Skip to pattern guide
Morten A. Giraffe

Pattern 18-05-cookie-consent / Utility & Completion / public

Cookie consent

A consent UI with real choices and truthful tracking behavior.

Use when
Applicable privacy requirements and actual tracking require consent.
Avoid when
Reject would be hidden or choices would be fake.
18 / 05Structure, not styling
01Understand the pattern

What this pattern must solve

Finish journeys with truthful status, useful recovery, and durable navigation. For this pattern, the practical fit is: Applicable privacy requirements and actual tracking require consent.

Avoid forcing it into the product when reject would be hidden or choices would be fake. A recognizable pattern is only useful when it reduces work or uncertainty for the person using it.

Information anatomy

Start with these relationships before choosing layout treatment. Their order may change with the task, but each one needs an explicit place.

  1. Current outcome or status
  2. Plain explanation
  3. Primary recovery or next step
  4. Global wayfinding

States the screenshot will not show

A polished default view is incomplete. Design and verify these states so the implementation stays useful when data, permissions, timing, or connectivity change.

  1. Success
  2. Missing route
  3. Denied access
  4. Dismissed notice
  5. Consent choice

Responsive and accessible behavior

Keep the message and next action immediately visible; utility UI must not cover page content or trap focus.

  1. Use correct HTTP and semantic status
  2. Move focus only when needed
  3. Provide equivalent accept and reject choices

UI/UX and public-page checks

The pattern prompt carries these implementation checks into the task. Apply only the public-page checks that match the route and content.

  1. 01 Purpose
  2. 02 Hierarchy
  3. 12 Feedback
  4. 13 Recovery
  5. 14 Accessibility
  6. 16 Sequence
  7. 17 Trust
  8. 04 Status/redirects
  9. 08 Site architecture
  10. 09 Rendering
  11. 15 Mobile/accessibility
  12. 18 Monitoring/change control

Full implementation prompt

This combines the shared inspection contract, the pattern-specific task, fit guidance, verification requirements, and a visible source link. Replace bracketed context with real product details before using it.

You are designing or repairing a real interface inside an existing product. Do not start by decorating it.

FIRST, establish the screen job in one sentence: “This screen helps [specific user] understand/do [specific thing] so they can [specific next action].” Inspect the current repository, `design.md`, existing components, tokens, routes, data flow, accessibility behavior, tests, and any supplied reference screenshot before editing. Preserve working product behavior and the project’s existing brand language unless the task explicitly replaces it.

Use the Morten A. Giraffe UI/UX field-guide principles as constraints: purpose before polish, visible hierarchy, relationship-driven spacing, meaningful contrast, clear proximity, behavioral consistency, familiar interaction patterns, reachable targets, structured choice, chunking, progressive disclosure, immediate feedback, recoverable errors, accessibility, responsive purpose, deliberate sequence, trust near doubt, and outcome-based measurement.

ANTI-AI-SLOPE RULES: do not default to generic SaaS composition, random gradients, glow effects, glassmorphism, oversized rounded cards, cards-inside-cards, decorative icon circles, fake stats, fake testimonials, meaningless bento grids, excessive pills, filler copy, giant empty spacing, or animation that does not explain state. Do not invent proof, customer names, metrics, security claims, reviews, or product capabilities.

SPECIFIC TASK — COOKIE CONSENT

Use plain-language purpose, equally understandable accept/reject where required, granular settings only when needed and a privacy link. Do not block essential use for nonessential tracking, persist choice and ensure actual tracking follows it.

Use when: Applicable privacy requirements and actual tracking require consent.

Avoid when: Reject would be hidden or choices would be fake.

IMPLEMENTATION CONTRACT
- Use semantic HTML and the project’s existing accessible primitives before creating new ones.
- Keep one clear primary action; visually subordinate secondary and tertiary actions.
- Design the complete state model where relevant: idle, hover/focus, loading, success, empty, partial data, disabled, validation error, server error, offline/retry, and permission/locked.
- Preserve user input after recoverable errors. Explain what happened and the next useful action.
- Make keyboard operation, visible focus, logical tab order, screen-reader naming, contrast, reduced motion, zoom/reflow, and touch targets part of the implementation—not a later patch.
- Treat mobile as the same purpose under different constraints, not a squeezed desktop. Verify narrow phones, tablet, desktop, long content, and 200% zoom.
- Avoid new dependencies unless the existing stack cannot reasonably support the requirement.
- Keep copy specific, human, and useful. Button labels should describe the outcome.
- For public/indexable pages, keep important meaning, links, headings, and metadata available without requiring client JavaScript; preserve truthful canonicals, titles, structured data, and internal links.
- Protect performance: avoid layout shift, oversized media, unnecessary client JavaScript, and effects that hurt responsiveness.
- Do not silently remove routes, integrations, analytics, auth behavior, deep links, metadata, or existing functionality.
- Run the project’s relevant build, typecheck, lint, tests, and targeted browser checks after implementation. Fix issues caused by your changes.

BEFORE CALLING IT COMPLETE, report: (1) page/screen job, (2) files changed, (3) what was preserved, (4) UX rules applied, (5) responsive/accessibility states verified, (6) tests/checks run with results, (7) remaining unknowns or production-only checks. Never claim “bug free,” “fully accessible,” or “regression free” without evidence.

Source: Morten A. Giraffe UI Prompt Field Guide — https://www.mortenagiraffe.com/journal/ui-prompt-library-for-vibe-coders/18-05-cookie-consent

Verify the result

Verify protocol status, keyboard recovery, focus behavior, and a useful next destination. For “Cookie consent,” success means the interface solves this fit: Applicable privacy requirements and actual tracking require consent.

Also confirm keyboard completion, visible focus, zoom and text reflow, reduced motion, touch targets, loading and error recovery, console output, existing behavior, and any route metadata affected by the change.

02Continue the library

Compare the neighboring patterns.