Managing Privacy Settings (2026.Q1 and Earlier)

You can ensure GDPR compliance for your cookies using Liferay’s configuration interface.

You can access the privacy settings at different scopes. Open the Global Menu (); then choose

• System Settings → Privacy (under Platform). This applies globally to all instances and sites.

• Instance Settings → Privacy (under Platform). This applies to the current instance and overrides System Settings.

• Open the Site Menu () and navigate to Configuration → Site Settings. Click Privacy under Platform. This applies to the current site and overrides both Instance and System Settings.

Enabling GDPR Compliance for Cookies

In the Privacy settings, select Cookie Manager. The two checkboxes are Enabled and Explicit Cookie Consent Mode. Explicit Cookie Consent Mode doesn’t work if Enabled is unchecked.

1. To set your handling preference, check Enabled. When Explicit Cookie Consent Mode is checked, no cookies are set until the user explicitly agrees. If Explicit Cookie Consent Mode is unchecked, all cookies are set until the user opts out.

   Note

   Analytics Cloud uses cookies to gather data. If Enabled is unchecked, cookies are active by default, and Analytics Cloud tracks users. If Enabled is checked and Explicit Cookie Consent Mode is unchecked, Analytics Cloud tracks users until they opt out of Performance Cookies through the banner. If both Enabled and Explicit Cookie Consent Mode are checked, Analytics Cloud tracks users only after they accept Performance Cookies.

2. Click Save or Update.

   Two new options appear in the left menu: Cookie Banner and Cookie Panel.

   

   Tip

   Before Liferay DXP 2025.Q4, these were called Banner and Consent Panel.

3. Go to the Cookie Banner tab and choose your options for the cookie banner (see Banner Options below).

4. Click Save.

5. Go to the Cookie Panel tab and choose your options for the consent panel (see Consent Panel Options below).

6. Click Save.

Banner Options

Your cookie policy appears when users log in through a banner. It displays the text from the Content field, your privacy Policy Link, and Link Display Text. Users have three options: Configuration, Accept All, and Decline All. You can customize these options in the Cookie Banner tab.

Content: Describe the relevant information from your cookie policy regarding data collection, tracking, and user privacy. Include the types of cookies used, their purposes, how users can manage or disable cookies, and any other relevant information.

Privacy Policy Link: Add a link to your site’s privacy policy page.

Link Display Text: Specify the text for the privacy policy page link.

Include “Decline All” Button: Decide whether to add a Decline All button on the cookie banner.

Consent Panel Options

The Consent Panel appears when users click the Configuration link on the banner. Users can select the types of cookies they consent to have stored.

Title: Add a title to your consent panel.

Description: Add a general overview about the usage of cookies on your site.

Cookie Policy Link: Add a link to your site’s cookie policy page. Use Liferay’s Cookie Policy utility page.

Link Display Text: Specify the text for the cookie policy page link.

Strictly Necessary Cookies Description: Describe the cookies necessary for your site to function.

Functional Cookies Description: Describe cookies that provide enhanced functionality and personalization. Check the Prechecked checkbox to enable this when users open the consent panel.

Performance Cookies Description: Describe your performance cookies, including how they measure and improve your site’s performance by counting visits, traffic sources, and page popularity, and the steps you took to maintain full data privacy. Check the Prechecked checkbox to enable this when users open the consent panel.

Personalization Cookies Description: Describe cookies that personalize the user experience. For example, some cookies may build a profile of users to show relevant ads. Without them, users receive less targeted advertising. Check the Prechecked checkbox to enable this when users open the consent panel.

Configuring the Consent Renewal Period

Liferay DXP 2026.Q1+

You can set how long consent remains valid before users must provide consent again. Configure the renewal period in the Consent Manager section.

1. Navigate to Privacy in System Settings, Instance Settings, or Site Settings.

2. Select Consent Manager and ensure it is enabled.

3. Set the Consent Renewal Period (1–12 months). The default value is 12 months.

   

4. Click Update.

When the configured period expires, users must provide consent again before tracking resumes.

Adding Cookies to the Cookie Policy Page

When using the Cookie Policy utility page, you must add new cookie objects for cookies that aren’t included in Liferay out-of-the-box.

1. Navigate to Site Administration → Site Builder → Pages.

2. Enter the Cookie Policy utility page.

3. Find the correct table for the new cookies and click Add.

4. Enter the external cookie’s information and click Save.

Configuring Privacy Settings Using the Data and Privacy Tab

You can manage privacy settings in your account.

1. Click your User Profile Menu on the top right and select Account Settings.

2. Select the Data and Privacy tab.

   The Cookie Manager options appear for all users.

3. Toggle the options for the different types of cookies according to your preferences.

4. At the bottom of the page, choose one of the three consent options:

   Use Necessary Cookies Only: Enables only essential cookies.

   Accept Selected: Enables only the categories you selected.

   Accept All: Enables all cookies, including functional, performance, and personalization cookies.

Feature Availability

Feature	Available as Beta	Available as Release	Generally Available
Configuring the Consent Renewal Period	Liferay DXP 2026.Q1 (LPD-65277)	—	Liferay DXP 2026.Q1

Related Topics

• Managing User Data (GDPR)
• Sanitizing User Data
• Data Control and Privacy