A cookie banner has to be in a language each visitor can read: under Article 12(1) of the GDPR, consent information must be intelligible, and a visitor who cannot read the options has not been informed. Several laws go further. India's DPDP Act lets people choose English or any of 22 scheduled languages, California's CCPA regulations require notices in every language you use with California consumers, and Quebec requires French. Kukie.io's banner ships in more than 70 languages, including four right-to-left ones.
Language decides whether consent is informed
Article 12(1) of the GDPR requires controllers to present information in a concise, transparent, intelligible and accessible form, using clear and plain language. For a website serving visitors across multiple countries, that requirement has a practical consequence: your cookie banner must appear in a language each visitor can read.
The Dutch Data Protection Authority made the point in July 2021, when it fined TikTok €750,000 because the information Dutch users, many of them children, saw when installing and using the app was only in English. The regulator held that information offered only in a foreign language was not readily understandable.
A banner in one language across a multilingual site is poor user experience, and it can also make consent invalid under the GDPR, because a visitor who cannot understand the options presented to them has not been meaningfully informed.
Language requirements by jurisdiction
Different privacy frameworks impose varying degrees of language obligation. Few spell out a "translate your cookie banner" rule, but the transparency principles in each law point in the same direction, and some name languages outright.
| Law | Language requirement | Practical effect |
|---|---|---|
| GDPR (Article 12) | Clear and plain language, intelligible to the audience | Show the banner in the language of the audience you target |
| UK GDPR and PECR | The same transparency standard as the EU GDPR | English is enough for an English-language UK site |
| LGPD (Brazil) | Clear, adequate and prominent information (Article 9). No language is named | Portuguese is the practical choice for Brazilian visitors |
| Quebec | The Charter of the French Language requires French for commercial content, including websites | Show the banner in French. English may sit alongside it |
| India DPDPA (section 5(3)) | The person can choose to read the notice in English or any language in the Eighth Schedule to the Constitution (22 languages) | Offer a language choice for the notice and consent request |
| CCPA regulations (California) | Notices must be available in the languages you ordinarily use for contracts, disclaimers and other information for California consumers (11 CCR section 7003(b)(2)) | If you sell to Californians in Spanish, your notices need Spanish too |
The pattern is consistent: if your site targets people who speak a particular language, your consent mechanism should use it. The DPDP Act and the CCPA rules are on the primary sources: section 5(3) of the Digital Personal Data Protection Act and section 7003 of the CCPA regulations.
Locale detection picks the language automatically
Serving the correct language version of your cookie banner requires reliable locale detection. Three common approaches exist, each with trade-offs.
Browser language header
The Accept-Language HTTP header sent by every browser indicates the visitor's preferred languages in ranked order. A browser configured for German sends de-DE,de;q=0.9,en;q=0.8, telling your server to prefer German. This method requires no third-party services and respects the visitor's own settings.
GeoIP-based detection
IP geolocation maps a visitor's IP address to a country and infers the language from that. A visitor from France gets French, and a visitor from Japan gets Japanese. This approach works well for geo-targeted consent rules but can misfire for expatriates, travellers, and VPN users.
URL or site language
If your site already uses language-specific paths (/fr/, /de/, /ar/) or subdomains (fr.example.com), the cookie banner can inherit the page language. This is the most reliable method because it matches what the visitor is already reading.
The strongest approach combines URL-based detection as the primary signal with Accept-Language as a fallback for the homepage or language-neutral pages. Kukie.io's banner follows the same order: it reads the page's lang attribute first, then the browser's language, and falls back to the default language you set.
What a translated banner has to cover
A cookie banner contains more text than most site owners expect. Beyond the main notice, there are category labels ("Strictly Necessary", "Analytics", "Marketing"), individual cookie descriptions, purpose explanations, and button labels ("Accept all", "Reject all", "Save preferences").
Translating these elements demands attention to three problems.
Accuracy over automation
Machine translation handles everyday text reasonably well. Legal and regulatory language is another matter. A phrase like "legitimate interest" has a specific meaning under GDPR Article 6(1)(f). Translating it loosely - or using a term that carries different legal weight in another language - can undermine the validity of your consent notice. Machine-translate the first draft, then have a native speaker with privacy knowledge review the result.
String length variation
German words are famously longer than English equivalents. "Cookie settings" becomes "Cookie-Einstellungen." A button that fits neatly in English may overflow or wrap awkwardly in German, Finnish, or Hungarian. Your banner design must leave room for text expansion of 30 to 50 percent without breaking the layout.
Consistent terminology
Each language should use consistent terms across the banner, the cookie policy, and any preference centre. If the French banner refers to "cookies analytiques," the cookie policy should not switch to "cookies de mesure d'audience" for the same category. Consistent terminology builds user trust and avoids confusion during regulatory review.
Common banner terms in German, French and Spanish
If you are checking a banner in a language you do not read, these are the labels you will see most often:
| English | German | French | Spanish |
|---|---|---|---|
| Cookie settings | Cookie-Einstellungen | Paramètres des cookies | Configuración de cookies |
| Accept all | Alle akzeptieren | Tout accepter | Aceptar todo |
| Reject all | Alle ablehnen | Tout refuser | Rechazar todo |
| Save preferences | Auswahl speichern | Enregistrer mes choix | Guardar preferencias |
| Necessary | Notwendig | Nécessaires | Necesarias |
| Marketing | Marketing | Marketing | Marketing |
Right-to-left languages mirror the whole banner
Arabic, Hebrew, Persian, and Urdu are read from right to left. Supporting these languages in a cookie banner goes beyond translating the text - the entire layout must mirror.
