Consent management platforms (CMP)

CookieFirst

Consent management platform from the Netherlands

NetherlandsEUEU hostedFree plan Ownership reviewed, controller unresolved

Scope verdict

Ownership reviewed, controller unresolved

This service remains visible for context, but it is not counted or recommended as a European-controlled option.

How we classify services

CookieFirst is a consent management platform from the Netherlands. The banner is added either by loading a JavaScript file from their CDN or, if you already use Google Tag Manager, by placing their tag in the container. Appearance, texts and the list of services are configured in an admin panel.

The servers that visitors of the banner connect to are hosted in the EU, so consent traffic does not leave Europe. That makes CookieFirst a European alternative to American consent tools, and it suits sites of any size that have to document consent properly.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Incoming business email

Google Workspace

Non-European provider
Observed
MX 1 aspmx.l.google.com · 5 alt1.aspmx.l.google.com · 5 alt2.aspmx.l.google.com · 10 alt3.aspmx.l.google.com · 10 alt4.aspmx.l.google.com

Why this matters

Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

cookiefirst.com.hosted.spf-report.com

Provider control not verified
Observed
SPF cookiefirst.com.hosted.spf-report.com

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More from Netherlands