Fourteen tools get a small site to a cookie banner and a privacy policy free, and they divide by what they cap: traffic (Termly 10,000 banner views, CookieYes and Enzuzo and Osano 5,000 visitors, Usercentrics 1,000 sessions, Secure Privacy 500 consents, CookieFirst 250,000 views for one script), pages (Cookiebot 50 subpages, CookieYes 100 per scan) or policies (Termly one). Complianz is free and fully functional on WordPress. The regulators give the text away: GDPR.eu’s templates, the ICO’s privacy-notice generator and the CNIL’s open-source DPIA tool. OneTrust and consentmanager have no free plan. Prices are USD and were checked on 23 October 2026. How we score · All Kurums Free lists
TL;DR — the free privacy tool that fits
- Small site under 50 pages, any traffic: Cookiebot Free — one domain, 50 subpages, no limits on traffic or users.
- Every policy plus a banner, no card: Enzuzo Free — all five legal policies, customisable banner, 5,000 visitors a month.
- Banner, policy and consent log: CookieYes Free — 5,000 pageviews, 100 pages per scan, consent log.
- WordPress site: Complianz Free — fully functional banner, scan, script blocking and policy generator; Personal $59 a year for multi-region.
- The policy text itself, from a regulator: ICO privacy notice generator (UK) or GDPR.eu’s templates; CNIL’s open-source PIA tool for impact assessments.
Which privacy & gdpr compliance tools tools have a free plan in 2026?
Every tool below runs a cookie banner or generates a policy at no monthly cost indefinitely. The consent platforms cap traffic or pages and show their branding: the most generous on traffic is Cookiebot (no traffic limit, 50 subpages) and CookieFirst (250,000 views, one third-party script); the most generous on scope is Enzuzo (all five policies). The policy generators (TermsFeed, PrivacyPolicies.com, GetTerms, iubenda) are free with attribution or branding and sell premium clauses. The regulator resources (GDPR.eu, ICO, CNIL) have no caps and no product.
We excluded OneTrust (quote-based, metered on visitors) and consentmanager (14-day trial, then €23 a month). iubenda is listed with its free-plan limits marked unverified, and Complianz, a WordPress plugin with more than a million installs, is the natural answer for a site like this one.
The table shows the binding cap, branding and the Free Score. Open a row for policies, scanning, the upgrade trigger and the page we checked.
| Company | Free as | Key limit | Card | Free Score | |
|---|---|---|---|---|---|
| E |
Free forever | 5,000 visitors/mo · 1 domain · all 5 policies · no card | No | 86 | Scorecard ↓ |
| C |
Free forever | 1 domain · 50 subpages · unlimited traffic | No | 84 | Scorecard ↓ |
| C |
Open source | WordPress · single site · scan 50 posts | No | 78 | Scorecard ↓ |
| C |
Free forever | 5,000 pageviews/mo · 100 pages/scan · consent log | No | 78 | Scorecard ↓ |
| T |
Free forever | 1 policy · 10,000 banner views/mo · quarterly scans | No | 74 | Scorecard ↓ |
| G |
Startup program | Regulator templates · no product | No | 72 | Scorecard ↓ |
| C |
Free forever | 250,000 views · 1 script · 1 language | No | 70 | Scorecard ↓ |
| O |
Free forever | 1 user · 1 domain · 5,000 visitors/mo | No | 66 | Scorecard ↓ |
| U |
Free forever | 1,000 sessions/mo · 1 domain · no card | No | 64 | Scorecard ↓ |
| S |
Free forever | 500 consents/mo · up to 10 domains · no card | No | 62 | Scorecard ↓ |
| T |
Free forever | 6 generators free · credits link · clauses one-time | No | 60 | Scorecard ↓ |
| P |
Free forever | Free consent script, no caps · clauses one-time | No | 58 | Scorecard ↓ |
| G |
Free forever | Branded policies & banner · scope unclear | No | 52 | Scorecard ↓ |
| I |
Free forever | Free plan · limits unverified · Consent Mode v2 | No | 50 | Scorecard ↓ |
Free tiers verified 23 October 2026 on each vendor’s pricing page (third-party sources named in the Scorecard where the vendor page was silent). Order is by Free Score only; sponsorship never changes it.
What do the free privacy tool plans actually include?
