Drop-in cookie consent manager. One <script> tag, GPC-aware, GDPR + CCPA ready.
A modern consent banner that doesn't require a sales call. Free tier ships a working banner with GPC honored automatically and necessary + analytics categories out of the box. Pro removes the badge and unlocks custom branding. Business adds the audit log + geo-targeting + multi-language that regulators expect. Enterprise lands at IAB TCF v2.2 + extended retention for ad-tech buyers.
No credit card to start. Free · $9 · $49 · $499.
Embed snippet (paste in <head>)
<script src="https://cmp.photonforge.io/v1/script/<siteKey>.js" defer></script>Why PhotonCMP
GPC honored by default
If the visitor's browser sends the Global Privacy Control signal, analytics is filtered off regardless of stored consent. Most CMPs require you to enable this; ours requires you to disable it.
Not obfuscated
The served script is readable. CSP-strict shops can audit it. We don't sell mystery JS — we sell hosted config + audit trail.
Audit trail regulators want
Business tier and up record every consent decision (hashed-IP, country, revision shown, categories accepted). When a regulator asks for proof, you export it.
Composes with PhotonHooks
Business tier fires cmp.consent.changed events into PhotonHooks. Your analytics provider sees consent updates the moment they happen.
Features
One script tag
<script src="https://cmp.photonforge.io/v1/script/<siteKey>.js" defer></script>.
GPC honored automatically
navigator.globalPrivacyControl forces analytics off.
Custom brand color (Pro)
6-char hex code in the dashboard.
Custom categories + text (Pro)
Beyond Necessary + Analytics.
Remove PhotonCMP badge (Pro)
Self-served.
Consent audit log (Business)
Every accept/reject recorded with hashed IP + country + revision. 1-year retention.
Geo-targeting (Business)
Different rules per region: EU sees GDPR-strict, CA sees CCPA-style.
Multi-language banners (Business)
Per-locale text bundles, picked from navigator.language.
Cookie declarations (Business)
Render the 'what cookies we set + why' table regulators want.
IAB TCF v2.2 (Enterprise)
Vendor list + TC string support for ad-tech.
5-year consent retention (Enterprise)
What enterprise buyers contractually need.
API + MCP
Manage sites + consents programmatically.
Pricing
Pay for what costs us money.
Free
Working banner for a small site. GPC honored automatically.
- 1 site
- Necessary + Analytics categories
- RFC-clean cookie storage
- GPC honored automatically
- Edge-cached <script> tag
- API + MCP access
- "Powered by PhotonCMP" badge
Pro
For agencies + teams managing more than one site.
- Unlimited sites
- Remove the PhotonCMP badge
- Custom brand color
- Custom consent categories
- Custom banner + modal text
- Multi-site dashboard
Business
Compliance-officer-grade: audit log, geo-targeting, multi-language.
- Everything in Pro
- Consent audit log (1-year retention)
- Geo-targeting (EU / CA / Brazil rules)
- Multi-language banners
- Cookie declarations table
- cmp.consent.changed events into PhotonHooks
Enterprise
Ad-tech-grade: IAB TCF v2.2 + extended retention + SLA.
- Everything in Business
- IAB TCF v2.2 vendor list
- 5-year consent retention
- Compliance reports
- White-label (no PhotonForge branding anywhere)
- SLA + priority support
Cancel anytime via the Stripe customer portal. No annual lock-in, no email-us-to-cancel routine.
Composes with
PhotonCMP talks to the rest of PhotonForge automatically.
- PhotonHooks — Business tier fires cmp.consent.changed events into PhotonHooks.
Common questions
›Will my visitors notice this is third-party?
Only if they View Source. The script is small, deferred, edge-cached. No visible badge on Pro+. No flicker, no layout shift if you size the banner with CSS.
›What's IAB TCF v2.2 and why is it Enterprise?
It's the ad-tech industry standard for consent-string passing between publishers and ad networks. Required if you sell programmatic ads. Compliance is non-trivial and you probably need it only if you know you need it.
›Can I export my consent log?
Yes, on Business and up. CSV or JSON, filterable by date range, per site.