Free cookie consent. Fully yours to design.
One line of code gives every visitor the right banner (EU, US, Brazil, and more) with nothing to build and nothing to pay.
The Complete Solution
One consent platform for every privacy law. Free.
Passiro is a full consent management platform for GDPR, ePrivacy, and US privacy laws: IAB TCF v2.3 and Google Consent Mode v2 in the EU, CCPA/CPRA-style opt-out with GPC and GPP in the US, and geo-targeted banners that serve the right notice in every region, at no monthly cost.
How It Works
Three steps to full compliance.
Add the script
Paste the script at the top of your head. Each visitor immediately gets the right banner for their region (TCF v2.3 in the EU, opt-out in the US) with Google Consent Mode defaults and automatic tracker blocking active.
Make it yours
Customise the consent banner in the visual designer: templates, gradients, Unsplash imagery, and Google Fonts; no CSS and no developer needed. Match it to your brand, pick your languages, and publish in minutes.
Stay compliant
Consent records are stored automatically as proof of compliance. New third-party trackers are blocked automatically the moment they appear on your site, so you stay GDPR and ePrivacy compliant without lifting a finger.
Consent Management Platform
Technical CMP capabilities other platforms charge for.
Most consent management platforms charge EUR 30-40 per site per month for TCF support, US privacy signals, geo-targeting, and script blocking. Passiro includes all of it free.
IAB TCF v2.3, CMP ID 499
Passiro is a fully IAB Transparency and Consent Framework v2.3 compliant consent management platform. Every consent signal complies with the IAB Europe standard used by thousands of ad-tech vendors. Sites running Google Ads, AdSense, or any programmatic advertising need a TCF-registered CMP. Most CMPs charge EUR 30-40 per site per month for TCF. Passiro includes it free.
Google Consent Mode v2
Consent Mode v2 defaults are set before any Google tag fires. Google Analytics, Google Ads, and Google Tag Manager automatically respect visitor consent choices. No manual gtag configuration needed. Passiro injects consent defaults as the first script in head: the architecture Google requires.
Automatic Script Blocking
Non-essential scripts are blocked until consent is granted. No cookies set, no trackers fire, no data collected before consent. This is a legal requirement under ePrivacy Article 5(3). Passiro handles it automatically without manual script tagging.
Full Vendor Transparency
Per-vendor consent with IAB Global Vendor List integration. Visitors see exactly which vendors request access to their data and can consent or reject individually. All 11 TCF purposes supported with legitimate interest objection.
US Opt-Out, CCPA/CPRA
A CCPA/CPRA-style "Do Not Sell or Share" notice for US visitors. Global Privacy Control (GPC) signals are honored automatically, and Passiro emits IAB GPP (US National v2) consent strings alongside the legacy usprivacy and __uspapi signals ad vendors read.
Geo-Targeted Banners
Run multiple banners on one site and let the edge pick the right one per visitor: state beats country, country beats preset, preset beats default. One embed tag serves every region, and one-click compliance profiles set up the right banner set for EU GDPR, US, Brazil LGPD, or a global audience.
41 Templates · 25 Languages
41 banner templates across 4 groups (Standard GDPR, TCF 2.3, US opt-out, and notice-only), ready to customise in the visual designer. The banner and the whole dashboard are available in 25 languages.
Free
The consent widget including TCF v2.3, Google Consent Mode v2, US opt-out, geo-targeting, automatic script blocking, and 25 languages is free. No page limits, no traffic limits. Paid plans add branding removal, automated cookie scanning, API access, and priority support.
The one-line setup
One line. That's it.
Add one script at the top of your head, before any other scripts. You get cookie consent with TCF v2.3, Google Consent Mode v2, and automatic tracker blocking, all from a single line of HTML.
No npm packages. No build tools. No tag manager configuration. No developer handoff that takes three sprints.
<html>
<head>
<title>My Website</title>
<script src="https://cdn.passiro.com/passiro.js" data-site-id="xxxxx"></script>
...
</head>
Works with every CMS, every framework, every static site. If it renders HTML, Passiro works.
The intelligent consent loader
One tag. The legally right experience, everywhere.
That one line doesn't load one banner; it loads the right one. The visitor's jurisdiction is resolved at the edge, before your page even renders, and only the consent experience that applies to them is delivered.
No per-country configuration, no legal research, no ruleset shipped to the browser. Turn on smart geo-targeting and Passiro handles who sees what.
