Articles on: Compliance & Legal

Do I need a cookie banner on my Prospectus Plus site?

Some institutions choose to add third-party tracking or analytics to their Prospectus Plus instance. If you’re doing this, you’ll need to consider implementing a cookie banner to ensure user consent is properly managed.

🤔 Does Prospectus Plus set any cookies by default?



Yes — but none that can be used to personally identify a user.

Prospectus Plus sets a minimal cookie to help us track site visits for internal analytics. This falls under legitimate interest, meaning user opt-in is not required.

The cookie does not collect or store personal data and cannot be linked to an individual user — only the device it is stored on.
We are planning to phase out this cookie towards the end of 2025, as we transition our analytics dashboard to use each client’s own Google Analytics setup.

Any other cookies present on your site (such as those used for tracking, advertising, or personalisation) will have been added via your institution’s Google Tag Manager — and are your responsibility to manage.


👩‍⚖️ So when do I need a cookie banner?



If you’ve added third-party scripts (e.g. Google Analytics, Hotjar, Facebook Pixel) using GTM, you’ll need a cookie banner. This ensures you remain compliant with regulations such as GDPR, which require user consent before setting non-essential cookies.

🧰 Do I need a Cookie Management Platform (CMP)?



Not necessarily. While CMPs like OneTrust offer full-featured solutions, they can be expensive — especially if you manage multiple websites.

A cost-free alternative is to use a GTM-based cookie banner. We provide a ready-made container template that you can import and set up in under 30 minutes. No developer required!

Download the Container Template

🚀 How do I set it up?



Open your Google Tag Manager container (or create a new one).

Go to Admin > Import Container.

Select our GTM Cookie Consent Container Template (ask us if you need the file).

Choose the Default Workspace, and under import settings, select Merge with “Overwrite conflicting tags, triggers and variables”.

Your container will now include a cookie consent banner and a set of custom consent categories (which you’ll see listed under Triggers):

🎯 Ad Consent – for ad tracking scripts.

📈 Analytics Consent – for tools like Google Analytics or Hotjar.

🛠 Functionality Consent – for features that are strictly necessary.

🎨 Personalisation Consent – for content personalisation tools.

🔐 Security Consent – for security-related scripts.

Use these categories as triggers for your third-party scripts in GTM.

For example, set Google Analytics to trigger on Analytics Consent.

🧪 How do users change their cookie settings?



You should add a “Change Privacy Settings” button, ideally on your privacy policy page. Use the following snippet:

<button type="button" data-cc="c-settings" class="cc-link">Change privacy settings</button>

This lets users revisit and modify their preferences at any time.

📜 Is any of this covered in the Prospectus Plus terms?



Yes — our stance on cookies and user tracking is reflected in our privacy documentation and standard terms. If you’re unsure how this applies to your institution, feel free to contact our support team or check your data agreement with us.

Updated on: 07/05/2025

Was this article helpful?

Share your feedback

Cancel

Thank you!