The banner runs from one script tag. It has to load before anything that sets cookies, so that nothing is stored until the visitor has chosen.
Add the tag to your site
1Open Websites and choose the website.
2Open Installation and copy the script tag. It carries the website's installation key.
3Paste it as the first tag inside `` on every page, above your analytics and ad tags.
Tag managers load too late to hold back what the page sets on its own. Put the tag in the page's HTML, not in a tag manager container.
Check it works
Open your site in a private window. The banner appears on the first visit, and the website's status changes from Not installed once the first consent arrives.
Every website in CookiesNexus has its own banner, cookie list and consent log. Adding one takes a domain and a client — everything else has a sensible default.
Create the website
1Open Websites and choose New website.
2Enter the domain without http:// or www — for example example.com.
3Pick the client it belongs to, or create one inline.
4Start from the default template, a preset, or duplicate an existing website.
Duplicating copies appearance, categories, translations, custom CSS and scanner settings. Only the domain and installation key stay unique.
What happens next
The website appears with the status Not installed until the first consent arrives. Install the script, run a scan, then publish the banner — the status flips to Live automatically.
A preset is a saved look: layout, colours, fonts, button sizes and texts. Starting from one gets a website to a finished banner in a few clicks.
Apply a preset
1Open the website and go to Appearance.
2Choose Presets and pick one of the built-in presets or one your team saved.
3Check the live preview on desktop and mobile, then publish.
Applying a preset replaces the website's appearance only. Its categories, cookies and consent log stay as they are.
Save your own
Once a banner looks right, choose Save as preset. The preset is shared with everyone in the workspace and can be applied to any website, new or existing.
Changes to a banner are drafts until you publish them. Publishing sends the new version to every visitor, and each consent from then on records that version.
Publish
1Open the website and review the preview on desktop and mobile.
2Choose Publish. Visitors see the new banner on their next page load.
Verify it in the browser
1Open the site in a private window, so no earlier choice is remembered.
2Before choosing, open the browser's developer tools and check the cookies: only necessary ones may be set.
3Accept statistics only, reload, and check that your analytics cookies now appear and marketing ones do not.
4Reopen the preferences, withdraw the consent, and check that the banner asks again.
Rejecting must be as easy as accepting. Keep Reject all on the banner's first layer, next to Accept all.
Check the log
Every choice you made shows in the website's consent log with its time, categories and banner version. When the first one arrives, the website's status turns Live.
Visitors choose by category: necessary, preferences, statistics and marketing. You decide whether those choices appear on the banner itself or only in the preferences dialog.
Show the toggles
1Open the website and go to Appearance.
2Under Categories, turn on Show toggles on the banner.
3Choose which categories are listed. Necessary is always shown, switched on and locked.
The law asks for a real choice: every category but necessary starts switched off. Pre-ticked toggles do not count as consent.
Good to know
With toggles on the banner, the middle button reads Allow selection. With them off, visitors reach the categories through Customize.
When the appearance settings are not enough, custom CSS changes anything else about the banner. It is scoped: your rules reach the banner only, and your site's styles never leak into it.
Add custom CSS
1Open the website and go to Appearance.
2Open Custom CSS and write your rules against the banner's classes.
3Check the preview on desktop and mobile, then publish.
Keep Reject all as visible as Accept all. A reject button that is hidden or smaller makes the consent the banner collects invalid.
Good to know
Custom CSS travels with the website: duplicating the website or saving its look as a preset copies it too.
The scanner visits your website the way a visitor would and lists everything it stores: cookies, local storage and the third-party scripts that set them.
What a scan does
1Starts from the domain's home page and its sitemap, and follows links within the domain.
2Loads each page twice: once before consent and once after accepting everything.
3Records each cookie and storage item with its domain, expiry and the script that set it.
4Sorts what it found into categories from the central database.
Anything found before consent that is not necessary is flagged. It usually means a tag loads above the CookiesNexus script.
After the scan
Open Cookies to see the results. Items the database does not know wait under Unclassified until you give them a category. Scans repeat on a schedule, and you can start one at any time.
Some cookies are out of the scanner's reach: they are set behind a login, after a checkout, or by a server the scan never calls. Add those by hand so your declaration stays complete.
Add a cookie
1Open the website and go to Cookies.
2Choose Add cookie.
3Enter its name, provider, purpose and expiry, and pick whether it is a cookie or local storage.
4Choose its category and save.
Cookies you add by hand are never removed by a scan, even when the scan does not find them.
Good to know
A manual cookie shows in the declaration straight away, with the same columns as the scanned ones.
The declaration is the cookie table your privacy or cookie policy needs: every cookie by category, with its provider, purpose and expiry. Scans keep it current.
Add it to your policy page
1Make sure the CookiesNexus script is installed on the page.
2Paste this element where the table should appear.
Under the table, the declaration shows the visitor's current choice and consent id, with a button to change or withdraw it.
Good to know
The declaration follows the visitor's language when a translation exists, like the banner itself.
Google's ads and analytics tags read the visitor's choice through Consent Mode. In the EEA, Google needs Consent Mode v2 to measure and personalise ads.
Turn it on
1Open the website and go to Integrations.
2Turn on Google Consent Mode v2.
3Keep your Google tags after the CookiesNexus script in ``.
The script sets every signal to denied before Google's tags load, which is the default below, then updates the signals the moment the visitor chooses.
How categories map to signals
Statistics grants `analytics_storage`.
Marketing grants `ad_storage`, `ad_user_data` and `ad_personalization`.
Preferences grants `functionality_storage` and `personalization_storage`.
Do not set a consent default of your own in Google Tag Manager as well. Two defaults race each other, and the later one wins.
Every choice a visitor makes is recorded as proof that you asked and they answered. The log is what you show a regulator who asks.
What a record holds
A consent id, which the visitor can see in the declaration.
The time of the choice and the categories it allowed.
The banner version the visitor saw.
The page it was given on.
The log never stores a visitor's IP address, only what the proof needs.
Retention
Records are kept for the retention period set on the website, then deleted automatically. Keep them for as long as you may be asked to prove a consent.
Look up a consent
Open the website's consent log and search by consent id when a visitor asks what they agreed to, or wants it withdrawn.