Cokei — Consent platform

Every cookie on your site, under control.

LGPD · GDPR · CCPA · IAB TCF · GPP

Third-party trackers fire before consent. Cokei scans, blocks and documents every one — in line with the LGPD.

Installs on any platform
WordPress Shopify WooCommerce VTEX Webflow Wix

Real privacy, not compliance theater.

Anonymized IP

We never store the visitor's raw IP — only an irreversible hash.

First-party

The consent cookie lives on your client's domain, not ours.

WCAG 2.1 AA

Accessible banner and policy, validated against AA contrast.

Auditable

Every consent decision is logged and exportable (PDF/CSV).

01 See it in action

Your visitors in control. You, compliant.

Each category can be accepted or rejected — and the choice becomes an auditable consent record, without storing anyone's raw IP. It is the real banner your visitors see.

Try it: click the controls

Granular consent cokei
  • Necessary Always on
  • Functional
  • Analytics
  • Marketing
Accept all Reject Customize
02 The risk is real

A cookie without consent is a fine waiting to happen.

The LGPD allows penalties of up to 2% of revenue (capped at R$50 million per violation), plus the hit to your reputation. Third-party scripts fire before you notice — and most sites do not even know which cookies they load.

Cokei closes that gap.

We discover every cookie with a real browser scanner, block the non-essential ones until the visitor consents, and keep your cookie policy always up to date — automatically.

03 Everything in one place

The complete cookie compliance platform.

From scanner to banner, from policy to reports — without gluing five different tools together.

Cookie scanner

A headless browser crawls your site and discovers every cookie, script and pixel — categorized automatically.

Consent banner

A customizable, jurisdiction-aware banner (LGPD/GDPR/CCPA), with rejecting as easy as accepting.

Auto-blocking

Blocks third-party scripts before consent. Partial by nature — manual tagging closes the last gaps.

Automatic policy

Your cookie policy regenerates with every scan, always true to what the site actually loads. Export as PDF/HTML.

Geolocation

Detects the visitor's country and applies the right rule — GDPR in Europe, LGPD in Brazil, CCPA in the US.

Consolidated reports

Consent rates, trends and cookie inventory across all your sites. Export as PDF/CSV.

REST API

Integrate consent into your stack with authenticated, permission-scoped tokens.

04 Ready in minutes

Three steps to compliance.

01

Install the snippet

Paste one line of code into your site's <head>. Works on any platform — WordPress, Shopify, Webflow or custom code.

02

Scan and configure

Run the scanner, review the cookies found and tune the banner with your brand's colors and copy.

03

Publish and monitor

Turn on the banner. Track consents and new cookies from the dashboard — re-scans run automatically.

Ready to make your site compliant?

Create a free account
05 Standards that matter

One platform, multiple regimes.

From the LGPD to the IAB frameworks — compliance that keeps up with your reach.

LGPD Brazil

Granular consent, cookie categorization and an auditable log with 3-year retention.

GDPR European Union

Purpose-based opt-in, withdrawing consent with equal weight, and the right of access.

CCPA United States

Opt-out model and granular controls for the sale and sharing of data.

IAB TCF 2.2 EU advertising

A compliant CMP for Europe, with TC String, Global Vendor List and __tcfapi.

IAB GPP Global

Global Privacy Platform with __gpp and GPP String, coexisting with the TCF.

06 Privacy by default

We protect your visitors — we do not track them.

Most CMPs store raw IP and user-agent. Cokei was designed never to need them.

We never store raw IP

Every consent stores only a SHA-256 hash with a fixed salt. The original IP never touches the database.

First-party cookie

The consent cookie stays on your client's domain. Cokei creates no third-party tracking cookie.

No visitor identity

We collect no name, email or ID. We have no way to track people — by design.

Truly accessible

Public surfaces compliant with WCAG 2.1 AA, with RTL support (Arabic/Hebrew).

07 Priced in reais, no surprises

Start free. Grow when you need to.

We charge by unique monthly visitors. Go over? The banner keeps working — compliance never stops.

Save 2 months with annual billing

Free

Free to start — one site, up to 5k visitors/month.

Free
5.000 visitors/mo
1 domain
Consent banner

Starter

Get started — one site, essential compliance.

R$ 9,90 /mo R$ 99 /yr 2 months free
50.000 visitors/mo
1 domain
Cookie scanner
Consent banner
Automatic policy
Reports & export
Most popular

Pro

More visitors and features for growing sites.

R$ 49,90 /mo R$ 499 /yr 2 months free
500.000 visitors/mo
1 domain
Cookie scanner
Consent banner
Automatic policy
Reports & export
API (read-only)
Geolocated banners (auto-detect)
Multi-language banner
IAB TCF v2.2 + GPP
Team & roles

Enterprise

Multi-domain for agencies and large operations.

R$ 299,90 /mo R$ 2.999 /yr 2 months free
Unlimited visitors
Unlimited domains
Cookie scanner
Consent banner
Automatic policy
Reports & export
Full API (read + write)
Geolocated banners (auto-detect)
Multi-language banner
IAB TCF v2.2 + GPP
Team & roles
08 Why Cokei

Built for Brazil, ready for the world.

Native real (BRL) pricing

Billing in BRL through a Brazilian gateway. No FX, no IOF tax, no headaches.

LGPD first

Built from scratch for the LGPD — not a European product hastily adapted.

A truly free plan

Start without paying anything: 1 domain and 5,000 visitors/month, forever.

Honest about limits

We do not promise "100% automatic." We explain where blocking is partial and how to close the gap.

09 Frequently asked questions

Everything you need to know.

Do I need a credit card to start?

No. The free plan covers 1 domain and 5,000 visitors per month, forever, with no card.

Does Cokei work on my platform?

Yes. Just paste a snippet into the <head>. It works on WordPress, Shopify, Webflow, Wix, VTEX or any site with HTML.

Does auto-blocking guarantee 100% compliance?

Automatic blocking covers most cases, but it is partial by nature — inline scripts and unknown vendors can slip through. The recommended manual tagging closes the remaining gaps.

Do you store my visitors' IP?

Never the raw IP. We keep only an irreversible hash (SHA-256 with a fixed salt), enough for consent auditing without identifying people.

What if I go over the visitor limit?

The banner keeps working normally — compliance is never interrupted. You just get a notice to upgrade whenever you want.

Is Cokei good for agencies?

Yes. The Enterprise plan offers multi-domain and team roles so you can manage many clients in one place.

Ready to start?

Make your site compliant today.

Create your free account, install the snippet and scan your first site in minutes.