The Script Centre lets you manage third-party scripts that should only load after visitors consent to specific cookie categories. Instead of embedding scripts directly in your HTML and hoping they respect consent, you can add them to the Script Centre and let Kukie.io handle the loading logic.
What Is the Script Centre
The Script Centre is a managed script injection system. You add scripts (such as analytics trackers, marketing pixels, or chat widgets), assign each to a cookie category, and choose where in the DOM it should be injected. When a visitor gives consent for that category, the script loads automatically.
Adding Managed Scripts
Navigate to your site's Cookies & Scripts page and open the Categories & Cookies tab. Click Add Script and fill in:
- Name - a descriptive name for the script (e.g. "Facebook Pixel").
- Script code - the HTML/JavaScript snippet to inject.
- Category - the cookie category that must be accepted before this script loads.
- Position - where to inject the script: head start, head end, body start, or body end.
Per-Category Consent Gating
Each managed script is tied to a cookie category. In the opt-in consent model, the script only loads after the visitor accepts that specific category. In opt-out mode, the script loads immediately and is removed if the visitor later opts out.
Services Detected by the Cookie Scanner
Every cookie scan records the embedded iFrames and external scripts on each page. When it recognises one of the 12 embed services the iFrame blocker knows (YouTube, Vimeo, Google Maps, reCAPTCHA, HubSpot and others) and your site has no service with that identifier yet, the service is created for you in the matching category and marked Detected by scan - see iFrame Blocking & Placeholders. Cookie-based services (Google Analytics, Facebook Pixel, Hotjar and more) are still categorised through the cookies the scan finds.
Script Sanitisation
All managed scripts are sanitised on the server side before being served to visitors. Potentially dangerous patterns are stripped to prevent XSS attacks. This ensures that even if a script snippet contains unexpected code, it cannot compromise your visitors' security.
Tip: Use the Script Centre instead of manually embedding tracking scripts in your site's HTML. This ensures all scripts respect consent choices and gives you a central place to manage them.
