Supported privacy laws

CookieHub supports a wide range of international privacy and cookie regulations through configurable consent models and framework integrations. This page lists the key laws currently supported and how CookieHub helps you comply with them, based on the expected consent approach in each jurisdiction.

CookieHub provides support for:

• Opt-in consent (explicit user consent required before tracking)
• Opt-out consent (tracking allowed until user opts out)
• Signal-based privacy controls (e.g., Global Privacy Control)

When in doubt, we recommend using explicit opt-in for the highest level of compliance.

Opt-in consent laws

These jurisdictions require websites to obtain explicit consent from users before storing or accessing non-essential cookies or personal data.

¹ Mexico’s law does not explicitly regulate cookies, but opt-in behavior is recommended for alignment with international best practices.

Opt-out consent laws

These jurisdictions allow websites to set non-essential cookies by default, as long as users are clearly informed and given the ability to opt out.

⚠ Many of these laws are broad and not cookie-specific. CookieHub recommends opt-in behavior globally when compliance requirements are unclear.

US state laws (opt-out with specific consent controls)

Several US states require businesses to provide clear notice and opt-out options for personal data use. CookieHub provides built-in support for US privacy frameworks and signaling mechanisms, such as IAB GPP.

CookieHub uses the IAB Global Privacy Platform (GPP) to manage US opt-out preferences and supports the “Do Not Sell or Share My Personal Information” interface element where required.

Consent framework used by CookieHub

CookieHub uses different consent frameworks depending on the legal environment:

• CookieHub Choices is the default internal framework used to manage consent across all regions that require opt-in or general cookie regulation (e.g., GDPR, LGPD, PDPA, APPI).
• In the United States, CookieHub uses the IAB Global Privacy Platform (GPP) in addition to CookieHub Choices to support state-specific laws that require opt-out controls and standardized signaling.

Unless you explicitly enable an external framework (such as IAB TCF 2.2), CookieHub Choices is used to control cookie behavior, categorize services, and block or allow scripts based on user preferences.

For more technical details, see CookieHub Choices.

Signal-based privacy support

CookieHub respects standardized user-driven privacy signals, such as:

Consent signaling frameworks

CookieHub integrates with several external consent frameworks and APIs to forward user preferences to external platforms and vendors:

CookieHub acts as a signaling platform for these frameworks and does not rely on incoming user signals (except GPC).

Recommendations

• If you operate globally, use explicit opt-in unless you are certain a more permissive model is legally acceptable in a specific region.
• CookieHub allows you to configure consent models per country or region through its geo-targeting features (see How regional framework rules work).
• For technical setup details, see Preconfigured settings and Framework references.