# How we keep you compliant

How the rules are kept current as laws change, and how changes reach your site without breaking it.

Privacy laws change often. New US state laws start on fixed dates, regulators publish new guidance, and courts change what counts as consent. We keep the rules your banner follows up to date, so you don't have to track any of this yourself.

## What we do

- **We watch the law.** Every week we reread the official pages behind each rule: statutes, regulator guidance and enforcement notices. When a page changes, a person reads what changed.
- **We update the rules.** Changes go into a new release of the rules, with a plain note of what changed and why.
- **Dated laws switch on by themselves.** When a law has a start date, the rule ships ahead of time and your banner changes on that day. If your visitors there will see something different, we email you two weeks before.
- **We tell you what changed.** When a release goes live, owners whose visitors will see something different get an email that lists the changes for each site.

## How a change reaches your site

Every change is tested before it reaches your site, and the tests make sure checkout keeps working.

1. **Trial.** For a week, a new release runs on paper only. We work out what would change for every site and how many visitors that affects.
2. **Checkout rehearsal.** We load real sites that the change affects in a real browser twice, once under the current rules and once under the new ones, as a visitor from the place that changes. We compare the home page and a cart or checkout page. If the banner fails to start, new errors appear or a payment provider stops loading, the release is stopped.
3. **5% of sites for 48 hours.** After that comes a second rehearsal, and the release goes to everyone only if it passes.
4. **Instant rollback.** Any release can be undone for every site within a minute.

## What is never blocked

Whatever a rule, list update or setting says, the banner never holds back payment, checkout, fraud-prevention, bot-protection or sign-in services, such as Stripe, PayPal, Shopify checkout, Adyen, Klarna, Apple Pay, Google Pay, reCAPTCHA and Cloudflare Turnstile. Scripts the banner does not recognise keep running. If our servers cannot be reached, your site and its checkout carry on working.

On Shopify, the banner passes visitors’ choices to Shopify’s own privacy settings, so Shopify’s checkout and pixels follow them too.

## What we don’t promise

We follow published law and regulator guidance. Where the law is unclear, we take the stricter reading and say so. This is not legal advice, and we do not guarantee that you won't be fined or sued. If your site does something unusual, such as selling health data, ask a lawyer what else applies.

## Every response says which rules applied

Each record in your consent log includes where the visitor was (for example `US-CA`) and the version of the rules in force, so you can show what they were offered at the time.