Cookiebot

What Cookiebot actually does

Cookiebot CMP, owned by Usercentrics, is the consent layer between your website and privacy law. Its patented scanner crawls your site monthly, finds and classifies every cookie and tracker, and serves visitors a consent banner that actually matches what your site sets — the thing regulators check and hand-rolled banners get wrong. Consent signals flow natively into Google Consent Mode v2 (plus Microsoft UET and Clarity consent modes), so your analytics and ads keep working with consented data instead of breaking.

Coverage is genuinely global: GDPR and ePrivacy in the EU, CCPA/CPRA and the wave of US state laws (Virginia, Colorado, Connecticut, Utah, Texas…), Brazil's LGPD, Switzerland's FADP, South Africa's POPIA and Canada's PIPEDA, with IAB TCF 2.3 support and banners in 47+ languages.

Pricing in 2026 — what you'll really pay

Verified from the official pricing page (EUR display; a currency selector covers USD, GBP and more): the Free plan handles one domain up to 50 subpages with unlimited users and traffic. Premium Lite at €7/month keeps the 50-subpage cap but adds custom banner design, your logo, reporting, the 47+ languages and geo-targeted banner rules. From there tiers scale by subpage count per domain: Small at €30/month (up to 350 subpages — dropping to €15/domain once you run 4+ domains), Medium €30 (up to 3,500), Large €50 (up to 7,000) and XLarge €90 (beyond that). Enterprise needs go to the sales-gated Usercentrics Advanced, priced by sessions with unlimited domains.

A "subpage" is any unique URL on the domain, and the scanner decides which tier you qualify for — worth knowing before you commit, because a blog with years of archives lands higher than you'd guess.

The compliance math

GDPR fines scale to 4% of global turnover, and US state laws are multiplying yearly — which is why 2.4 million websites run Cookiebot and it manages 8.8 billion user consents a month. For a small business, €7–30/month is effectively insurance plus working analytics: without Consent Mode signals, Google Ads and GA4 lose conversion data in consent-required markets.

Where it shines

The automatic scan is the differentiator: you don't maintain a cookie inventory by hand, and the banner's declarations stay in sync with what the site actually sets. No plan limits traffic or users — billing is purely structural (subpages per domain) — and the WordPress, Shopify, Wix, Webflow and Google Tag Manager integrations make the install a paste-and-go job on mainstream stacks.

Where it falls short

Per-domain billing punishes portfolios: every site pays its own subscription, and the €15/month Small rate only kicks in at 4+ domains. Content-heavy sites jump tiers on subpage count alone, and the free plan's 50-subpage cap with no custom banner branding means most production sites outgrow it fast. Scans also run monthly, so a tracker added mid-cycle can sit unclassified until the next pass — rescan manually after big releases.

Who should buy

Any site selling to or measuring EU, UK or California visitors needs a CMP in 2026 — the question is which. Small sites should start free and move to Premium Lite at €7/month when they want branding and geo rules. Multi-thousand-page sites should budget for Medium or Large per domain, and agencies running 4+ client domains get the best unit economics in the lineup at €15/domain.