Do you actually know your cookie consent works?

You set up a cookie banner, or paid a tool to handle it, and you're still not totally sure it's doing its job. You're not alone. Underneath all the acronyms and legal language, consent is really just three simple ideas.

You can learn them in an afternoon. And once you know how it works, the worrying just stops.

Free scan, no signup. Or learn the whole thing in one afternoon.

You can't outsource the responsibility. Only your view of it.

You can hand consent off to a tool. But if your site gets it wrong, it's still your name and your company on the line. You didn't hand off the risk. You handed off your ability to see it. Still on the hook, just with no way to look inside. That's the part that quietly gets to you.

What you wanted: peace of mind.
What you got: a false sense of security.

Three ideas. That's the whole black box.

The thing everyone's scared of? Underneath all the acronyms, consent comes down to three moves. Here they are:

1

Deny by default

Before anyone clicks, nothing runs. Analytics and ad tags start switched off, so nothing leaks while a visitor's still deciding.

2

Ask, simply

A banner asks once, with “no” exactly as easy as “yes,” and the choice sticks. That equal-weight reject is the thing regulators actually look for.

3

Gate your tags

Each tracker only fires once it has permission. Google Tag Manager enforces that for you, so you're never the one left exposed.

Deny, ask, gate. That's all of it. Simple to understand, a little fiddly to get exactly right, which is the part the kit takes off your plate.

The only question left:
is your site actually doing all three?

Stop hoping. Start knowing.

The free scanner loads your site cold, exactly the way a first-time visitor sees it, and tells you in plain English what fires before anyone consents. Point it at any site: yours, a client's, or one you set up with another tool. Run it again whenever you ship, and “is it still working?” stops being a guess.

Why I built the Consent Kit2 min

Two ways to get it done.

Do it yourself with the kit, or have me do it with you on a call. Either way you own the setup. No subscription just to be compliant, no sales funnel.

Do it yourself

The Consent Kit

$129 one-time

Everything you need to set consent up correctly, and actually understand it.

  • Deny-by-default Consent Mode v2 snippet
  • Accessible drop-in banner (JS + CSS) that matches your site, not a vendor's widget
  • Click-by-click GTM gating playbook
  • Four AI skills (/gtm-consent-setup and friends) that walk your AI assistant through your exact setup
  • Video recording of the full setup
  • Free compliance scanner access · lifetime updates
Get the Kit
30-day money-back guarantee
Done with you

1:1 Setup Call

$599 one-time

We get on a call and get your site to a clean scan together, start to finish.

  • The full Consent Kit, included free
  • A focused working session, screen-shared, on your actual site
  • Your GTM, banner, and tags set up and verified live
  • Every question answered as we go
  • You leave with a passing scan and the understanding to keep it
Book your setup call
A few slots a week. My full attention on your stack.

Not sure you're technical enough? You don't have to be. The /gtm-consent-setup skill drops into your AI assistant and writes your exact setup, step by step, for your stack.

After you own it
Records & Monitoring

Re-scans on a schedule and alerts you the moment a tag starts firing early. Hosts tamper-evident, DSAR-ready records, the part you can't really do just once. Available to anyone who owns the kit.

$12/mo

A few honest answers.

Is this really compliant?

Yes. The kit sets up Google Consent Mode v2 with every ad and analytics signal denied by default, a reject button as prominent as accept, granular choices, and easy withdrawal. Those are the things GDPR and ePrivacy actually require. It's not legal advice, but it's the same technical mechanism the established tools use, done right. And you can check it yourself with the free scanner.

Do I need to be a developer?

If you can paste a snippet and add two files, you can do the core. The guide explains every step in plain English, and the free AI skill will walk it with you. Rather have it done with you? Book a 1:1 setup call instead, and the kit comes included.

What about Google Ads, Meta, and GA4?

Covered. The playbook shows exactly how to gate GA4, Google Ads, and the Meta Pixel on the right consent signal, so they only fire after the visitor agrees.

When is a managed consent tool the better fit?

Three honest cases: you run IAB TCF ad auctions as a publisher; you operate across many jurisdictions needing maintained legal text; or you're on a plugin-heavy, no-GTM platform where plugins inject trackers you can't route through Tag Manager. In those cases a managed tool earns its keep, and we'll happily point you to a good one. Everywhere else, you'll be doing the GTM consent work either way, so you may as well understand it and own it.

Refunds?

30 days, no questions. If it doesn't get your site to a clean scan, you get your money back.

Open the box. You've got this.

Understand it in an afternoon. See that it works. Then stop wondering for good.