Open any row for the eight-field Scorecard. The “Why it ranks here” note under each row explains the score in plain terms.
1E
EnzuzoCanada · free with no card: one domain, 5,000 unique visitors a month, all five legal policies, a customisable banner and unlimited scanned pages, with Enzuzo brandingFree forever5,000 visitors/mo · 1 domain · all 5 policies · no cardNo card86⌄
- What’s free
- Free at $0, no card: 1 domain, 5,000 unique monthly visitors, 1 user, all five legal policies, customisable cookie banner, unlimited scanned pages
- Hard limits
- 5,000 visitors a month · 1 domain · Enzuzo branding · the FAQ cites a ‘Starter’ plan and 3 DSARs a month while the table says unlimited
- Time limit
- None
- Card required
- No. ‘No credit card required’ is stated.
- Upgrade trigger
- A 5,001st visitor or removing branding
- Cheapest paid step
- Growth $22/month billed annually ($264) or $29 monthly
- Best free for
- A small business site that wants the banner and every policy done in one place
- Verified
- Oct 2026 · enzuzo.com/pricing (FAQ and table disagree on DSAR counts)
2C
CookiebotDenmark (Usercentrics) · free for one domain of up to 50 subpages with no limits on traffic or users and an initial scanFree forever1 domain · 50 subpages · unlimited trafficNo card84⌄
- What’s free
- Free at $0: 1 domain, up to 50 subpages, no limits on traffic or users, initial scan
- Hard limits
- 50 subpages · 1 domain · daily scans are a paid add-on (+€99 a month) · custom branding is Premium · policy generator inclusion unclear
- Time limit
- None
- Card required
- Not stated.
- Upgrade trigger
- A 51st subpage or a second domain
- Cheapest paid step
- Premium Lite $8 per domain (the page also says plans start from €7 a month)
- Best free for
- A small, high-traffic site — a landing page or a shop with few pages and many visitors
- Verified
- Oct 2026 · cookiebot.com/en/pricing (currency shown as both USD and EUR)
Why it ranks here. The only consent platform here with no traffic cap, which matters more than the page cap for most small sites; the rescan being paid is the catch for sites that change.
3C
ComplianzNetherlands · a WordPress plugin with a fully functional banner, automatic cookie scan, script blocking and a privacy policy generator free; 1 million-plus installsOpen sourceWordPress · single site · scan 50 postsNo card78⌄
- What’s free
- Complianz Free: a fully functional cookie banner, automatic cookie scan, script blocking, privacy policy generator, GDPR, CCPA and ePrivacy
- Hard limits
- Single site · the free scan covers up to 50 posts · multi-region, TCF, A/B testing, geo-IP, records of consent and multisite are Premium · Google Consent Mode labelling is ambiguous
- Time limit
- None
- Card required
- No.
- Upgrade trigger
- Multi-region, records of consent or multisite
- Cheapest paid step
- Personal $59/year, 1 website, auto-renews
- Best free for
- Any WordPress site, including this one
- Verified
- Oct 2026 · wordpress.org plugin listing and complianz.io/pricing (v7.5.6, 13 Oct 2026)
Why it ranks here. Free, open source on the WordPress repository and complete for a single-region site; the records-of-consent feature that regulators ask for is the paid step.
4C
CookieYesUK · free per domain with 5,000 pageviews a month, 100 pages per scan, a cookie policy generator and a consent log; branding stays until UltimateFree forever5,000 pageviews/mo · 100 pages/scan · consent logNo card78⌄
- What’s free
- Free at $0 per domain: 5,000 pageviews a month, 100 pages per scan, cookie policy generator, consent log
- Hard limits
- 5,000 pageviews a month · 100 pages a scan · branding cannot be disabled (removal only on Ultimate at $55) · one free plan per account
- Time limit
- None
- Card required
- Not stated.
- Upgrade trigger
- A 5,001st pageview or a 101st page
- Cheapest paid step
- Basic $10/month per domain (100,000 pageviews, then $0.30 per 1,000); annual gives two months free
- Best free for
- A tiny site that needs a consent log it can show a regulator
- Verified
- Oct 2026 · cookieyes.com/pricing
Why it ranks here. The consent log free is the differentiator — most free tiers skip it — but 5,000 pageviews is the smallest traffic cap after Usercentrics.
