Consent before anything optional
The ePrivacy rules require consent before a site stores or reads non essential cookies. For visitors in the EU, EEA and Switzerland, Velo starts with every Consent Mode v2 signal denied until they choose.
In the EU and the wider EEA, optional cookies and trackers need consent before they run. Velo starts every visitor there with everything denied, and keeps proof of each choice.
The ePrivacy rules require consent before a site stores or reads non essential cookies. For visitors in the EU, EEA and Switzerland, Velo starts with every Consent Mode v2 signal denied until they choose.
Consent has to be specific and informed. Visitors pick analytics, ads, functional and personalisation separately, and your tags follow what they chose.
Article 7 says you must be able to demonstrate consent. Each decision is stored as an unchangeable record with a receipt id, the region and the banner version it answered.
Withdrawing has to be as easy as consenting. A small floating button stays on the page so visitors can reopen their choices at any time.
What teams ask about GDPR and cookies.
The duty to ask before placing non essential cookies comes from the ePrivacy Directive, as each EU country applies it. The GDPR sets the standard that consent must meet: freely given, specific, informed, unambiguous and as easy to withdraw as to give.
No. The Court of Justice ruled in Planet49 (2019) that boxes ticked in advance do not give valid consent, and European regulators treat scrolling or continued browsing the same way. Velo asks for an active choice.
Supervisory authorities can order changes and fine. The GDPR allows fines of up to 20 million euros or 4% of worldwide annual turnover, whichever is higher, and cookie banners are a regular enforcement topic.
Velo handles the consent layer: defaults, choices, records and withdrawal. Compliance also depends on your privacy notice, your vendors and how your tags are set up. This page is general information, not legal advice.
If you use Google advertising products with visitors in the EEA, Google requires consent signals, which you can pass through Consent Mode v2. Velo sends them for you, starting denied in the EU.
Website privacy, in one place.
Scan your site →