What CookieFirst does

CookieFirst is the commercial brand of Digital Data Solutions B.V., a Dutch private limited company headquartered in Amsterdam, founded in 2019. The company operates a cloud-based Consent Management Platform (CMP) that helps website operators obtain, record, and manage user cookie consent in compliance with GDPR, ePrivacy, CCPA, LGPD, PIPEDA, Quebec Law 25, and Thailand's PDPA. Its core technology stack includes an automated monthly cookie scanner, a customizable cookie banner, a cookie policy generator supporting 44+ languages, EU-based consent storage in OVH data centers (Netherlands/France), encrypted consent audit trails, and certified integrations with Google Consent Mode v2 and the IAB Transparency and Consent Framework (TCF) 2.2. The platform is delivered as a self-serve SaaS product with native plugins for WordPress, Shopify, Magento, Shopware, PrestaShop, Joomla, Drupal, and Typo3.

The business model is a tiered subscription SaaS — Free, Basic (€99/year), Plus (€209/year), and custom Enterprise — augmented by a reseller/affiliate program paying 30% recurring commission to agencies and web developers. Distribution is product-led growth via a 14-day free trial on the public website, with a separate enterprise sales motion and a dedicated partner channel for agencies managing 500+ client sites. CookieFirst monetizes a horizontal use case (any commercial website needing privacy compliance) and is positioned competitively against Cookiebot, Usercentrics, OneTrust, Osano, CookieYes, Axeptio, and Borlabs Cookie. Named enterprise customers include Vogue, Aegon, Berenberg Bank, Hyundai, Globus Baumarkte, Regent Hotels, Carglass, Elsevier, InterContinental Hotels, and ProCredit Bank.

In March 2026 CookieFirst was acquired by iubenda srl, an Italian privacy software company, making iubenda the corporate parent of Digital Data Solutions B.V. The CookieFirst brand continues to operate, and the company has been rebranded in its visual identity to reflect the iubenda relationship. Leadership comprises co-founders Kees Bos (CEO) and Tom Bos, with Tom van den Bos serving as Data Protection Officer. Headcount is reported at 1–10 employees, indicating a lean operating model with heavy reliance on partners, automation, and its agency channel to scale customer acquisition.

Name

CookieFirst

Legal name

Digital Data Solutions B.V.

Website

https://cookiefirst.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

1–10 employees

Short description

CookieFirst (Digital Data Solutions B.V., Amsterdam) is a cloud-based GDPR/CCPA/LGPD Consent Management Platform offering automated cookie scanning, customizable banners, and Google Consent Mode v2/IAB TCF 2.2 integrations, sold via self-serve SaaS to global websites and resold by agencies; acquired by iubenda srl in March 2026.

Ownership category

akta.pro rank

Product category

Consent Management Platform (CMP)

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Consent, Preference & Privacy Management (CMP) (BPAFAFAL)

akta.pro secondary industries

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH), Privacy Governance & Consent Management (HDADAIAI)

Keywords

• Consent management platform
• Cookie consent software
• GDPR compliance tools
• Privacy regulatory software
• Website consent management

Headquarters

HQ city

Amsterdam

HQ country

Netherlands

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Personnel, Marketing or Sales, Operations

Revenue model

1. Subscription SaaS (Free, Basic, Plus, Enterprise tiers): CookieFirst operates on a subscription SaaS model with tiered pricing based on features and page view limits. The Free plan offers basic functionality with 250,000 page views/month soft limit. Paid plans (Basic €99/year, Plus €209/year) add features like external collaborators, banner customization, white-label options, consent statistics, and IAB TCF 2.2 support. Enterprise plans offer custom pricing with extensive API integration support for organizations with large domain portfolios or specific requirements.
2. Reseller/Affiliate Program: The company offers a reseller program allowing agencies, web developers, and other resellers to offer CookieFirst's GDPR, LGPD, and CCPA compliance services to their customers. Resellers can set their own pricing and earn 30% commission. Higher discounts are available for resellers connecting more clients.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels4 records

Core offering

CookieFirst is a cloud-based Consent Management Platform (CMP) that enables website operators to scan and inventory cookies on their sites, display customizable multi-language cookie banners, and capture granular user consent before any third-party scripts load. It produces automated cookie policies in 44+ languages, integrates with Google Consent Mode v2, Microsoft Consent Mode, and IAB TCF 2.2, and stores encrypted consent audit trails in EU-based data centers to support compliance with GDPR, ePrivacy, CCPA, LGPD, PIPEDA, Law 25, and PDPA.

Product overview

CookieFirst offers a unified Consent Management Platform (CMP) designed for cookie consent management and compliance with international privacy regulations. The core platform includes automated cookie scanning, customizable consent banners, and a cookie policy generator that supports 44+ languages. The platform integrates with Google Consent Mode v2 and Microsoft Consent Mode for advertising compliance, and provides native plugins for major e-commerce platforms (Shopify, Magento, Shopware, Prestashop) and CMS systems (WordPress, Drupal, Joomla, Typo3). The platform offers tiered pricing (Free, Basic, Plus, Enterprise) with features including IAB TCF 2.2 support, whitelabel options, consent audit trails, and opt-in rate optimization.

