# Katla > Katla is an AI-first cookie consent and privacy compliance platform for GDPR, > CCPA/CPRA and the EU Digital Markets Act, built for the agentic era. AI scans sites for > cookies, classifies them and keeps policies in step, and AI assistants can set it up and > check it through the MCP server. Visitor consent is collected through a headless SDK, a > REST API, a CLI or a drop-in widget - without a render-blocking banner. Every URL below also serves `text/markdown` when requested with an `Accept: text/markdown` header, at the same canonical address. The MCP server is at https://api.katla.app/mcp (OAuth 2.1, scopes `katla:read` and `katla:write`), the API reference at https://api.katla.app/docs and the documentation at https://docs.katla.app. ## Product - [Katla](https://katla.app/): What the platform does, and how it is integrated. - [Pricing](https://katla.app/pricing): Per site per month, with the live plan catalogue and its limits. - [For developers](https://katla.app/developers): The SDK, REST API, CLI and MCP server, with the real endpoints. - [MCP server](https://katla.app/mcp): Remote MCP server for Claude, ChatGPT and Cursor, and every tool it exposes. ## Comparisons - [All comparisons](https://katla.app/compare): Katla against the platforms it is evaluated against. - [Katla vs Cookiebot](https://katla.app/compare/cookiebot): An established CMP, now part of Usercentrics. Hosted banner, automated scanning, priced by how many subpages your site has. Figures from their own pricing page. - [Katla vs CookieYes](https://katla.app/compare/cookieyes): A WordPress-first CMP that also works elsewhere, priced on monthly pageviews with a per-1,000 charge above the plan. Figures from their own pricing page. - [Katla vs Pandectes](https://katla.app/compare/pandectes): A GDPR app for Shopify, built around the Shopify Customer Privacy API, checkout blocking and the app store. Flat monthly price per store, not metered on traffic. Figures from their own pricing page. - [Katla vs OneTrust](https://katla.app/compare/onetrust): An enterprise privacy suite where cookie consent is one module among DSAR handling, vendor risk and assessments. Pricing is quoted, not published. Figures from their own pricing page. - [Katla vs Cookie Information](https://katla.app/compare/cookie-information): A Danish hosted CMP, priced per domain with a monthly consent allowance shared across the account. No free tier, a 14-day trial instead. Figures from their own pricing page. - [Katla vs Consentmo](https://katla.app/compare/consentmo): A cookie consent and GDPR app for Shopify, formerly iSenseLabs GDPR. Flat monthly price per store with unlimited banner impressions. Figures from their own pricing page. - [Katla vs Usercentrics](https://katla.app/compare/usercentrics): A hosted CMP from the company that also owns Cookiebot, priced on monthly sessions with a domain cap per tier. Figures from their own pricing page. - [Katla vs Complianz](https://katla.app/compare/complianz): A WordPress consent plugin with a free version on WordPress.org and premium licences sold per year by number of sites. Figures from their own pricing page. - [Katla vs CookieScript](https://katla.app/compare/cookiescript): A hosted cookie banner and scanner, priced per domain on yearly plans, with a free tier capped on pageviews. Figures from their own pricing page. - [Katla vs Consentmanager](https://katla.app/compare/consentmanager): A hosted CMP with IAB TCF and GPP support, priced on monthly pageviews with a per-1,000 charge above the plan. Figures from their own pricing page. - [Katla vs iubenda](https://katla.app/compare/iubenda): A Milan-based compliance tool that pairs a cookie banner with privacy policy and terms generators, priced per site on monthly pageviews with a per-1,000 charge above the plan. Figures from their own pricing page. - [Katla vs Termly](https://katla.app/compare/termly): A legal policy generator with a consent banner in the same account, priced per website, with monthly banner-view limits below the Pro+ plan. Figures from their own pricing page. - [Katla vs Osano](https://katla.app/compare/osano): A privacy platform whose cookie consent product runs from a free plan to a $199 self-service plan, each capped on monthly visitors and domains, with larger plans quoted. Figures from their own pricing page. - [Katla vs Secure Privacy](https://katla.app/compare/secure-privacy): A Danish consent and privacy governance platform, priced per domain on a monthly consent allowance, covering websites, mobile apps and TV apps. Figures from their own pricing page. - [Katla vs Axeptio](https://katla.app/compare/axeptio): A hosted CMP sold one domain per plan in bands of monthly pageviews, with IAB TCF from the Small plan up. Figures from their own pricing page. - [Katla vs Borlabs Cookie](https://katla.app/compare/borlabs-cookie): A WordPress-only consent plugin sold as a yearly licence by number of websites, with unlimited pageviews and every feature in every licence. Figures from their own pricing page. - [Katla vs Didomi](https://katla.app/compare/didomi): A consent and preference management platform with IAB TCF, GPP and connected TV consent, sold by quote on monthly unique visitors. Figures from their own pricing page. ## Platforms - [All platforms](https://katla.app/for): Every platform Katla installs on, with a page for each. - [Cookie consent for Next.js](https://katla.app/for/nextjs): A typed cookie consent SDK for the Next.js App Router: a provider, hooks, Google Consent Mode v2 and server prefetch. 