Managing Privacy Settings

Ensure GDPR compliance for your cookies using Liferay’s configuration interface.

You can access the privacy settings at different scopes. Open the Global Menu (); then choose

• System Settings → Privacy (under Platform). This applies globally to all instances and sites.

• Instance Settings → Privacy (under Platform). This applies to the current instance and overrides System Settings.

• Open the Site Menu () and navigate to Configuration → Site Settings. Click Privacy under Platform. This applies to the current site and overrides both Instance and System Settings.

Tip

For Liferay DXP 2026.Q1 and earlier, see Managing Privacy Settings (2026.Q1 and Earlier).

Enabling GDPR Compliance for Cookies

Note

The GDPR Compliance for Cookies feature provides a cookie banner and preference panel for portal users. It is not a full Consent Management Platform (CMP) like OneTrust, Cookiebot, or TrustArc, and does not include advanced CMP features such as vendor scanning, automated compliance workflows, or multi-domain consent management.

In the Privacy settings, select Consent Manager. The available options are Enabled and Explicit Cookie Consent Mode. Explicit Cookie Consent Mode does not work if Enabled is unchecked.

1. To set your handling preference, check Enabled. When Explicit Cookie Consent Mode is checked, no cookies are set until the user explicitly agrees. If Explicit Cookie Consent Mode is unchecked, all cookies are set until the user opts out.

   Note

   Analytics Cloud uses cookies to gather data. If Enabled is unchecked, cookies are active by default, and Analytics Cloud tracks users. If Enabled is checked and Explicit Cookie Consent Mode is unchecked, Analytics Cloud tracks users until they opt out of Performance Cookies through the banner. If both Enabled and Explicit Cookie Consent Mode are checked, Analytics Cloud tracks users only after they accept Performance Cookies.

2. Set the Consent Renewal Period.

3. (Optional) Liferay DXP 2026.Q2+ Check Store Consent to store consent preferences for authenticated users. This saves consent choices to the user’s account, so they persist across devices and browser sessions and are applied automatically when the user signs in.

   This option is not accepted automatically when users click Accept All. Users must select it explicitly.

4. (Optional) Liferay DXP 2026.Q2+ Enable the floating icon, so users can reopen the consent panel after closing the banner.

5. Click Save or Update.

   Two new options appear in the left menu: Cookie Banner and Cookie Panel.

   

6. Configure the cookie interface:

   • Go to the Cookie Banner tab and configure the cookie banner.
   • Go to the Cookie Panel tab and configure the cookie panel.

Configuring the Consent Renewal Period

Liferay DXP 2026.Q1+

Define how long user consent remains valid. When the period expires, users must provide consent again before tracking resumes.

1. Enter a value in the Consent Renewal Period field.

2. Liferay DXP 2026.Q2+ Select the time unit (Days, Weeks, or Months).

   The default value is 12 months.

3. Liferay DXP 2026.Q2+ (Optional) Set the Consent Renewal Period for Dissent to define how long the system remembers a user’s decision to decline cookies before prompting again.

Important

Changing the Consent Renewal Period or resetting the configuration immediately expires all existing consent cookies.

Configuring the Floating Icon

Liferay DXP 2026.Q2+

Enable a floating icon that appears after the banner closes. Users can click this icon at any time to reopen the consent panel and update their preferences.

1. Scroll to the Floating Icon section.

2. Check Floating Icon Enabled.

3. Select an Icon from the available presets, or select Custom to upload your own.

After saving the configuration and closing the banner, the icon appears on all pages and provides persistent access to the consent panel.

Cookie Banner Options

The cookie banner appears when users visit your site to provide transparency regarding data collection and tracking. Use these settings to define the banner’s content and user options.

Content: Describe how cookies are used on your site, including the purpose of data collection and how users can manage their privacy preferences.

Include “Decline All” Button: Toggle this to provide users with a quick way to reject all non-essential cookies directly from the banner.

