How to collect cookie consent on AMP pages

If you’re using or planning to use Google’s Accelerated Mobile Pages (AMP) to load your web pages faster on mobile, you might be wondering how to set-up in a way that allows you to comply with the GDPR and avoid penalties.

That said, collecting cookie consent on AMP pages requires some extra work. You’ll need to:

1. host on your HTTPS site an HTML file with your cookie management solution configuration,
2. implement user controls adding the <amp-consent> element to your AMP pages, and
3. block components with data-block-on-consent attribute, or use the data-block-on-consent-purposes attribute if you want to enable per-category consent (more info here: amp.dev/documentation).

Considerations for the HTML file

AMP does not allow the loading of iframes from the same domain, therefore, uploading this file on the same domain as your AMP page will result in the cookie notice not being displayed when you load AMP pages from that domain.

However, in practice, Google loads AMP pages directly from their (Google’s) domain, when a user accesses the page by clicking on a search result. Therefore same domain conflict is generally not an issue as it only affects non-production use cases.

In any case, to avoid this issue, you can simply host the HTML file on a different domain or subdomain (e.g. main domain is www.yourdomain.com, but you host the file on amp.yourdomain.com). This approach also works if you redirect from a subdomain to your main domain, for example, if the file is hosted on the main domain (one easy trick is to use www/non-www redirection to do this without adding extra subdomains).

Also note that the AMP iframe needs to be served via HTTPS.

How iubenda can help

Besides AMP, you may also find useful these other options for mobile:

• If you want to collect consent within your mobile app, our mobile SDK is available upon request as a native component for both iOS and Android, and is fully customizable, allowing you to match the look and style of your app.
• If you want to collect consent via your mobile web pages, our Privacy Controls and Cookie Solution integrates easily: being responsive, there’s no need to set up a separate solution for mobile pages.