Managing Privacy Settings

Manage cookie consent and GDPR compliance for your sites using Liferay DXP’s built-in consent manager. Configure a cookie banner and panel, set consent renewal periods, and honor Global Privacy Control signals from users’ browsers.

You can access the privacy settings at different scopes. Open the Global Menu (); then choose

• System Settings → Privacy (under Platform). This applies globally to all instances and sites.

• Instance Settings → Privacy (under Platform). This applies to the current instance and overrides System Settings.

• Open the Site Menu () and navigate to Configuration → Site Settings. Click Privacy under Platform. This applies to the current site and overrides both Instance and System Settings.

Tip

For Liferay DXP 2026.Q1 and earlier, see Managing Privacy Settings (2026.Q1 and Earlier).

Configuring the Consent Manager

Note

The GDPR Compliance for Cookies feature provides a cookie banner and preference panel for portal users. It is not a full Consent Management Platform (CMP) like OneTrust, Cookiebot, or TrustArc, and does not include advanced CMP features such as vendor scanning, automated compliance workflows, or multi-domain consent management.

In the Privacy settings, select Consent Manager. The available options are Enabled and Explicit Cookie Consent Mode. Explicit Cookie Consent Mode does not work if Enabled is unchecked.

1. To set your handling preference, check Enabled (1). When Explicit Cookie Consent Mode (2) is checked, no cookies are set until the user explicitly agrees. If Explicit Cookie Consent Mode is unchecked, all cookies are set until the user opts out.

   Note

   Analytics Cloud uses cookies to gather data. If Enabled is unchecked, cookies are active by default, and Analytics Cloud tracks users. If Enabled is checked and Explicit Cookie Consent Mode is unchecked, Analytics Cloud tracks users until they opt out of Performance Cookies through the banner. If both Enabled and Explicit Cookie Consent Mode are checked, Analytics Cloud tracks users only after they accept Performance Cookies.

2. Set the Consent Renewal Period (3).

3. (Optional) Liferay DXP 2026.Q2+ Check Store Consent (4) to store consent preferences for authenticated users. This saves consent choices to the user’s account, so they persist across devices and browser sessions and are applied automatically when the user signs in.

   This option is not accepted automatically when users click Accept All. Users must select it explicitly.

4. (Optional) Liferay DXP 2026.Q2+ Check Global Privacy Control (GPC) (5) to detect and honor GPC signals from users’ browsers and opt those users out of non-essential cookies and tracking. See Enabling Global Privacy Control (GPC) Support.

5. (Optional) Liferay DXP 2026.Q2+ Enable the floating icon (6), so users can reopen the consent panel after closing the banner.

6. Click Save or Update.

   Two new options appear in the left menu: Cookie Banner and Cookie Panel. The configuration is now in draft mode and not yet visible to site visitors. See Activating and Deactivating the Consent Manager to make the consent banner live.

7. Configure the cookie interface:

   • Go to the Cookie Banner tab and configure the cookie banner.

   • Go to the Cookie Panel tab and configure the cookie panel.

Configuring the Consent Renewal Period

Liferay DXP 2026.Q1+

Define how long user consent remains valid. When the period expires, users must provide consent again before tracking resumes.

1. Enter a value in the Consent Renewal Period field.

2. Liferay DXP 2026.Q2+ Select the time unit (Days, Weeks, or Months).

   The default value is 12 months.

3. Liferay DXP 2026.Q2+ (Optional) Set the Consent Renewal Period for Dissent to define how long the system remembers a user’s decision to decline cookies before prompting again.

Important

Changing the Consent Renewal Period or resetting the configuration immediately expires all existing consent cookies.

Triggering Re-consent

Liferay DXP 2026.Q2+

You can force all users to provide their consent preferences again in two ways:

• Manually: Click Forced Re-Consent. A confirmation dialog explains that all stored consent preference cookies and stored consent preferences are invalidated. After confirming, the consent banner reappears for every user on their next site visit.

• Automatically: Changing the Consent Renewal Period or Consent Renewal Period for Dissent while the consent manager is inactive triggers a confirmation dialog. If you confirm, the change takes effect and all users must consent again when the cookie banner is next activated.

Enabling Global Privacy Control (GPC) Support

Liferay DXP 2026.Q2+

Global Privacy Control (GPC) is a browser standard that lets users signal to websites that they want to opt out of non-essential data collection and tracking.

When GPC support is enabled, Liferay detects the Sec-GPC: 1 HTTP header sent by GPC-compliant browsers and opts those users out of non-essential cookies. No interaction with the consent banner is required.

To enable GPC support:

1. Check Global Privacy Control (GPC) in the consent manager settings.

2. Click Save or Update.

Liferay always publishes a well-known resource at /.well-known/gpc.json. This endpoint is present regardless of whether GPC support is enabled.

Configuring the Floating Icon

Liferay DXP 2026.Q2+

Enable a floating icon that appears after the banner closes. Users can click this icon at any time to reopen the consent panel and update their preferences.

1. Scroll to the Floating Icon section.

2. Check Floating Icon Enabled.

3. Select an Icon from the available presets, or select Custom to upload your own.

After saving the configuration and closing the banner, the icon appears on all pages and provides persistent access to the consent panel.

Cookie Banner Options

The cookie banner appears when users visit your site to provide transparency regarding data collection and tracking. Use these settings to define the banner’s content and user options.

