Consent
Consent records and proof
Review the consent history, find a visitor's state, export to CSV, download a proof as PDF and answer access or erasure requests.
Every banner load and every decision taken (acceptance, refusal, saved preferences, withdrawal) is written to an append-only log: events accumulate, nothing is overwritten. It is this log that lets you prove a consent the day the Commission d'accès à l'information, a customer or an audit asks for it.
The dashboard's two views
A site's Consent tab opens on the current consent; the Full history button leads to the log.
| Page | Content |
|---|---|
| Current consent | One line per visitor, replaced on each new decision: identifier, last update, action (Accepted, Partial, Rejected or Withdrawn badge), granted categories and the policy version in force at the time of the choice. It is the state that applies today. |
| Full consent history | The log, event by event, from the most recent to the oldest: visitor identifier, timestamp, action (including each banner load), location, granted categories, policy version, language, applied regime and GPC signal. |
Both tables show 25 lines per page and filter by visitor identifier, the one in the id field of the `csm_consent` cookie. When a person exercises a right or contests a tracking, that identifier is what links their request to their history. These pages are reserved for the workspace's Owner and Administrators.
Exporting to CSV
Each page offers Export all to CSV: the export covers the whole table, not just the page displayed, up to the 20,000 most recent lines. The file takes the columns of the view (consorm-consentement-actuel-<domain>.csv or consorm-journal-consentement-<domain>.csv), ready for a spreadsheet or for archiving.
The consent proof as PDF
On the Current consent page, each line offers Download consent proof (PDF): a document named consent-proof-<identifier>.pdf that takes up the full history of that visitor's events (date, action, categories, policy version, country, browser). It is the item to produce during an audit, and the same statement a visitor can request by email. It is written in English.
Visitor rights
Your visitors do not need to write to you to exercise their rights: the banner offers a link to download their file, leading to a secure public form. The person enters their consent identifier and their email there; two requests are possible:
- Receive a copy: their statement is sent to them as a PDF by email.
- Erase my history: the records linked to the identifier are deleted; only a non-identifying fingerprint of the identifier is kept, as a deletion receipt.
The form always answers the same way, whether the identifier exists or not, and finds nothing from the email alone: no way to guess an identifier or to probe the record. These two sides, access and erasure, answer the rights provided by Law 25.
Hosted in Canada
The record is stored and hosted in Canada, with no transfer abroad. See Data hosted in Canada.