5T
TermlyUS · one basic legal policy, a cookie policy and banner with a script auto-blocker, 10,000 banner views a month and quarterly scans, free with Termly brandingFree forever1 policy · 10,000 banner views/mo · quarterly scansNo card74⌄
- What’s free
- Free at $0: 1 basic legal policy, 10,000 banner views a month, quarterly cookie scans, cookie policy and banner, script auto-blocker, HTML embeds
- Hard limits
- 1 policy · 10,000 banner views a month · Termly branding (logo removal is Pro and above)
- Time limit
- None
- Card required
- Not stated.
- Upgrade trigger
- A second policy, a 10,001st view or monthly scans
- Cheapest paid step
- Starter $14 per website/month billed annually
- Best free for
- A site that needs one policy and a banner at modest traffic
- Verified
- Oct 2026 · termly.io/pricing
Why it ranks here. Twice CookieYes’ traffic and one policy only; a privacy policy and a terms page is already two.
6G
GDPR.eu & ICO & CNILEU/UK/France · GDPR.eu’s checklist, DPA template and erasure form; the ICO’s bespoke privacy-notice generator for UK organisations; the CNIL’s open-source PIA tool for impact assessmentsStartup programRegulator templates · no productNo card72⌄
- What’s free
- GDPR.eu (operated by Proton, EU co-funded): compliance checklist, DPA template, right-to-erasure form, privacy-notice guidance; ICO: create a bespoke privacy notice in a few steps with sector variants under the Open Government Licence; CNIL: a free, open-source PIA tool for Windows, Linux, Mac and web
- Hard limits
- None · GDPR.eu is not an official EU resource and none of it is legal advice · the CNIL tool’s licence name is not stated
- Time limit
- None
- Card required
- No.
- Upgrade trigger
- None
- Cheapest paid step
- None
- Best free for
- The text and the method, from the people who enforce the rules
- Verified
- Oct 2026 · gdpr.eu, ico.org.uk and cnil.fr
Why it ranks here. No banner, no scanning, no caps — the documents behind every tool above, free. Scored low on the job because you still need a tool to deploy a banner.
7C
CookieFirstNetherlands · a free banner with a soft limit of 250,000 page views a domain a month, one third-party script, a one-time scan and one languageFree forever250,000 views · 1 script · 1 languageNo card70⌄
- What’s free
- Free at €0: cookie banner only, soft limit of 250,000 page views per domain a month, 1 third-party script, one-time scan, one language
- Hard limits
- 1 third-party script · no customisation or white-label · one language · 96-hour support · domain count not stated
- Time limit
- None
- Card required
- Not stated.
- Upgrade trigger
- Customisation, a second language or a second script
- Cheapest paid step
- Basic €9/month or €99/year ex VAT
- Best free for
- A high-traffic site that runs exactly one tracker
- Verified
- Oct 2026 · cookiefirst.com home page pricing block
Why it ranks here. The traffic allowance is enormous and the script allowance is one: Google Analytics alone fills it. Right for a specific site, wrong for most.
8O
OsanoUS · one user, one domain and 5,000 monthly visitors free, plus a free URL scan for Global Privacy Control and dark patterns; the next plan is $199 a monthFree forever1 user · 1 domain · 5,000 visitors/moNo card66⌄
- What’s free
- Free at $0 a month: 1 user, 1 domain, 5,000 monthly visitors; a free URL scan for GPC and dark patterns
- Hard limits
- 5,000 visitors · 1 user · 1 domain · branding and scanning on Free not stated
- Time limit
- None
- Card required
- Not stated.
- Upgrade trigger
- A 5,001st visitor, templates or a GDPR representative
- Cheapest paid step
- Plus $199/month (3 domains, 30,000 visitors)
- Best free for
- A solo founder on one domain who will never need the next plan
- Verified
- Oct 2026 · osano.com/plans/cookie-consent
Why it ranks here. A credible enterprise vendor with a free tier whose paid step is twenty times its rivals’; use it only if you are sure you will stay free.
9U
Usercentrics Web CMPGermany · the enterprise CMP’s free tier: 1,000 sessions a month on one domain with a scan at setup and no card; Essential is €7 a monthFree forever1,000 sessions/mo · 1 domain · no cardNo card64⌄
- What’s free
- Free at €0: up to 1,000 sessions a month, 1 domain, automated scan once at setup, no card
- Hard limits
- 1,000 sessions a month · 1 domain · ‘Powered by Usercentrics’ branding (removal is an add-on)
- Time limit
- None
- Card required
- No. ‘No credit card required’ is stated.
