Privacy laws have changed how online advertising works, especially for visitors in Europe and the UK. For publishers, the practical question is simple: how do I stay compliant without my ads disappearing? The answer is a proper cookie consent setup that collects choices fairly and passes them to your ad partners in a format they understand.
This guide explains the essentials in plain language: GDPR, consent management platforms (CMPs), the IAB Transparency and Consent Framework (TCF), US privacy rules and the design choices that keep revenue healthy.
Why consent matters for ad revenue
Personalised ads rely on cookies and similar identifiers to recognise a browser and show relevant ads. Under the EU's GDPR and the ePrivacy rules, and the UK's equivalent laws, using those identifiers for advertising generally requires the visitor's consent. Ad buyers check for that consent before they bid.
Without a valid consent signal, many buyers will either skip the impression or bid only for non-personalised ads, which usually pay less. That is why consent is not just a legal box to tick. It directly affects your eCPM and fill rate for visitors in those regions.
What a Consent Management Platform does
A Consent Management Platform (CMP) is the tool behind the consent banner. It:
- Shows visitors a clear message about cookies and advertising
- Lets them accept, reject or choose specific purposes and partners
- Records their choice and remembers it on later visits
- Passes that choice to ad tags in a standard, machine-readable format
- Lets visitors change their mind at any time
The IAB TCF in plain language
The Transparency and Consent Framework (TCF), run by IAB Europe, is the industry standard format for passing consent choices through the advertising chain. A TCF-compatible CMP stores the visitor's choices in a standard consent string and exposes it to ad scripts on the page through a standard interface. Every buyer along the chain can then read the same signal.
Google requires publishers using its advertising products to use a Google-certified CMP integrated with the TCF when serving ads to users in the European Economic Area, the UK and Switzerland. Many other ad platforms follow the same standard, so a certified TCF CMP is the safest choice for most publishers with European traffic.
US privacy laws work differently
Several US states, starting with California, have privacy laws that generally work on an opt-out basis: visitors can tell sites not to sell or share their personal information for targeted advertising. Industry standards such as the IAB's US Privacy signal and the newer Global Privacy Platform (GPP) carry these choices to ad partners. If you have meaningful US traffic, choose a CMP that supports the US signals too.
How to set up cookie consent step by step
- Know your audience. Check which countries your visitors come from. If any meaningful share is in Europe, the UK or covered US states, you need a consent setup; see eCPM by country.
- Choose a certified CMP. Pick one that is certified for Google and supports the IAB TCF, plus US privacy signals if needed.
- Load the CMP first. The CMP must load before your ad tags, so they can read the visitor's choice before requesting ads.
- Configure regions. Most CMPs can show the banner only where it is required, keeping the experience simpler elsewhere.
- Update your privacy policy to describe cookies, advertising partners and how visitors can change their choices.
- Test it. Visit your site through a European location or test mode, accept and reject, and check that ads still load.
Design a banner that keeps ads serving
Your banner must be fair, but fair does not have to mean ugly or confusing. A well-designed banner keeps more readers choosing to consent:
- Plain, friendly wording that explains ads help keep your content free.
- Clear, equally visible buttons to accept or manage choices. Dark patterns can break consent rules and erode trust.
- Mobile-friendly layout that does not cover the whole screen for longer than necessary; see mobile monetization.
- Fast loading, so it does not hurt your page speed.
- Your branding, so it looks like part of your site rather than a warning.
What happens when a visitor says no
A rejected consent request does not have to mean no ads. Depending on your partners and the visitor's choices, a page can usually still show:
- Non-personalised ads, which are chosen using the page and general information such as approximate location, rather than the visitor's browsing history.
- Contextual ads, which match the topic of the page. A strong topic can still attract good bids; see high CPM niches.
These usually earn less than personalised ads, which is why a fair, clear banner that encourages informed consent matters. But a site with a good consent setup keeps earning from every visitor, while a site without one may lose much of its European demand entirely.
Consent and other site tools
Ads are not the only thing affected. Analytics, embedded videos, social widgets and marketing pixels may also use cookies. Most CMPs can hold these back until the visitor agrees. Review every third-party script on your site and decide which consent purpose each one belongs to, so your banner tells visitors the truth about what runs on the page.
Common consent mistakes
- Loading ad tags before the CMP has a decision
- Using a CMP that is not certified or not TCF-compatible for European traffic
- A banner with only an "Accept" button and no real choice
- Forgetting to update the privacy policy
- Never testing what happens when a visitor rejects
How Advorex Media handles consent
The Advorex Media tag does not collect consent itself; that is the job of your CMP. Instead, it reads the choices your CMP has already recorded through the standard IAB TCF v2 interface for European visitors and the US Privacy interface for covered US visitors, and passes them along with every ad request. Your visitors' choices are respected and buyers receive the signals they need to bid. If you are just getting started, our approval checklist covers the privacy policy you will also need.
Key takeaways
- Personalised ads in Europe and the UK generally require consent, and buyers check for it.
- A certified, TCF-compatible CMP is the standard way to collect and pass consent.
- US privacy laws mostly work on opt-out and use their own signals.
- Load the CMP before ad tags, design a fair and friendly banner and test both choices.
- This is general information, not legal advice.
Frequently asked questions
Do I need a cookie banner to show ads?
If you have visitors from the European Economic Area, the UK or Switzerland, you generally need valid consent before using cookies for personalised advertising. Many ad networks also require a consent platform for that traffic. Rules elsewhere differ, so check what applies to your audience.
What is a CMP?
A Consent Management Platform is the tool that shows the consent banner, records each visitor's choices and passes those choices to your ad partners in a standard format.
Will a consent banner reduce my ad revenue?
Visitors who decline personalised ads can still be shown non-personalised or contextual ads, which usually earn less. A clear, fair and well-designed banner keeps more visitors choosing to consent and keeps ads serving for everyone.
Is this legal advice?
No. This guide explains common industry practice. Privacy laws differ by country and change over time, so speak to a qualified adviser about your specific situation.
Turn these tips into revenue
Advorex Media puts several ad networks in competition for every impression on your site, with one lightweight tag and a dashboard that shows the real numbers.
Create your free account →
