When a banner is needed
The ICO's PECR guidance says you must tell people about cookies, explain what they do and why, and get consent that is "actively and clearly given" through a positive action such as ticking a box or clicking a link. The exemption covers cookies strictly necessary for a service the user requested; cookies that are "helpful or convenient but not essential", or essential only for your own purposes, still need consent. [1]
The ICO's small-business cookie page notes that, because of the Data (Use and Access) Act, its guidance "is under review and may be subject to change". Recheck before relying on any exemption for analytics. This is a summary of regulator guidance, not legal advice. [2]
Framer's own guidance gives a practical test: a banner should have accept and deny buttons, block cookies until consent, offer granular settings and link to a cookie policy. [3]
Built-in options compared
Read on 30 October 2026. [3][4][5][6][7][8][10]
| Builder | Native banner or API | Built-in analytics and cookies | Third-party scripts |
|---|---|---|---|
| Shopify | Native cookie banner; automated for UK and EEA if you sell there; needs a published privacy policy | Shopify tools and Shopify Pixels are covered by its banner | Need a banner app integrated with the Customer Privacy API, or custom logic |
| Framer | Cookie Banner component; works with Google Tag Manager and Google Consent Mode | Framer Analytics uses no cookies and needs no consent | Banner required for scripts like Google Analytics, HubSpot or YouTube |
| Webflow | Consent APIs only for Webflow Analyze and Optimize | Analyze and Optimize respect the consent state you pass | Your own banner or consent platform; marketplace apps available |
| Carrd | None documented | No analytics by default; native analytics is cookie-free | Embed a consent tool with the Embed element (Pro Standard) |
Platform details
Shopify: the native banner "governs Shopify-specific tools, including cookies and Shopify Pixels". New stores get automated settings that configure the banner for UK and EEA visitors when those markets are active, and you must publish a privacy policy first. Pixels or cookies you add manually or through apps may need a third-party banner or custom logic. [7]
Framer: Framer says sites need no banner by default because it collects no personal data, and Framer Analytics "does not use cookies". Add a banner once you embed services that set non-essential cookies. Its Academy lesson shows the Cookie Banner component placed in a shared component, connected to a Google Tag Manager container ID for Consent Mode, and advises verifying it on the published site. [3][4]
Webflow: its Browser API offers get, allow and deny tracking calls, but they "apply only to Webflow Analyze and Optimize". If you do not use those, the endpoints do not apply, so you need your own consent banner or platform. Webflow points to consent apps in its Marketplace and gives unsupported, as-is sample code for passing choices from OneTrust or TrustArc. The pricing page lists consent management integrations as an Analyze feature. [5][6]
Carrd: sites include no analytics or tracking by default. Site Analytics (Pro Standard) offers Carrd's "native, cookie-free analytics" or providers such as Google Analytics, and Marketing Trackers (Pro Standard) warn that they collect additional visitor data. To add a consent tool, Carrd's Embed element (Pro Standard) can insert code in the head or body. systeme.io, for comparison, documents a Cookiebot setup. [8][9][10][11]
Do you need a banner? Quick decision table
Based on the ICO guidance and the vendor statements above. [1][3][7][8]
| Your setup | Banner needed under the ICO test? |
|---|---|
| Static site, no analytics, no embeds | Usually no non-essential cookies; check your builder and embeds |
| Framer Analytics or Carrd native analytics only | Vendors say these are cookie-free; a banner is not needed for them |
| Google Analytics, Meta Pixel or other ad trackers | Yes, consent before they fire |
| YouTube or other third-party embeds | Framer names YouTube as a case needing a banner; check each embed |
| Shopify store selling to the UK or EEA | Shopify's automated banner covers its own tools; add an integrated app for others |
Setup checklist
- List every script and embed on the site and mark which set cookies.
- Prefer cookie-free analytics where it meets your needs. [3][8]
- Block non-essential scripts until the visitor accepts; a banner that only informs is not consent under the ICO test. [1]
- Give accept and deny equal prominence and a way to change the choice later. [3]
- On Shopify, publish the privacy policy first, then confirm the banner's regions. [7]
- On Framer, connect the banner to your Tag Manager container and test it on the live site. [4]
- On Webflow or Carrd, install a consent platform and confirm it blocks tags before consent.
- Recheck the ICO guidance, which is under review. [2]
Questions before you decide
Does Framer Analytics need a cookie banner?
No. Framer says Framer Analytics does not use cookies or generate persistent identifiers, so no consent is needed for it. You still need a banner if you add services like Google Analytics, HubSpot or YouTube.
Does Shopify have a built-in cookie banner?
Yes. Shopify's customer privacy settings include a cookie banner that is configured automatically for UK and EEA visitors when those markets are active. You must publish a privacy policy first.
Can I use Webflow's consent API for Google Analytics?
No. Webflow's documentation says its consent management APIs apply only to Webflow Analyze and Optimize; for anything else, including Google Analytics, you need your own consent banner or platform.
Which cookies are exempt from consent in the UK?
The ICO says cookies strictly necessary to provide a service the user requested are exempt. Cookies that are only helpful or convenient, or essential only for your own purposes, still need consent.
Sources & verification
Product details and prices can change. Check the linked provider before buying.
- ICO: cookies and similar technologies (PECR) Accessed 30 Oct 2026
- ICO: cookies and privacy notices in detail Accessed 30 Oct 2026
- Framer help: GDPR and cookies Accessed 30 Oct 2026
- Framer Academy: add a cookie banner Accessed 30 Oct 2026
- Webflow developers: site tracking and consent management Accessed 30 Oct 2026
- Webflow: pricing Accessed 30 Oct 2026
- Shopify help: configuring customer privacy settings Accessed 30 Oct 2026
- Carrd: setting up site analytics Accessed 30 Oct 2026
- Carrd: setting up marketing trackers Accessed 30 Oct 2026
- Carrd: embedding custom code Accessed 30 Oct 2026
- systeme.io help: GDPR compliant cookie banner Accessed 30 Oct 2026
Sources link directly to providers. Product buttons may use separately labeled affiliate links. Read our disclosure.