Cookiebot compliance | Implement cookie concent manager Klaro

[matiasperrone-exo]

Summary

Task request:

I received an email from Cookiebot with the following details. Looks like we might need to make some adjustments to how it's implemented?

Our recent scan of your website has identified potential compliance issues where cookies are being set in your users’ browsers before their consent has been submitted. Under GDPR and other legislations, only cookies that are strictly necessary for the website to function can be set prior to the user’s consent.

Domain Group: Domain Group #1

Domains:

www.openinfra.dev (10/02/2025) - Prior consent fully enabled: no
Based on your scan report we have identified one or more of the following issues:

Other scripts that may be setting cookies are loaded before the Cookiebot script
Make sure that the Cookiebot script is the very first script to load on your website. This is essential for our script’s ability to hold back cookies until consent has been obtained.

Some scripts on your website may not be marked up properly
Check the attached report to find out which scripts are loaded before consent and see our guide on how to mark these up manually.
Consider switching to autoblocking mode, if you haven’t already done so, to let the Cookiebot script handle all the technical stuff automatically.

Some scripts may be loaded through Google Tag Manager before consent has been submitted
Make sure your GTM is set up to use Cookiebot consent values before loading tags that may set cookies. See our GTM installation guide here.

Your website uses cookies set by your webserver before user consent has been obtained
In your Cookie Report you may have cookies that are set by your webserver, also known as “server-side cookies”, these are marked like this:

Initiator: Webserver

These you will have to block through server-side code, holding back the cookies until consent has been given. You may have to contact your webhost or web solution vendor to find out more about these cookies. See the last part of our developer documentation for server-side usage of Cookiebot.

Unclassified cookies
Your report shows one or more unclassified cookies. You must log into your account and categorize these appropriately and add a description to ensure transparency to your website users. See more about unclassified cookies and how to work with them.

Changes

• Implemented Klaro cookie concent manager.

Testing

• Build
• Local Dev.

Related Issues

• https://tipit.avaza.com/task#task=3739732

Notes

The code for Google Analytics in Google Tag Manager needs to be defer instead of async to be able to be handled correctly.

[smarcet]

@matiasperrone-exo please review comments

[matiasperrone-exo]

@smarcet please review again as the PR was updated