Every time a visitor makes a choice in your banner, Kukie.io saves a consent record. The Consent Log lists these records, so you can show when and how a visitor consented and answer a visitor's request about their data.
What each record holds
- Consent ID: a random ID created in the visitor's browser each time they save a choice. It is the visitor's receipt for that choice.
- Action: what the visitor did, for example Accept All, Reject All, Custom or Update. Opt Out also covers an opt-out the banner recorded from the visitor's Global Privacy Control signal.
- Categories: the cookie categories the visitor accepted. On a site that asks per service, the services accepted are recorded too.
- Time, country and page: when the choice was made, the country it came from and the page address, without the query string.
- Banner version: the version of your banner settings the visitor saw.
- Google Consent Mode state: kept only when it is sent with the choice through Kukie.io's API. Kukie.io's banner does not send it, so on banner records it is empty.
- A browser ID and two hashes: a random ID stored in the visitor's browser, which links the records of the same browser, and keyed hashes of the IP address and the browser's user agent. The raw IP address is not stored. The Consent Log page does not show these values or the Consent Mode state.
To stop recording choices on a site, turn off Consent log in Site Settings > Consent.
Open the Consent Log
Open your site and select Consent Log. The newest records come first, 25 to a page. To narrow the list, set From, To, Action or Country (a two-letter code, such as DE) and select Filter. By default, the list starts at the beginning of your retention period.
Find one visitor's records
When a visitor asks to see or delete their data, ask them for their consent ID. Then:
- In Find a visitor's records, paste the consent ID and select Find records.
- Kukie.io finds the record with that ID and then every record from the same browser on your site, searching one month at a time back to the oldest record your site still holds. On a busy site the search can take a while, and you can stop it with Stop search.
- When the search is complete, select Export CSV to download the records, or Delete followed by the number of records to delete them.
The file has the columns of the Consent Log export plus the browser ID, the user agent hash and the Consent Mode state, so it holds the whole of each record. Several people can use the same browser: before you send the file, check that the records belong to the person asking. If a browser has more than 1,000 records, the list shows the newest 1,000, and Export CSV and Delete all records from this browser include every record.
You can also select the first characters of a consent ID in the list to search for it.
Your banner can show visitors their consent ID. It is off until you turn on Show the visitor's consent ID in the Banner Editor, on the Preferences modal tab. With it on, once visitors have made a choice, and while the consent log is on, the end of the banner's preferences shows Your consent ID in the banner's language, the ID of their latest choice and a Copy button. To get there, a visitor reopens the banner with its revisit button and opens the preferences, or uses a link on your page with the data-cc-open-preferences attribute, which opens the preferences directly. The Banner Editor preview does not show the ID, because it previews a first visit.
A new consent ID is created every time a visitor saves a choice, and your site's own scripts receive it in the cc:consent-updated event, so you can also show it elsewhere on your site. See JavaScript events and consent callbacks.
The search links records through the ID stored in the visitor's browser. Records from another browser or device, from your site at another address (for example with and without www), or from before the visitor cleared their browser's storage, have a different browser ID and are not found. If a visitor cannot give you a consent ID, contact Kukie.io support.
Deleted records cannot be recovered, and they may be the proof of consent you need later. Export them first if you might need them. Copies in Kukie.io's backups expire within 30 days. Kukie.io notes each export and deletion of a visitor's records in its audit log, with the person who did it, the time and the number of records, but not the consent ID: keep that with your own record of the request.
Export records
Select Export CSV at the top of the page to download the records that match your filters. The file has one row per record: time, consent ID, action, categories, country, page address, IP hash, banner version and services.
Delete records in bulk
- Delete Selected: tick the records you want to delete, then select Delete Selected and confirm.
- Delete All: deletes every record for the site, including records your filters hide. Type DELETE to confirm.
Who can do what
Everyone with access to the site can view the Consent Log and search for a visitor's records. Only owners and admins of the organisation can export or delete records.
How long records are kept
| Plan | Retention |
|---|---|
| Free | 12 months |
| Pro | 24 months |
| Agency | 24 months |
| Unlimited | 36 months |
You can choose a shorter period for a site in Site Settings > Consent > Consent retention. Records older than the period are deleted automatically every night. For details, see Consent retention and data clean-up.
