Mailchimp landing pages need cookie consent as soon as Track with Mailchimp, Google Analytics or a Meta Pixel is switched on, because those tools store data on the visitor's device. Mailchimp's own cookie banner only notifies visitors and lets them dismiss it, so it does not hold tracking back. To ask first, add a consent banner through a Code block, and turn Track with Mailchimp off for EU traffic if a script in the page body cannot stop it in time.
Mailchimp landing pages track visitors once tracking is on
Track with Mailchimp counts unique visitors and sign-ups on a landing page and records page views in your contacts' profiles, where they can be used for segmenting. According to Mailchimp's Track with Mailchimp guide, you turn it on per page under Settings & Tracking, and Mailchimp itself says that, depending on the law that applies to you, you may need to tell visitors about the tracking and let them opt out.
That is a problem under European and UK privacy rules. Article 5(3) of the ePrivacy Directive requires prior consent before storing non-essential cookies on a visitor's device. The GDPR reinforces this by demanding that consent be freely given, specific, informed and unambiguous. A page that tracks first and informs afterwards meets none of those conditions.
For audiences in California, the CCPA gives consumers the right to opt out of the sale or sharing of personal information, which can include data gathered through tracking cookies.
Which cookies Mailchimp landing pages set
Mailchimp landing pages typically set several cookies tied to analytics and campaign attribution. The exact cookies vary depending on whether you have enabled Track with Mailchimp and whether you have added third-party integrations such as Meta Pixel or Google Analytics.
| Source | What it stores or reads | Category | Typical duration |
|---|---|---|---|
| Track with Mailchimp | Visitor and page-view identifiers for unique visits and conversions | Analytics | Check with a scan |
| Google Analytics 4 (if connected) | _ga, _ga_<ID> | Analytics | 2 years |
| Meta Pixel (if connected) | _fbp | Marketing | 90 days |
| Mailchimp cookie banner | Remembers that the visitor dismissed the banner | Strictly necessary | Up to 1 year |
Mailchimp's help pages do not publish the names of the cookies Track with Mailchimp sets, so scan your published landing page to see the exact names before you write your cookie policy. Apart from the banner's own record, none of these are required for the landing page to work. Under GDPR consent rules, every one of them needs an opt-in before it is set.
Mailchimp's cookie banner notifies, it does not ask
When you turn on Track with Mailchimp, Mailchimp switches on a notification bar at the bottom of the page. Mailchimp's cookie banner guide describes it: it tells first-time visitors that you use cookies, visitors dismiss it with an X or an optional Accept button, it stays away for up to a year after that, and an opt-out link is available if you switch it on. That is a notice, and in the EU and the UK a notice does not meet the consent standard.
The notification bar is informational, not interactive. It does not collect granular consent. Visitors cannot choose which cookie categories to accept or reject, and there is no Reject button equal to Accept. Tracking starts when the page loads, before the bar has been answered, which contradicts the prior-consent requirement.
European data protection authorities have been clear on this point. The CNIL fined SHEIN EUR 150 million in September 2025 for cookies placed before visitors made any choice. The ICO's guidance states that cookie consent must be obtained before non-essential cookies are placed. A notice-only bar does not qualify as valid consent under Article 7 of the GDPR.
What a consent banner on a Mailchimp page has to do
A proper cookie consent mechanism on a Mailchimp landing page must block non-essential cookies until the visitor makes a choice. That means no Mailchimp tracking, no _ga and no third-party pixels firing before consent is granted.
The banner must present clear options to accept or reject cookies. A single "OK" button is not valid consent: the EDPB guidelines on dark patterns confirm that refusing cookies must be as easy as accepting them. The one-click reject requirement is now enforced by multiple EU regulators.
Visitors must be able to withdraw consent at any time. The banner should store each consent record as proof. For sites with international traffic, the banner should adapt based on the visitor's location, showing a full opt-in banner in the EU while offering an opt-out mechanism in California.
Adding a cookie banner to Mailchimp landing pages
Mailchimp landing pages support custom HTML through the Code content block. This is how you add a third-party consent banner, since Mailchimp's own banner only notifies.
Using the Code content block
In the Mailchimp landing page editor, drag a Code block onto your page and paste the cookie banner script into it. With Kukie.io, that is <script src="https://cdn.kukie.io/s/YOUR_SITE_KEY/c.js" async></script>. Know the limit: a Code block sits in the page body, so it runs after Mailchimp's own tracking script has loaded. It can hold back scripts you add after it and third-party tags it recognises, but it cannot undo tracking that already ran.
For EU and UK audiences, that leaves a clear choice for Track with Mailchimp: turn it off on landing pages that receive EU or UK traffic, or accept that it runs before the visitor answers. Analytics and pixels you add yourself can wait for consent.
Kukie.io's script works inside Mailchimp's Code block. The Mailchimp installation guide in the Help Centre walks through the process step by step, from generating the script in the dashboard to pasting it into the Code block.
Blocking cookies before consent
The critical part is ensuring cookies are blocked until consent is given. A consent management platform that supports conditional script loading will prevent connected third-party scripts that load after it from firing until the visitor opts in. Without this blocking mechanism, adding a banner is cosmetic rather than functional.
