Runs from your own domain.

A consent tool that loads from someone else’s domain is one more third party. Gatelamp runs from yours.

In practice

A site with script-src 'self' adds Gatelamp without touching its security headers.

Base.astrocookies.astro_headers

---
import { Gatelamp } from '@gatelamp/astro';
---
<Gatelamp site="fijnhier" />

<!-- renders: -->
<script type="module" src="/_gatelamp/embed.v3.js"
  integrity="sha384-…"></script>

public/_headersscript-src 'self' stays as it is/cookies static HTML, rebuilt on deploythird parties 0 added

Install design for an Astro site: one component in the layout, the script served from your own domain, and a cookie page rendered at build time. Names can still change.

What you get

Small and dependency-free

A web component in Shadow DOM, around 12 kB. It can’t break your styles and your styles can’t break it.

Your Content Security Policy stays

script-src 'self' keeps working, because the script is served from your site.

Pinned versions

Each site pins a version and its hash. A new version goes live when you deploy, not when we do.

Goes well with

Edge modePlannedFor sites behind Cloudflare: known trackers are held back at the edge.PlatformsPlannedA script tag and an Astro component at launch. WordPress, Shopify, Webflow, Framer and GTM after.Privacy by defaultStored in the EU, no IP addresses kept, and no tracking of its own.

Early access

Switch on early.

Join the waitlist for Gatelamp. We invite people in small groups, and waitlist members get the early price.