4 KB headless, or inlined in the page. - [Cookie consent for React](https://katla.app/for/react): A React cookie consent SDK: KatlaProvider, typed hooks and unstyled banner components, with Google Consent Mode v2. 4 KB headless, with any bundler. - [Cookie consent for TypeScript](https://katla.app/for/typescript): A typed cookie consent SDK for any TypeScript app: your cookie inventory and policies, a guard at document.cookie, and consent as an event. 4 KB. - [Cookie consent for WordPress and WooCommerce](https://katla.app/for/wordpress): A WordPress cookie consent plugin that blocks non-consented scripts on the server, renders your generated policy, and leaves WooCommerce checkout alone. - [Cookie consent for Google Tag Manager](https://katla.app/for/google-tag-manager): Install Katla from your Google Tag Manager container with Consent Mode v2 for GA4 and Google Ads. Katla can write the tag for you, with no site deploy. - [Cookie consent for Lovable](https://katla.app/for/lovable): Add Katla to Lovable as an MCP connector and ask for cookie consent in the chat. Lovable scans your app, installs the banner and wires up the policy page. - [Cookie consent for Wix](https://katla.app/for/wix): Add Katla's cookie banner to Wix with one snippet in Custom Code, or from your Google Tag Manager container. Consent Mode v2 and a generated policy included. - [Cookie consent for Squarespace](https://katla.app/for/squarespace): Add Katla's cookie banner to Squarespace through Code Injection or Google Tag Manager, or design your own. Consent Mode v2 and a generated policy included. - [Cookie consent for Webflow](https://katla.app/for/webflow): Add Katla's cookie banner to Webflow with one snippet in the head code, or design the banner in Webflow and let Katla run the consent behind it. - [Cookie consent for Framer](https://katla.app/for/framer): Add Katla's cookie banner to Framer with one snippet at the start of the head, or design your own banner in Framer and let Katla run the consent behind it. - [Cookie consent for Ghost](https://katla.app/for/ghost): Add Katla's cookie banner to a Ghost publication through Code injection or Google Tag Manager. Consent Mode v2 and a generated cookie policy included. - [Cookie consent for HubSpot CMS](https://katla.app/for/hubspot): Add Katla's cookie banner to HubSpot pages, blog and landing pages through Site header HTML or Google Tag Manager. Consent Mode v2 and a policy included. - [Cookie consent for Kajabi](https://katla.app/for/kajabi): Add Katla's cookie banner to Kajabi with one header page script, or from your Google Tag Manager container. Consent Mode v2 and a generated policy included. - [Cookie consent for Joomla](https://katla.app/for/joomla): Add Katla's cookie banner to Joomla through a head-code extension, a custom module or Google Tag Manager. Consent Mode v2 and a generated policy included. - [Cookie consent for Shopify](https://katla.app/for/shopify): Katla's Shopify app is coming soon: cookie consent from a theme app extension, with no theme code to edit. Until then, use the widget or Google Tag Manager. ## Compliance - [Cookie laws by country](https://katla.app/compliance): Which privacy laws need opt-in consent for cookies, and which allow an opt-out. - [GDPR cookie consent: what the law requires](https://katla.app/compliance/gdpr): Under GDPR and the ePrivacy Directive, non-essential cookies need opt-in consent first. What valid consent looks like, the fines, and how to meet it. - [UK cookie law: the PECR consent rules](https://katla.app/compliance/uk): UK law needs consent before non-essential cookies under PECR, to the UK GDPR standard. What changed in 2025, what the ICO expects, and the fines. - [Cookie consent in Germany: TDDDG §25 explained](https://katla.app/compliance/germany): Germany’s TDDDG §25 requires consent before any non-essential cookie or tracker, on top of GDPR. What the law covers, what regulators expect, and the fines. - [Cookie consent in France: the CNIL rules](https://katla.app/compliance/france): France requires opt-in consent for non-essential cookies and a way to refuse as easy as accepting. The CNIL rules, the exemptions and the fines behind them. - [Cookie consent in Sweden: LEK and PTS rules](https://katla.app/compliance/sweden): Swedish law requires consent before non-essential cookies under the