Cookiequiet vs OneTrust: a quote-only enterprise CMP against a €3 banner
Pick Cookiequiet if you run one to a few dozen websites and want a published price: €0, or €29 a year on Starter for one site and €145 a year for five, with geo-targeting on the free plan. Pick OneTrust if you are a large organization that needs a Google-certified CMP with the IAB TCF, consent across web, apps and other channels, more than 250 languages, scans behind logins, and a privacy suite with governance and third-party risk modules, and can go through a sales process to get a price.| Cookiequiet | OneTrust | |
|---|---|---|
| Price for one website | Free for 1 website; Starter €3 a month or €29 a year per website; Pro €9 a month or €99 a year per website | Not published: quote after a call, priced by average daily visitors |
| Price for five websites, per year | €145 a year on Starter (5 × €29) or €495 on Pro (5 × €99); €190 a year on Agency for up to 10 Pro websites | Not published |
| Free plan | 1 website, unlimited pageviews, geo-targeting, consent log kept 30 days, 10 pages per scan monthly, policies in one language, a small Cookiequiet link | None listed on the pricing page |
| Traffic limits | None on any plan | Tiers by average daily visitors across all channels and properties; figures not published |
| Geo-targeting | Every plan, Free included: regulated countries, a custom list, or a US opt-out notice | Yes: geolocation rules show different banners and consent models by region, country or state |
| Google Consent Mode v2 | Every plan, Free included, plus Microsoft UET | Supported; its developer docs describe mapping OneTrust categories to Google's four consent types in the geolocation rules |
| Consent records | 30 days on Free, 1 year on Starter, 5 years on Pro; CSV export on Starter and Pro | A 'detailed user consent transaction database'; retention not stated on the product page |
| Cookie scanner | 10 pages per scan on Free, 50 on Starter and Pro; monthly on Free, weekly on Starter and Pro; about 80 providers | Scheduled scans that simulate the user, scan behind logins and trigger hidden pages; a cookie database of over 45 million cookies |
| Languages | 24, picked from the visitor's browser, every string editable | More than 250 |
| Google-certified CMP / IAB TCF | No: not a Google-certified CMP, no IAB TCF | Yes: 'Onetrust / Cookiepro CMP' is on Google's certified list (TCF CMP ID 28) |
| Setup | One script tag before your other scripts, no plugin or tag-manager setup; the scan fills the cookie table and prefills the policies; Reject all on by default, Consent Mode v2 with one attribute; about five minutes | Sales call for a quote, then an admin console with geolocation rule groups, banner templates and category mapping for Consent Mode |
| Beyond the banner | Banner, scanner, policies, consent log | Preference management, privacy automation, AI governance, tech risk and third-party risk modules, each priced separately |
| AI banner design | AI brand match on Starter (10 scans per website a month); AI design agent (Claude Opus) on Pro and Agency (40 messages per website a month) | Not offered on the pricing page |
Pricing
OneTrust does not publish prices. On 2026-10-21 its pricing page listed packages (CMP Base, CMP Suite, Universal Consent & Preference Management, privacy automation, AI governance, tech risk and third-party risk) with a "Get Pricing" button on each and an offer to schedule a call for a personalized quote. The consent packages are priced on average daily visitors aggregated across all channels and properties, in tiers: the FAQ says customers whose usage consistently exceeds a tier move to the next one. No free plan or trial is listed. CookiePro, the brand OneTrust once used for smaller self-service customers, now redirects to a page saying it is part of OneTrust.com; existing CookiePro customers can still log in and buy within that app.
Cookiequiet publishes every price. One website is free with unlimited pageviews and geo-targeting. Starter is €3 per website per month or €29 a year, and Pro, with the AI design agent, is €9 per website per month or €99 a year, the same figures in dollars. The yearly bill for one site is €0, €29 on Starter or €99 on Pro. For five sites it is €145 a year on Starter (5 × €29), €495 on Pro (5 × €99), or €190 a year on Agency, which covers up to ten Pro websites. Since OneTrust quotes on request, the only way to compare is to ask OneTrust for a quote and set it against those figures; the cost calculator does the Cookiequiet side for any number of sites.
Who each tool is built for
OneTrust sells a privacy and risk platform to large organizations. The consent product is one module among many, and its features show that: consent across websites, apps and other channels, geolocation rules that pick a banner and consent model by region, country or state, more than 250 languages, a cookie database of over 45 million entries, scheduled scans that can log in and trigger hidden pages, pre-built marketing-technology integrations, and a consent transaction database for audits. Around it sit modules for preference management, data mapping, AI governance and vendor risk.
Cookiequiet is a cookie banner, a scanner, policy generators and a consent log for websites, priced per website. It does fewer things, and the things it does are the ones a small or mid-sized website needs for the GDPR and the ePrivacy rules: prior consent, a Reject all button with the same size and weight as Accept all, per-category choices, a record of each choice and a way to withdraw.
Compliance features
Both tools support geo-targeting. OneTrust does it with geolocation rule groups configured in its admin console. Cookiequiet does it on every plan, Free included: show the banner everywhere, only in regulated countries (the EEA, the UK, Switzerland, Brazil, Canada, South Africa, South Korea, Turkey), or in a custom list, with a US opt-out notice and Global Privacy Control honored in states with a privacy law.
Both support Google Consent Mode v2. In OneTrust, its developer documentation describes enabling Consent Mode in the geolocation rules and mapping OneTrust categories to Google's consent types. In Cookiequiet, the same script tag sets the six Consent Mode signals to denied before any Google tag runs when it carries one attribute, and updates them on every choice, as explained in the Consent Mode v2 guide.
OneTrust is on Google's list of certified CMPs. Cookiequiet is not certified and does not implement the IAB TCF, so a site that shows Google AdSense, Ad Manager or AdMob ads to visitors in the EEA, the UK or Switzerland needs a certified CMP for those ads. See what the IAB TCF is.
Setup
OneTrust starts with a sales conversation, then configuration in its admin console: geolocation rule groups, banner and preference-center templates per rule, category mapping for Consent Mode, and the script on each property. For a multi-brand company that work is the point. For one website it is a lot of setup.
Cookiequiet is one script tag placed before your other scripts, with no plugin or tag-manager configuration. The scan fills the cookie table and prefills the privacy and cookie policies. Reject all is on by default, and Consent Mode v2 is one attribute on the same tag. Sign-up to a live banner takes about five minutes.
Where OneTrust is better
- A Google-certified CMP with the IAB TCF, for publishers running Google ads in Europe.
- Consent across websites, apps and other channels, with more than 250 languages.
- Scans behind logins and of hidden pages, and a cookie database of over 45 million entries.
- A privacy platform around the banner: preference management, privacy automation, AI governance and vendor risk.
Where Cookiequiet is better
- Published prices: €0, or €29 a year on Starter for one site and €145 a year for five, no sales call.
- No pageview or visitor tier on any plan.
- Geo-targeting, Consent Mode v2 and a Reject all button on the free plan.
- One script tag and about five minutes to a live banner, with policies written from the scan.
Switching
Remove the OneTrust script, add the Cookiequiet tag before every other script, and mark the scripts that must wait for consent with type="text/plain" data-cq-category="analytics" (or functional, marketing). Cookiequiet's auto-blocker also holds scripts injected by tag managers from about 80 known trackers. Run a scan, review the categories, and generate the cookie policy. Export your OneTrust consent records before the contract ends and keep them for your retention period.