Biscotti

Biscotti is a lightweight, ultra-fast consent management platform built for GDPR, CCPA, TCF 2.3 and global privacy law compliance, with EU-hosted data, native Google Consent Mode v2, and one-click integrations for all major CMS and e-commerce platforms.

TL;DR

Biscotti is a modern consent management platform that handles GDPR, CCPA, and 8+ global privacy regulations out of the box, with automatic geo-detection and a Pre-Boot Shield that blocks all cookies before consent is given.

With German-hosted servers, self-hosted fonts (no IP leaks), native Google Consent Mode v2, and official plugins for WordPress, Shopify, Shopware, Magento, PrestaShop and Joomla, it’s the compliant CMP that actually fits how small teams and agencies work.

At-A-Glance

Overview

Biscotti CMP is a modern, privacy-first consent management platform built by Campcruisers GmbH in Germany. Designed specifically for website owners, agencies, and e-commerce teams who need real compliance without the enterprise price tag, Biscotti combines technical precision with legal robustness across 8+ global privacy regulations.

Pre-Boot Shield and Lightweight Performance

Most cookie banners claim to block trackers before consent but few actually do it properly. Many load the banner and the tracking scripts at the same time, meaning data is already being collected before your visitor has made any decision. Biscotti’s Pre-Boot Shield is different. It ensures that absolutely nothing fires before the user makes a consent decision. No trackers, no pixels, no scripts, no exceptions. The consent script itself is built to be lightweight with zero performance impact and no Cumulative Layout Shift (CLS), so your site speed scores stay clean and your visitors don’t experience any layout jumping as the banner loads.

For site owners running on tight performance budgets or managing high-traffic pages, this matters as much as the compliance itself. Google rewards fast, stable pages and penalizes anything that degrades the user experience, so getting your CMP right is good for both your legal standing and your search rankings

AI-Powered Cookie Scanner

Manually identifying and categorizing every cookie on a modern website is a compliance nightmare, especially when third-party tools, plugins, and embedded scripts are constantly changing what they drop. Biscotti’s AI-powered scanner automatically detects and categorizes all first-party and third-party cookies, pixels, beacons, and tracking scripts active on your site. It identifies analytics, marketing, and social media trackers, then surfaces anything that’s firing before consent, which is where most GDPR violations happen.

The scanner runs directly from within the dashboard, so there’s no need for separate tools or external audits. As your site evolves and new integrations are added, the scanner keeps your cookie declaration accurate and up to date, reducing the risk of unknowingly falling out of compliance between manual reviews.

Native Google Consent Mode v2

Since March 2024, Google Consent Mode v2 has been mandatory for any site running Google Ads or Analytics targeting EU users. Without it, you lose access to ad personalization features and your conversion data becomes unreliable. Biscotti sends all required consent signals automatically with no manual configuration and no guesswork. It supports both Basic Mode, where Google tags load only after consent is given, and Advanced Mode, where tags load immediately but operate in a cookieless state until the user consents, enabling better conversion modelling from Google even when consent is declined.

Meta and Microsoft UET consent signals are also handled natively, so your full advertising stack stays functional and compliant without you having to manage multiple signal configurations across different platforms.

A/B Banner Testing and Consent Rate Optimization

Your consent acceptance rate directly affects your ad data quality, your analytics accuracy, and ultimately your ability to make informed marketing decisions. A banner that performs even 10% better at driving opt-ins means significantly more usable data flowing into your ad platforms. Biscotti lets you test banner variants against each other to find the configuration that maximizes opt-in rates for your specific audience, testing different layouts, placements, button text, and colour schemes.

Beyond optimization, a full audit trail logs every consent decision, change, and revocation across your domains, keeping you audit-ready at all times. If a data protection authority or legal challenge ever requires you to prove consent was properly obtained, Biscotti’s logs give you the documented evidence you need.

One-Click CMS and E-Commerce Integrations

Biscotti offers official plugins and native extensions for WordPress, Shopify, Shopware 6, Magento 2, Adobe Commerce, PrestaShop, and Joomla, covering the vast majority of websites and online stores that agencies and founders are actually running. The WordPress plugin is listed in the official WordPress plugin directory, supports Gutenberg blocks for easy placement, and includes shortcodes for embedding legal texts such as cookie declarations directly into your privacy policy pages without any custom coding.

The Shopify app integrates natively with theme settings and handles consent management automatically at the storefront level, keeping the checkout experience smooth and compliant. For teams with more complex setups or custom-built platforms, a full JavaScript API and server-side REST API are available, giving developers the flexibility to integrate Biscotti into virtually any tech stack.

Built for Agencies: Run Your Own White-Label Consent Business

Biscotti isn’t just for managing your own website. With the Agency plan, you can run cookie compliance as a service for your clients under your own brand. The dedicated Agency dashboard gives you a centralized view of all your clients in one place, with the ability to add new clients, manage their websites, and oversee their compliance status without ever logging out. Each client gets their own isolated account, their own consent configuration, and their own banner setup, while you retain full oversight from a single reseller dashboard.

Sub-accounts mean your clients can log in and manage day-to-day settings themselves if you choose, or you can handle everything on their behalf. With unlimited sessions, a real-time scanner, and dedicated support included in the Agency plan, you have everything you need to offer a professional, fully managed GDPR compliance service to your clients, whether you’re a web agency, a freelance developer, or a digital consultant looking to add a recurring revenue stream to your business.

Stop leaving your site exposed to GDPR fines and legal warnings.

Lock in your Biscotti lifetime deal exclusively at Earlybird.

Plan & Features

Deal Terms and Conditions

Lifetime access to Biscotti

All future updates

You must activate your license within 60 days of purchase

30 day money-back guarantee. 

Try it out for 30 days to make sure it’s right for you!

Features Included In All Plans

GDPR, CCPA, LGPD, POPIA, PDPA, PIPEDA, APPI, PIPL Compliance

Pre-Boot Shield (blocks all cookies before consent)

AI-Powered Cookie Scanner

Google Consent Mode v2 (Native)

A/B Banner Testing and Consent Rate Optimization

Full Audit Trail and Consent Logs

Self-Hosted Fonts (no IP leaks)

Legal Text Generator

Dedicated AI Services Category (ChatGPT, Claude, Gemini)

Automatic Geo-Detection

Rollover Sessions (unused sessions never expire)

German EU Servers

Biscotti FAQ – Know Before You Fly