Opt in for visitors in Brazil
Velo reads the visitor's country at the edge. Visitors in Brazil start with every Consent Mode v2 signal denied until they choose.
LGPD cookie consent
for Brazil.
Brazil's Lei Geral de Proteção de Dados treats consent as a free, informed and unambiguous choice. Velo treats visitors in Brazil as opt in and asks them in Portuguese.
The rule,
at a glance.
General information, checked September 2026. Not legal advice.
- Applies to
- Processing of personal data of people in Brazil, including websites that serve them from abroad.
- The rules
- Lei 13.709/2018 (LGPD) and the ANPD's 2022 guidance on cookies.
- Consent model
- Consent for non essential cookies, free, informed and unambiguous.
- Enforced by
- The ANPD, now called the Agência Nacional de Proteção de Dados.
- Maximum fine
- 2% of revenue in Brazil, limited to 50 million reais per infraction.
- Velo default
- Every Consent Mode v2 signal starts denied, with the banner in Portuguese.
What the LGPD asks.
What Velo does.
Portuguese out of the box
A choice only counts if people understand it. The banner ships in Portuguese among nine languages, and visitors choose by category.
Proof of consent
The LGPD puts the burden of proving consent on the controller. Each decision is stored with a receipt id, the region and the banner version.
Revoke at any time
Consent can be revoked at any time. The floating button reopens preferences, and a change is saved as a new record linked to the old one.
What the law
actually says.
The LGPD is Brazil's general data protection law, with most of it in force since September 2020. It applies to any site that processes data of people in Brazil, wherever the company is based. Consent is one of ten legal bases, and when a site relies on it, consent has to be free, informed and unambiguous, and it can be withdrawn at any time.
In 2022 the ANPD published guidance on cookies. It calls consent the most appropriate basis for most non essential cookies, advises against options selected in advance, and recommends a visible button to reject them on the banner.
Up and running
in four steps.
From the first script tag to the first recorded choice.
-
Add Velo to your site
Install it with the Google Tag Manager template or paste one script tag. Guides cover WordPress, Shopify, Webflow and other platforms.
-
Scan and sort your cookies
Velo scans your pages, lists the cookies and scripts it finds and suggests a category for each one. You confirm or change them.
-
Design the banner
Pick colours, wording and languages. Reject sits next to accept on the first layer.
-
Publish and check
Visitors in Brazil get opt in defaults, with every consent signal denied until they choose. Each choice lands in your consent log with its receipt id.
Before you
go live.
Velo handles the banner, the regional defaults and the records. These parts stay with you.
- Your privacy or cookie notice names each purpose and each third party that sets cookies.
- Tags in Google Tag Manager wait for the matching consent signal before they fire.
- You tested from the region itself: nothing optional loads before a visitor chooses.
- Someone on the team reviews new scripts when a scan finds them.
- Your site says who handles data requests, the encarregado, with contact details that are easy to find.
In every plan, from €0
Consent Mode v2 advancedRegional defaults by countryGlobal Privacy Control honouredReceipt for every choiceReject as easy as acceptFloating preferences button
Nine banner languagesCookie and tracker scanChoices by categoryConsent log and dashboardWorks with Google Tag ManagerInstallation help
Questions,
answered.
What teams ask about the LGPD and cookies.
Does the LGPD require consent for cookies?
Consent is one of several legal bases in the LGPD. For non essential cookies such as advertising, the ANPD's 2022 guidance on cookies points to consent, with no boxes ticked in advance and a way to reject.
Who enforces the LGPD?
The ANPD, now called the Agência Nacional de Proteção de Dados. Sanctions can reach 2% of revenue in Brazil, limited to 50 million reais per infraction.
Why does Velo use opt in for Brazil?
Because the LGPD requires consent to be free, informed and unambiguous, Velo starts every consent signal denied for visitors in Brazil until they choose.
Is this legal advice?
No. This page is general information about the LGPD and how Velo behaves.
Website privacy, in one place.
Scan your site →
Regulations
GDPR
UK GDPR
CCPA / CPRA
US state laws
LGPD
Ley 1581 (Colombia)
Ley 25.326 (Argentina)
Ley 29733 (Peru)
