B2B SaaS

Cookie consent banner and GDPR compliance for websites

Crumbkeep · Self-hosted cookie consent with a hosted dashboard for multi-site teams

WatchingDraft scoreMature market · since 2012 · AI estimate

54PWAS score

Confidence

Based on 9 of 9 factors

Overview

AIThis description was written by a model from public signals. The facts behind it are listed under Evidence.

Problem: Websites and web applications must comply with privacy regulations like GDPR and CCPA by obtaining explicit user consent for cookies and tracking. Existing solutions can be expensive, inflexible, or tightly coupled to proprietary platforms, forcing teams to either pay for closed-source tools or build consent management in-house.
Solution concept: A better product would provide an open-source, self-hosted, framework-agnostic cookie consent manager that supports modern privacy standards (GDPR, CCPA, Google Consent Mode v2, IAB TCF) with easy integration into popular JavaScript frameworks and minimal lock-in. It would allow teams to customize, self-host, and avoid ongoing licensing costs.
Who has it: Web developers and product teams building websites and web applications using React, Vue, Next.js, Nuxt, Svelte, Astro, or plain JavaScript who need to handle cookie consent and comply with GDPR, CCPA, and IAB standards.
How they handle it today: Today, teams either use commercial consent management platforms (CMPs), implement custom consent banners, or integrate with closed-source consent solutions that are often vendor-locked and expensive to scale.
Why now: Regulation enforcement around GDPR, CCPA, and privacy laws is increasing. Major platforms like Google are tightening consent mode requirements (Google Consent Mode v2). More developers prefer open-source solutions for compliance-critical infrastructure to avoid vendor lock-in and reduce costs at scale.
How it could charge: Freemium SaaS model with free open-source version and premium hosted version with features like advanced analytics, compliance reporting, multi-site management, priority support, and pre-built templates. Alternatively, professional services for implementation and compliance consulting on top of the open-source tool.

Score breakdown

A model sorted each factor into a rubric bucket; code turned buckets into numbers. Unknown factors are left out of the score and lower confidence instead.

Market validation

Confidence 91 · 3 evidence · Established paid competitors (Cookiebot with 2.4M websites, OneTrust, TrustArc) demonstrate a proven market with strong demand for consent management solutions.

Revenue evidence

Confidence 91 · 3 evidence · Competitors Cookiebot and TrustArc publicly claim substantial user bases (2.4M websites, 600k+ customers, 1500 enterprise customers) indicating substantial revenue-generating markets.

Growth

Confidence 95 · 2 evidence · The open-source project gained nearly 2000 stars in 643 days, showing visible momentum in the space, though this is a single project signal rather than market-wide breakout growth.

Problem severity

Confidence 30 · Judged from the description · GDPR and CCPA compliance is critical: non-compliance blocks website operation and risks substantial regulatory penalties and lost revenue, making this a regulatory blocker.

Economic proximity

Confidence 30 · Judged from the description · Cookie consent sits directly in the compliance stack that protects revenue and avoids regulatory fines, and premium features like compliance reporting and multi-site management directly support monetization.

Distribution

Confidence 30 · Judged from the description · Open-source JavaScript libraries achieve distribution through developer adoption and integration into many websites, though the consent banner itself is typically invisible to non-developers.

Buildability

Confidence 30 · Judged from the description · A functional cookie consent manager requires handling multiple privacy standards (GDPR, CCPA, IAB TCF, Google Consent Mode v2) and framework integration, but these are established patterns without novel research or hardware.

Differentiation

Confidence 30 · 1 evidence · Open-source and self-hosted deployment addresses the lock-in and cost concerns that users explicitly name, creating a clear gap between expensive proprietary CMPs and this model.

Retention and timing

Confidence 30 · Judged from the description · Cookie consent is embedded into every website's compliance workflow and requires ongoing management as regulations evolve, making it a recurring necessity with strong regulatory tailwinds.

Risk penalties

Heavy regulationThe product operates directly under GDPR, CCPA, and other privacy regulations; non-compliance creates legal liability and regulatory enforcement risk for both the product and its customers.−15
Extreme competitionMarket leaders Cookiebot (2.4M websites), OneTrust, and TrustArc are entrenched with massive scale and customer lock-in; entering requires competing on price, compliance expertise, or developer experience.−10

Score history

54 · confidence 52 · config v1First score · 18 Oct 2026

Cookie consent banner and GDPR compliance for websites

Overview

Build this business

Verdict

Score breakdown

Risk penalties

Score history

Validation gate

Evidence · 9 items

Market validation

Revenue evidence

Growth

Differentiation

Market

Existing products

Build

Legal reconstruction check

Community