Consent Log

The Consent Log is a record of the decisions made by visitors to your website. Every click on the cookie banner goes into the log, together with information about what the visitor consented to and when.

The log is used to demonstrate that consent was given in a specific way and at a specific moment. You'll find it in the panel, in the “Consent log” section.

What does the Consent Log contain?

The list shows the consent ID, the domain, the date and time, the decision, the categories and the consent version.

The decision has three possible values:

• Full consent, when the visitor accepted all categories,
• Custom choice, when they selected some of the categories,
• Necessary only, when they refused consent.

A refusal is therefore a fully valid entry. No entry means that the visitor hasn't yet made a decision.

Two badges can appear next to the domain. “Test” means an event from a staging alias, which isn't proof of production consent. “Carried over” means a decision made on another domain in the same domain group.

What do we record for each visitor decision?

For each visitor decision we record, among other things:

• the consent ID,
• the time of the decision, that is, the date and time it was made,
• the domain on which it was made,
• the type of decision and the button that was clicked,
• the answer for each category that was visible on the cookie banner at the time,
• the consent version and its validity period,
• the cookie banner language and the visitor's country,
• the masked IP address and the browser.

We don't store the IP address in full. We record only the first part of it, so it can't be used to establish the visitor's identity.

The log contains no persistent identifier of a person: no account, no email address and no advertising cookie. The log is proof of accountability, not a database about visitors.

A category missing from an entry doesn't mean a refusal. It means that the category wasn't on the cookie banner at the time.

How do I find a specific entry?

Above the list you'll find a search field that works by consent ID and by domain. Just paste the ID you received from the visitor.

You can also narrow down the list with three filters: date range, type of decision and domain. The domain filter appears for projects that cover several domains.

The screen shows the last 200 events. You'll find an older consent in the export file, not through search.

Proof of consent

Clicking a row opens the “Proof of consent” panel. In it you'll find all the recorded data, the list of categories with the status “Required”, “Granted” or “Refused”, and the full technical record of the event.

With the “Download proof (PDF)” button you save a document for this one consent. It contains the same data as that panel, plus information on the integrity of the log.

The log is protected by a chain of linked records, so the proof confirms that the entry hasn't been changed since it was saved.

Exporting the full history

With the “Export CSV” button you download the full history of the log, starting with the oldest entries. The filters set on the screen have no effect on the file.

The screen shows a sample, and the file contains the complete set. That is why it is the export that you hand over during an audit or at the request of a supervisory authority.

The export is available from the Basic plan. The log itself and the proof of consent in PDF format work on every plan.

How long do we keep the records?

The retention period depends on your plan and ranges from 3 months on the Free plan to 60 months on the Enterprise plan. We delete entries older than this period.

Download the export before you move to a lower plan. The shorter retention period also applies to older entries, but it takes effect only 30 days after the plan change.

Neither the log nor individual entries can be deleted from the panel. Proof that can be selectively erased stops being proof.

Turning off Consent Log recording

In Settings you can turn off the recording of consents. The cookie banner then works normally, but visitors' decisions don't go into the log and you have no proof that they were given.

Turning it off doesn't delete earlier entries.

Privacy signal from the browser

If the visitor's browser sends the Global Privacy Control signal, the cookie banner isn't shown and the decision is made automatically.

Such a case is also recorded in the log, with the decision “Necessary only” and a note that it comes from the browser signal.

What to do when a visitor asks for information about their consent?

1. Ask for the consent ID. The visitor will find it in the cookie declaration, in the part about their consent.
2. Paste the ID into the search field in the Consent Log. If the consent is older, look for it in the export file.
3. Open the entry to see all the recorded data.
4. Download the proof in PDF format and pass it to the person or the supervisory authority.