Differentiator

Problem solved

Functional benefit

Products and services

• CookieFirst Consent Management Platform A SaaS consent management platform that scans websites for cookies, displays customizable multi-language cookie banners, captures granular user opt-in before third-party scripts load, generates automated cookie policies in 44+ languages, and stores encrypted consent audit trails. Aimed at websites that need to comply with GDPR, ePrivacy, CCPA, LGPD, PIPEDA, Law 25, and PDPA.
• CookieFirst Cookie Banner A fully customizable cookie consent banner that lets websites obtain user consent while maintaining brand consistency. Supports multiple languages, granular opt-in controls for third-party cookies/scripts, and white-label presentation. Available as a sub-offering of the CookieFirst CMP.
• CookieFirst Cookie Scanner An automated cookie scanning service that analyzes websites on a monthly basis to identify cookies and local storage items, producing comprehensive cookie reports for compliance documentation and automatically updating the cookie policy. Bundled within the CookieFirst CMP subscriptions.
• CookieFirst Cookie Policy Generator An automated tool that generates GDPR/CCPA-style cookie and privacy policies in 44+ languages and keeps them up to date based on monthly cookie scan results. Available as a sub-offering of the CookieFirst CMP.

Quantifiable outcome

• Consent data stored securely in EU with 72-hour breach notification policy
• +1 more outcomes

Named customers10 records

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration14 records

Feature7 records

Partnerships

Five partnerships are on record, tiered core.

• OVH BV (Netherlands)coreTechnology or IntegrationProvides hosting services for CookieFirst website and applications, storage of CDN log data, and API services for saving consent data. Located in Netherlands/France.
• BunnyWay d.o.o. (Slovenia)coreTechnology or IntegrationContent Delivery Network (CDN) provider ensuring global performance of the cookie banner delivery.
• Stripe, Inc. (United States)coreTechnology or IntegrationPayment provider processing customer information, payment information, order numbers, and credit card data.
• Iubenda srl (Italy)coreStrategic or Co-development PartnerParent company of Digital Data Solutions B.V. May process data from CookieFirst operations.
• Google LLCcoreTechnology or IntegrationGoogle Certified CMP Partner. Integration with Google Consent Mode v2, Google Tag Manager, and Google services (Analytics, Ads, AdSense). Required for websites using Google services to be compliant with DMA requirements.

Scale indicators3 records

Recent moves5 records

Expansion highlights6 records

Direct peers

• Cookiebot: Cookiebot is a Consent Management Platform supporting GDPR, ePrivacy, and CCPA, owned by Usercentrics. It directly competes with CookieFirst in the SMB/mid-market CMP segment with automated cookie scanning, customizable banners, and multi-regulation compliance — virtually identical core offering and target buyer.
• Usercentrics: Usercentrics is a leading CMP that acquired Cookiebot in 2021 and competes head-on with CookieFirst across GDPR/ePrivacy/CCPA consent management. Comparable SaaS model, comparable multi-regulation scope, and the most named competitor in CookieFirst's own comparison pages — closest like-for-like direct peer.
• CookieYes: CookieYes is a WordPress-first CMP targeting SMB websites with freemium pricing, automated scanning, and GDPR/CCPA banner functionality. Same SMB-oriented PLG motion, similar tier pricing, and explicitly named as a CookieFirst comparison page target — direct peer.
• Osano: Osano is a privacy management platform whose CMP product competes directly with CookieFirst on GDPR/CCPA consent management with a SaaS subscription model. Comparable target market (mid-market websites needing compliance) and explicitly listed on CookieFirst's competitor comparison pages.
• Axeptio: Axeptio is a European CMP focused on UX-forward consent experiences for SMB and mid-market websites. Competes in the same horizontal CMP category with comparable freemium/PLG motion and is explicitly named in CookieFirst's comparison-page strategy.
• Borlabs Cookie: Borlabs Cookie is a WordPress-plugin-based CMP popular in the German and broader DACH market for GDPR consent management. Closely comparable self-hosted-meets-SaaS hybrid CMP model and a comparison-page competitor named on CookieFirst's site.

Broad incumbents

• OneTrust: OneTrust is the dominant privacy, security, and GRC platform whose CMP is one product within a much broader trust intelligence suite. Sells to enterprise accounts where CookieFirst also wins logos (Aegon, Hyundai, Berenberg), competing directly in the CMP RFP but with bundled modules that create upsell pressure against standalone CMPs.
• CookiePro (TrustArc): CookiePro is the CMP product of TrustArc, a broader privacy management incumbent. Competes in the same CMP category as CookieFirst but is bundled into a wider privacy program offering, positioning it as a broader-incumbent alternative for enterprise and mid-market buyers.

Emerging players

• iubenda: iubenda is the parent company that acquired CookieFirst in March 2026 and itself sells privacy policy and cookie consent solutions to SMBs. Operates in adjacent privacy-compliance tooling with overlapping CMP capabilities, creating both a strategic distribution channel and an internal product overlap that shapes CookieFirst's roadmap post-acquisition.
• Termly: Termly provides privacy policy generators and a consent management solution for small and mid-sized businesses, with a freemium SaaS model similar to CookieFirst's pricing tiers. Comparable SMB buyer profile and overlapping CMP + policy generator product surface.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CookieFirst