Content: Describe how cookies are used on your site, including the purpose of data collection and how users can manage their privacy preferences.

Include “Decline All” Button: Toggle this to provide users with a quick way to reject all non-essential cookies directly from the banner.

Link Display Text: Enter the text for the privacy policy hyperlink (e.g., Visit our Privacy Policy).

Privacy Policy Link: Provide the URL to your site’s full privacy policy page.

Title: Set a heading for the banner (e.g., This Website Uses Cookies).

Tip

All text fields support localization. Click the Language Flag icon next to a field to provide translations for your site’s supported languages.

When the banner is active, users see these controls:

• Accept All: Grants consent for all cookie categories.
• Decline All: Refuses consent for all non-essential cookies.
• Configuration: Opens the Cookie Panel for granular control over specific cookie categories.

Cookie Panel Options

The Cookie Panel appears when users click the Configuration link on the banner. It provides users with granular control over which cookie categories they wish to enable.

Title: Set a heading for the panel (e.g., Cookie Configuration).

Description: Provide a general overview of how your site uses cookies and what the user can expect from the configuration process.

Cookie Policy Link: Provide the URL to your site’s full cookie policy. Use Liferay’s Cookie Policy utility page.

Link Display Text: Enter the text for the cookie policy hyperlink (e.g., Visit our Cookie Policy).

Tip

All text fields support localization. Click the Language Flag icon next to a field to provide translations for your site’s supported languages.

For Functional, Performance, and Personalization cookies, you can configure:

• Description: Explain the specific purpose of the cookies in this category and the impact of disabling them.
• Hide from End-User: Check this to remove the category from the user-facing Cookie Panel entirely.
• Prechecked: Check this to enable the category by default when the user opens the panel.

Strictly Necessary Cookies Description: Describe the cookies that are essential for the website to function. These cookies cannot be disabled and do not have Hide or Prechecked options.

Previewing the Cookie Banner and Panel

Liferay DXP 2026.Q2+

While configuring the Cookie Banner or Cookie Panel, click Preview at the top of the configuration page to open a full-screen modal showing the banner or panel as site visitors see it, including your current saved settings, translations, and formatting.

Important

The preview only reflects saved settings. Save your changes before clicking Preview to see the latest updates.

Activating and Deactivating the Consent Manager

Liferay DXP 2026.Q2+

After saving the initial configuration, the consent manager is in draft mode. The status bar at the top of the page indicates whether the configuration is live or in draft mode.

To make the consent banner and panel visible to site visitors, click Activate. The status bar turns green and confirms the configuration is live.

To return to draft mode, click Deactivate. A confirmation dialog warns that deactivating immediately hides all consent elements from users. Confirm to proceed. The status bar turns orange and indicates the configuration is in draft mode.

Tip

Use draft mode to configure and preview the banner before making it visible to site visitors.

Adding Cookies to the Cookie Policy Page

When using the Cookie Policy utility page, you must add new cookie objects for cookies that aren’t included in Liferay out-of-the-box.

1. Navigate to Site Administration → Site Builder → Pages.

2. Enter the Cookie Policy utility page.

3. Find the correct table for the new cookies and click Add.

4. Enter the external cookie’s information and click Save.

Configuring Privacy Settings Using the Data and Privacy Tab

You can manage privacy settings in your account.

1. Click your User Profile Menu on the top right and select Account Settings.

2. Select the Data and Privacy tab.

   The Cookie Manager options appear for all users.

3. Toggle the options for the different types of cookies according to your preferences.

4. At the bottom of the page, choose one of the three consent options:

   Use Necessary Cookies Only: Enables only essential cookies.

   Accept Selected: Enables only the categories you selected.

   Accept All: Enables all cookies, including functional, performance, and personalization cookies.

Accessibility and Responsive Design

The cookie banner and consent panel meet WCAG 2.1 Level AA. No additional configuration is required.

The banner sits at the bottom of the viewport. On narrow viewports its content stacks vertically. Site visitors can operate the banner and panel by keyboard:

• Tab and Shift+Tab move between Configuration, Accept All, and (when enabled) Decline All in the banner.

• Space toggles each cookie category in the panel.

• Use Necessary Cookies Only (when Decline All is enabled), Accept Selected, and Accept All save the visitor’s choices.

Opening the panel moves focus into it; Esc closes it. Screen readers identify the banner and panel as a Cookie Consent dialog and announce each category’s title, description, and on/off state.

Feature Availability

Feature	Available as Beta	Available as Release	Generally Available
Consent Renewal Period	Liferay DXP 2026.Q1 Automated Consent Renewal (LPD-65277)	—	Liferay DXP 2026.Q1
Configurable Time Units for Consent Renewal Period	—	—	Liferay DXP 2026.Q2
Store Consent	—	—	Liferay DXP 2026.Q2
Floating Icon	—	—	Liferay DXP 2026.Q2
Responsive and Accessible Cookie Banner and Panel	—	—	Liferay DXP 2026.Q2
Draft/Active Mode for Consent Manager	—	—	Liferay DXP 2026.Q2
Forced Re-consent	—	—	Liferay DXP 2026.Q2
Preview for Cookie Banner and Panel	—	—	Liferay DXP 2026.Q2
Global Privacy Control (GPC) Support	—	—	Liferay DXP 2026.Q2

Related Topics

• Managing User Data (GDPR)
• Sanitizing User Data
• Data Control and Privacy