Link Display Text: Enter the text for the privacy policy hyperlink (e.g., Visit our Privacy Policy).

Privacy Policy Link: Provide the URL to your site’s full privacy policy page.

Title: Set a heading for the banner (e.g., This Website Uses Cookies).

Tip

All text fields support localization. Click the Language Flag icon next to a field to provide translations for your site’s supported languages.

When the banner is active, users see these controls:

• Accept All: Grants consent for all cookie categories.
• Decline All: Refuses consent for all non-essential cookies.
• Configuration: Opens the Cookie Panel for granular control over specific cookie categories.

Cookie Panel Options

The Cookie Panel appears when users click the Configuration link on the banner. It provides users with granular control over which cookie categories they wish to enable.

Title: Set a heading for the panel (e.g., Cookie Configuration).

Description: Provide a general overview of how your site uses cookies and what the user can expect from the configuration process.

Cookie Policy Link: Provide the URL to your site’s full cookie policy. Use Liferay’s Cookie Policy utility page.

Link Display Text: Enter the text for the cookie policy hyperlink (e.g., Visit our Cookie Policy).

Tip

All text fields support localization. Click the Language Flag icon next to a field to provide translations for your site’s supported languages.

For Functional, Performance, and Personalization cookies, you can configure:

• Description: Explain the specific purpose of the cookies in this category and the impact of disabling them.
• Hide from End-User: Check this to remove the category from the user-facing Cookie Panel entirely.
• Prechecked: Check this to enable the category by default when the user opens the panel.

Strictly Necessary Cookies Description: Describe the cookies that are essential for the website to function. These cookies cannot be disabled and do not have Hide or Prechecked options.

Adding Cookies to the Cookie Policy Page

When using the Cookie Policy utility page, you must add new cookie objects for cookies that aren’t included in Liferay out-of-the-box.

1. Navigate to Site Administration → Site Builder → Pages.

2. Enter the Cookie Policy utility page.

3. Find the correct table for the new cookies and click Add.

4. Enter the external cookie’s information and click Save.

Configuring Privacy Settings Using the Data and Privacy Tab

You can manage privacy settings in your account.

1. Click your User Profile Menu on the top right and select Account Settings.

2. Select the Data and Privacy tab.

   The Cookie Manager options appear for all users.

3. Toggle the options for the different types of cookies according to your preferences.

4. At the bottom of the page, choose one of the three consent options:

   Use Necessary Cookies Only: Enables only essential cookies.

   Accept Selected: Enables only the categories you selected.

   Accept All: Enables all cookies, including functional, performance, and personalization cookies.

Accessibility and Responsive Design

The cookie banner and consent panel meet WCAG 2.1 Level AA. No additional configuration is required.

The banner sits at the bottom of the viewport. On narrow viewports its content stacks vertically. Site visitors can operate the banner and panel by keyboard:

• Tab and Shift+Tab move between Configuration, Accept All, and (when enabled) Decline All in the banner.

• Space toggles each cookie category in the panel.

• Use Necessary Cookies Only (when Decline All is enabled), Accept Selected, and Accept All save the visitor’s choices.

Opening the panel moves focus into it; Esc closes it. Screen readers identify the banner and panel as a Cookie Consent dialog and announce each category’s title, description, and on/off state.

Feature Availability

Feature	Available as Beta	Available as Release	Generally Available
Consent Renewal Period	Liferay DXP 2026.Q1 Automated Consent Renewal (LPD-65277)	—	Liferay DXP 2026.Q1
Configurable Time Units for Consent Renewal Period	—	—	Liferay DXP 2026.Q2
Store Consent	—	—	Liferay DXP 2026.Q2
Floating Icon	—	—	Liferay DXP 2026.Q2
Responsive and Accessible Cookie Banner and Panel	—	—	Liferay DXP 2026.Q2

Related Topics

• Managing User Data (GDPR)
• Sanitizing User Data
• Data Control and Privacy