Skip to main content

Cookie consent for UAE PDPL, DIFC and ADGM

Short answer: CookieTrace is a Consent Management Platform developed and operated by EZERA DIGITAL TECHNOLOGIES FZCO (EZERATECH), headquartered in Dubai. It is designed to support consent workflows for UAE Federal PDPL, DIFC and ADGM through Arabic and English banners, geo-targeting, optional Prior Blocking and timestamped consent records. It does not replace a legal assessment of your entity, data flows or free-zone status.

Which UAE privacy regime applies?

UAE Federal PDPL: Mainland UAE entities and many Dubai businesses outside the financial free zones. Map non-essential cookies and trackers, provide clear notice and configure an appropriate consent flow before tracking. DIFC Data Protection Law: Entities registered in the Dubai International Financial Centre. Assess the DIFC framework separately; do not assume the Federal PDPL is the only regime in scope. ADGM Data Protection Regulations: Entities registered in Abu Dhabi Global Market. Apply ADGM-specific transparency, processing and transfer requirements to the relevant website data flows.

What about Saudi PDPL?

For Saudi visitors, CookieTrace can deliver an Arabic RTL consent experience and consent-before-tracking controls designed to support Saudi PDPL workflows supervised by SDAIA. Saudi cross-border transfers and the website operator's legal basis still require a separate assessment.

How CookieTrace supports Gulf consent workflows

Arabic-first and English consent banners with right-to-left rendering and geographic targeting. Deep Scan discovers recognised cookies, pixels and trackers across site pages. Optional Prior Blocking holds scan-detected non-essential trackers until the visitor chooses. Google Consent Mode v2 signalling without a second vendor tag. Timestamped, integrity-protected consent records in an exportable audit trail. One script for UAE, Saudi and EU visitors, with the experience adapted by location and language.

  • Arabic-first and English consent banners with right-to-left rendering and geographic targeting.
  • Deep Scan discovers recognised cookies, pixels and trackers across site pages.
  • Optional Prior Blocking holds scan-detected non-essential trackers until the visitor chooses.
  • Google Consent Mode v2 signalling without a second vendor tag.
  • Timestamped, integrity-protected consent records in an exportable audit trail.
  • One script for UAE, Saudi and EU visitors, with the experience adapted by location and language.

Scope and limits

CookieTrace is software designed to support consent implementation. It does not determine which law applies, provide legal advice, guarantee compliance or offer UAE or Gulf data residency. Service data is hosted in the EU (Frankfurt) by default, with Türkiye residency available on request.

Plans and feature inheritance

Premium includes everything in Pro, including Deep Scan and tracker request blocking, then adds higher domain capacity and advanced controls.

  • Pro: $39/month; 10 domains
  • Premium: $79/month; 100 domains
  • Enterprise: Custom pricing; Unlimited domains

UAE cookie consent FAQs

Does UAE PDPL apply to cookies on a Dubai website? Cookies and similar identifiers may be personal data when linked to an identifiable person. A Dubai website should assess its cookies, purposes, legal bases and notice obligations under the regime that applies to its entity. Do DIFC and ADGM follow the UAE Federal PDPL? DIFC and ADGM have their own data protection frameworks. Confirm where the entity is registered before selecting the applicable consent and transfer rules. Should a UAE consent banner be available in Arabic? An Arabic RTL experience alongside English supports clear communication for UAE audiences. CookieTrace can select the banner language by geography and visitor language. Does CookieTrace guarantee UAE PDPL compliance? No. CookieTrace is designed to support consent workflows; the controller remains responsible for legal assessment, configuration and the wider processing activity. Does CookieTrace support Saudi PDPL workflows too? Yes. The same platform can provide Arabic RTL banners, consent-before-tracking controls and consent evidence designed to support Saudi PDPL workflows. Where are CookieTrace service data hosted? Service data is hosted in the EU (Frankfurt) by default. Türkiye residency is available on request; UAE or Gulf residency is not currently offered.

Does UAE PDPL apply to cookies on a Dubai website?

Cookies and similar identifiers may be personal data when linked to an identifiable person. A Dubai website should assess its cookies, purposes, legal bases and notice obligations under the regime that applies to its entity.

Do DIFC and ADGM follow the UAE Federal PDPL?

DIFC and ADGM have their own data protection frameworks. Confirm where the entity is registered before selecting the applicable consent and transfer rules.

Should a UAE consent banner be available in Arabic?

An Arabic RTL experience alongside English supports clear communication for UAE audiences. CookieTrace can select the banner language by geography and visitor language.

Does CookieTrace guarantee UAE PDPL compliance?

No. CookieTrace is designed to support consent workflows; the controller remains responsible for legal assessment, configuration and the wider processing activity.

Does CookieTrace support Saudi PDPL workflows too?

Yes. The same platform can provide Arabic RTL banners, consent-before-tracking controls and consent evidence designed to support Saudi PDPL workflows.

Where are CookieTrace service data hosted?

Service data is hosted in the EU (Frankfurt) by default. Türkiye residency is available on request; UAE or Gulf residency is not currently offered.

Official sources and detailed guides

UAE Government — data protection laws · DIFC — Data Protection Law · ADGM — Office of Data Protection · SDAIA — Personal Data Protection Law

How CookieTrace works

A single script tag installs in about 3 minutes, directly or through Google Tag Manager. It scans the site for cookies, pixels and storage use, classifies recognised trackers found during the scan, shows a consent banner in the visitor's language, and only then allows non-essential tags to run. Recurring deep scans alert you when a new tracker appears.

  • Automatic cookie, pixel and fingerprinting discovery with scheduled re-scans.
  • Granular categories: strictly necessary, functional, analytics, marketing, social.
  • Google Consent Mode v2 and IAB TCF v2.2 signalling out of the box.
  • Optional tracker request blocking stops rejected trackers' requests in the browser.
  • Cryptographically signed, timestamped consent logs retained for 3+ years.

Regulations covered

GDPR and ePrivacy for the EU and UK, KVKK and the 2022 KVKK Cookie Guide for Turkey, CCPA/CPRA for California, plus AI Act Article 50 disclosure support. Banners, retention and proof of consent follow the rules of the visitor's jurisdiction.

Plans and pricing

Pricing is per month in USD, based on the number of domains: Pro: $39/month · Premium: $79/month · Enterprise: custom pricing. Every plan keeps the compliance features; the 14-day trial needs no card.

Company

CookieTrace is a Consent Management Platform (CMP) developed and operated by EZERA DIGITAL TECHNOLOGIES FZCO (EZERATECH)., founded in 2024. Offices: IFZA Business Park, Dubai Silicon Oasis, Dubai (AE) · İstanbul (TR) · Cambridge (GB). Interface and support in English, Turkish, Spanish and Italian. Contact: [email protected] (sales), [email protected] (support), [email protected] (privacy).