Embed and deploy a OneTrust consent experiences on your Webflow site.
OneTrust is a third-party service that helps manage privacy and data protection compliance. You can install the OneTrust app and connect your OneTrust account to deploy a consent banner on your Webflow site and manage blocked third-party scripts.
Overview
You’ll build and design your banner in OneTrust, then use Webflow’s OneTrust app to deploy the banner to your Webflow site and manage third-party scripts (e.g., GA4 tracking script).
What does the app do?
- Adds the OneTrust SDK to your site using your Domain ID
- Ensures the SDK loads early in the <head> of your site
- Provides a dedicated place to manage scripts that should only run after consent
- Automatically removes all related code if you uninstall or remove the banner
What’s managed in OneTrust vs. Webflow
All consent configuration — including banner design, geolocation rules, and categories — is controlled in your OneTrust account.
| Manage in OneTrust |
Manage with the Webflow app |
| Banner design and styling |
Embedding the OneTrust SDK |
| Consent categories |
Managing blocked third-party scripts |
| Geolocation rules |
Adding and removing required custom code |
| Regulatory configurations (GDPR, CCPA, etc.) |
|
| Preference center behavior |
|
How to install the OneTrust app
Note
To install and use the OneTrust app, you’ll need Site Admin or Designer permissions and a OneTrust account.
- Go to the OneTrust App details page
- Click Install App
- Choose the Webflow site you want to connect
- Click Authorize App
- Link an existing, active OneTrust account
- Click Connect app
How to launch the app
- Open the Apps panel
- Hover over OneTrust App and click Launch
How to link, configure, and deploy a consent banner
Once you’ve built, designed, and set up your consent experience in OneTrust, you’ll need that banner’s Domain ID to link it to the Webflow app. Once it’s linked, you can manage blocked scripts, then publish your site to deploy it.
Link to a OneTrust domain ID
- Launch the OneTrust App
- Paste your OneTrust Domain ID into the field
- Click Load
- Once the domain ID is validated, the app will:
- Load your domain configuration
- Display the domain version
- Show your geolocation rules in a compact view
- Click Set up to automatically add the OneTrust SDK launch script to your site’s custom code
Manage blocked scripts
To ensure consent management is prioritized, the OneTrust SDK must load first (or very close to first in the <head> of your site) before other scripts and before the page loads. For this reason, you should manage third-party scripts (e.g., tracking scripts, analytics scripts, etc.) through the app instead of placing them directly in the site’s custom code settings.
To add or remove a script so that OneTrust loads first:
- Launch the OneTrust App
- Click Manage blocked scripts
- Go to the Blocked Scripts section in the OneTrust app
- Paste your third-party scripts (e.g., analytics, marketing, tracking, etc.) into the field
- Optionally, edit scripts if you need to modify them or remove scripts you no longer want to load
- Click Save
This process adds a second custom code snippet to your site that ensures OneTrust can load when it needs to.
Publish your site
You must publish your site for the changes you’ve implemented with the OneTrust app to take effect.
How to remove a OneTrust banner
If you decide to remove OneTrust from your site:
- Launch the OneTrust App
- Click Remove consent banner
- Click Remove banner > Remove
- Publish your site for the changes to take effect
All related custom code is automatically deleted from your site.
Note
The app will remember the last list of blocked scripts you entered so that if you add a banner in the future, you won’t need to paste them in again.
Troubleshooting
The app shows an error after entering my Domain ID
Make sure the Domain ID is correct and active in your OneTrust account.
The banner doesn’t appear on my live site
- Confirm you’ve published your site
- Check that the SDK script appears in your site’s custom code
- Verify the Domain ID is associated with the correct consent banner
My tracking scripts are still firing before consent
Ensure they are added in the app’s Blocked Scripts section — not directly in Webflow’s custom code settings.