Regions and geo-targeting

One of the powerful features of CookieHub is the ability to adapt consent behavior based on the user’s geographic location.

Using Regions, you can define how consent is collected, which dialog is shown, and which privacy framework applies for users in specific countries or states.

Regions can represent a single country, a U.S. state, or a predefined group of countries with similar privacy requirements. Each region can be configured independently in the CookieHub dashboard.

Note on Regulatory Updates: Privacy regulations are constantly evolving. The region groups listed below reflect the regulatory landscape as of January 2026.

CookieHub actively monitors global privacy laws (such as new U.S. state regulations or updates to international data protection acts) and updates these pre-defined definitions as new laws come into effect. When a new law becomes enforceable, CookieHub automatically updates the relevant region group logic to ensure continued compliance without requiring manual reconfiguration on your part.

Pre-defined regions

GDPR & GDPR-equivalent regions (EU, EEA, UK & similar)

This region includes countries and territories where strict, GDPR-style consent requirements apply.

Users located in these jurisdictions must provide explicit consent (opt-in) before non-essential cookies or similar technologies are used.

The group covers the European Union (EU), European Economic Area (EEA), the United Kingdom, and other jurisdictions with GDPR-equivalent consent expectations, such as Switzerland and certain European overseas territories.

This region is typically used when full compliance with GDPR, ePrivacy-style rules, and equivalent national laws is required.

US (“Do not sell or share” states)

This region includes U.S. states with comprehensive privacy laws that grant users the right to opt out of the sale or sharing of personal data, including data used for targeted advertising.

In these states, CookieHub typically presents a “Do not sell or share my personal data” option and honors applicable opt-out signals in accordance with state law.

This region is intended for compliance with laws such as the California Consumer Privacy Act (CCPA/CPRA) and other state-level privacy frameworks with similar requirements.

US (Recommended opt-out states)

This region includes U.S. states that do not currently have comprehensive privacy laws equivalent to CCPA/CPRA, but where opt-out consent and transparency are recommended based on consumer protection laws, regulatory guidance, or enforcement trends.

While explicit opt-in consent is generally not required in these states, providing clear notice and opt-out mechanisms is considered best practice and may reduce legal and reputational risk.

Recommended opt-in (excluding EU/EEA/UK/US)

This region includes countries outside the EU, EEA, UK, and United States where privacy laws or regulatory guidance generally require explicit consent (opt-in) for the use of cookies or similar tracking technologies.

These jurisdictions often have comprehensive data protection laws inspired by or aligned with GDPR principles, even if they are not part of the European regulatory framework.

CookieHub recommends using opt-in consent in these countries to ensure compliance with local privacy expectations and enforcement practices.

Recommended opt-out (excluding EU/EEA/UK/US)

This region includes countries where privacy laws generally allow the use of cookies based on implied consent (opt-out), provided that users receive clear notice and meaningful choices.

In many of these jurisdictions, cookie-specific requirements are less explicit or are interpreted differently than under GDPR. However, enforcement practices and guidance may vary.

Due to this uncertainty, CookieHub recommends evaluating whether opt-in consent is more appropriate for your use case, even if opt-out consent is legally permissible.

Predefined regions (before 2026)

CookieHub provides predefined region groups for quick setup.

Europe

Includes all EU and EEA member states, the UK, and Switzerland. These countries generally require explicit consent under GDPR or equivalent laws.

US states

Includes all states with active privacy laws requiring cookie notices and opt-out controls.

Other countries (opt-in)

Countries where privacy laws require explicit consent.

Other countries (opt-out)

Countries where a cookie notice is required and opt-out may be allowed.

When requirements are unclear, we recommend using explicit consent globally.