Where Should Your Cookie Banner Appear? Top, Bottom, or Center?
February 09, 2026
•
3 min read
Table of contents
back
to the top
Where Should Your Cookie Banner Appear? Top, Bottom, or Center?
This is a crucial question because banner placement significantly affects both your compliance risk and your conversion rate. There is no single "perfect" spot under GDPR, but regulators and user data have established clear best practices.
The three primary placements
The three primary placements — Bottom Bar, Pop-up Modal (Center), and Top Bar — each offer a different balance of compliance risk, user experience (UX), and impact on your opt-in rate.
1. The Bottom Fixed Bar (Recommended for Balance)
This is the most common and often recommended placement as it provides high visibility without disrupting the user's immediate experience.
Aspect
- Visibility: High. It's visible immediately but doesn't obscure content above the fold.
- User Experience (UX): Best. Users are accustomed to it; it allows them to read content while interacting.
- Compliance Risk: Low. The bar allows the user to easily scroll, which regulatory bodies generally favor over forced interaction.
- Conversion Rate: Moderate. The less intrusive nature means users are less annoyed, but they may scroll past it or ignore it (passive dismissal is common).
Best Practice Tip: The bottom bar should be full-width and fixed (it remains visible even when the user scrolls down) to ensure the user can find the link to manage or withdraw consent at any time.
2. The Pop-up Modal (Center-Screen)
The center-screen modal (or pop-up) is the most demanding placement, forcing immediate interaction before the user can access content.
- Visibility: Highest. It achieves 100% visibility, commanding user attention.
- User Experience (UX): Worst. It is highly disruptive and can lead to frustration and high bounce rates.
- Compliance Risk: Moderate-to-High. Requires extreme caution. If you don't offer an equally prominent "Reject All" button, this is considered a Cookie Wall (a severe dark pattern violation).
- Conversion Rate: Highest. The user is forced to make a choice to proceed, typically resulting in the highest initial opt-in rate.
Best Practice Tip: If using a modal, ensure it doesn't cover the entire screen on mobile (it must be partially dismissible or provide clear options) and always includes a clear "Reject All" button of equal size and contrast to "Accept All."
3. The Top Fixed Bar (Least Recommended)
Similar to the bottom bar, the top bar is unobtrusive, but data suggests it's often less effective.
- Visibility: Moderate. Users often ignore headers, focusing their attention further down the page.
- User Experience (UX): Good. It's non-intrusive and preserves the main content view.
- Compliance Risk: Low. Non-intrusive placement generally minimizes compliance risk.
- Conversion Rate: Lowest. Studies suggest users are more likely to ignore banners placed in the header compared to those in the footer or center.
Final Recommendation: Balancing Compliance and Conversion
The optimal choice depends on your business goals, but the current best practice leans toward the Bottom Fixed Bar due to its low compliance risk and good user experience.
Principles & Actionable Insights
- Compliance First (GDPR): Placement does not matter as much as choice. The banner must provide equal prominence for "Accept" and "Reject All," regardless of where it appears.
- User Experience: Avoid the full-screen center Pop-up Modal unless your content is extremely valuable (e.g., streaming service), as it maximizes user annoyance.
- A/B Testing: Always A/B test your placement. Data shows that simply placing a bar in the bottom-left corner of a screen can drastically change acceptance rates depending on the site.
Sources
Guidance referenced: GDPR (Article 7), ICO, CNIL.
Explore further

Cookie Control Explained: What It Is and Why Your Website Needs It
Cookie control: manage cookies and user consent, block trackers until opt-in, log preferences for GDPR compliance, and build user trust with a flexible CMP.
August 29, 2025
3 min

The Role of Data Protection Officers (DPOs) in GDPR Compliance
In today’s digital landscape, protecting personal data has become a vital concern for organisations.
September 16, 2024
4 min

Small Business Owner’s Guide to Crafting a Privacy Policy
Learn how to create a GDPR‑compliant privacy policy for your small business: a step‑by‑step guide to data collection, third‑party sharing, cookie compliance, and user rights.
July 28, 2025
4 min