Buttons that sit on the right in a left-to-right (LTR) layout should move to the left in RTL. Toggle switches flip direction. Bullet points and list markers shift to the right margin. Scrollbars appear on the left side. The close icon moves from the top-right corner to the top-left.
CSS handles most of this through the dir="rtl" attribute on the banner container and logical properties like margin-inline-start instead of margin-left. A cookie banner built with physical CSS properties (left, right, padding-left) will need refactoring to support RTL correctly.
The same banner, left to right and right to left
Common RTL pitfalls
Numbers and Latin-script brand names remain left-to-right even within RTL text. A cookie name like _ga or _fbp should not be reversed. CSS bidirectional isolation (unicode-bidi: isolate) prevents these fragments from being reordered by the browser's bidirectional algorithm.
Icon direction matters too. An arrow pointing right to indicate "next" should point left in RTL contexts. Chevrons, progress indicators, and navigation arrows all need mirroring.
Localisation goes beyond translation
True localisation means adapting the consent experience to regional expectations, not just swapping words.
Date formats differ: "17/03/2026" in Europe becomes "03/17/2026" in the United States and "2026/03/17" in parts of Asia. If your consent log or cookie policy displays dates, format them for the locale. This detail matters when preparing evidence for a DPA investigation, where ambiguous timestamps can cause problems.
Colour carries cultural meaning. Green signals "go" or "safe" in Western design but has different connotations in other cultures. The dark pattern guidance from European regulators already requires that accept and reject buttons carry equal visual weight. Colour choices in a localised banner should not inadvertently steer users toward acceptance.
Formality levels vary. Japanese and Korean distinguish between casual and honorific registers. A cookie banner addressing Japanese visitors should use polite forms. German distinguishes "du" (informal) and "Sie" (formal) - most professional websites use "Sie."
Managing translations at scale
A website targeting 15 countries with consent banners in 10 languages faces a real management challenge. Every time the banner copy changes - a new cookie category, an updated legal reference, a revised button label - the change must propagate across all translations.
Store banner strings in a structured format (JSON or key-value pairs) separate from the banner code. Each string gets a unique key (banner.title, btn.accept, btn.reject, category.analytics.desc) and a value for each locale. This approach enables version control, diff tracking, and integration with translation management systems.
When managing consent across several websites, centralising translations becomes even more valuable. A shared translation repository keeps terminology consistent across properties and reduces duplication.
Fallback strategy
Define a fallback chain for languages your banner does not support. If a visitor's browser is set to Catalan (ca), fall back to Spanish (es). If set to Swiss German (de-CH), fall back to standard German (de). English should serve as the final fallback, but treat it as a last resort rather than a default.
Testing multilingual consent banners
Automated cookie banner testing should cover every supported language. Switch your browser language, clear cookies, and verify that the banner appears in the expected language with correct layout direction.
Pay particular attention to the preference centre. Users who click through to manage individual cookie categories need to see translated category names and descriptions - not English fallbacks mixed with translated headings.
RTL testing requires more than a visual check. Use browser developer tools to confirm that dir="rtl" is applied to the banner container and that logical CSS properties are in use. Check that keyboard navigation (Tab, Enter, Space) follows the correct visual order in RTL mode, since this also affects accessibility.
Run a cookie audit on each language version separately. A translated banner that fails to block scripts before consent defeats the entire purpose of the exercise.
Questions about multilingual cookie banners
Does GDPR require cookie banners to be translated into the local language?
GDPR Article 12(1) requires that information be presented in clear, plain language that is intelligible to the audience. While it does not list specific languages, a banner shown to French-speaking visitors in English alone may fail this test. In 2021 the Dutch DPA fined TikTok €750,000 for giving Dutch users information only in English.
How do I detect which language to show in my cookie banner?
The most reliable method is to match your site's current page language. If the visitor is reading your French pages, show the French banner. For language-neutral entry points, fall back to the browser's Accept-Language header. GeoIP can supplement this but should not be the sole signal.
What languages read right to left, and how does that affect cookie banners?
Arabic, Hebrew, Persian (Farsi), and Urdu are the most common RTL languages. An RTL cookie banner must mirror its entire layout: buttons, toggles, icons, and text alignment all flip. Use the HTML dir="rtl" attribute and CSS logical properties to handle this.
Can I use machine translation for my cookie banner?
Machine translation is a reasonable starting point for general text, but legal and regulatory terms need human review. Phrases like "legitimate interest" or "strictly necessary" carry specific legal meanings that automated tools may translate inaccurately.
Do I need to translate individual cookie descriptions as well as the banner?
Yes. If a visitor opens the preference centre to review which cookies are set and why, those descriptions should be in the same language as the banner. Mixing languages undermines the transparency requirement.
How do I handle text that is longer in other languages than in English?
Design your banner for text that runs 30% to 50% longer than English. German and Finnish translations are typically longer than English. Use flexible containers, avoid fixed-width buttons, and test with your longest supported language.
Show every visitor the banner in their language
If you are not sure which cookies each language version of your site sets, start with a scan. Kukie.io's banner ships in more than 70 languages, including right-to-left scripts, picks each visitor's language from the page and the browser, and lets you edit every text per language.
