.png)
.png)
Glossary
May 19, 2026
- Banner
The visible UI element on your site that asks visitors for cookie consent. - CCPA / CPRA
California’s privacy laws. Use opt-out model. - CMP
Consent Management Platform , the type of tool ConsentBit is. - Consent
A visitor’s recorded “yes” or “no” to having cookies set. Must be free, specific, informed, and unambiguous under GDPR. - Consent log
A timestamped record of every consent decision. Required for proof during audits. - Consent Mode v2
Google’s framework for receiving consent signals from CMPs. Required for Google Ads/Analytics in GDPR regions since March 2024. - Cookie
A small text file websites store on a visitor’s browser. - Cookie scan
An automated crawl of your site that detects and categorizes cookies and trackers. - DMA
Digital Markets Act , EU law that designates large platforms (including Google) as “gatekeepers” required to obtain explicit consent for advertising data. The reason Consent Mode v2 became mandatory. - First-party cookie
A cookie set by the domain the visitor is currently on. - GDPR
The EU’s General Data Protection Regulation. The strictest mainstream privacy law. - Geo-targeting
Showing different banners based on the visitor’s location. - GPC
Global Privacy Control , a browser-level “do not sell” signal that CCPA requires sites to honor. - GPP
Global Privacy Platform , IAB’s unified successor framework that wraps TCF, US Privacy signals, and other regional consent signals into one string. - IAB TCF v2.3
Industry standard for passing consent signals to advertising vendors. Mainly for publishers. Mandatory replacement for v2.2 since Feb 28, 2026. Adds the mandatory disclosedVendors segment to the TC string. - LGPD
Brazil’s privacy law (Lei Geral de Proteção de Dados). - Limited Ads
Google’s fallback ad-serving mode used when consent signals are missing or invalid (e.g., a site sending pre-v2.3 TCF strings after Feb 28, 2026). Significantly lower revenue than personalized ads. - Necessary cookies
Cookies a site genuinely can’t function without (login, cart, security). Exempt from consent. - Opt-in
Default-off; visitor must actively consent. (GDPR.) - Opt-out
Default-on; visitor can disable. (CCPA.) - PIPEDA
Canada’s Personal Information Protection and Electronic Documents Act. - Prior consent
Getting permission before setting cookies. Required by GDPR/ePrivacy. - Script
Code (often JavaScript) that runs on a webpage. Many scripts set cookies. - Script blocking
Preventing a script from executing until consent is given. - TC String
The encoded consent string produced by a TCF-compliant CMP that travels with ad requests to communicate visitor choices to vendors. - Third-party cookie
A cookie set by a domain other than the one the visitor is on (e.g., ads.facebook.com setting a cookie while you’re on example.com).
Frequently asked questions
No items found.