Laws maintained for you
GDPR, UK, Switzerland, Brazil's LGPD, Québec's Law 25, and every US state privacy law, bundled as ready-made regimes. When a new state law lands, your site follows automatically. You never edit a country list.
Your rules on top
Want Florida treated like California, or opt-out in all 50 states? Toggle states on with one click. Legally required states stay locked on; you can always do more than the law, never less.
Prove it, on paper
Preview any jurisdiction from the dashboard, verify the live setup against 100+ jurisdictions, and download a timestamped PDF report showing exactly what every visitor is served.
Automatic tracker blocking
4,900+ trackers blocked.
Zero clicks from you.
Other consent platforms scan your site, list every script they find, and ask you to classify each one. Necessary? Statistics? Marketing? You pick. Every time a new tracker shows up. Every time a tag manager pushes an update.
Passiro ships with a continuously-updated tracker database derived from EasyPrivacy, the open-source filter list maintained by the EasyList project and used by uBlock Origin. Trackers are pre-classified into the right consent category and blocked before they execute. From the very first page visit.
The old way
- A new tag fires on your site
- Days pass before the next scan catches it
- Visitors are tracked without consent in the meantime
With Passiro
- One snippet in your <head>
- Known trackers blocked from visit #1
- New trackers caught automatically
Tracker blocklist derived from EasyList (CC BY-SA 3.0). See full attribution.
How Passiro Compares
Feature comparison
| Cookiebot | CookieYes | ||
|---|---|---|---|
| Consent Management (CMP) | |||
| Cookie consent banner | Free, unlimited | Free (limited)* | Free (limited)* |
| IAB TCF v2.3 | Free | From $8/mo | From $25/mo |
| Google Consent Mode v2 | Free | Free | Free |
| Automatic tracker blocking (open-source blocklist) | Automatic, from visit #1 | Manual classification per tracker | Manual classification per tracker |
| Visual banner designer (gradients, Unsplash, Google Fonts) | Free, full editor | Basic colors & text | Basic colors & text |
| Banner template gallery | Free | 2–3 templates | Limited |
| Geotargeting (per-country banners) | Free | Premium (paid) | Pro+ (paid) |
| Full ad-stack compatibility (TCF) | Free | From $8/mo | From $25/mo |
| Google CMP Partner | Planned | Gold | Gold |
| US privacy & geo-targeting | |||
| US opt-out banner (CCPA/CPRA “Do Not Sell or Share”) | Free | Paid | Paid |
| Global Privacy Control honoured automatically | Free | Paid | Paid |
| IAB GPP string (US National / MSPA) | Free | Paid | Paid |
| No banner where no privacy law applies | Automatic, free | Manual geo-rules (paid) | Manual geo-rules (paid) |
| Value | |||
| EU data residency | – | ||
| Sites / domains (free plan) | Unlimited | 1 domain | 1 domain |
| Page / traffic limit (free) | No limit | 50 subpages | 5,000 pageviews/mo |
| Setup time | 2 minutes | 15 minutes | 15 minutes |
* Cookiebot free plan: 1 domain, 50 subpages. CookieYes free plan: 1 domain, 5,000 pageviews/month. Passiro consent widget is free with no page or traffic limits.
Prices based on publicly available pricing pages as of April 2026. Passiro is an IAB-registered CMP (CMP ID 499); a Google CMP Partner application is planned.
Free, with optional upgrades
Cookie consent with TCF v2.3 is free. Pay only for automation and advanced features.
Free
For any website that needs compliant cookie consent.
No credit card required
Get started → Cookie Consent
- IAB TCF v2.3 consent strings
- Google Consent Mode v2
- Automatic script blocking
- Per-vendor consent (GVL)
- US opt-out, “Do Not Sell or Share”, GPC & IAB GPP
- Geo-targeted banners per jurisdiction (EU, US states, Brazil)
- Customisable design
- 25 European languages
- No page or traffic limits
- Consent log export (CSV, JSON & PDF)
- Automated installation check
Cookie Scanning
- Ad-hoc scans
- Cookie & tracker detection
- Automatic cookie declaration (hosted & embeddable)
Team
- Unlimited team members
- Roles & granular permissions
Starter
PopularUnbranded consent plus automated weekly cookie scans.
Upgrade →
Cookie Consent
- Everything in Free
- Remove Passiro branding
- Custom logo in banner
Cookie Scanning
- Automated weekly scans
- Template-aware scanning
Team
- Unlimited team members
- Roles & granular permissions
Pro
Automated daily cookie scans and deeper coverage.
