What to account for
Give visitors usable cookie choices
In Cookies & Data Privacy, the banner can show Decline all and Manage cookies. With cookie management enabled, non-essential cookies stay restricted until the visitor accepts them.
Describe your analytics setup
Squarespace supports a built-in Google Analytics connection. Review that connection and your cookie settings together when documenting how you measure visits.
Include injected third-party code
Custom tracking code needs to interact with the cookie banner. Inventory injected tags separately from built-in integrations and verify their consent behavior.
Common mistakes to check
Assuming every script obeys the banner
Squarespace’s restriction covers its own non-essential cookies and some integrations. Custom code can need additional integration with the visitor’s choices.
Installing Google Analytics twice
For the built-in Google Analytics integration, Squarespace directs you to save the measurement ID and enable the banner, rather than adding another injected integration.
Your review checklist
Our suggested review process. The linked requirements above explain the platform or legal basis.
Compare the scan with your settings
Scan public pages, then list forms, commerce, scheduling, analytics and code injection. Confirm which providers receive data and which settings control their behavior.
Review and link the policy
Complete the controller, contact, purposes, recipients and retention details. Review the draft and place its public link in the footer and cookie banner.
Run a consent test
Start with a clean browser. Record what loads before a choice, after refusal and after acceptance. Test custom tags and embeds as well as platform analytics.
Example
A portfolio with analytics
A fictional photographer uses Squarespace forms, built-in Google Analytics and a booking embed. The scan and settings review produce a service inventory for the draft.
Testing the published experience
The photographer confirms storage and retention, publishes the policy and tests all three consent states. The booking embed is checked separately before its behavior is described.
Questions before publishing
Where do I enable refusal?
Turn on Decline all in the Cookies & Data Privacy panel. Manage cookies adds category choices.
Can I use the native Google Analytics connection?
Yes. Squarespace documents the built-in connection and the related cookie-consent setup; review both for your site.
Does custom code need a separate review?
Yes. Injected integrations can need their own connection to cookie controls, even when the banner is already visible.
Source review and changes
First edition: platform requirements, implementation checks and fictional worked example. Sources reviewed on the date above; verify changes before relying on them.