Privacy & compliance
The paperwork side, handled
A consent banner that really does hold your tags back, one place to answer a data request, and a record proving you answered. The parts of privacy law a website can take off your hands — with a plain list of the parts only you can.
Cookie consent
A banner that actually holds the tags back
Visitors can accept everything, reject everything, or open preferences and decide on analytics and marketing separately. Essential cookies always run; Google Analytics waits for analytics consent and the Meta Pixel waits for marketing consent. Google Consent Mode is wired in, so you can load nothing at all until someone agrees, or send cookieless signals and update them the moment they do.
Data subject requests
Look someone up, export it, or erase it
Type an email address and see everything your site holds about that person. Export it as a file to hand over — that's access and portability answered — or erase it. Orders are anonymized rather than deleted so your tax records stay intact, and the address joins the do-not-contact list so nothing reaches them again.
Records
Proof you answered, and a map of what you hold
Every export and erasure is written to an append-only log — the date, the person, and a tally of what it covered. That's the artifact you produce when someone asks whether you responded in time. Beside it sits your data inventory: each store of personal information, why you hold it, how long it stays, and exactly what an erasure does to it.
Agreements
The DPA, and the list behind it
Download your data processing agreement and accept it in place. The acceptance is recorded against the version it applied to, and you're asked again if the terms ever change. Behind it is the subprocessor list — who handles visitor data on your behalf, what reaches them, and where they operate — the disclosure your own privacy policy needs to make.
Set it up once
Turn the banner on
Add your analytics IDs if you use any, choose how strictly to gate them, and the banner starts asking on your behalf.
Accept your DPA
Download it, accept it, and the acceptance sits on file with the version it applied to.
Answer requests as they arrive
Look up the address, export or erase, and the log records that you did it and when.
Everything the privacy tools include
On every plan, free Trial included. The duties the platform can't take on for you are spelled out in your dashboard, in plain words.
Consent
- Accept, reject, or choose
- Analytics & marketing split
- Google Consent Mode
- Withdraw at any time
Requests
- Look up by email
- Export for the person
- Erase on request
- Orders anonymized
Records
- Append-only request log
- Data inventory
- Retention per store
- Subprocessor list
Agreements
- DPA to download
- Acceptance recorded
- Re-prompted on change
- Policy pages you edit