to see how your cookie popup (dialogue) and storage preferences (drawer) will look in different countries. 

Cookie Consent - Customization Screen

(Note: Osano will geolocate the end-user and provide them with the cookie popup that is most compliant in their location. The language displayed will be determined by the end-users' browser preferences. Selecting a location on the map will show the popup style in that location as well as the most common language in that location.)   

Scripts and Script Classification

Once you have placed your Osano.js in the <head> of your site in "Listener" mode, Osano will begin alerting you to and displaying identified scripts. These scripts will appear in the "Scripts" section of the Consent Manager. It can take anywhere from a few minutes to a few hours for scripts to populate. 

The script tab is broken up into 3 sections: Discovered, Managed, & Ignored (Read Classification of Scripts and Cookies for more info.)

Cookie Consent - Tabs.png

Once scripts are identified, you must classify them as one of the following: 

      • Essential
      • Analytics
      • Marketing
      • Personalization
      • Blocklist

You can find more information about Classification Categories and Classification Rules in the linked articles. 

Be sure to classify each script before saving and publishing out any new changes.

*** NOTE: You CANNOT switch compliance mode from "Listener" to "Permissive" or "Strict" without at least one script classified. For compliance's sake, we recommend you classify as many scripts as possible before switching out of "Listener" mode. ***

Cookies can be categorized in the same way as scripts. Classification rules can be set for cookies as well. 

The cookies tab is broken up into 3 sections: Discovered. Managed, and Ignored (Read Auto-Classification of Scripts and Cookies for more info.)

Once Cookies are discovered, you must classify them as one of the following: 

      • Essential
      • Analytics
      • Marketing
      • Personalization
      • Blocklist

Cookie Consent - Cookie Rule Creation

In this section, you can also set your disclosures. Cookie Disclosures are used to disclose or list out cookies your website is using to the end-user so that they are aware of what is in use and why it is in use. In this section, you can manually add the following:

      • Classification (tied to the script/cookie categories above)
      • Cookie Name
      • Vendor
      • Expiration Date
      • Description of the Cookie

Once added, these disclosures will appear to the end-user on your webpage in the "drawer" under their associated categories. You are required to include cookie disclosures for GDPR , but it is recommended for both CCPA/CPRA.

It is important to note that, though Osano may be able to identify 100% of your cookies, Osano’s cookie classification only affects cookies set through Javascript. Any other means of intercepting or blocking request headers can only be accomplished through browser extensions.

iFrames (Premier Only)

If this feature is enabled, Osano will discover and list iFrames in the same way it does cookies and scripts. Once discovered, iFrames can be classified and blocked in the same way. 

Once iFrames are discovered, you must classify them as one of the following: 

        • Essential
        • Analytics
        • Marketing
        • Personalization
        • Blocklist

This section of Osano allows you to view a log of consents for a particular configuration. Using an Osano_UUID or a public IP address, you can search for a particular user's consent logs over a period of time. This data is hashed and anonymized. For more information on Consent Data, contact Osano support. 

Sitemap URLs (Premier Only)

Here you can add a sitemap XML for scanning. This scanning takes place on a monthly basis and can be used in advance of placing the osano.js on your website to identify script and cookie information. 

Click the (+) to add your sitemap URLs in the standard XML format (Osano does not support nested sitemaps). 

If your sitemap follows the standard sitemap formatting, these connected URLs will be scanned immediately and then on a monthly basis for unclassified cookies and scripts. (Example Format)

URL Scan (Premier Only)

Here you can see the URLs imported via your sitemap for this configuration OR add individual URLs to scan for scripts and cookies. When new URLs are added, they will be scanned immediately and will continue on a monthly basis while active. 

You can add, delete, and start/stop scans from this section. 

Versions (Premier Only)

Here you can see all of your current and past published versions of the Osano CMP script. 

You can roll back to previous versions in the tab. Note that when you roll back, all rules, styling, and code is rolled back to the previous version as well. 

Related to