Blog
Notes from the consent layer.
Cookie consent and privacy, made simple. Guides and product updates for the people who build and run websites.
Agentic
Add a cookie banner to your Replit app in about a minute
We built an app with Replit Agent, and then we pointed our own scanner at it. The scanner found Google Analytics, with thirteen cookies declared for that one service, and…
Do Not Sell My Personal Information: the link, the signal, and which one to build first
Do Not Sell is two mechanisms: a link visitors click and an opt-out signal their browser sends. Here is what the CCPA and its regulations say about each, why a cookie banner is not one of them, and which one to build first.
Global Privacy Control: is your site ignoring people who opted out?
Our demo store is set up to honor Global Privacy Control. Its consent log had five records in it, and every one of them…
Add consent management to your site by telling your coding agent to do it
If you build with a coding agent, you can set up consent management the same way you built the site: connect one MCP server, describe what you want, review the diff. This post walks through the full flow, including what the scanner found when I ran it on my own site.
CIPA demand letters: why ordinary websites are getting them, and how to check yours
Thousands of businesses have received letters claiming their analytics or ad pixels violate a 1967 California wiretapping law. Here is what actually triggers those claims, how to check your own site in about ten minutes, and what the courts are saying.
Introducing ConsentLayer: Do Not Sell Requests Without a Dashboard
If you sell to anyone in California, you owe them a real way to opt out of the sale or sharing of their personal…
Introducing ConsentLayer: consent management built for the AI-first web
ConsentLayer handles the banner, blocks trackers until consent, scans your site, applies rules by region, and logs every decision. And with our MCP server, your AI coding agent can set it all up from your editor.