Cookie consent · GDPR
One line of code — or one API call. Free up to 200 consents per month, then €9.99/mo incl. VAT. Hosted in France, open-source, self-hostable.
No account to start · SDK < 5 KB · fails silently
How it works
No dashboard to learn first. Create a space, drop one line, collect signed receipts — a human or a coding agent does it the same way.
One API call (no account), the CLI, or the dashboard returns a site key, your snippet, and an owner token.
Paste the <script> in your <head>. The banner shows in the visitor’s language and blocks trackers until they choose.
Every choice becomes a timestamped, signed receipt you can export as CSV or JSON, anytime.
Developers
The snippet, the CLI, the API and an MCP server — the dashboard is just one view of it. GPC is honored natively; agents can express consent with a mandate.
<!-- one line, in your <head> --> <script src="https://www.getavna.com/avna.js" data-site="cs_9c41…"></script>
$ curl -X POST https://www.getavna.com/v1/sites \ -H 'content-type: application/json' \ -d '{"domain":"example.com","country":"fr"}' # → siteKey, snippet, ownerToken, claimUrl
<!-- nothing loads until the visitor accepts --> <script type="text/plain" data-consent="analytics" src="https://example.com/analytics.js"></script>
$ curl https://www.getavna.com/v1/consents/cs_9c41… \ -H 'authorization: Bearer avna_owner_…' ?format=csv # timestamped, signed receipts — CSV or JSON
GPC honored · consent.txt · MCP server · zero-dependency SDK
What’s inside
Under 5 KB, zero dependencies, silent degradation — it will never stop your site from rendering.
Advertising
Google Consent Mode v2 & Microsoft UET signals are sent automatically. Your campaigns keep their data.
Anywhere
WordPress, Shopify, Next, Wix… one tag in the <head> is all it takes.
i18n
The banner renders in the visitor’s language, no configuration.
Blocking
Trackers stay blocked until the visitor accepts — enforced client-side.
Signals
Global Privacy Control is honored automatically, no extra setup.
Doctrine
Close-button behavior, durations, “continue without accepting”… applied per country.
Open source
The SDK and the jurisdiction dataset are open today; the self-hostable backend is opening next. No lock-in, no black box.
The banner SDK — under 5 KB, zero dependencies
jurisdictionsCC-BY-4.0Cookie-consent doctrine for 56 jurisdictions, sourced from national authorities
The records
Each consent produces a timestamped, server-signed receipt — a read-only copy of the database can’t forge one.
CSV or JSON, anytime, via an owner token — no dashboard required.
Records and backups at Scaleway (Paris). Subprocessor chain published.
Free · no email
Enter a URL: we detect the trackers present and tell you which are hosted outside the EU.
Scan my site →Why avna
Not a manifesto — just the boxes a cookie banner should tick, done in a way developers and agents can actually use.
Install by snippet, CLI, API or MCP. No config wizard to click through first.
Records in France today; the self-hostable backend (one docker compose up) is opening next. No US dependency in the chain.
€9.99/mo incl. VAT per site, free under 200 consents/month. No “contact sales”.
Read the SDK and the doctrine dataset. Fork them. Run them yourself.
Pricing
The banner behaves identically on both plans. Going over quota never blocks your visitors’ consents from being recorded.
Self-hosting will be free and open-source — the backend is opening next.
FAQ
No tool can promise that. avna is a compliance tool, not legal advice. It is designed to align with EDPB and national-authority guidance (CNIL, Garante, AEPD…), and it gives you the banner and the exportable records — the rest depends on your setup.
Records and backups are hosted at Scaleway in Paris (France). The full subprocessor chain is published on the DPA page.
That’s the design. The SDK (MIT) and the jurisdiction dataset (CC-BY) are open today; the self-hostable backend — Postgres + the API, one docker compose up — is opening next. Until then, the hosted plan keeps your records in France.
The SDK is under 5 KB with zero dependencies and degrades silently — if avna is unreachable, your site still renders.
avna sends Google Consent Mode v2 and Microsoft UET signals automatically, so your analytics and campaigns keep working within the visitor’s choice.
Yes — 1 site, up to 200 consents per month, records kept 12 months, full export and full doctrine. No card required.