Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

No single consent management platform (CMP) is the best choice for every site. The right one depends on where your visitors are, which ad products you run, whether you serve personalized ads to users in the EEA, UK or Switzerland, and whether you need consent on websites, mobile apps or connected TV. Five candidates are worth shortlisting and testing against those needs: Cookiebot, OneTrust, Didomi, CookieYes and CookieHub.

Settle the requirements before comparing vendors

Two rules decide whether you must use a specific kind of CMP at all. Check them first, then compare features.

Google’s certified-CMP requirement

Publishers that use Google AdSense, Ad Manager or AdMob must use a Google-certified CMP integrated with the IAB Europe Transparency and Consent Framework (TCF) when they serve personalized ads to audiences in the European Economic Area (EEA), the United Kingdom or Switzerland. The obligation is tied to those ad products and those regions. A site with no such audience, or no personalized ads from those products, is outside this specific condition.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Certification is narrower than compliance. Google states that its certification does not check a CMP for full compliance with TCF or with applicable privacy laws, so you still need to verify your own configuration, disclosures and tag behavior. Certification also applies to the environment Google lists. A vendor certified for websites does not automatically hold certification for a mobile app or connected TV product. Confirm the environment you run in Google’s certified CMP directory.

TCF v2.3 for new consent strings

A TCF-registered CMP captures user choices, stores them in a TC String and communicates them to vendors where applicable. IAB Europe states: “CMPs must register to participate in the TCF.” (IAB Europe, “TCF for CMPs”)

#1 Best Overall
Delete All Cookies Software Engineer T-Shirt
  • Are You Sure You Want To Delete All Cookies? Funny software developer engineer design. Makes a great gift for a programmer.
  • Funny computer programmer design and great software developer gift. Perfect computer engineer gift.
  • Lightweight, Classic fit, Double-needle sleeve and bottom hem

IAB Europe launched TCF v2.3 in April 2025 to resolve legitimate-interest ambiguity by making the Disclosed Vendors section mandatory in the TC String, and it set February 28, 2026 as the participant adoption deadline. Google’s AdSense Help guidance says: “The IAB’s mandatory deadline for all publishers and CMPs to fully implement TCF v2.3 is March 1, 2026.” (Google AdSense Help, “Publisher integration with the IAB Europe TCF”) Google also no longer supports new TCF v2.2 strings after that date, and any new string created on or after March 1, 2026 must use v2.3.

Both dates have passed. Ask each candidate to confirm that its live implementation generates v2.3 strings, and do not accept a roadmap date in its place.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The five candidates

The table shows what Google’s certified CMP directory lists for each name. Where a cell reads “not stated”, the directory information available for this guide did not specify that environment, so check the directory entry before relying on it.

Candidate Google certified CMP listing Environments named in the directory
Cookiebot Listed Not stated
OneTrust (listed as OneTrust/CookiePro) Listed Not stated
Didomi Listed Web, mobile app and connected TV
CookieYes Listed Not stated
CookieHub Listed Not stated

Cookiebot

Cookiebot is the candidate to look at first when automated cookie and tracker discovery matters most. A 2026 third-party comparison describes it mainly around site scanning and Google Consent Mode support. Before shortlisting it, confirm how often scans run, any scan limits on your plan, how pricing changes with the number of domains or subpages, and whether the features you need are included in that plan.

OneTrust

OneTrust, listed in Google’s directory as OneTrust/CookiePro, fits organizations where the CMP is one part of a wider privacy-governance program. Comparison sources associate it with a broad governance suite, so its value depends on whether you will use that suite. Ask which modules a quote includes and what implementation scope it covers.

Didomi

Didomi is the candidate to examine when one consent setup must cover websites, mobile apps and connected TV. Google’s directory lists all three environments for Didomi. Ask which product modules your plan includes, what analytics and preference features come with it, what implementation support is provided, and which TCF version the live product uses.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

CookieYes

CookieYes is a fit for small sites that want self-service setup. A 2026 comparison lists a free plan and positions the product for small sites. Check the free plan’s limits, whether the features you need are included or gated behind a paid tier, and the TCF version in use.

CookieHub

CookieHub is a CMP specialist that appears both in Google’s certified list and in a 2026 comparison written by the vendor. Treat that comparison as marketing until the product documentation confirms its claims. Confirm pricing, the TCF version, the platform types it covers and the scope of implementation work.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Test the shortlist on your own site

Feature pages do not show whether a CMP blocks trackers before a visitor chooses. Run the same checks on a trial or staging version of each candidate:

  1. Open your site in a private browser window. Open the browser developer tools, go to the Network tab, load a page and do not touch the banner. Note every third-party tracker request.
  2. Reload the page and decline all non-essential choices. A CMP that enforces consent stops non-essential tags from firing before a choice is made, so only essential requests should remain. If tracker requests still fire, the setup is not enforcing consent.
  3. Reload and accept all choices. Confirm that the tags fire and that the consent state your analytics and ad tags receive matches what the visitor chose.
  4. Ask the vendor for a sample consent record and its export format. Confirm you can retrieve the record for a given visitor.
  5. If your scope includes mobile apps or connected TV, repeat steps 1 to 4 in each of those environments.

What drives the price

Public prices in comparison articles are snapshots that change, so use them only to rule options out. Vendors bill in different units, which makes headline prices hard to compare:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Billing unit: domain, page, session, visitor or contract. A per-domain plan can suit a few large sites and cost little, while a per-visitor plan rises with traffic.
  • Quotas and overages: what happens when you exceed a visitor, page or session allowance.
  • Included features: whether preference management, consent-record export and multi-language banners are in the base plan.
  • Implementation cost: enterprise deployments can add setup, integration and consultancy costs on top of the subscription.

What this shortlist does and does not establish

  • The five names are candidates drawn from Google’s certified CMP directory and 2026 comparison material. They are not a ranking backed by independent benchmark testing.
  • No verified market share, adoption or performance statistics are cited, because none were established for this comparison.
  • Google’s directory and the TCF version requirements change over time. Recheck both on the day you make a decision.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.