Consent Records & Receipts
Every choice is captured with full context and a cryptographically-signed receipt you can view or download from the dashboard — defensible proof of consent on demand.
Defensible proof of every consent decision — ready the moment an auditor asks.
Under GDPR Article 7 you must be able to demonstrate that consent was given. A row in a database isn't enough if it can be silently edited. Cookie Panda captures every consent event with full context — timestamp, jurisdiction, the exact banner version shown, and the precise choices made — and seals it with a cryptographically-signed, tamper-evident receipt. If a record changes, the signature breaks, so your audit trail is evidence, not just data.
The records speak the language of the ad ecosystem. Each decision is encoded as an IAB TCF v2.3 TC string and, where relevant, an IAB Global Privacy Platform (GPP) string, so the consent state is portable across every vendor and SSP that reads the standard. Cookie Panda also honours the Global Privacy Control (GPC) signal, automatically treating a browser-level opt-out as a valid Do-Not-Sell/Share request under CCPA/CPRA.
When proof is needed, it's one click away. Export the complete, time-ordered audit trail for any domain or date range — for a DPA inquiry, a customer's due-diligence questionnaire, or your own internal records. On Pro and above, receipts are stored in write-once-read-many (WORM) storage, so even your own administrators cannot alter the evidence after the fact.
What's included
Signed, tamper-evident receipts
View or download any receipt on demand
IAB TC string & GPP encoding
GPC honouring + export-ready audit trail
Consent Records & Receipts in four steps
- 1
Capture in context
Every choice is recorded with timestamp, jurisdiction, banner version and the exact categories selected.
- 2
Sign the receipt
Each event is sealed with a cryptographic signature, so any later tampering is immediately detectable.
- 3
Encode to standards
Decisions are written as IAB TCF v2.3 and GPP strings, with GPC honoured as a valid opt-out.
- 4
Export on demand
Pull the full audit trail as CSV or a compliance report whenever you need to prove consent.
Common questions
What makes a receipt tamper-evident?
Each receipt is cryptographically signed over the event's contents. If any field is altered afterwards, the signature no longer verifies — so silent edits are impossible to hide.
Do you honour Global Privacy Control?
Yes. A GPC signal is treated as a valid Do-Not-Sell/Share opt-out under CCPA/CPRA and is recorded as part of the consent state.
What is WORM storage?
Write-once-read-many storage prevents any modification or deletion of a record after it's written — including by your own admins. On Pro and above, receipts are stored this way for maximum defensibility.
More features
Consent Banner Designer — Design a fully on-brand consent experience with four layouts, live preview, and per-locale copy — no code required.
Automated Cookie Scanner — A headless Chromium crawler discovers every cookie, tracker and third-party vendor on your site and keeps your policy in sync.
Prior Cookie Blocking — Stop trackers before consent. Cookie Panda rewrites and gates tag-loading scripts until the user makes a choice.
Get compliant today. Stay compliant for good.
Join the teams using Cookie Panda to turn privacy compliance from a liability into a signal of trust. Free to start — no credit card required.