# GDPR cookie disclaimer

**URL:** <https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837>\
**Category:** GDPR\
**Created:** [May 14, 2018, 2:48pm UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837 "2018-05-14T14:48:38Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![MaayanSel](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/maayansel/32/47057_2.png) [@MaayanSel](https://community.hubspot.com/u/MaayanSel)\
**Post date:** [May 14, 2018, 2:48pm UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837/1 "2018-05-14T14:48:38Z")

</div>

Hey,

I understood that the cookie disclaimer on HS will only work on HS COS and I need one to cover my website as well. Is there a way to add the WordPress plugin on HS or the other way around?

Thanks all!

---

<div class="post-metadata">

**Author:** ![MFrankJohnson](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/mfrankjohnson/32/22490_2.png) [@MFrankJohnson](https://community.hubspot.com/u/MFrankJohnson)\
**Post date:** [May 14, 2018, 9:31pm UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837/2 "2018-05-14T21:31:03Z")

</div>

**Q** : Is there a way to add the WordPress plugin on HS or the other way around?

**Short A** : No.

**Longer A** :

_ **Plugin code is NOT portable across platforms** _ (e.g., WordPress-to-HubSpot, WordPress-to-Joomla, HubSpot-to-WordPress, HubSpot-to-Joomla, etc.). Just doesn’t work that way.

**UPDATE @MaayanSel**

However, you may activate HubSpot cookie tracking on sites where the HubSpot tracking code resides. Please see this recently updated KB article (18-May) for instructions - [How to customize cookie tracking and your privacy policy alert in HubSpot](https://knowledge.hubspot.com/getting-started-with-hubspot-v2/how-to-customize-cookie-tracking-and-your-privacy-policy-alert-in-hubspot)

If the HubSpot method described in that article doesn’t meet you WordPress needs you’ll want to search the [WordPress.org plugin directory](https://wordpress.org/plugins/search/cookie+disclaimer/) for a suitable solution.

Hope that helps and thanks for the good catch @sebastianulbert …

---

<div class="post-metadata">

**Author:** ![SanteriH](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/santerih/32/30191_2.png) [@SanteriH](https://community.hubspot.com/u/SanteriH)\
**Post date:** [May 29, 2018, 12:46pm UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837/3 "2018-05-29T12:46:40Z")

</div>

Hi!  
I was having problems setting up the cookie notification. I got it working thanks to this post. Thanks!

---

<div class="post-metadata">

**Author:** ![edjusten](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/edjusten/32/14475_2.png) [@edjusten](https://community.hubspot.com/u/edjusten)\
**Post date:** [May 14, 2018, 9:32pm UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837/4 "2018-05-14T21:32:04Z")

</div>

Hi @MaayanSel The HubSpot cookie disclaimer is baked in to the HubSpot system, so there is no way to export it or use it on an external page.

This website from [smallenvelope.com](http://smallenvelope.com) l[ists five cookie-consent plugins available on the web](https://smallenvelop.com/cookie-notice-wordpress-plugins/). This blog post is more than one year old however, so your mileage may vary on if these are still available.

Hope this helps,

Ed Justen

---

<div class="post-metadata">

**Author:** ![MaayanSel](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/maayansel/32/47057_2.png) [@MaayanSel](https://community.hubspot.com/u/MaayanSel)\
**Post date:** [May 15, 2018, 6:17am UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837/5 "2018-05-15T06:17:48Z")

</div>

Thanks. Do you know if I’ll be able to embed one of then in HS so that I have one disclaimer on my entire site?

---

<div class="post-metadata">

**Author:** ![PatriciaSaonaC](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/patriciasaonac/32/2401_2.png) [@PatriciaSaonaC](https://community.hubspot.com/u/PatriciaSaonaC)\
**Post date:** [May 16, 2018, 1:22pm UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837/6 "2018-05-16T13:22:58Z")

</div>

I will only work on Hubspot’s hosted pages!

