How consent works on your site

What your visitors see

• Each visitor gets the consent rules of where they are.
• Opt-in applies in 32 countries, as of October 2026: the 27 countries of the European Union, plus the United Kingdom, Switzerland, Iceland, Liechtenstein and Norway. Nothing identifying happens before a yes. Before a recorded choice, the notice reads "We use cookies for analytics and personalization only with your consent." with "Accept all", "Decline" and "Privacy choices". On a site that sells or shares data, a page marked as English adds: "With your consent, this site also shares visit data with its marketing partners."
• Opt-out applies in the United States: a one-line notice at the moment of collection, with "Privacy choices" and "OK", and a "Do Not Sell or Share My Personal Information" link when the site sells or shares data.
• Everywhere else, and whenever a visitor's location is unknown, opt-in applies.
• A browser that sends Global Privacy Control is treated as a no to analytics, personalization and marketing, on the server, whatever it clicks.
• "Privacy choices" reopens "Choose what you allow on this site.", with "Analytics", "Personalization & A/B" and "Marketing / data sharing". On themed pages it is a link in the footer. In supported browsers, the notice is kept apart from the page's own styles, and a corner icon stands in for a footer link those styles hide or fade. Where a site allows only essential functions, neither the notice nor "Privacy choices" appears.
• "Accept all" turns on analytics and personalization, and marketing only where the notice names it.

What each choice changes

• Analytics decides whether the visit is measured.
• Personalization & A/B decides whether the visitor can see targeted content, take part in experiments, receive live offers and get recommendations ranked for them.
• Marketing / data sharing is off by default, under opt-out too.
• Essential functions are never gated, and a shopper who sends Global Privacy Control keeps what they have paid for.

Where you manage it

1. In your site's admin, open "Privacy & Data", then "Consent". "Consent policy" shows your site's policy: its regime mode, the country map, "Everywhere else" and "What visitors experience".
2. To change the policy, ask the copilot, for example "Use opt-in consent in the EU". It shows "Change this site's consent policy?" and changes nothing until you approve; the change can be undone.
3. "Head & CSP" holds the tags you add to every page, as raw HTML or a tag manager template, each set to "Wait for consent" of a chosen purpose or to load before it. It also holds your site-wide Content Security Policy, in "Report only" or "Enforce".

Good to know

• Under opt-in, the visitor cookie is created only after the visitor allows analytics or personalization. Each choice is recorded with the regime, the policy version and where it came from, if the browser has the visitor cookie or the choice creates it.
• Tag managers can read the visitor's choice from window.praxis.consent and listen for the praxis_consent_change event in the dataLayer.
• The consent layer is the technical foundation for consent on your site. It supports your compliance, and your advisers confirm your own obligations.