Terms and conditions

These Terms and Conditions (“Terms”) govern the access to and use of the CookieHub CMP (“Service”), operated by CookieHub ehf., a company registered in Iceland with its principal place of business at Hafnargata 51-55, 230 Reykjanesbær, Iceland (“CookieHub”, “we”, “us”, or “our”).

By registering for, accessing, or using the Service, you (“Customer”, “you”, or “your”) agree to be bound by these Terms. If you do not agree, you may not use the Service.

1. Scope of agreement

These Terms apply to all users of the CookieHub CMP, including self-service users under free or paid plans, and customers with custom or enterprise agreements. Additional terms may apply to Enterprise customers and shall take precedence in case of conflict.

The Service is offered globally and intended to assist website operators in complying with data protection regulations, including but not limited to the General Data Protection Regulation (GDPR) and similar privacy frameworks.

Each registered account may manage multiple services (e.g., websites or domains), and different services under the same account may be subject to different subscription plans (including both free and paid tiers).

2. Description of the service

CookieHub is a consent management platform that provides tools for scanning websites, configuring consent banners, managing cookie categories, and recording user consent preferences in accordance with applicable data privacy laws. The Service supports integrations with third-party platforms such as Google Tag Manager and IAB frameworks.

We are not responsible for the behavior or impact of third-party scripts, tags, or integrations that you configure in conjunction with the Service. It is your responsibility to ensure that any third-party code is compliant with applicable laws and does not interfere with the functionality or legal validity of the consent mechanism.

3. Subscription plans and billing

CookieHub offers multiple subscription plans:

Starter: Free plan with limited features and usage thresholds.
Basic, Business, and Enterprise: Paid plans with enhanced functionality and higher usage limits.

Each service (e.g., a configured website) under a single account may be subscribed to a different plan. Charges and limits apply on a per-service basis.

By subscribing to a paid plan, you agree to pay the applicable fees. All payments are due in advance and are non-refundable. We do not offer refunds for partial use, downgrades, or unused periods. Prices are exclusive of VAT or any applicable taxes.

Free plan usage

If your usage under the Starter (free) plan exceeds the included number of monthly sessions for three consecutive calendar months, the specific service will be automatically upgraded to the appropriate paid plan. You will be notified prior to the upgrade.

Paid plan usage

If your usage under a paid plan exceeds the monthly session limit included in your plan, additional sessions will be billed according to the pricing published on our website or provided in your Enterprise agreement. You are responsible for monitoring your usage and associated charges.

Failure to pay any due amount may result in suspension or termination of access to the Service.

4. Account registration and responsibilities

To use the Service, you must create an account and provide accurate, complete, and current information. You are responsible for safeguarding your login credentials and all activity under your account.

You must promptly notify us of any unauthorized use of your account or any other security breach.

5. Acceptable use

You agree not to:

Use the Service in violation of any applicable law or regulation.
Interfere with the operation or security of the Service.
Reproduce, modify, reverse-engineer, or resell the Service or any part of it unless you are an authorized reseller or affiliate partner.
Upload or transmit content that infringes intellectual property or privacy rights.
Use the Service to mislead, defraud, or impersonate others.

We reserve the right to suspend or terminate access if we detect abusive, illegal, or prohibited use.

6. Data protection and privacy

We process personal data on your behalf as a data processor. Our role and obligations are described in our Data Processing Agreement (DPA), which forms part of these Terms. For details on how CookieHub handles personal data and privacy practices, please refer to our Privacy Policy.

You are solely responsible for determining the legal basis for data processing and for configuring the Service to comply with applicable data protection laws. This includes ensuring that cookie categories, banner content, and consent behavior are implemented correctly and lawfully.

We do not collect or process personally identifiable information about end users. IP addresses in log files are anonymized, and no tracking or profiling is performed. However, we may use anonymized and aggregated data to generate statistical reports for customers or for service performance and optimization. This data does not identify individuals and is not shared with third parties for advertising or marketing purposes.

Consent logs and anonymized session data may be retained for up to 2 years unless a different period is agreed with the customer or required by law.

7. Infrastructure and security

CookieHub is committed to maintaining a secure and resilient infrastructure, designed in accordance with ISO 27001, GDPR, and PCI-DSS standards.

All data is stored in ISO 27001-certified Tier 3+ data centers in Europe.
Infrastructure is redundant, monitored 24/7, and includes automated offsite backups.
Security practices include patch management, network access control, and risk mitigation.
The CDN is globally distributed and designed for performance, scalability, and fault tolerance.

8. Intellectual property

All intellectual property rights in the Service and its components are owned by CookieHub or its licensors. You are granted a non-exclusive, non-transferable, limited license to use the Service during your subscription period.

You may not copy, modify, create derivative works, or use our content or branding without prior written consent.

9. Service availability

We strive to ensure a high level of availability and performance. However, the Service is provided “as is” and without warranties of any kind, express or implied.

While we aim to maintain high availability of the Service and minimize disruptions, we do not guarantee uninterrupted or error-free operation.

We reserve the right to modify, suspend, or discontinue any part of the Service, with reasonable notice where possible.

10. Termination

You may terminate your subscription at any time through your account dashboard. We may suspend or terminate access immediately if:

You breach these Terms;
You fail to pay applicable fees;
We are required to do so by law or legal process.

Upon termination, your access to the Service will be deactivated, and data may be deleted after a reasonable period.

11. Limitation of liability

To the fullest extent permitted by law:

CookieHub is not liable for any indirect, incidental, consequential, special, or exemplary damages, including lost profits, revenue, or data.
Our total liability under these Terms shall be limited to the total amount paid by you to us in the 12 months preceding the event giving rise to the claim.

This limitation applies regardless of the form of action and whether we were advised of the possibility of such damages.

12. Indemnification

You agree to indemnify and hold CookieHub harmless from any third-party claims, liabilities, damages, and expenses (including legal fees) arising from your use of the Service, violation of these Terms, or infringement of any rights.

13. Modifications

We may update these Terms at any time. If we make material changes, we will notify you by email or via the Service at least 15 days before they take effect. Continued use of the Service after the effective date of the updated Terms constitutes your acceptance.

14. Governing law

These Terms are governed by the laws of Iceland. Any disputes arising under or in connection with these Terms shall be subject to the exclusive jurisdiction of the District Court of Reykjanes, Iceland.

15. Reseller and affiliate programs

CookieHub offers reseller and affiliate programs to approved partners. Participation is subject to approval by CookieHub, and we reserve the right to suspend or terminate participation at any time for violations of these Terms or at our sole discretion.

Affiliates

Affiliates can earn commissions based on paid subscriptions generated through their referrals. Commissions are paid either by wire transfer or PayPal, depending on the affiliate’s payment preferences and applicable thresholds. Affiliates must not engage in misleading advertising, impersonation, or fraudulent referrals. CookieHub reserves the right to withhold or revoke commissions resulting from such activity.

Resellers

Approved resellers may create and manage client accounts through their reseller dashboard. Resellers may either:

Pay for the services directly and receive a discount on the applicable service fees, or
Allow the client to pay directly and receive a commission on those payments.

Participation in the reseller program does not grant any exclusive rights or territorial privileges unless explicitly agreed in writing.

Further details may be provided during the onboarding of approved resellers and affiliates.

16. Contact

If you have questions about these Terms, please contact us at:

Email: [email protected]
Mailing address: Hafnargata 51-55, 230 Reykjanesbær, Iceland