20 October 2026: Live checkout and admin security
Paddle checkout went live, so plans can now be bought through CookieConsentHQ's merchant of record.
The internal admin panel moved behind Cloudflare Access with two-factor sign-in: an allowlisted email address plus an authenticator code. The security page describes these protections.
Five guides were published on the CookieConsentHQ blog.
19 October 2026: Website, billing and integrations
The website gained a blog with an RSS feed, an About page and structured data. A checkout page arrived alongside Paddle billing and pageview-based pricing.
The edge API moved to api.cookieconsenthq.com. The dashboard gained a banner editor with live preview, publishing controls and the consent log.
Two installation options were added: the WordPress plugin, which connects to the WordPress Consent API, and the Google Tag Manager template, which sets Consent Mode defaults and loads the banner.
The installation guides cover both, plus the script-tag install for other platforms.
19 October 2026: Banner controls, regions and A/B testing
The banner runtime shipped with automatic blocking of known trackers, Google Consent Mode v2 and Global Privacy Control support.
A GPC signal now overrides an earlier opt-in when the visitor is in an opt-out region.
Custom geographic rules arrived for countries and US states, with every banner text editable per language.
Consent-rate A/B testing became available on Growth and higher plans. It compares the current banner with a variant that changes layout, button colour, title or Accept text, and reports the accept rate of each.
The pricing page shows which plans include each control.
19 October 2026: Cookie scanning and monitoring
The cookie scanner launched. It loads public pages before consent and after acceptance, and its results feed the dashboard's categorized cookie list.
A daily scheduled job now runs recurring scans, sends new-tracker email alerts and applies consent log retention. Manual scans wait 24 hours between runs on Free and one hour on paid plans.
The Consent Mode Health Monitor checks the consent values in Google's requests during scheduled scans, and scans now detect other consent tools.
The free public checker launched at /check. It checks one page for cookies set before consent, hardcoded tracker tags and Consent Mode v2 defaults.
19 October 2026: Consent records and retention
Consent export now streams the whole consent log in one CSV file.
After a downgrade, consent proof is kept for 90 days.
On Free, new consent records pause once the monthly pageview allowance is used and resume the next month, while the banner keeps working.
The consent log page explains what each record holds, CSV export and the retention periods.