IAB TCF Explained: TC Strings, TCF 2.3, and Google's CMP Rules
Developer guide to the IAB Transparency & Consent Framework — what's in a TC string, the __tcfapi API, TCF 2.2 vs 2.3, and Google's certified CMP rule.
Fresh from the Oven: Explore our latest insights, tips, and trends in the ever-evolving world of cookies and digital privacy.
Developer guide to the IAB Transparency & Consent Framework — what's in a TC string, the __tcfapi API, TCF 2.2 vs 2.3, and Google's certified CMP rule.
Twelve US states now require honoring Global Privacy Control. See the verified state list, what a GPC opt-out means in practice, plus JS and Rails detection code.
CCPA is opt-out, GDPR is opt-in — but 2026 rules changed the details. Compare consent models, GPC, fines, and how to configure one banner for both.
A verified ledger of the biggest cookie consent fines, from Google's €325M to Honda's $632k, and the exact banner mistakes regulators punished.
Implement Google Consent Mode v2 with gtag.js, GTM, and server-side GTM — correct code for all four consent signals, basic vs advanced mode, and debugging.
What's coming before 2027: Connecticut's July 2026 changes, new Oklahoma and Alabama laws, UK DUAA next steps, India's DPDP deadlines, and the EU Digital Omnibus.
Yes. CookieChimp now supports Canadian province and territory targeting, so Quebec can receive an opt-in banner while the rest of Canada receives the appropriate opt-out experience.
Most Canadian provinces can use opt-out consent for non-sensitive online behavioural advertising when notice and opt-out controls are clear, but Quebec requires an opt-in approach for profiling technologies. This guide maps PIPEDA, Quebec Law 25, Alberta PIPA, BC PIPA, and health privacy laws to practical banner requirements.
A cookie consent banner looks like a weekend project. Here's what a DIY build actually costs over five years — and the cases where building your own makes sense.
Opt-in cookie consent is required in the EU/EEA, UK, Brazil, South Korea, China, Saudi Arabia and Quebec. Most US states use notice and opt-out. Full 2026 map.
Brazil, Quebec, China, South Korea, Saudi Arabia, and Nigeria require opt-in cookie consent; Japan, Australia, and federal Canada don't. Full 2026 country guide.
Probably yes. What consent regulators are enforcing in mid-2026 — CNIL fines, reject-all parity, GPC, dark patterns — plus a quick banner audit checklist.