CookieCrumbs is a consent management platform that helps developers, startups, and professionals add compliant cookie banners to websites with a single command. The platform combines a GDPR-compliant banner that blocks scripts until consent, an automated website scanner, tamper-evident consent logs, and Google Consent Mode v2 support. It includes an MCP server that lets AI coding agents like Cursor or Claude Code handle compliance setup with reviewable diffs.
Funding
Funding not disclosed
Founders
Product
Problem
Websites that use analytics, advertising, or marketing pixels must obtain user consent before loading these scripts, particularly under GDPR and ePrivacy regulations. Many sites ship without proper consent mechanisms—especially those built with AI tools—or use banners that fail to actually block trackers, exposing them to regulatory fines and legal risk.
Solution
CookieCrumbs provides a consent management platform that adds a compliant cookie banner to any website with a single command. The platform includes a script-blocking runtime that prevents non-essential tags from loading until consent is granted, an automated scanner that identifies trackers and generates a self-updating cookie declaration, and tamper-evident consent logs for audit purposes. It supports Google Consent Mode v2, region-specific rules (EU/UK opt-in, US opt-out), and ships SDKs for Next.js, React, Astro, Nuxt, SvelteKit, plus a one-line script tag for Shopify, Webflow, and other site builders. An MCP server allows AI coding agents to perform compliance reviews and make scoped, diff-visible configuration changes.
Target Audience
Primary customers are developers, startups, and professionals building websites with modern frameworks or AI coding tools, as well as founders and marketers using site builders like Shopify, Webflow, and Framer who need GDPR-compliant consent management without legal overhead.
Features
- One-command initialization via `npx cookiecrumbs init` with typed SDKs for Next.js, React, Astro, Nuxt, and SvelteKit
- Automated website scanner that detects trackers, classifies them by purpose, and generates a self-updating cookie declaration
- Tamper-evident consent logs stored in EU data centers (Frankfurt, Germany) for audit compliance
- Google Consent Mode v2 support with automatic mapping of banner categories to ad_storage, analytics_storage, ad_user_data, and ad_personalization signals
- MCP server for Claude Code and Cursor that provides read-only compliance review tools and two-step, scope-gated write operations with unified diffs
- Region-aware rules engine: opt-in for EU/UK, opt-out for US states with Global Privacy Control support
- WCAG 2.2 AA accessible banner with 25 languages and multiple layout options (bar, modal, corner, headless)
- Consent runtime loads as the first script in the head, blocking all non-essential tags until category-specific consent is granted