Skip to main content

Geo-Targeted Consent Banners

One site, many privacy laws — Passiro shows each visitor the banner their law expects, down to the US state

Your website has one audience: everyone. But the visitor from Berlin arrives under the GDPR, the visitor from Los Angeles under the CCPA/CPRA, and the visitor from São Paulo under the LGPD. An opt-in wall is required for one, wrong for another, and unnecessary for a third. Showing a single one-size-fits-all banner means either over-blocking (losing data and revenue where the law does not demand it) or under-complying (violating the law where it does).

Passiro solves this with geo-targeted banners: you define which banner applies to which region, and every visitor automatically gets the right one — the right regime, the right texts, the right design.

How the right banner is chosen

The visitor's country — and, for US visitors, their state — is detected on Cloudflare's edge network, at the same moment the banner script is served. Nothing is looked up on Passiro's servers, no latency is added, no IP addresses are processed by Passiro, and no geo data about the visitor is stored beyond the consent record itself.

With the region known, Passiro picks the most specific matching banner. The priority ladder, from most to least specific:

  1. State — a banner targeting US-CA wins for a California visitor.
  2. Country — a banner targeting US covers visitors from states without their own banner.
  3. Preset region — groups like GDPR countries, EU, EEA, or US, so one banner can cover a whole legal zone.
  4. "Everywhere" — a catch-all banner for any region not matched above.
  5. Default banner — the final fallback that always exists.

The system fails open: if the visitor's region cannot be determined, the default banner is shown. No visitor is ever left without a banner.

Each banner runs one of three regimes: GDPR opt-in (optionally with IAB TCF v2.3 and Google Consent Mode v2 — Passiro is an IAB-registered CMP, CMP ID 499), US opt-out (a "Do Not Sell or Share" notice with Global Privacy Control (GPC) honored automatically and IAB GPP US National v2 signals), or notice-only for regions with no consent requirement.

One tag, every region

All of this runs from one embed tag — the same single line of script, regardless of how many banners or regions you configure. Add a state-specific banner, switch a region's regime, redesign everything: the tag on your site never changes.

It also works from day one with a single banner. Start with one banner shown everywhere, and add regional banners whenever you are ready — no re-installation, no code changes, no deploy.

Compliance profiles: the right setup in one click

You do not have to assemble the banner set yourself. Compliance profiles create the right geo-targeted combination in one click: EU GDPR opt-in, US opt-out, an EU + US combo, Brazil LGPD, or global presets covering all of the above. Each profile sets up the banners, their regions, and their regimes — ready to publish.

Every banner in the set has its own design and its own texts, editable in the visual designer — start from banner templates and adjust freely. Visitor-facing texts ship in 25 languages, so a German visitor of your EU banner and a French one read it natively.

Where a banner runs TCF, it comes with full vendor transparency — per-vendor consent under IAB TCF v2.3.

Why visitor-based targeting is the legally correct model

Privacy laws protect the visitor's residents — not businesses at a certain address. The CCPA protects California residents wherever the business is located; the GDPR protects people in the EU whoever serves them. So the legally meaningful question is never "where is my company?" but "where is this visitor?" — which is exactly what geo-targeting answers, visitor by visitor. Read the full legal explainer on US opt-out for how this plays out across the US state laws.

Every choice a visitor makes is stored in your consent records together with which banner and which regime applied — so you can always document that the California visitor got the opt-out notice and the German visitor the opt-in banner.

Free on every plan

Multiple banners and all geo-targeting — including state-level targeting like US-CA — are free on every plan, including the free one. Geo-targeting is not a premium add-on at Passiro; many competitors charge extra for it, or reserve state-level targeting for enterprise tiers. Here it is simply how the product works.

Set up geo-targeted banners — free

This page explains how Passiro works and is not legal advice. Which privacy laws apply to your business depends on statutory thresholds — consult your counsel.