iubenda

This iubenda review starts with a point that is easy to miss: iubenda is a legal compliance suite, not only a cookie banner. The Italian company sells a privacy and cookie policy generator, a cookie consent solution, a consent database for storing proof of consent, and a terms and conditions generator, all managed from one dashboard.

For an SMB, that bundle is the main reason to consider it. You get the documents GDPR expects you to publish and the banner that enforces cookie consent from one vendor. Generated texts are available in several languages, including German for sites that need policies under the DSGVO, the German name for GDPR.

iubenda offers a free plan, which its pricing page presents as a way to explore the essentials before upgrading. It suits a small personal or test site. Paid plans are bought per site, billed monthly or yearly, with a discount for paying yearly.

The paid tiers are Essentials, Advanced and Ultimate. iubenda's pricing page lists the consent database, IAB TCF and monthly site scans on every paid plan. The terms and conditions generator starts at Advanced, and Ultimate moves the Site Scanner to hourly scans. Because each site needs its own plan, a business with several sites should price each one. Plan contents change, so confirm current tiers on iubenda's pricing page.

The cookie solution blocks non-essential scripts until consent, records the choice and lets visitors reopen their preferences, which is what ePrivacy consent rules require in practice. iubenda supports Google Consent Mode v2, so Google Analytics and Google Ads receive denied or granted signals instead of being loaded or blocked blindly.

The consent database addresses a separate GDPR Article 7 obligation: demonstrating consent collected through forms such as newsletter sign-ups. iubenda's documentation states that it is a registered IAB TCF CMP supporting TCF 2.3. That matters if you sell programmatic advertising. For a site running GA4 and Google Ads, Consent Mode is the signal that counts.

Setup follows a predictable path. You describe your business, add the services your site uses (analytics, ads, embeds, payment providers), then add the generated policy links and the cookie banner script to your site. iubenda publishes installation guides for common platforms, including a WordPress plugin.

iubenda's documentation describes a Site Scanner that checks your site for cookies, trackers and third-party services and flags any that are missing from your policy or banner. On a monthly scan cycle, a new script can run for weeks before a scan catches it. When you install a new tool, add it to the policy yourself, then review the next scan report to confirm nothing else is missing.

Our take: iubenda is the most practical choice in our dataset for a small business or e-commerce site that needs published policies and a compliant cookie banner and has no in-house legal support. The generators save real drafting time, and the free plan lets you see the workflow before paying.

It is a weaker fit for teams that want detailed consent analytics or banner A/B testing, and for groups that want many domains under one plan, since each site is billed separately. Treat the generated policies as a well-structured draft: read them, remove services you do not use, and have counsel review them if your processing is unusual.