CookieFort CMP Documentation

Language

Tip: use the FR/EN toggle to read this documentation in your preferred language.

Understand how the CMP works and how to enable it on your site.

CMP at a glance

CookieFort helps you collect consent choices and properly activate/deactivate your marketing & analytics scripts, while keeping proof evidence you can export.

1) Installation

Installation flow

Get the widget script, embed it, then verify detection.

Retrieve the script

In the dashboard, open your site page (or property) and find the “Integrations” section.
In step 1, choose GTM or GA4 and enter your ID (`GTM-…` or `G-…`).

Integrate the snippet

Click “Get script”: widget-only snippet (GTM) or gtag + widget (GA4; no manual `gtag('config')` in HTML — the widget applies it after consent).
Copy the integration script shown.

data-category : Attribute example: <script ... data-category="ANALYTICS"></script>

Publish & verify

Paste it into your site: preferably in `<head>`, or near the end of `<body>` depending on your CMS.
Publish and reload a page on your site: the widget should execute and communicate with the dashboard.
Go back to the dashboard and check the integration status (widget detected / green check).
If detection does not work: confirm the script loads correctly (no console errors) and use the integration refresh control.

2) Script blocking

The CMP activates/deactivates tags based on consent categories. Use the `data-category` attribute to associate each script with a category.

4a) Ad pixels (Meta, TikTok, LinkedIn, Pinterest)

In step 1 (Installation), enable “Use social network pixels” and enter the IDs you need: Meta Pixel, TikTok Pixel, LinkedIn Insight Tag, Pinterest Tag.
Pixels load widget-only — they are not included in the step-2 installation snippet.
Rule: no ad scripts before explicit consent; pixels start only after marketing consent is granted (or equivalent per user choice).
If the user withdraws marketing and saves, the widget revokes platform consent (Meta/TikTok) and removes LinkedIn/Pinterest scripts where applicable.
GTM coexistence: if the same pixels already run in your GTM container, avoid enabling them in the widget too to prevent double loading.
V1: PageView on activation; no advanced events (Lead, Purchase, etc.) in this version.

4b) Multi-country customization

In the Privacy accordion (step 1), enable “Multi-regulation privacy links”.
Enter optional URLs for Switzerland (CH), United Kingdom (GB), Australia (AU), and United States (US). Each field accepts an http or https URL.
The widget reads browser locale (`document.documentElement.lang`, then `navigator.language`) and shows the matching country link when set.
If the country is not covered or the country URL is empty, the global privacy link (`privacyUrl`) is shown — historical fallback behavior.
This is URL routing to the right policy page, not automatic legal analysis per jurisdiction.

6) Proof of consent

Proof of consent

The dashboard stores a modal snapshot you can export.

The dashboard stores consent proofs: modal version, browser info, and a modal snapshot. Each row is one recorded decision (accept all, reject all, or customized choices). Export this log as CSV from “Consents”. Billing is based on the number of visits (browser session), not the number of decisions.

7) Visits & billing

A visit is an active browser session on your site: it starts when the page loads and ends when the tab or browser is closed. On first arrival, the visitor must make a consent choice; each new page load counts as a new visit. If the visitor accepted or customized preferences, their visitor ID is reused across visits; if they refused, a new ID is assigned on each visit. Changing preferences during the same browser session does not create an additional visit. Visits are counted on the site covered by your subscription over the current billing period. Mini, Starter, Growth, and Pro tiers include a monthly quota, a 7-day free trial, and overage billed in blocks. See the Pricing page and FAQ for details.

8) Daily stats cron

Entry point: `GET /api/cron/daily-stats` (or `POST`) with secret via `Authorization: Bearer`, `x-cron-secret`, or `?secret=`.
Recommended frequency: once a day in UTC (preferably early morning) to aggregate D-1.
Health check: `GET /api/cron/daily-stats?health=1` to compare latest aggregated date vs expected date.
Backfill: `?backfill=7` (or N) to recompute previous days with idempotent behavior.
Local smoke test: `npm run cron:daily-stats:smoke` (uses `APP_URL` and `CRON_SECRET` from `.env`).
Scheduler wiring: plug either Vercel Cron or a Linux/external cron pinger to this endpoint.