Electronic Communications Act. What PTS expects, IMY’s fines, and how Swedish sites fare. - [CCPA cookie compliance: opt-outs, GPC and CPRA](https://katla.app/compliance/ccpa): The CCPA lets you set cookies but requires a Do Not Sell or Share opt-out and, since the CPRA, honouring Global Privacy Control. What that means for a site. - [Colorado Privacy Act cookie rules and GPC](https://katla.app/compliance/colorado): The Colorado Privacy Act requires an opt-out from targeted advertising and, since July 2024, honouring Global Privacy Control. What a site needs to do. - [Connecticut Data Privacy Act: cookies and GPC](https://katla.app/compliance/connecticut): The Connecticut Data Privacy Act requires an opt-out from targeted advertising and, since 2025, honouring Global Privacy Control. What a site needs to do. - [Virginia Consumer Data Protection Act cookie rules](https://katla.app/compliance/virginia): Virginia’s Consumer Data Protection Act lets sites use advertising cookies but requires an opt-out from targeted advertising and sale. What that means. - [Utah Consumer Privacy Act cookie rules](https://katla.app/compliance/utah): The Utah Consumer Privacy Act lets consumers opt out of targeted advertising and sale, and applies only to large businesses. What it means for your cookies. - [Quebec Law 25 cookie consent requirements](https://katla.app/compliance/quebec-law-25): Quebec’s Law 25 requires tracking technology to stay off until a visitor turns it on. What that means for cookies, the deadlines and the penalties. - [PIPEDA cookie consent: what Canada requires](https://katla.app/compliance/pipeda): PIPEDA needs meaningful consent for cookies that collect personal information, and allows opt-out for some advertising. When, and what Quebec adds. - [LGPD cookie consent: what Brazil requires](https://katla.app/compliance/lgpd): Brazil’s LGPD and the ANPD cookie guide expect consent for most non-essential cookies, with a way to reject them. The rules, the fines and the setup. - [Cookie consent in Switzerland: nFADP rules](https://katla.app/compliance/switzerland): Swiss law lets sites set cookies if visitors are told and can refuse them, and needs consent only in some cases. What the nFADP and the FDPIC expect. - [Singapore PDPA cookie consent requirements](https://katla.app/compliance/singapore): Singapore’s PDPA needs consent, or a recognised exception, before cookies collect personal data. What the PDPC expects, the penalties, and how to comply. - [Thailand PDPA cookie consent requirements](https://katla.app/compliance/thailand): Thailand’s PDPA expects explicit consent for non-essential cookies unless another legal basis applies. The rules, the penalties and how to comply. - [Japan APPI and cookies: what the law requires](https://katla.app/compliance/japan): Japan’s APPI and Telecommunications Business Act regulate cookies through notice and, for some transfers, consent. What sites serving Japan need to do. - [POPIA cookie consent: what South Africa requires](https://katla.app/compliance/south-africa): South Africa’s POPIA needs a lawful basis, usually consent, for cookies that collect personal information, and opt-in for electronic direct marketing. - [Australia Privacy Act and cookies explained](https://katla.app/compliance/australia): Australia has no cookie consent law, but the Privacy Act covers cookies that collect personal information. What the OAIC expects, and the penalties. - [Cookie consent in the Netherlands: rules and the AP](https://katla.app/compliance/netherlands): Dutch law requires consent before tracking cookies under article 11.7a of the Telecommunicatiewet. The AP’s banner rules, who enforces them, and the fines. - [Cookie consent in Spain: LSSI and the AEPD guide](https://katla.app/compliance/spain): Spain’s LSSI requires consent before non-essential cookies, and the AEPD guide says how: reject beside accept, a narrow analytics exemption, and the fines. - [Garante cookie guidelines: Italy’s consent rules](https://katla.app/compliance/italy): Italy’s Garante rules: scrolling is not consent, closing the banner means no, and a refusal holds for six months. What article 122 requires, and the fines. - [Cookie consent in Denmark: the Danish cookie order](https://katla.app/compliance/denmark): Denmark requires consent before non-essential cookies under its cookie order. What Digitaliseringsstyrelsen and Datatilsynet expect, and the fines. - [Cookie consent in Norway: the ekomloven rules](https://katla.app/compliance/norway): Since 1 January 2025, Norway’s ekomloven requires GDPR-standard consent before non-essential cookies. What Nkom and Datatilsynet expect under § 3-15. - [Finnish cookie law: section 205 and Traficom](https://katla.app/compliance/finland): Finnish law requires consent before non-essential cookies under section 205. What Traficom expects, why browser settings don’t count, and the fines. - [Polish cookie law: article 399 of the