> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rocket.new/llms.txt
> Use this file to discover all available pages before exploring further.

# Compliance & privacy

> Add GDPR, CCPA, and cookie consent flows to your Rocket.new site with generated banners, privacy policies, and data handling controls in place.

export const LlmsDirective = () => <blockquote className="llms-directive">
    For the complete documentation index, see <a href="/llms.txt">llms.txt</a>.
    For a lightweight markdown version of this page, append .md to the URL.
  </blockquote>;

<LlmsDirective />

<div style={{position:'relative',aspectRatio:'16/9',overflow:'hidden',borderRadius:'12px',cursor:'pointer',background:'#000'}} onClick={(e)=>{const f=document.createElement('iframe');f.src='https://www.youtube.com/embed/EUBTdbIDhsQ?autoplay=1';f.style.cssText='position:absolute;top:0;left:0;width:100%;height:100%;border:0';f.allow='autoplay;encrypted-media;picture-in-picture';f.allowFullscreen=true;e.currentTarget.innerHTML='';e.currentTarget.appendChild(f);}}>
  <img src="https://i.ytimg.com/vi/EUBTdbIDhsQ/hqdefault.jpg" alt="Compliance & privacy" style={{position:'absolute',top:0,left:0,width:'100%',height:'100%',objectFit:'cover'}} />

  <div style={{position:'absolute',top:'50%',left:'50%',transform:'translate(-50%,-50%)',width:'68px',height:'48px',background:'#ff0000',borderRadius:'10px',display:'flex',alignItems:'center',justifyContent:'center',boxShadow:'0 2px 12px rgba(0,0,0,0.5)'}}>
    <svg viewBox="0 0 24 24" style={{width:'28px',height:'28px',fill:'#fff',marginLeft:'4px'}}>
      <path d="M8 5v14l11-7z" />
    </svg>
  </div>
</div>

Privacy regulations carry real financial risk. GDPR fines can reach 20 million euros or 4% of annual global turnover, whichever is higher ([GDPR Article 83](https://gdpr-info.eu/art-83-gdpr/)). Rocket does not add compliance features automatically, so you need to ask it to implement cookie consent banners, policy pages, and geo-based consent flows before you launch.

## What you can ask Rocket to implement

Tell Rocket in chat what to add. Below are the most common requests.

### Cookie consent banners

A consent banner lets visitors choose which cookies your site can set. Ask Rocket to add one that matches your site's design.

```plaintext wrap theme={null}
Add a cookie consent banner to my site. It should match the design and let visitors choose which cookies to accept.
```

### GDPR compliance

<Tooltip headline="GDPR" tip="General Data Protection Regulation: an EU law that requires websites to get explicit, granular consent before collecting personal data from EU visitors.">GDPR</Tooltip> requires granular consent categories so EU visitors control what data you collect:

* **Necessary**: always active (site functionality)
* **Analytics**: traffic tracking and [performance measurement](/build/measure/performance)
* **Marketing**: advertising and retargeting
* **Preferences**: language, theme, and personalization

```plaintext wrap theme={null}
Implement GDPR-compliant cookie consent with granular categories. Visitors should be able to choose exactly what they consent to.
```

### CCPA compliance

<Tooltip headline="CCPA" tip="California Consumer Privacy Act: requires businesses to provide California residents with a visible opt-out link for the sale of their personal information.">CCPA</Tooltip> requires a visible opt-out for California visitors. CCPA penalties reach up to \$7,988 per intentional violation as of 2025 ([California Privacy Protection Agency](https://cppa.ca.gov/regulations/cpi_adjustment.html)).

```plaintext wrap theme={null}
Add CCPA compliance with a "Do Not Sell My Personal Information" link in the footer.
```

### Privacy and cookie policy pages

Policy pages explain what data you collect and how you use it. Ask Rocket to generate them based on your site's actual data practices.

```plaintext wrap theme={null}
Generate a privacy policy page and a cookie policy page for my site. Tailor them to the services and data I collect.
```

### Geo-based consent

Different regions have different rules. Ask Rocket to show the right consent flow based on where the visitor is located.

```plaintext wrap theme={null}
Show the full GDPR consent banner to EU visitors, CCPA options to California visitors, and a simplified notice for everyone else.
```

<Tip>
  Once your consent settings are in place, they affect what your [analytics](/build/measure/analytics) can track. Set up consent first, then configure analytics.
</Tip>

## Commands

Use these slash commands from chat to implement and audit privacy compliance. You can find the full list of available commands in the [commands reference](/build/editor/commands).

<Tabs>
  <Tab title="Implement">
    ### /Implement Privacy Compliance

    Add consent banners, cookie categorization, and policy pages to your codebase.

    **Examples:**

    * `/Implement Privacy Compliance`
    * `/Implement Privacy Compliance for user data and cookies`
  </Tab>

  <Tab title="Audit">
    ### /Generate Privacy Report

    Analyze your codebase and generate a privacy compliance report covering cookie usage, consent flows, and data handling practices.

    **Examples:**

    * `/Generate Privacy Report`
    * `/Generate Privacy Report for data handling`
  </Tab>
</Tabs>

<Divider />

## What's next?

<CardGroup cols={2}>
  <Card title="Accessibility" icon="universal-access" href="/build/polish/accessibility">
    Pair compliance with accessibility for complete legal and usability coverage.
  </Card>

  <Card title="Custom code" icon="file-code" href="/build/editor/custom-code">
    Add third-party scripts that respect your consent settings.
  </Card>

  <Card title="Launch your app" icon="desktop" href="/build/launch-web/launch-your-site">
    Publish your site once compliance is in place.
  </Card>
</CardGroup>