Skip to main content

Getting Started with Cookie Consent

  • Updated

Osano Cookie Consent is a powerful tool that helps you manage cookie compliance on your website. This guide will walk you through the process of setting up your first Osano Cookie Consent Configuration (Cookie Popup). The setup process is simple and typically takes just a few minutes.

 

Creating Your Configuration

Basic Setup

  1. Navigate to the "Cookie Consent" tab in your Osano dashboard.
  2. Click on "Create New Configuration."
  3. Fill in the following basic information:
    • Name: An internal identifier for this configuration.
    • Root Domain: Enter your main domain (e.g., example.com). Osano will automatically work with subdomains.
    • Policy Link URL: The URL to your privacy or cookie policy.
    • Policy Link Text: The text displayed on the cookie popup that links to your policy (e.g., "Cookie Notice", "Privacy Policy").

Advanced Settings

  • Global Privacy Control (GPC): Enable to respect GPC signals from compatible browsers. For more information, see Global Privacy Control (GPC).
  • IAB GPP & EU TCF 2.0 Frameworks (Premier Only): Enables IAB-compliant popups in the EU. For more information, see Osano and the IAB Framework.
  • IAB US Privacy String Notice Confirmation: Confirm you've provided necessary consumer notices and links.
  • Google Consent Mode: Allows interaction with Google Consent Mode. For more information, see Google Consent Mode.
  • Legacy Browser Support: Toggle support for older browsers. For more information, see Legacy Browser Support.
  • Curated Block List: Automatically block scripts and cookies deemed illegal in certain regions. For more information, see Block List.
  • First Layer Categories (Business+, Premier): Choose between displaying all opt-in categories or a "Manage Preferences" popup. For more information, see First Layer Categories | Manage Preferences.
  • Add Manage Preferences Button: Display this button on specific banner templates.
  • US State Level Legislation Opt-Out Banner Format (Premier Only): Switch between opt-in and opt-out dialogs for US states. For more information, see US State Level Legislation Opt-Out Banner Format.
  • Cross-Domain (Premier Only): Share initial consents across multiple domains owned by the same entity. For more information, see Cross-Domain Support.

Get Code for Installation

  1. After configuring your settings, click "Create Configuration" and then "Publish."
  2. Use the "Get Code" button to copy your unique osano.js script.
  3. Paste the script into the <head> section of all pages you wish to monitor. Ensure it's the first script that loads on your site.

Cookie Consent - Get Code

Discovery Mode

It's recommended to start in Discovery/Listener mode:

  • The consent manager will not block scripts or delete cookies.
  • No dialogs will be displayed to visitors.
  • This allows you to migrate from another provider without compliance gaps.

Script and Cookie Classification

  1. Allow time for the script to capture and report cookies, scripts, and local storage items.
  2. Classify discovered items in the "Script Classification" section:
    • Essential
    • Analytics
    • Marketing
    • Personalization
    • Blocklist
  3. Ensure all items are classified before switching to Permissive or Strict mode.

 

*** NOTE: You cannot publish into Permissive or Strict mode without having at least ONE (1) script classified or ONE (1) script rule in place. We recommend classifying ALL scripts/cookies prior to publishing in Strict or Permissive. ***

 

You will now see the consent dialog on your website!

Compliance Modes

  • Discovery/Listener Mode: Gathers information without blocking or displaying dialogs.
  • Permissive Mode: Displays consent dialog, allows uncategorized scripts, blocks/allows categorized scripts based on user consent.
  • Strict Mode: Displays consent dialog, blocks all uncategorized scripts until classified. (Most compliant)

Cookie Consent - Modes

 

Customization

Access the "Customizations" tab to modify:

  • Dialog type and placement
  • Color scheme
  • Banner timeout settings
  • Policy link display options
  • Text customization (Premier Only)

Use the world map feature to preview your cookie popup in different countries and languages.

      • Banner Timeout - this switch allows you to enable or disable the automatic timeout of banners that are on a timer. If you disable the banner timeout, a site visitor will need to make a selection on the banner in order to make the banner disappear.
      • Notification Dialogue Timeout Duration (Slider) - some regional consent dialogues appear on a timer (ex. they appear for a set amount of time before disappearing). This option allows you to set how long the dialog persists on the page before disappearing. This timer ONLY applies to popups without buttons (implied consent popups). All popups with buttons will persist until the end-user interacts with those buttons. 
      • Show Policy Link in Drawer - this switch allows you to display a link to your privacy policy/cookie policy/data storage policy in your storage preferences as well as on the initial cookie popup. 
      • Text Customization - [Premier Only] - out of the Box, Osano provides text and language translations that meet necessary privacy standards. If you would like to change or adjust this language, you can do so within the Osano platform. Read more about text customization. 
         

If there are specific customizations that you would like to employ on your consent manager overlay, you can do this using CSS. See a full list of Osano Classes.