PKE](https://katla.app/compliance/poland): Poland’s Electronic Communications Law requires consent before non-essential cookies. What article 399 says, how UKE fines breaches, and UODO’s role. - [Texas Data Privacy and Security Act: cookie rules](https://katla.app/compliance/texas): The Texas Data Privacy and Security Act requires an opt-out from targeted advertising and sale and, since 2025, honouring browser opt-out signals. - [Oregon Consumer Privacy Act: cookies and GPC](https://katla.app/compliance/oregon): Oregon’s Consumer Privacy Act requires an opt-out from targeted advertising and, since January 2026, honouring Global Privacy Control. What sites must do. - [Minnesota Consumer Data Privacy Act: cookies, GPC](https://katla.app/compliance/minnesota): Minnesota’s Consumer Data Privacy Act, in force since 31 July 2025, requires an opt-out from targeted advertising and honouring GPC. What sites must do. - [New Jersey Data Privacy Act: cookies and GPC](https://katla.app/compliance/new-jersey): New Jersey’s Data Privacy Act requires an opt-out from targeted advertising and, since July 2025, honouring universal opt-out signals. What sites must do. - [DPDP Act cookie consent: what India requires](https://katla.app/compliance/india): India’s DPDP Act needs notice and consent, or a legitimate use, to process personal data, including through cookies. The Rules, deadlines and penalties. - [Saudi PDPL cookie consent: what the law requires](https://katla.app/compliance/saudi-arabia): Saudi Arabia’s PDPL makes consent the default basis for processing personal data, including through cookies. What SDAIA expects, and the penalties. ## Writing - [Blog](https://katla.app/blog): Cookie consent, GDPR and web performance. - [BrowserConsent: answer every cookie banner once](https://katla.app/blog/introducing-browserconsent): BrowserConsent is our free, open source extension for Chrome and Firefox. Why we built it, and the 39 consent platforms it answers from day one. - [First-party vs third-party cookies and consent](https://katla.app/blog/first-party-vs-third-party-cookies): First-party cookies belong to the site you visit, third-party ones to other domains. Why that doesn't decide consent, what browsers block, what to check. - [How long does cookie consent last? Rules by country](https://katla.app/blog/how-long-does-cookie-consent-last): No law fixes how long cookie consent lasts. What the CNIL, ICO, Garante and AEPD recommend, when to ask again, and how it differs from cookie lifetimes. - [What is a consent management platform (CMP)?](https://katla.app/blog/what-is-a-consent-management-platform): A consent management platform runs your cookie banner, blocks tracking until visitors choose and keeps proof. What it does, what it can't, how to choose. - [Which cookies need consent, and which don't](https://katla.app/blog/which-cookies-need-consent): In the EU and UK, cookies need consent unless strictly necessary for what the visitor asked for. Examples, regulator guidance and where countries differ. - [Katla Is Live on Product Hunt](https://katla.app/blog/katla-is-live-on-product-hunt): Katla is live on Product Hunt: cookie consent that does not cost you Core Web Vitals. 4.9 kB headless, one request, and no LCP added in our tests. - [Cookie Consent Fines: What Regulators Punish](https://katla.app/blog/cookie-consent-fines-what-regulators-actually-punish): Cookie consent fines punish four mistakes: tracking before consent, refusing made harder than accepting, assumed consent, and tags nobody authorised. - [How We Block WordPress Cookies Before Consent](https://katla.app/blog/cookie-consent-for-wordpress-and-woocommerce): Katla's WordPress plugin blocks cookies before consent by holding back scripts on the server, before the page is sent. WooCommerce checkout is left alone. - [Manage Cookie Consent From Claude and ChatGPT](https://katla.app/blog/manage-cookie-consent-from-claude-and-chatgpt): Connect Claude or ChatGPT to Katla's MCP server with one URL, then manage cookie consent in plain language: add domains, audit cookies and query consent. - [Introducing the Katla Examples Repo](https://katla.app/blog/introducing-the-katla-examples-repo): Six ready-to-run example projects showing how to integrate Katla cookie consent with Next.js, Vite, and vanilla HTML. - [Auto-Generated Cookie and Privacy Policies](https://katla.app/blog/auto-generated-cookie-and-privacy-policies): Stop writing cookie policies by hand. Katla scans your site, classifies every cookie and generates localized policies that update when your cookies do. - [Getting Started with Headless Cookie Consent](https://katla.app/blog/getting-started-with-headless-cookie-consent): Headless cookie consent is consent logic without a bundled banner: a small API blocks cookies and stores choices, and you build the interface yourself. ## Legal - [Cookie policy](https://katla.app/cookie-policy): Generated by Katla from its own cookie inventory.