Managing User Data (GDPR)

Managing Privacy Settings

You can ensure GDPR compliance for your cookies and collect administrator usage data (such as Control Panel and Product Menu interactions) using Liferay’s configuration interface. This ensures privacy compliance while providing insights into system usage.

You can access the privacy settings at different scopes:

  1. Open the Global Menu (Global Menu); then choose

    • System SettingsPrivacy (under Platform). This applies globally to all instances and sites.

    • Instance SettingsPrivacy (under Platform). This applies to the current instance and overrides System Settings.

    • Open the Site Menu (Site Menu) and navigate to ConfigurationSite Settings. Click Privacy under Platform. This applies to the current site and overrides both Instance and System Settings.

    Tip

    Before Liferay DXP 2025.Q4, look under Cookies instead of Privacy for the Cookie Manager settings.

Enabling GDPR Compliance for Cookies

In the Privacy settings, select Cookie Manager. The two checkboxes are Enabled and Explicit Cookie Consent Mode. Explicit Cookie Consent Mode doesn’t work if the Enabled checkbox is unchecked.

  1. To set your handling preference, check the Enabled checkbox. With the Explicit Cookie Consent Mode checked, no cookies are set until the user explicitly agrees to cookie usages. If unchecked, all cookies are set until the user opts out of them.

    Note

    Analytics Cloud uses cookies to gather data. If the first checkbox is left unchecked, cookies are enabled by default, and Analytics Cloud tracks users. If only the first checkbox is checked, Analytics Cloud tracks users until they opt out of Performance Cookies through the cookie banner. If both boxes are checked, Analytics Cloud doesn’t track users until they accept Performance Cookies in the cookie banner.

  2. Click Save or Update.

    Two new options appear in the left menu: Cookie Banner and Cookie Panel.

    Ensure GDPR compliance for your cookies through the configuration interface.

    Tip

    Before Liferay DXP 2025.Q4, these were called Banner and Consent Panel.

  3. Go to the Cookie Banner tab and choose your options for the cookie banner (see Banner Options below).

  4. Click Save.

  5. Go to the Cookie Panel tab and choose your options for the consent panel (see Consent Panel Options below).

  6. Click Save.

Your cookie policy appears when users log in through a banner. It displays the text from the Content field, your privacy Policy Link, and Link Display Text. Users have three options: Configuration, Accept All, and Decline All. You can customize these options in the Cookie Banner tab.

The cookie banner appears the first time users visit your site.

Content: Describe the relevant information from your cookie policy regarding data collection, tracking, and user privacy. Include the types of cookies used, their purposes, how users can manage or disable cookies, and any other relevant information.

Privacy Policy Link: Add a link to your site’s privacy policy page.

Link Display Text: Specify the text for the privacy policy page link.

Include “Decline All” Button: Decide whether to add a Decline All button on the cookie banner.

The Consent Panel appears when users click the Configuration link on the banner. Users can select the types of cookies they consent to have stored.

Consent Panel Page

Title: Add a title to your consent panel.

Description: Add a general overview about the usage of cookies on your site.

Cookie Policy Link: Add a link to your site’s cookie policy page. Use Liferay’s Cookie Policy utility page.

Link Display Text: Specify the text for the cookie policy page link.

Strictly Necessary Cookies Description: Describe the cookies necessary for your site to function.

Functional Cookies Description: Describe cookies that provide enhanced functionality and personalization. Check the Prechecked checkbox to enable this when users open the consent panel.

Performance Cookies Description: Describe your performance cookies, including how they measure and improve your site’s performance by counting visits, traffic sources, and page popularity, and the steps you took to maintain full data privacy. Check the Prechecked checkbox to enable this when users open the consent panel.

Personalization Cookies Description: Describe cookies that personalize the user experience. For example, some cookies may build a profile of users to show relevant ads. Without them, users receive less targeted advertising. Check the Prechecked checkbox to enable this when users open the consent panel.

Liferay DXP 2025.Q4+

  1. In the Privacy settings, select Product Analytics.

  2. Check Enabled to activate cookie preference handling for admins. This

    Enable the Product Analytics to activate cookie preference handling for administrative users.

    • Displays a consent banner at the bottom of the page for admins.

    • Provides an interface to accept, decline, or customize consent for sharing admin usage data with Pendo.

    • Ensures tracking starts only after explicit consent is given.

    • Manages cookies in administrative sections, without affecting end-user-facing sites.

    Note

    Disabling this option immediately stops all admin usage tracking.

  3. Click Save or Update.

The panel opens when clicking Customize. Admins can

  • Enable or disable specific administrative cookies.
  • See how each cookie category is used.
  • Update preferences at any time; changes take effect immediately.

Manage administrative cookie and tracking preferences using the Product Analytics Consent Panel.

  1. Toggle the options for the different types of cookies according to your preferences.

  2. At the bottom of the panel, choose one of the three consent options:

    Use Necessary Cookies Only: Enables only essential administrative cookies.

    Accept Selected: Enables only the categories you selected.

    Accept All: Enables all administrative cookies, including functional, performance, and personalization cookies.

When using the Cookie Policy utility page, you must add new cookie objects for cookies that aren’t included in Liferay out-of-the-box.

  1. Navigate to Site AdministrationSite BuilderPages.

  2. Enter the Cookie Policy utility page.

  3. Find the correct table for the new cookies and click Add.

  4. Enter the external cookie’s information and click Save.

Configuring Privacy Settings Using the Data and Privacy Tab

Users can manage privacy settings in their accounts.

  1. Click your User Profile Menu on the top right and select Account Settings.

  2. Select the Data and Privacy tab.

    The Cookie Manager options appear for all users. The Product Analytics options appear only for admins.

    Product Analytics Consent Panel

  3. Toggle the options for the different types of cookies according to your preferences.

  4. At the bottom of the page, choose one of the three consent options:

    Use Necessary Cookies Only: Enables only essential cookies.

    Accept Selected: Enables only the categories you selected.

    Accept All: Enables all cookies, including functional, performance, and personalization cookies.