In the Ketch Console, create a Policy Scope for each regulation your property must comply with (e.g., GDPR, CPRA, CPA); assign a jurisdiction (list of countries or US states) and consent model (opt-in for GDPR, opt-out for US states) to each scope.
Define Purposes in the Ketch Console (e.g., Analytics, Advertising, Functional) and map each purpose to the applicable regulations; purposes will only be displayed to users in jurisdictions where they are legally required.
Configure the Ketch Smart Tag to detect the user's jurisdiction at runtime and apply the matching policy scope automatically — no manual geolocation code is needed in your application.
For cookie blocking, map each third-party technology in the Ketch Integration Library to a purpose; Ketch enforces blocking of mapped technologies until the corresponding purpose is consented to.
Use the Ketch REST API to read a user's current consent by calling GET https://api.ketch.com/v1/consents?identitySpace={space}&identity={id} with Authorization: Bearer YOUR_KETCH_TOKEN; the response lists per-purpose consent decisions.
Export consent records for audit via the Ketch reporting API or CSV download in the Console; records include purpose, decision, timestamp, jurisdiction, and the Ketch policy version active at the time of consent.
Known gotchas
Ketch jurisdiction detection is IP-based by default; users who use VPNs may be assigned to the wrong jurisdiction and shown an incorrect consent experience — consider providing a self-reported region selector for high-stakes privacy-sensitive properties.
Policy scope versioning in Ketch means that if you change a purpose description, a new consent version is created and previously collected consents may be invalidated, requiring users to re-consent — review versioning implications before editing live purpose descriptions.
The Ketch Integration Library covers common third-party tags but custom or proprietary scripts require manual integration definition; unmapped scripts will not be blocked by Ketch's enforcement layer.
Give your agent this knowledge — and 200+ more routes
One MCP install gives any agent live access to the full route map, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp