Cookie consent
70% cheaper
than Cookiebot

Priced on the thing that costs money

Cookiebot bills by subpage count and moves you up a tier as your site grows. Shortbread is €9 a domain, or €29 for an agency's first ten, and the pages are unlimited.

Switch without re-asking everyone

Shortbread reads the consent Cookiebot already stored and honours it, and it answers to the same JavaScript API, so your tag manager keeps firing.

Installs itself, even by an AI agent

One script tag, no key. The site exists on first load and the owner claims it by email. Coding agents can do the whole job without a human signing up.

Lighter than the page it sits on

19 KB, no dependencies, shadow DOM. Consent Mode v2 defaults go out before any tag runs, and Global Privacy Control is honoured.

How the switch works

1. 1
   Paste your URL

   Shortbread finds your Cookiebot tag, your declaration, and the trackers on your pages.

2. 2
   Pick a look

   Match your site's colours automatically, or set your own. The preview is live.

3. 3
   Swap one script tag

   Replace the Cookiebot tag with Shortbread's. Everything that listened to Cookiebot keeps working.

4. 4
   Verify

   Shortbread confirms the banner is up, then scans weekly and emails you when a new cookie appears.

<script id="Cookiebot"
  src="https://consent.cookiebot.com/uc.js"
  data-cbid="8f2c1a3e-...-c9d4"
  data-blockingmode="auto"></script>

<script src="https://tryshortbread.com/shortbread.js" async></script>

Cookiebot list prices from cookiebot.com, read 2026-10-21, excl. VAT.

Before you switch

Is this legally enough?

Yes. Shortbread gives equal weight to Accept and Reject, blocks non-essential scripts until consent, records every decision with a timestamp, and renders a cookie declaration. That is what GDPR, PECR, and the ePrivacy guidance ask for. Your privacy policy is still yours to write, and we link to it.

What about IAB TCF and Google-certified CMPs?

Only sites that run programmatic ads (AdSense, Ad Manager) in Europe need a TCF-registered CMP. Shortbread does not do TCF yet. If you sell ad inventory, stay on a certified CMP for now.

Will my Google Tag Manager setup break?

No. Shortbread sends Consent Mode v2 defaults and updates, pushes the same dataLayer events Cookiebot's template uses (cookie_consent_statistics and friends), and exposes window.Cookiebot with the same properties. Scripts marked type=text/plain with data-cookieconsent are released the same way.

Do returning visitors get asked again?

Not if you keep the carry-over setting on. Shortbread reads the CookieConsent cookie Cookiebot stored and adopts the same choices. Turn it off if your counsel prefers a fresh consent.

Where does the free plan's byline go?

A small 'Consent by Shortbread' link in the banner footer. Pro and Agency remove it.

Is the banner open source?

Yes, MIT. You can read every line that runs on your visitors' browsers. The hosted parts are the scanner, the consent log, geo-targeting, and the dashboard.