Squarespace's own banner knows two tiers — essential and non-essential — and does not block the scripts you injected yourself. Cookifi goes in the same header field and gives you real categories, a consent log and Consent Mode v2.
A Core, Plus or Advanced plan (legacy Business or Commerce). The Basic and Personal plans cannot inject header code at all.
Home menu → Website → Website Tools → Code Injection. On older accounts the path is Settings → Advanced → Code Injection.
Paste the Cookifi integration script into the Header box and save.
Website → Website Tools → Cookies & Visitor Data and switch the Squarespace cookie banner off, otherwise visitors see two banners.
In the Cookifi admin click Add, enter a name and your domain — a sitemap URL is optional — and click Create.
Open the property and copy the script under General → Integration script.
Click the Google icon in the script toolbar to include the Consent Mode default command. The defaults themselves are set under Regions, together with URL Passthrough and Ads Data Redaction.
Paste it as high in the <head> as the platform allows, on every page. Save, reload, and confirm the banner appears.
If the platform strips data- attributes and the banner does not load, switch to Query string mode in the Installation script section and copy the script again.
Cannot touch the head at all? Use the GTM Installation script in a Custom HTML tag with the Consent Initialization – All Pages trigger. Direct installation is still the recommendation, because ad blockers can suppress GTM.
Turn the native banner off first, or the site renders two. Google Analytics added through the official integration only respects consent when the Decline and Manage options are enabled; loading GA through GTM under Cookifi is the setup that actually holds, because then one system owns the firing order.
Squarespace cookie banner (Cookies & Visitor Data)
One script in the head, a scan that suggests the categories for you, and a 14-day trial that needs no card.
One monthly base from €10 plus usage on read events — the first 10,000 each month are free. Subdomains and team members are unlimited, so a second site is not a second plan.
Live chat and email on every plan, with a human response within one business day on Enterprise. We are a small team, which is why the things customers ask for tend to ship quickly.
Google and Microsoft Consent Mode v2 are first-class, GA4 and GTM are the default path, and Cookifi is a Google-certified CMP partner.
Core, Plus or Advanced — or legacy Business or Commerce. Header code injection is not available on Basic or Personal, so the script cannot be added there.
Squarespace does not run injected code on checkout pages. No third-party CMP can appear there; the rest of the site is unaffected.
It offers one essential/non-essential choice, does not block injected scripts, has no consent record and no Consent Mode v2 signalling. For a site running GA4 or Ads that is the gap this guide closes.
Every fact on this page comes from the pages linked below. Spotted something out of date? Tell us and we will correct it.
Last reviewed November 2, 2026
14 days, no credit card. If the install takes you longer than ten minutes, tell us — on our side that counts as a bug.