Upgrade →
Cookie Consent
- Everything in Free
- Remove Passiro branding
Cookie Scanning
- Everything in Starter
- Automated daily scans
- Priority support
Team
- Unlimited team members
- Roles & granular permissions
Business
Large-scale scanning, customized scan setups, and API access.
Upgrade →
Cookie Consent
- Everything in Free
- Remove Passiro branding
Cookie Scanning
- Everything in Pro
- Advanced scans
- API access (consent stats, records & cookies)
Team
- Unlimited team members
- Roles & granular permissions
All plans include the full cookie consent CMP with TCF v2.3, Google Consent Mode v2, and automatic script blocking.
Prices exclude VAT. Cancel any time.
Infrastructure
European infrastructure, global performance.
All data stored in EU data centres. The consent widget is served via Cloudflare's edge network for sub-50ms load times globally. No external dependencies, no third-party tracking.
Frequently asked questions
Yes. Since January 2024, Google requires all publishers serving ads to EEA users to use a CMP that supports IAB TCF v2.3. Without it, personalised ads are disabled and ad revenue drops significantly. Google also requires Consent Mode v2 for measurement continuity. Passiro includes both TCF v2.3 and Consent Mode v2 free of charge.
The TCF is an industry standard created by IAB Europe that standardises how consent is collected, stored, and communicated between publishers, advertisers, and ad-tech vendors. Version 2.3 supports 11 purposes, special purposes, features, and vendor-level consent. A TCF-registered CMP generates a consent string (TC String) that all participating vendors can read to determine what processing they are allowed to perform.
Google Consent Mode v2 is a framework that allows Google tags (Analytics, Ads, Tag Manager) to adjust their behaviour based on consent status. When consent is denied, Google tags switch to cookieless mode and use modelled conversions. Passiro sets Consent Mode v2 defaults automatically before any Google tag loads.
A basic cookie popup shows a banner and may record a preference. It does not generate IAB-compliant consent strings, does not integrate with the ad-tech ecosystem, does not block scripts before consent, and does not communicate consent to third-party vendors. Passiro is a full consent management platform: it generates TC Strings, implements the __tcfapi() JavaScript API, supports cross-frame messaging for iframes, integrates with the IAB Global Vendor List, and blocks all non-essential scripts until consent is granted.
Yes. Passiro implements the standard __tcfapi() that prebid.js and other header bidding wrappers use to check consent status before making bid requests. TCF consent strings are available to all vendors in the ad stack.
Most CMPs use TCF as a premium upsell. Passiro's business model is different: the consent widget including TCF is free infrastructure. Revenue comes from premium features like white-label branding, automated cookie scanning, API access, and priority support.
Yes. Passiro includes a US opt-out regime with a CCPA/CPRA-style "Do Not Sell or Share" notice. Global Privacy Control (GPC) signals are honored automatically, and Passiro emits IAB GPP (US National v2) consent strings alongside the legacy usprivacy and __uspapi signals that ad vendors read.
Yes. A site can have multiple banners with automatic geo-targeting at the edge: state beats country, country beats preset, preset beats default. One embed tag serves every region, so EU visitors see a GDPR TCF banner while US visitors see an opt-out notice. One-click compliance profiles configure the right banner set for EU GDPR, US, Brazil LGPD, or a global setup.
Yes. Passiro is an IAB-registered CMP (CMP ID 499) and the implementation passes IAB TCF v2.3 validation.
Yes. The consent widget including IAB TCF v2.3, Google Consent Mode v2, US opt-out, geo-targeted banners, automatic script blocking, per-vendor consent, and 25 languages is free, with no page or traffic limits. No credit card required, no trial period, no feature limitations on the consent functionality.
Revenue comes from paid tiers (Starter, Pro, Business) which add white-label branding removal, automated cookie scanning, API access, and priority support. The consent widget itself is free infrastructure that helps websites comply with GDPR and ePrivacy.
All data is stored in EU data centres. The consent widget JavaScript is served via Cloudflare's edge network for performance, but all consent records, scan results, and account data remain within the European Union.
Yes. One account can manage multiple websites. The free consent widget works on unlimited domains. Paid plans apply per site.
Free compliant cookie consent
GDPR and US privacy compliance from one embed tag: TCF v2.3, Consent Mode v2, US opt-out, and geo-targeted banners in 25 languages.