Considerations when crafting a custom banner

There are many things to consider when you've decided to create you own custom banner beyond how you want it to look and behave.

Obviously you need to ensure that your banner meets all the requirements of the legislation(s) that you are subject to, but something you may not have considered is that certain service providers and frameworks have a set requirements of their own that you also need to take into account.

Functionality

We encourage you to take inspiration from our default banner and to take advantage of all the resources we've invested into ensuring that we comply with the legislations we support. So you should choose a template that suits your needs and shamelessly copy what you can use.
As an added bonus, if you use the same id for elements of the banner as the default banners have, the event handlers will automatically be hooked to them and you won't manually have to replicate functionality.

For example, if you create an "accept all" button and assign it id="CybotCookiebotDialogBodyLevelButtonLevelOptinAllowAll" the button will behave exactly as the "accept all" button on a default banner.

Content requirements

In order for a visitor to provide consent, they must be informed of what they are consenting to. It's your duty to provide provide the relevant information.

The Transparency & Consent Framework

If you use a framework such as IAB's Transparency & Consent Framework (TCF), there are certain requirements that must be met. Failure to do so can affect your status as an IAB partner or CMP.
An example of this is the requirement to list the number of ad partners on the first layer of your consent banner. The text on the first layer must similarly contain relevant details about the technologies you use. You can read the details about these requirements here: https://www.cookiebot.com/en/iab-cookies/.

Cookiebot CMP is a certified consent management platform so you can (and should) use the content we provide on our default TCF banner.

Google

With the passing of the Digital Markets Act (DMA) Google (or rather Alphabet, Google's parent company) was assigned "gatekeeper" status.
This means that Google will be held accountable if their services fail to ensure that the privacy of users of their services are respected.

This means that if you use any of Google's services, such as Google Ads or Analytics, you need to ensure that you inform your visitors which of Google's services you utilize, what data is collected and for what purpose. Furthermore you must provide a link to Google's privacy policy.

We encourage you to use the content from the default Cookiebot CMP banner as these have been certified by Google.