Use the world map to see how your cookie popup (dialogue) and storage preferences (drawer) will look in different countries. 

Cookie Consent - Customization Screen

(Note: Osano will geolocate the end-user and provide them with the cookie popup that is most compliant in their location. The language displayed will be determined by the end-users' browser preferences. Selecting a location on the map will show the popup style in that location as well as the most common language in that location.)   

Scripts, Cookies and Classification

After implementing the Osano.js script in your site's <head> section while in "Listener" mode, Osano begins its discovery process:

  1. Identification: Osano automatically detects scripts and cookies running on your website.
  2. Notification: You'll receive alerts about newly identified scripts via email and in your Osano notifications tab.
  3. Display: Identified scripts appear in the "Scripts" or "Cookies" section of the Consent Manager respectively.
  4. Timeframe: The discovery process typically takes between a few minutes to several hours, depending on your site's complexity.

Management Interface

Both the "Scripts" and "Cookies" tab in the Consent Manager is divided into three key sections:

  1. Discovered: New scripts/cookies that Osano has identified but haven't been classified yet.
  2. Managed: Scripts/cookies that you have reviewed and classified.
  3. Ignored: Scripts/cookies you've chosen to exclude from the consent management process.

For a detailed explanation of each section, refer to our comprehensive guide on Classification Categories and Classification Rules.

Cookie Consent - Tabs.png

Classification Categories

Once Osano identifies a script/cookie, you must classify it into one of the following categories:

  1. Essential: Content crucial for basic website functionality.
  2. Analytics: Content used for website analytics and performance monitoring.
  3. Marketing: Content related to advertising and marketing activities.
  4. Personalization: Content that customize user experience.
  5. Blocklist: Content you want to prevent from running on your site.

For in-depth information about each category and how to determine the appropriate classification, see our guide on Classification Categories.

Classification Process

  1. Review each discovered script in the "Scripts" and "Cookies" sections.
  2. Determine the appropriate category based on the content 's function.
  3. Assign the category using the dropdown menu next to each script/cookie.
  4. Save your changes after classifying each batch of scripts/cookies.

For advanced classification techniques, including bulk actions and rule-based classification, consult our guide on Classification Rules.

 

Cookie Disclosures

Cookie disclosures are a critical component of transparency and compliance. They inform users about the cookies your website uses and their purposes. Scripts do NOT require disclosure. 

Setting Up Cookie Disclosures

In the Cookie Management section, you can manually add the following information for each cookie:

  1. Classification: Corresponds to the categories mentioned above.
  2. Cookie Name: The unique identifier for the cookie.
  3. Vendor: The company or service that sets the cookie.
  4. Expiration Date: When the cookie is set to expire.
  5. Description: A clear, concise explanation of the cookie's purpose and functionality.

Cookie Consent - Cookie Rule Creation

Disclosure Display

Once added, these disclosures will appear to users on your website in the "drawer" section of the consent manager, organized under their associated categories.

Compliance Requirements

  • GDPR: Cookie disclosures are mandatory.
  • CCPA/CPRA: While not explicitly required, cookie disclosures are strongly recommended for comprehensive compliance.

Important Note on Script/Cookie Classification Scope

While Osano strives to identify all cookies on your website, it's important to understand the limitations:

  • Osano's cookie discovery primarily affects cookies set through JavaScript.
  • Cookies set through other means (e.g., server-side) may not be directly manageable through Osano. Read more about Osano and server-side cookies and HTTP only cookies.
  • For comprehensive cookie control, including non-JavaScript cookies, additional measures like browser extensions or server-side solutions may be necessary.

By following these guidelines and utilizing Osano's cookie management features, you can ensure a transparent and compliant approach to cookie usage on your website, enhancing user trust and meeting regulatory requirements.

 

Advanced Features

  • Scripts and Cookie Classification: Manage discovered, managed, and ignored scripts/cookies.
  • Cookie Disclosures: Add detailed information about cookies for user transparency.
  • iFrames (Premier Only): Discover, classify, and block iFrames.
  • Consent Search (Plus, Premier): View consent logs for specific users.
  • Sitemap URLs (Premier Only): Add sitemaps for automatic script and cookie scanning.
  • URL Scan (Premier Only): Manually add URLs for script and cookie scanning.
  • Versions (Premier Only): View and roll back to previous CMP script versions.

Best Practices

  1. Classify all scripts and cookies before switching out of Discovery mode.
  2. Regularly review and update your classifications as your website evolves.
  3. Use Strict mode for the highest level of compliance.
  4. Customize your consent dialog to match your website's design.
  5. Regularly check consent logs to ensure proper functioning.

By following this guide, you'll be well on your way to implementing a robust and compliant cookie consent solution for your website. Remember to stay updated with the latest privacy regulations and adjust your settings accordingly!

Related to