- Upgrade trigger
- A 1,001st session
- Cheapest paid step
- Essential €7/month (1,500 sessions, 1 domain), 14-day trial
- Best free for
- A very low-traffic EU site that wants a German-engineered CMP
- Verified
- Oct 2026 · usercentrics.com/pricing
Why it ranks here. The smallest traffic cap on the list by a wide margin; the €7 step is reasonable but still only 1,500 sessions.
10S
Secure PrivacyDenmark · free per domain for 500 consents a month across up to ten domains, with a scan report and no cardFree forever500 consents/mo · up to 10 domains · no cardNo card62⌄
- What’s free
- Free at $0 per domain: 500 consents a month, up to 10 domains, domain scan report; no card
- Hard limits
- 500 consents a month · branding removal from Small
- Time limit
- None; paid plans have a 30-day trial
- Card required
- No.
- Upgrade trigger
- A 501st consent in a month
- Cheapest paid step
- Small $15/month per domain billed monthly
- Best free for
- Testing a banner on several small domains at once
- Verified
- Oct 2026 · secureprivacy.ai/pricing
Why it ranks here. Ten domains free is unusual; 500 consents is a few hundred visitors, so each must be tiny.
11T
TermsFeedUS · six policy generators free with a credits link; GDPR and CCPA clauses are one-time purchasesFree forever6 generators free · credits link · clauses one-timeNo card60⌄
- What’s free
- Privacy Policy, Terms and Conditions, Cookies Policy, Disclaimer, EULA and Return and Refund generators, free with a credits link
- Hard limits
- Free output carries a credits link · premium clauses are one-time (GDPR and CCPA provisions $82) · no flat per-policy fee
- Time limit
- None
- Card required
- No.
- Upgrade trigger
- Premium clauses or removing the credits link
- Cheapest paid step
- Per clause from $10 one-time; Privacy Consent $10/month or $100/year
- Best free for
- A basic policy set with attribution, bought clause by clause
- Verified
- Oct 2026 · termsfeed.com/pricing
Why it ranks here. Text, not a banner; the free policy is generic and the GDPR clauses are what cost money, which is the opposite of what a GDPR tool should hold back.
12P
PrivacyPolicies.comUS · free policy options and a cookie consent script with unlimited websites and pageviews; premium clauses are one-time payments from $7Free foreverFree consent script, no caps · clauses one-timeNo card58⌄
- What’s free
- Free options; Cookie Consent free with unlimited websites and pageviews; premium one-time payments, no recurring fees
- Hard limits
- Premium clauses: analytics up to $14, ads $7, payment processors $9, remarketing up to $12 — one-time
- Time limit
- None
- Card required
- No.
- Upgrade trigger
- GDPR or CCPA clauses
- Cheapest paid step
- $7 one-time clause
- Best free for
- A free consent script with no traffic cap, if a basic one is enough
- Verified
- Oct 2026 · privacypolicies.com/pricing
Why it ranks here. The one consent script here with no cap at all, and the least consent management — no scan, no log, no blocking. Same operator family as TermsFeed.
13G
GetTermsAustralia · a free version of the policies and consent banner with GetTerms branding; the free tier’s contents are not itemisedFree foreverBranded policies & banner · scope unclearNo card52⌄
- What’s free
- The free version of the policies and consent banner, with GetTerms branding
- Hard limits
- Branding · the free tier’s scope is not itemised
- Time limit
- None
- Card required
- Not stated.
- Upgrade trigger
- Removing branding or consent logs
- Cheapest paid step
- Starter $5/month annual, $9 monthly, or $199 lifetime per website
- Best free for
- A quick branded policy, with the cheapest lifetime option in the category
- Verified
- Oct 2026 · getterms.io/pricing
Why it ranks here. The $199 lifetime licence is the interesting number; the free tier is a teaser the page does not describe.
14I
iubendaItaly · a free plan described as the essentials at no cost, with Google Consent Mode v2 even on free; its free-plan limits could not be confirmedFree foreverFree plan · limits unverified · Consent Mode v2No card50⌄
- What’s free
- Free plan: explore the essentials at no cost; Google Consent Mode v2 on the free plan
- Hard limits
- Not itemised on the pricing page · unverified
- Time limit
- None
- Card required
- Not stated.
