Tracking is legitimate; tracking without a legal basis isn't. Brazil's LGPD doesn't ban data-driven marketing. It requires transparency, a stated purpose, and a real way for the user to choose. This guide shows how to fix cookies and pixels without destroying your measurement.
What LGPD requires from a site with pixels
Cookies and browser identifiers used for advertising process personal data, even when indirect. That means informing the user, stating the purpose, offering a choice for non-essential purposes, and logging that choice.
| Category | Examples | Needs consent? |
|---|---|---|
| Essential | session, security, cart | no |
| Functional | language preference, chat | recommended |
| Analytics | audience metrics | yes, in practice |
| Advertising | media and remarketing pixels | yes |
What a correct consent banner looks like
- Accept, decline, and configure preferences, all at the same level of visual prominence.
- A clear description of each category, without legal jargon.
- No non-essential cookie fires before the user makes a choice.
- The choice is logged with a date, policy version, and an anonymous identifier.
- Consent can be revoked at any time.
Forms and active outreach
- State the purpose of the collection next to the submit button.
- Never use pre-checked boxes to authorize communication.
- Separate consent for sales outreach from sending the requested material.
- Store the source, date, and content of the opt-in together with the lead record.
This discipline connects directly to how you design your lead capture form and to the cadences described in the guide to email marketing.
Comply without losing measurement
Consent mode
Advertising platforms offer consent signaling that lets you collect aggregated, modeled data when a user declines individual-level tracking. Setting this up preserves much of your campaign reading.
First-party data
The more an operation depends on its own data, such as its CRM, email list, and purchase history, the less it suffers from third-party restrictions. Server-side sending, as described in the guide to the Meta Pixel and Conversions API, improves signal quality without skipping consent.
Practical risks of ignoring the topic
- Administrative sanctions and public exposure in case of a complaint.
- Failing compliance reviews from corporate clients.
- Media accounts suspended over a platform's data policy.
- A lead database that's unusable for lack of proof of consent.
Tracking compliance checklist
- Up-to-date inventory of the site's cookies and tags.
- Banner with accept, decline, and configure at the same level.
- No non-essential tag fires before the user chooses.
- Consent records stored and auditable.
- A specific, accessible privacy policy in the footer.
- Consent mode configured on the media platforms.
- A defined process for handling data deletion requests.
Conclusion
Compliance isn't the opposite of performance. Sites that clearly explain what they collect, respect a decline, and invest in first-party data measure better and build more trust than sites that pretend the law doesn't exist.
Frequently asked questions about lgpd cookies website
Does every website need a cookie banner?
Every site that uses non-essential cookies, such as analytics and advertising pixels, needs to inform the user and offer a real choice between accepting, declining, and configuring preferences.
Is an accept-only button enough?
No. Declining needs to be as easy as accepting, and the site should keep working normally after a user declines the non-essential categories.
Does complying with LGPD mean losing campaign data?
There's some individual-level data loss, but it's considerably reduced by the platforms' consent mode and by strengthening first-party data, such as your CRM and email list.
Do I need to store consent?
Yes. Log the date, the policy version, and the user's choice in an auditable way, so you can prove the legal basis if ever questioned.
About the author
Kauára Bertoluci
Partner and Head of Strategy & Growth, KCLOCK
Marketing, tracking, and CRO strategist. Leads positioning, funnels, paid media, and measurement across KCLOCK's projects.
- #privacy
- #tracking
- #compliance
Want to apply this to your funnel with people who do it every day?
KCLOCK builds high-converting funnels, landing pages, websites, and e-commerce stores. We diagnose your current funnel and show you where the revenue you're leaving on the table is hiding.
