Skip to content
Start free Sign in

Region rules and geo-detection

Last updated

Region rules let one banner behave differently depending on where the visitor is. Each rule sets the consent model, the buttons, how long a choice is kept and a few other settings for one region. Everything else, such as the design, the texts and the categories, comes from the rest of the Banner Editor and is the same everywhere.

How a visitor gets a rule

As the page loads, the banner asks Kukie.io where the visitor is, then picks one rule, from the most specific to the least:

  1. The rule for the visitor's exact place, for example California or Germany.
  2. If there is none, a rule for a broader region that contains it: United States, Canada or European Union.
  3. If there is none, Rest of World.

If the location cannot be found, or the lookup takes longer than 3 seconds, the visitor gets your strictest rule (an Opt-in rule if you have one), so a failed lookup never shows a weaker banner than the visitor should see.

The Rest of World rule

Every site has a Rest of World rule. It covers every visitor that no other rule covers. You cannot remove it, and it never counts against your plan's number of custom regions.

The rules a new site starts with depend on the plan:

  • Plans with a set number of custom regions: Rest of World only, set to Opt-in, so every visitor sees an opt-in banner until you add a region.
  • Plans with unlimited regions: Opt-in rules for the European Union, the United Kingdom, Switzerland and Brazil, a Notice only rule for the United States that closes after 30 seconds, an Opt-out rule for California with the Do Not Sell or Share dialog on, and a Notice only Rest of World that closes after 30 seconds.

How many regions you can use

Your plan sets how many custom regions can be active at the same time, besides Rest of World. A region you turn off frees its place, so you can switch which regions are in use without upgrading. If a plan change leaves you with more active regions than the new plan allows, the least strict ones are paused (marked Paused by plan) and come back when you upgrade.

Add a region

  1. In the Banner Editor, open the Regions tab.
  2. Select Add region and choose a place. Places that already have a rule are not listed. The consent model shown beside each place is where the new rule starts.
  3. Change the settings you need, then select Save rule.

Tip: Each rule saves on its own with Save rule. Save configuration at the top of the Banner Editor does not save region rules. A rule with changes that are not saved yet shows Unsaved changes.

What a rule sets

  • Active: whether the rule is in use. While it is off, visitors there get the broader region's rule, or Rest of World.
  • Consent model: Opt-in, Opt-out, Notice only or Hidden. See Consent models explained.
  • Buttons: Accept all, Reject all and Manage preferences. The Reject All button and Customise button switches on the Design tab apply to every region: a button turned off there stays hidden in every rule. The banner always keeps at least one button.
  • Close after a time and Close on scroll (Notice only): the notice closes by itself, and the visitor's choice is recorded as implied consent. The timer stops as soon as the visitor uses the banner.
  • Consent duration in days (1 to 730): how long a choice, an acceptance or a refusal, is kept before the banner asks again. Safari keeps a choice saved by the banner for at most 7 days.
  • Ask again when categories change: visitors choose again after you add or remove a cookie category. Changes to cookies, scripts or texts do not ask again. To ask every visitor again, use Renew user consents in Site Settings.
  • Cookie wall (Opt-in only): a full-screen banner that hides the page until the visitor chooses. See Cookie wall.
  • Do Not Sell or Share dialog: lets a footer link open the opt-out dialog for visitors this rule covers. See Set up the Do Not Sell or Share link.

A Hidden rule shows no banner, so its buttons, cookie wall and asking again do not apply.

With Google Consent Mode on, Kukie.io tells Google which regions start with consent granted. Opt-in regions start denied and stay that way until the visitor accepts. Opt-out, Notice only and Hidden regions start granted through a default scoped to those regions, and Reject all or an opt-out sends denied.

Google's EU user consent policy asks for consent first from visitors in the European Economic Area, the United Kingdom and Switzerland. If a rule that does not wait for consent covers any of those places, the Regions tab names them and offers an opt-in rule for a place that has none. For the full behaviour, see Google Consent Mode v2.

Visitors from Brazil

Brazil's data protection authority, the ANPD, considers consent the more appropriate basis for cookies that are not necessary, and recommends keeping those cookies off until the visitor chooses. New sites on plans with unlimited regions start with an Opt-in rule for Brazil. Sites created before Brazil joined the ready-made rules do not have one, so visitors from Brazil get Rest of World. If the rule they get does not wait for consent, the Regions tab says so and, when the site has no Brazil rule and a region is free, offers Add an opt-in rule for Brazil.

A choice a visitor has already made, including one recorded when the banner closed by itself, stays until it expires. To ask every visitor again, use Renew user consents in Site Settings. If the site loads Kukie.io through the Kukie CMP template in Google Tag Manager, update its Default Consent Settings rows from the Installation card after you add the rule, and publish the container again.

Regions you can add

  • Europe: European Union (the 27 EU countries, Iceland, Liechtenstein, Norway and the EU regions with country codes of their own, such as Réunion), United Kingdom, Switzerland.
  • EU countries with a rule of their own: Germany, France, Italy, Spain and the Netherlands. Without one, they use the European Union rule.
  • Americas: United States, Canada, Quebec, Brazil.
  • US states with a privacy law: California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island. Without a rule of their own, they use the United States rule.
  • Asia-Pacific: Australia, New Zealand, Japan, South Korea, India.
  • Africa: South Africa.

The consent model each place starts with is a starting point, not legal advice. Check what applies to your site.

How the location is found

The country comes from the visitor's connection: from Cloudflare's CF-IPCountry header, or from a MaxMind GeoLite2 database on Kukie.io's own servers. A US state and Quebec come from the MaxMind database. Nothing needs to be set up on your site.

Rule priority

If you have rules for both a broad region (the European Union) and a place inside it (Germany), the more specific rule wins. The visitor's place is resolved from most to least specific: an exact rule for the place wins; otherwise a rule for a broader region that contains it applies; only when neither exists does Rest of World apply.

Test your rules

Use a VPN to connect from the place you want to test, or ask someone there to open your site. The banner's debug mode (?kukie_debug=1 at the end of the page address) shows which region was detected and which consent model applies.

Remove a rule

Open the rule and select Remove rule. It is removed at once, and Undo brings it back for a few seconds. Visitors from that place then get the next most specific rule: a broader rule that contains the region if you have one (for example, the European Union rule after removing the Germany rule), otherwise Rest of World. Rest of World cannot be removed.

Was this helpful?

Listed on