Google Analytics, a live chat widget and perhaps an advertising pixel too: your website collects more than you think. And since the GDPR and the Dutch Telecommunications Act, 'but we have a little banner' is no longer enough — what matters is what technically happens before the visitor clicks. Fortunately, Odoo Website has the basics on board.
Activating the cookie banner
Go to Website ▸ Configuration ▸ Settings and switch on Cookies Bar. From that moment on, every new visitor gets a banner with a clear choice, and Odoo remembers each visitor's preference. Odoo distinguishes between two kinds of cookies:
- Necessary (essential): session and security cookies the site needs in order to work — these are allowed without consent.
- Optional: analytics and marketing cookies — these may only load after an explicit opt-in.
You adjust the banner's texts and buttons via the website editor: click Edit while the banner is visible. At the very least, include a link to your cookie policy.
The pitfall: the banner that blocks nothing
This is where it goes wrong in practice. Showing a banner while Google Analytics is already measuring in the background is non-compliant — the GDPR looks at what actually happens, not at what you show visually. If you use Odoo's standard integrations (such as the Analytics link in the website settings), Odoo neatly waits for consent. But scripts that were once pasted manually into the header take no notice of your banner. Check it yourself: open an incognito window, refuse the cookies and look in your browser's network console to see whether requests to google-analytics.com or advertising domains are still being made.
Finally: clean up first
Practical tip: first take stock of which scripts are actually on your site — on many SME websites we found pixels from 2019 campaigns that nobody uses any more. Fewer scripts means asking for less consent and a faster site. Want to be sure your Odoo website is GDPR-proof? Contact DAADit Group for a down-to-earth check.
Google Analytics, a live chat widget and perhaps an advertising pixel: your website collects more than you think. And under the GDPR and the ePrivacy rules, 'we do have a little banner' is not enough — what matters is what technically happens before the visitor clicks. Fortunately, Odoo Website has the basics built in.
Activating the cookie banner
Go to Website ▸ Configuration ▸ Settings and enable the Cookies Bar. From that moment, every new visitor gets a banner with a clear choice, and Odoo remembers the preference per visitor. Odoo distinguishes two kinds of cookies:
- Essential: session and security cookies the site needs to function — these may be set without consent.
- Optional: analytics and marketing cookies — these may only load after an explicit opt-in.
You edit the banner texts and buttons via the website editor: click Edit while the banner is visible. At minimum, add a link to your cookie policy.
The trap: a banner that blocks nothing
This is where things go wrong in practice. Showing a banner while Google Analytics is already measuring in the background is non-compliant — the GDPR looks at what actually happens, not at what you display visually. If you use Odoo's standard integrations (such as the Analytics link in the website settings), Odoo politely waits for consent. But scripts that were once pasted manually into the header ignore your banner entirely. Check it yourself: open an incognito window, refuse the cookies and watch your browser's network console to see whether requests to google-analytics.com or ad domains still fire.
Finally: clean up first
Practical tip: start by taking stock of which scripts are actually on your site — on many SME websites we have found pixels from 2019 campaigns nobody uses anymore. Fewer scripts means less consent to ask for and a faster site. Want to be sure your Odoo website is GDPR-proof? Contact DAADit Group for a down-to-earth check.