A Framer site does not need a cookie banner for Framer's own analytics, because Framer says those collect no personal data. You need one once you add services that set non-essential cookies, such as Google Analytics, a marketing pixel, HubSpot or embedded YouTube videos, and your visitors include people in places with consent rules, such as the UK and EU. Framer's Cookie Banner component works with Google Tag Manager and Google Consent Mode. Separately, if your site collects personal data through forms, publish a privacy policy page.
This is general information, not legal advice. Privacy laws differ by country, so check the rules where you and your visitors are, or take advice.
When does a Framer site need a cookie banner?
Based on Framer's GDPR and cookies article:
| Your site uses | Cookie banner needed? |
|---|
| Only Framer's built-in analytics | Framer says no |
| Google Analytics or Google Tag Manager tags | Usually yes, where consent rules apply |
| Advertising or social pixels | Usually yes |
| Embedded YouTube or other third-party media | Often yes, depending on the embed |
| Third-party chat, booking or form widgets | Check what cookies each sets |
Essential cookies, those the site needs to work, do not usually need consent. Non-essential cookies, such as analytics and advertising, usually do where the GDPR, the UK GDPR and the UK's PECR apply. The UK regulator, the ICO, publishes guidance on cookies.
What should a cookie banner do?
Framer's article lists four features a GDPR-compliant banner generally needs:
- Accept and deny buttons
- Blocking non-essential cookies until the visitor consents
- Granular choices through settings
- A link to your cookie policy
Do not pre-tick boxes or make "reject" harder to find than "accept".
How does Framer's Cookie Banner component work?
Framer's Cookie Banner component runs consent through Google Tag Manager and Google Consent Mode. Framer's academy lesson explains the setup:
- Create a Google Tag Manager account and web container.
- Add your tags (such as Google Analytics) inside Tag Manager, set to respect consent.
- In Framer, insert the Cookie Banner component into a shared component that appears on every page, such as the navigation.
- Enter your Tag Manager container ID in the component.
- Customise the text, layout and colours, and add a link to your cookie policy.
- Choose whether to show a trigger that lets visitors reopen their settings.
- Publish and test on the live site.
The component can behave differently for the EU and the rest of the world and set default consent states. Enter the Tag Manager ID only in the banner; do not also paste the Tag Manager code into the site head, or it loads twice.
Do you need a privacy policy page?
If your site collects personal data, such as names and emails through a contact form, booking requests or a newsletter signup, many laws require you to explain what you collect and why. Framer's article says that when you collect personal data from EU residents you have responsibilities as a data controller.
What should a small business privacy policy cover?
- Who you are and how to contact you
- What personal data you collect, such as form fields and analytics
- Why you collect it and the legal basis, where required
- Who you share it with, such as your email provider, form tool or booking system
- How long you keep it
- People's rights, such as access and deletion, and how to use them
- Cookies, or a link to a separate cookie policy
- The date it was last updated
Write it for your actual setup. Do not copy another company's policy without checking every line against what your site does. Regulators such as the ICO publish guidance and templates for small organisations.
Where should these pages go?
Link the privacy policy and cookie policy in the footer of every page, and next to forms that collect personal data. Add a short line under each form saying how the data is used, with a link to the policy.
What do sites often get wrong?
- Adding Google Analytics with no banner
- A banner with only an "OK" button
- Tags firing before consent
- A privacy policy that mentions tools the site does not use, or misses ones it does
- No link to the policy near forms
Accessibility applies to the banner too: it must work with a keyboard and screen reader. See website accessibility for small businesses.
How do you test it?
Open the site in a private window, check that no analytics or marketing cookies are set before you choose, reject all and check again, then accept and confirm the tags fire. Browser developer tools show which cookies are present. Add this to your launch review; see the Framer template launch checklist and Framer form submissions. It applies to every getsites template. For analytics setup, see tracking ChatGPT and AI traffic in Google Analytics.
Related guides: the Framer template licence for client sites, moving from Wix or Squarespace to Framer and one-page small business websites.
Frequently asked questions
Does a Framer site need a cookie banner?
Not for Framer's own analytics, according to Framer. If you add services that set non-essential cookies, such as Google Analytics or advertising pixels, you usually need one where consent rules apply.
Does Framer have a cookie banner?
Yes. Framer's Cookie Banner component works with Google Tag Manager and Google Consent Mode and can be customised to match your site.
Do I need a privacy policy on my small business website?
If your site collects personal data, such as through contact forms or newsletter signups, many laws require one. Check the rules where you operate.
Does embedding YouTube need cookie consent?
Embedded YouTube videos can set cookies. Framer lists YouTube among services that may need a cookie banner.
Can I copy a privacy policy from another website?
Do not copy one without adapting it. It must describe what your own site collects and which tools it uses.