Rather be walked through it? Book a demo
Works with
Start here( 3 )
A customer opens your website. Google Analytics notes the pages they read, the Meta pixel remembers them for ads, a chat widget logs the visit. All of it in the first second, before anyone asks them. The DPDP Act says the asking must come first. The cookie banner is how you ask.
01
When someone opens your site, tools like Google Analytics and the Facebook pixel save small notes in their browser so they can recognise that visitor later. Those notes are cookies.
02
The DPDP Act wants a clear yes from the visitor before those notes are saved. Ignoring the banner or a pre-ticked box is not a yes.
03
The small box on the first visit that says what your site collects and asks the visitor to accept or decline. Their answer is recorded, and your site follows it.
The law
The Digital Personal Data Protection Act is India's data privacy law. It was passed in 2023, and the rules that put it into force were notified in November 2025. Enforcement arrives in phases, so this is the time to get ready.
Read the official documents
Your first move( 3 )
Cookie consent is one part of the DPDP Act, not the whole law. It is also the part every visitor sees, so it is the natural place to start.
Run the free scan01
You cannot ask for consent if you do not know what needs it. Get the full list of cookies your site sets, sorted by what they do.
One Privacy scans your site free and sorts every cookie into categories.
02
Show a banner on the first visit and hold non-essential cookies until the visitor agrees.
One script tag adds a banner in your brand and blocks cookies until consent.
03
The law expects you to show what a visitor agreed to and when they agreed.
Every decision lands in an audit log you can export any time.
Connect Claude or ChatGPT and it runs the scan, sorts the cookies and drafts the banner. Anything that touches live visitors waits for your confirmation.
Read the docsWhat cookies were found on my website?
Found 5 cookies on your site, here they are.
Most tools stop at a snippet and a link to the docs. We wire Google Tag Manager and Consent Mode v2 with you, so your tags really wait for consent.
Book a DemoFeatures( 9 )
Stats and facts
Region rules ship for every one of them, so each visitor sees the banner their law expects.
Paste it once, above your tag manager. It drops into WordPress, Shopify, Webflow and any stack that takes a script.
Sets consent defaults immediately, then pulls the banner from a CDN as a deferred script. Nothing blocks your page.
Free tier first, no card. Every paid price is public, with no quote process and no sales call.
FAQ
Until now, no Indian law asked websites to get permission before tracking visitors. The DPDP Act changes that. If your site uses analytics, ads or embedded videos, it collects personal data, and the law expects you to ask first.
Yes. The law covers any business that processes digital personal data of people in India, and there is no small business exemption for consent. If your site runs Google Analytics or a Meta pixel, the law applies to you.
Analytics cookies identify and follow visitors, so they count as personal data processing. You can keep using Google Analytics. You just need consent before its cookies load.
Enforcement is rolling out in phases, but the penalties are serious: up to ₹250 crore for the worst violations. Beyond fines, visitors increasingly expect a clear choice, and a proper banner builds trust.
No. One Privacy is a single script tag that works on WordPress, Shopify, Wix, Webflow and any site where you can paste a script. If you get stuck, we set it up with you.
There is a free plan with no card and no time limit. Every paid price is public on the pricing page, with no quote process and no sales call.
Yes. Every decision is stored in a consent log with the exact banner the visitor saw. You can export the history whenever someone asks for proof.