If you have connected Google Analytics or Meta Pixel to your Mailchimp landing page, those integrations also need to respect consent. Google Consent Mode v2 can handle the Google side, but Meta Pixel requires script blocking at the CMP level.
Email consent does not cover landing page cookies
Cookie consent on a landing page is separate from email marketing consent. A subscriber who opted into your mailing list has not consented to cookie tracking on your landing page. These are two distinct legal bases, and conflating them is a common mistake.
When someone clicks a link in your email campaign and lands on a Mailchimp-hosted page, the cookie banner must still appear. The fact that they voluntarily clicked the link does not constitute consent to be tracked via cookies. Article 5(3) of the ePrivacy Directive applies regardless of how the visitor arrived.
Consider your campaign reporting. If a significant portion of your audience is in the EU, your Mailchimp analytics will only reflect visitors who consent to tracking. This affects your conversion numbers, and it is the cost of asking first.
Categorising Mailchimp tracking cookies
Proper cookie categorisation matters because it determines what your banner blocks and when. Mailchimp's own tracking cookies fall into the analytics category: they measure page visits and conversions but are not required for the page to display or forms to submit.
Third-party cookies you might add to a Mailchimp landing page often fall into the marketing category. Meta Pixel (_fbp), Google Ads remarketing tags, and similar tools all set marketing cookies that require explicit consent.
Session cookies that Mailchimp uses to handle form submissions are functional. These do not require consent because they are strictly necessary for the service the visitor requested. Similar categorisation challenges apply to other email marketing platforms, MailerLite landing pages present comparable issues.
Running a cookie scan on your Mailchimp landing page URL will identify every cookie and script, including ones you may not have added deliberately. Third-party embeds and fonts can introduce cookies you did not expect.
What happens if you skip cookie consent on Mailchimp pages
The risk depends on your audience's location. For EU visitors, cookies set without consent can lead to complaints filed with data protection authorities. The CNIL, France's regulator, issued 83 sanctions in 2025 worth about EUR 486.8 million, 21 of them over trackers, according to its 2025 enforcement review. The largest, against Google in September 2025, reached EUR 325 million. The enforcement trend in 2025 and 2026 shows increasing scrutiny of marketing tools and landing pages.
Under the CCPA, the California Attorney General and the CPPA can impose penalties of up to USD 2,663 per violation, or USD 7,988 per intentional violation or one involving consumers under 16, the amounts in force since 1 January 2025. Landing pages that collect data from California residents without offering an opt-out mechanism are exposed.
Beyond fines, ignoring consent erodes brand trust. Visitors who see no cookie banner, or a banner that clearly does nothing, may question whether you handle their email data responsibly either.
Mailchimp's banner compared with a dedicated CMP
| Feature | Mailchimp cookie banner | Dedicated CMP |
|---|---|---|
| Prior consent (cookies blocked by default) | No | Yes |
| Granular category selection | No | Yes |
| Opt-out link | Optional, single toggle | Full reject and withdraw options |
| Consent record storage | No | Yes |
| Geo-detection for regional rules | No | Yes |
| Google Consent Mode v2 support | No | Yes |
| Third-party script blocking | No | Yes |
Mailchimp's banner was designed to inform visitors, not to collect prior consent. A dedicated consent management platform handles blocking, recording and adapting consent to different jurisdictions.
Mailchimp cookie consent questions
Does Mailchimp set cookies on landing pages without consent?
Yes, once Track with Mailchimp or a connected tool such as Google Analytics is on. Tracking starts when the page loads, before the visitor answers the notification bar, which does not meet the GDPR standard for prior consent.
Does Mailchimp's cookie banner collect valid GDPR consent?
No. The banner informs visitors about cookies and can be dismissed, but it does not block tracking before consent. It lacks granular category controls and does not store consent records. European regulators require active, informed consent before non-essential cookies are placed.
How do I add a cookie banner to a Mailchimp landing page?
Use the Code content block in the Mailchimp landing page editor to add a third-party cookie consent script. The Mailchimp installation guide in the Help Centre has step-by-step instructions. A body Code block cannot stop Track with Mailchimp, so turn that off for EU traffic if you need prior consent.
Do email subscribers still need cookie consent on landing pages?
Yes. Email marketing consent and cookie consent are separate legal requirements. A subscriber who opted into your mailing list has not consented to cookie tracking when they visit your landing page. The cookie banner must still appear.
Can I use Google Analytics on a Mailchimp landing page without consent?
No. Google Analytics sets non-essential cookies such as _ga that require consent under GDPR and the ePrivacy Directive. You need to block the GA script until the visitor opts in, which can be handled through Google Consent Mode v2 and a consent management platform.
What cookies does Mailchimp Track with Mailchimp set?
Mailchimp's help pages do not list the cookie names. Track with Mailchimp counts unique visitors, page views and sign-ups for landing page reports and contact profiles, so its cookies belong in the analytics category. Scan your published page to see the exact names.
Find out what your Mailchimp landing pages set
If you are not sure which cookies your Mailchimp landing pages set, start with a scan of the published URL. Kukie.io lists every cookie it finds by name and category, holds the scripts that load after its banner until visitors choose and records each choice. The Free plan covers up to 5 websites.
