Skip to content
Start for free

Add a cookie consent banner to a JavaScript app

c15t puts the banner in your JavaScript app as code, with no UI framework. It holds tags until the visitor chooses and keeps Google Consent Mode v2 in sync.

Start for freeSee the code
Ask your coding agent
Sample Consent banner with c15t’s English strings

Install c15t in a JavaScript app

c15t is the open source consent library behind Inth Consent. It renders the banner from your own bundle and records each choice in your Inth project.

npm install @c15t/browser c15t @c15t/integrations

@c15t/browser is not part of the c15t package. c15t gives you the Vite plugin, and @c15t/integrations gives you the vendor helpers.

Add your Inth project URL to .env. Copy it from your Inth dashboard. Vite reads it at build time, so set it before you build.

.env

VITE_C15T_BACKEND_URL=https://your-project.inth.app

Add consentManifest to vite.config.ts. It downloads your policy during vite build. Rebuild after you change a policy.

vite.config.ts

import { consentManifest } from 'c15t/build';
import { defineConfig } from 'vite';

export default defineConfig({ plugins: [consentManifest()] });

Code on this page comes from the c15t JavaScript quickstart, checked 28 October 2026.

Start c15t

Call init() one time in your browser entry point. It reads stored choices, resolves the policy for the visitor and shows the banner when the policy needs one.

src/main.ts

import { init, manifest } from '@c15t/browser';
import { posthog } from '@c15t/integrations/posthog';

init({
  mode: manifest(),
  scripts: [
    posthog({
      id: 'phc_your_project_key',
      initOptions: { cookieless_mode: 'never' },
      loadMode: 'after-consent',
    }),
  ],
});

The banner renders in a shadow root with its own styles, so you import no stylesheet. To apply policy edits without a rebuild, give hosted() from @c15t/browser as the mode instead.

Hold scripts until consent

With loadMode: 'after-consent', PostHog waits for measurement permission. Remove every other loader for PostHog, so it loads once and only through c15t.

JavaScript scripts and embeds covers more vendors, iframes and the network blocker. The c15t integrations list the helper for each vendor.

Hold embeds and add a privacy settings link

Move the URL of an iframe from src to data-src and add data-category. c15t sets src after the visitor gives consent for that category.

index.html

<iframe
  data-src="https://www.youtube-nocookie.com/embed/czTksCF6X8Y?playsinline=1"
  data-category="measurement"
  title="YouTube video"
  allow="encrypted-media; picture-in-picture"
  allowfullscreen
></iframe>

A link to #c15t-preferences opens the preference dialog. Put it in the footer of every page.

index.html

<a href="#c15t-preferences">Privacy settings</a>

Build your own banner UI

To render your own banner, use the headless runtime. The client also lets your code read consent. consent.has('measurement') tells you if a category is allowed now, and consent.on('consent', listener) reports changes.

To change the stock banner instead, set ui.theme. Customize covers each option.

src/consent-scripts.ts

import { gtag } from '@c15t/integrations/google-tag';

export const scripts = [gtag({ id: 'G-XXXXXXXXXX', category: 'measurement' })];

Show the right banner in each region

Your Inth project sets a policy for each region, such as opt in for the EU and UK or opt out for California. manifest() resolves the policy in the browser from the bundled snapshot. When the policy depends on the country or region of the visitor, the client also sends an /init request to your backend.

Test each region before launch. See how regional policies work.

Check that consent gates work

Build with vite build, run vite preview and open a private window with the Network tab open. Test under an opt in policy, such as the EU policy.

  1. Under an opt in policy, no PostHog request leaves the page before a choice.
  2. After Reject All and a reload, PostHog stays off.
  3. When you turn on measurement in Privacy settings, PostHog loads.
  4. When you turn measurement off, the page reloads without PostHog.

Choices post to your Inth project. Check that Inth has a record for each one. The c15t verify consent guide has the full release checklist.

Use Inth in production

c15t is open source. Point it at your Inth project, which hosts the backend and keeps the consent records. See Inth open source.

c15t also has a local mode with no backend. It keeps no consent records, so the docs advise against it in production.

Want to see what else your repo sends before consent? Run a free codebase scan.

Cookie consent banners for other frameworks

The same banner and the same Inth project work in other stacks. See the setup for Next.js, React, TanStack Start, Nuxt, Vue, Astro, Svelte, SvelteKit and HTML.

No bundler? See the HTML cookie consent banner. It needs one script tag.

See how the Inth consent banner works.

Questions about JavaScript consent