---

<div class="post-metadata">

**Author:** ![sebastianulbert](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/sebastianulbert/32/18769_2.png) [@sebastianulbert](https://community.hubspot.com/u/sebastianulbert)\
**Post date:** [May 22, 2018, 10:00am UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837/7 "2018-05-22T10:00:17Z")

</div>

Hi @MaayanSel - I have a WordPress page and the cookie disclaimer does perfectly work. Take a look at [https://www.stockwerk5.com/](https://www.stockwerk5.com/) and you see the Hubspot cookie disclaimer in the bottom bar. I use the free version for this blog and the only thing I noticed is that it only works with the default disclaimer (which still allows modifications in styling and text).

@edjusten @PatriciaSaonaC @MFrankJohnson

---

<div class="post-metadata">

**Author:** ![ojobson](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/ojobson/32/84083_2.png) [@ojobson](https://community.hubspot.com/u/ojobson)\
**Post date:** [June 21, 2018, 9:16am UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837/8 "2018-06-21T09:16:06Z")

</div>

It doesn’t work at all because your website sets cookies on the first visit without asking me for consent. This is not GDPR compliant as I understand it.

 ![Screen Shot 2018-06-21 at 10.15.35.jpg](https://d2qpr2jzcazej7.cloudfront.net/original/2X/0/0986e9f01bd5d8692f9f8d29090bac77625e71ea.jpeg)

---

<div class="post-metadata">

**Author:** ![sebastianulbert](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/sebastianulbert/32/18769_2.png) [@sebastianulbert](https://community.hubspot.com/u/sebastianulbert)\
**Post date:** [June 21, 2018, 11:39am UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837/9 "2018-06-21T11:39:36Z")

</div>

In my case it works as it should work. It is informing and not asking for consent prior web usage. HubSpot support said they start storing the IP address only after a form submission (where I ask for consent of storing and processing data according to the data privacy). Before that action it’s anonymized. Recital 30 (the only part when GDPR mentions cookies) is talking aboutidentification.

And there is Art. 6 GDPR lit. (f): […] processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

In general cookie usage is governed by the ePrivacy Directive (Cookie law) and not the GDPR. At [http://ec.europa.eu/ipg/basics/legal/cookies/index\_en.htm](http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm) you find the info when it requires users’ informed consent before storing cookies on a user’s device and when not. Also, keep in mind that the current ePrivacy Directive’s scope is different from GDPR.

The cookie law does not require that you provide users with the means to toggle cookie preferences directly on your site/app, only that you conspicuously provide the option for obtaining informed consent, provide a means for the withdrawal of consent and guarantee via prior blocking that no tracking is performed before consent is obtained.

The cookie law does not require that you individually list third-party cookies, only that you state their category and purpose.

---

<div class="post-metadata">

**Author:** ![ojobson](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/ojobson/32/84083_2.png) [@ojobson](https://community.hubspot.com/u/ojobson)\
**Post date:** [June 27, 2018, 11:37am UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837/10 "2018-06-27T11:37:52Z")

</div>

Sebastian - Europa states persistent cookies “requires prior informed consent for storage or for access to information stored on a user’s terminal equipment”.

The UK ICO state “To ensure that consent is freely given, users should be able to disable cookies, and you should make this easy to do”. HubSpot currently do not allow users to easily disable cookies at a later time.

Then there is the issue that the HubSpot cookie banner doesn’t control the placing of other website cookies - such as google analytics… so it isn’t compliant for most customers.

---

<div class="post-metadata">

**Author:** ![sebastianulbert](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/sebastianulbert/32/18769_2.png) [@sebastianulbert](https://community.hubspot.com/u/sebastianulbert)\
**Post date:** [June 27, 2018, 1:56pm UTC](https://community.hubspot.com/t/gdpr-cookie-disclaimer/8837/11 "2018-06-27T13:56:58Z")

</div>

You have to activate it in the settings. For the other cookies, I think we can’t blame HubSpot. There are tools out there that cover everything. Don’t forget, the question started talking about the free version of the tool.  
You did cut the quote too early as there is a list of examples when cookies clearly exempt from consent. And there might be legitimate interest too.  
I want to finish with a quote: “My message to companies is: Keep calm, don´t panic!” said EU Justice Commissioner Vera Jourova to AFP.

 ![cookie-policy-settings.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/d/d/dd57b62f9570867081868d4f9dfad6f71870a9af.png)
