Trust and operations

Transparency on EU-owned hosting, data sovereignty, uptime and compliance — built for EU websites.

EU-owned — not US clouds

Nerd Consent runs on European-owned providers (e.g. Hetzner, OVH, Scaleway). We deliberately do not use AWS, Azure or Google Cloud — not even with an EU region. A disk in Frankfurt on a US-owned cloud is still subject to US law (CLOUD Act). Consent logs, portal data and customer configuration are not transferred to third countries.

Closer to genuine EU setup than the big CMPs

“EU hosting” in marketing often means EU region on US-owned cloud — not EU-owned infrastructure. Here is the honest difference vs. the two most common Danish alternatives (source: public DPAs and security policies, July 2026):

Cookie Information Cookiebot Nerd Consent
Primary cloud Microsoft Azure (NL) Azure / Google Cloud (IE/NL) Hetzner, OVH, Scaleway
Ultimate owner Danish US PE (Vista Equity) Danish
US hyperscaler Yes (Microsoft) Yes (Azure/GCP) No
CLOUD Act exposure Possible via Microsoft Possible via Azure/GCP + US owner No US cloud dependency
No vendor is 100% “clean” — but Nerd Consent is deliberately built without AWS, Azure or Google Cloud as the hosting layer.

EU-owned hosting

Production deploys only on European-owned vendors. Not “EU-ready” on Microsoft Azure — but EU-owned infrastructure without dependence on US cloud vendors.

Service status

Operational

Host reports healthy — last checked 19:20:33.

Support

Questions about migration or compliance: jan@hjordie.dk

Site scanner and scan profile

Nerd Consent Scanner (NerdConsentScanner/1.0) is part of the CMP you installed. When the scanner visits your site, the banner applies a temporary scan profile so cookie inventory reflects post-consent state. This is not recorded as visitor consent in analytics KPIs.

DPA: Scanner traffic is processor activity on behalf of the site owner (controller). Purpose: technical cookie and script inventory. No personal data in probe reports (names only — never values).

Representative scan: We do not crawl every subpage like Cookiebot (priced by URL count). We discover URL structure via sitemap/BFS, group path templates, and scan a representative sample with HTTP + Playwright — legally defensible inventory without unsustainable COGS on flat pricing.

Whitelist guide and technical identity

Observability (operations telemetry)

Logs, metrics and traces for internal troubleshooting run on self-hosted SigNoz on the same EU infrastructure (Hetzner). We do not send full telemetry to US SaaS tools such as Datadog. Team alerts contain only short, non-sensitive messages — details stay in our internal observability tool.

Fair departure

It's super simple to stop as a customer and cancel your subscription. If you're not satisfied, you can always leave — and take your scripts, cookies and data with you. No lock-in. No data hostage.

Read about super simple cancellation →

Privacy and terms