Want the CMP running on a real site? Create a dashboard account and test the integration.

Create an account and test integration

1) Installation

Installation flow

Get the widget script, embed it, then verify detection.

Retrieve the script

In the dashboard, open your site page (or property) and find the “Integrations” section.
In step 1, choose GTM or GA4 and enter your ID (`GTM-…` or `G-…`).

Integrate the snippet

Click “Get script”: widget-only snippet (GTM) or gtag + widget (GA4; no manual `gtag('config')` in HTML — the widget applies it after consent).
Copy the integration script shown.

data-category : Attribute example: <script ... data-category="ANALYTICS"></script>

Publish & verify

Paste it into your site: preferably in `<head>`, or near the end of `<body>` depending on your CMS.
Publish and reload a page on your site: the widget should execute and communicate with the dashboard.
Go back to the dashboard and check the integration status (widget detected / green check).
If detection does not work: confirm the script loads correctly (no console errors) and use the integration refresh control.

4a) Ad pixels (Meta, TikTok, LinkedIn, Pinterest)

In step 1 (Installation), enable “Use social network pixels” and enter the IDs you need: Meta Pixel, TikTok Pixel, LinkedIn Insight Tag, Pinterest Tag.

Pixels load widget-only — they are not included in the step-2 installation snippet.

Rule: no ad scripts before explicit consent; pixels start only after marketing consent is granted (or equivalent per user choice).

If the user withdraws marketing and saves, the widget revokes platform consent (Meta/TikTok) and removes LinkedIn/Pinterest scripts where applicable.

GTM coexistence: if the same pixels already run in your GTM container, avoid enabling them in the widget too to prevent double loading.

V1: PageView on activation; no advanced events (Lead, Purchase, etc.) in this version.

4b) Multi-country customization

In the Privacy accordion (step 1), enable “Multi-regulation privacy links”.

Enter optional URLs for Switzerland (CH), United Kingdom (GB), Australia (AU), and United States (US). Each field accepts an http or https URL.

The widget reads browser locale (`document.documentElement.lang`, then `navigator.language`) and shows the matching country link when set.

If the country is not covered or the country URL is empty, the global privacy link (`privacyUrl`) is shown — historical fallback behavior.

This is URL routing to the right policy page, not automatic legal analysis per jurisdiction.

6) Proof of consent

Proof of consent

The dashboard stores a modal snapshot you can export.

7) Visits & billing

8) Daily stats cron

Entry point: `GET /api/cron/daily-stats` (or `POST`) with secret via `Authorization: Bearer`, `x-cron-secret`, or `?secret=`.

Recommended frequency: once a day in UTC (preferably early morning) to aggregate D-1.

Health check: `GET /api/cron/daily-stats?health=1` to compare latest aggregated date vs expected date.

Backfill: `?backfill=7` (or N) to recompute previous days with idempotent behavior.

Local smoke test: `npm run cron:daily-stats:smoke` (uses `APP_URL` and `CRON_SECRET` from `.env`).

Scheduler wiring: plug either Vercel Cron or a Linux/external cron pinger to this endpoint.

CookieFort CMP Documentation

CMP at a glance

1) Installation

Retrieve the script

Integrate the snippet

Publish & verify

2) Script blocking

3) Google Consent Mode v2

4) Consent widget

4a) Ad pixels (Meta, TikTok, LinkedIn, Pinterest)

4b) Multi-country customization

5) Automatic cookie detection & “unknown cookies”

Run the scan

Categorize unknown cookies

Add to widget

Exceptions & reporting

Finalize & apply

6) Proof of consent

7) Visits & billing

8) Daily stats cron

CMP at a glance

1) Installation

Retrieve the script

Integrate the snippet

Publish & verify

2) Script blocking

3) Google Consent Mode v2

4) Consent widget

4a) Ad pixels (Meta, TikTok, LinkedIn, Pinterest)

4b) Multi-country customization

5) Automatic cookie detection & “unknown cookies”

Run the scan

Categorize unknown cookies

Add to widget

Exceptions & reporting

Finalize & apply

6) Proof of consent

7) Visits & billing

8) Daily stats cron