Features

Every capability, no asterisks

consentline is engineered around one promise — nothing reaches a tracker before consent — and the operational tooling to prove it. Here's exactly how each piece works.

01 · THE LEAD

True hard-block

Most CMPs lean on Google Consent Mode — tags still load and send "cookieless" pings before the visitor agrees. consentline doesn't gate; it blocks. gtm.js never enters the document until consent is granted.

  • No cookieless pings, no g/collect beacons pre-consent
  • Built for a defensible CIPA / CCPA litigation posture
  • Cookieless analytics you choose to leave ungated still run

network · before consent

www.googletagmanager.com/gtm.jsblocked
www.google-analytics.com/g/collectblocked
googleads.g.doubleclick.netblocked
cdn.usefathom.com/script.jsallowed*

*cookieless analytics, ungated by your config

02

Jurisdiction-aware

consentline geo-detects each visitor at the edge and applies the correct ruleset across eight US state privacy laws — with a conservative baseline and a fail-closed fallback when detection is uncertain.

CPRAVCDPACPACTDPADPDPATDPSAOCPANJDPA
Detected location California, US
Applied rulesetCPRA
Opt-out of sale/sharerequired
Default stateall tags blocked
Detection failed?fail closed →
03

GPC honored

When a browser sends a Global Privacy Control signal, consentline treats it as a valid opt-out — automatically, and on every return visit. No banner nagging for visitors who've already expressed a preference at the browser level.

Sec-GPC signal detected

Opt-out applied automatically. Targeting & analytics tags stay blocked — no click required.

04

Append-only consent log

Every consent choice is recorded to an append-only audit trail — visitor IPs are salted-and-hashed, never stored raw, and duplicate writes are ignored. Records are archived every day with independent integrity verification, so your proof stays complete and provable years after the fact. Export the whole log as CSV evidence for audits and DSARs — the proof regulators and plaintiffs' attorneys ask for.

Consent log Export CSV
timestampchoiceregion
14:02:41Zaccept-allUS-CA
14:02:55Zreject-allUS-VA
14:03:10Zanalytics-onlyUS-CO
14:03:22Zgpc-autoUS-CT
append-only · salted IP hash · daily verified archives · CSV export
05

GTM-native & declarative

Drop it into Google Tag Manager and gate tags with plain markup — type="text/plain" data-consent on scripts and data-consent-src on iframes. No DOM monkey-patching, no proxy shims, nothing to break on your next deploy.

index.html

<!-- gated until consent -->
<script type="text/plain"
        data-consent="analytics"
        src="/gtm.js"></script>

<iframe data-consent-src="//maps…"
        data-consent="functional"></iframe>
06

Fast & supply-chain-safe

A tiny vanilla-JS banner — no framework, no runtime dependency. Every release is an immutable, SRI-pinned artifact (sha384) served from the CDN, so the exact bytes you reviewed are the exact bytes that run.

4.9 KB

gzipped · zero dependencies

integrity

sha384-mwhOArX0…immutable…Vl62sq

07

Hosted policies & client portal

Your privacy policy, terms of use, and cookie policy live on always-current hosted pages — your site just links to them, and updates go live everywhere the moment they're approved. Sign in to the client portal with a secure email link (no password to remember) to update company details, your cookie table, and even add your own custom language. Every change is reviewed by a real person before it's published, so nothing goes live on a legal document by accident.

Client portal Policies live
  • Hosted privacy, terms & cookie pages
  • Edit details & custom language yourself
  • Human review before anything goes live
  • Passwordless sign-in by email
consentline.com/p/your-site · updates without a site republish
08

Always-on compliance monitoring

Most consent tools are only as good as the day they were installed — then a plugin update or a new embed quietly slips a tracker past the banner. consentline keeps checking your live site around the clock: that blocking is still intact, the banner is still serving, and nothing new is reaching trackers before consent. If anything drifts, our team is alerted the same day — usually before anyone else could ever notice.

24/7

automated checks on your live site

watching for

stray tags · banner health · blocking intact · service uptime

09

Paste-once policy embeds

Prefer your policies on your own pages? Paste one snippet on your site — once — and the full document renders right there, inheriting your site's styling. When your policy is updated, every page it's embedded on updates itself. No republish, no copy-paste, no stale legal text.

  • Paste once — updates flow to your pages automatically
  • Renders in your site's own fonts and styles
  • Works alongside or instead of the hosted pages

your-site.com/privacy

<!-- paste once — always current -->
<div data-consentline-policy="a1b2c3d4-…"></div>
<script src="cdn.consentline.com/embed-policy.js"
        async></script>
10

Document options built for real estate

Legal documents aren't one-size-fits-all — a leasing site needs different language than a design studio. Toggle on exactly the sections your business calls for: fair-housing notices, accessibility statements, DMCA, property-marketing disclaimers, SMS program terms, and more. Each one is professionally drafted and drops into your documents with your details already filled in.

Document options Per site
  • Fair housing (EHO) notice
  • Accessibility statement
  • Property-marketing disclaimers
  • DMCA policy & SMS program terms
per-site toggles · professionally drafted · your details filled in
11

Every change on the record

Edit your documents through the portal and every change is captured in a permanent revision history — what changed, when, and by whom, with the full text of every version preserved. Nothing is ever overwritten, so the complete lineage of each legal document is there when an audit, a dispute, or a "what did our policy say last March?" comes calling.

Revision history Permanent
versionchangedate
v4cookie table updatedJun 30
v3custom section addedJun 14
v2new office addressMay 02
v1first publishApr 18
per-edit snapshots · full text preserved · nothing overwritten

Head to head

consentline vs. a typical CMP

Capability
consentline
Typical CMP
Blocks gtm.js before consent
Yes
Consent-mode only
Cookieless pings pre-consent
None
Sent
Global Privacy Control (GPC)
Auto-applied
Varies
Multi-state rule engine
8 laws
Add-on
Append-only audit-log export
CSV
Limited
SRI-pinned immutable releases
sha384
No
GTM-native, declarative gating
Yes
Wrapper SDK
Hosted policy pages + client portal
Included
Varies
Paste-once policy embeds on your pages
Included
Copy-paste
Legal-doc revision history
Every change
Varies
Real-estate document options
Per-site toggles
One-size-fits-all
Human review of every legal-doc change
Yes
Self-serve only
Post-launch blocking monitoring
24/7
Periodic scans
Banner weight
4.9 KB
40–120 KB

See it block tags on your own site

A 20-minute demo with a live before/after network capture — on a page you pick.

Request a demo