- Upgrade trigger
- Not stated
- Cheapest paid step
- Essentials €4.99 or $5.99 per site/month billed yearly (25,000 pageviews a month)
- Best free for
- A basic EU policy from a well-known Italian vendor, once its limits are readable
- Verified
- Oct 2026 · iubenda.com/en/pricing
Why it ranks here. Probably a solid free tier; its free-plan numbers could not be confirmed.
Which free privacy tool has no credit-card requirement?
Enzuzo, Usercentrics and Secure Privacy state no card; Complianz, TermsFeed, PrivacyPolicies.com and the regulator resources need none. Cookiebot, CookieYes, Termly, CookieFirst, Osano, GetTerms and iubenda do not state it. Nothing here auto-converts.
The condition that matters is branding: every free consent banner here shows the vendor’s name except Complianz and PrivacyPolicies.com, and removal is usually the first paid feature. For a business site that is a design decision as much as a legal one.
When does the free plan stop being enough?
Kurums Match: which free privacy tool fits your situation?
Landing page with heavy traffic
Cookiebot Free.
Small business site, wants everything
Enzuzo Free.
Needs a consent log
CookieYes Free.
WordPress
Complianz Free.
One tracker, big traffic
CookieFirst Free.
UK organisation writing a notice
ICO generator.
Doing a DPIA
CNIL PIA tool.
How we score free tiers
Duration (30): free forever scores 30, a 30-day-plus trial 15, a trial of 14 days or less 8, credit-based tiers 12. Capacity (30): whether the limits carry a team of three for twelve months. Core job (25): whether the free tier does the category’s main work — here, putting a compliant cookie banner and privacy policy on a business website and keeping consent records. Friction (15): no card 15; card but no auto-charge 8; auto-charge 0; self-hosting deducts for setup and maintenance.
Each free tier was checked on the vendor’s pricing page on 23 October 2026; where the vendor page was silent, the Scorecard names the third-party source used. Free tiers change, so this list is re-verified every quarter and a discontinued free plan stays listed for one month with a notice. Order is by Free Score only. Kurums Free sells no placement; sponsorship, affiliate links and vendor requests never change a score, a rank or a label. Vendors can submit corrections to the Kurums editorial team.
How did we verify these free tiers?
We opened each vendor’s pricing page and recorded traffic, page, policy and domain caps, branding, scanning and the paid step, plus the regulators’ resource pages. CookieFirst’s row uses its home-page pricing block; iubenda’s free-plan limits are marked unverified; Cookiebot’s page shows prices in both USD and EUR; Enzuzo’s FAQ and table disagree on DSAR counts. OneTrust was excluded as quote-based and consentmanager as trial-only.
Prices are USD except Cookiebot (mixed), CookieFirst, Usercentrics and iubenda (EUR). Nothing here is legal advice; GDPR.eu says the same of itself.
Frequently asked questions
Which cookie consent tool is free with the most traffic?
Cookiebot Free has no traffic or user limit on one domain of up to 50 subpages; CookieFirst allows a soft 250,000 views for one script; PrivacyPolicies.com’s basic consent script has no cap at all.
Is Cookiebot free?
Yes, for one domain with up to 50 subpages and unlimited traffic, with an initial scan. Daily rescans and custom branding are paid.
Is there a free GDPR cookie plugin for WordPress?
Complianz Free — a fully functional banner, automatic scan, script blocking and policy generator, with more than a million installs. Records of consent and multi-region are on the $59-a-year Personal plan.
Which free tool generates every policy?
Enzuzo Free includes all five legal policies plus a banner for one domain and 5,000 visitors, with no card. TermsFeed and PrivacyPolicies.com generate policies free with attribution and sell GDPR clauses one-time.
Is OneTrust free?
No. OneTrust is quote-based and metered on visitors, with no free plan or trial on its pricing page.
Where can I get an official privacy notice template?
The UK ICO’s generator creates a bespoke notice under the Open Government Licence; GDPR.eu publishes a checklist and DPA template; the French CNIL’s open-source PIA tool structures a data protection impact assessment.
Discover more from Kurums | Business Intelligence
Subscribe to get the latest posts sent to your email.
