You finish a website, hit publish, and then it hits you: a privacy policy is supposed to live somewhere, a cookie banner is supposed to ask for consent, and the GDPR/CCPA/LGPD alphabet soup suddenly matters. You can copy a template from a random site and hope it’s current, or hand the job to a service that updates these documents for a living. iubenda is the second option. I worked through its generator and configurator to see whether it actually removes the legal headache, or just hides it behind a monthly fee.
The Short Version
If you run a website or app that collects even a single email address, you need legal documents and a working cookie banner, and writing them yourself is a bad idea. iubenda is one of the oldest names in this space, and it bundles the whole stack into one subscription: a privacy and cookie policy generator, a consent-management banner, terms and conditions, and optional add-ons for data-subject requests and internal compliance. I went in expecting a policy template dump; what you actually get is a guided, scanner-driven setup that auto-updates when the law changes.
Let me be upfront about what I tested. I worked through iubenda’s public generator and product pages, the cookie consent platform with its live banner configurator, and the pricing dashboard, and I verified the plan limits and third-party ratings. The fully embedded publish happens inside an account dashboard, and the app subdomain would not open in my test environment, so I did not embed a live policy on a live domain myself. Everything below about the embedded flow is based on the product pages and the documented setup, not a widget I watched go live.
Here’s the short version. For a small business that wants defensible, auto-updating compliance without hiring a lawyer for every clause, iubenda is a strong pick and the entry tier is genuinely cheap. The tradeoffs are a configuration process that can feel scattered, iubenda branding on the lower plans, and a per-site price that adds up if you run a lot of properties.
Who This Is For (and Who Should Skip)
Match yourself to the product before you pay.
- ✅ Small businesses and solo founders with one or a few sites If you need a privacy policy, cookie banner, and terms without a legal retainer, the scanner-driven setup and the €4.99 entry tier map directly to that.
- ✅ WordPress and Shopify owners The one-click plugins and Google Consent Mode v2 support mean you can get a compliant banner and policy without touching code.
- ✅ Agencies managing many client sites There’s a dedicated agency/reseller model with per-site pricing, and documents auto-update centrally when laws change.
- ❌ Teams that need a fully white-labeled, multi-language product on the cheapest tier Branding removal and all languages sit on the higher plans, so the entry tier visibly carries the iubenda name.
- ❌ Very large or regulated enterprises with bespoke needs You’ll want the custom enterprise plan and likely a legal review; the self-serve tiers top out at 150K pageviews before overage.
Score Breakdown
What Actually Matters: Features, Reviewed
Here’s what the product actually does, with the line between what I tried and what I only read made clear.
✇ Smart setup: scan your site, pick your clauses
The core flow is the part I worked through. You point the generator at a site, it scans it and recommends the clauses it thinks you need based on the services you actually use, and you then choose from 2,400-plus lawyer-drafted clauses or add your own custom text. That’s a meaningful step up from a blank template you have to fill in yourself, because it catches things like analytics and social pixels you’d otherwise forget. The recommendation engine is only as good as the scan, so treat its suggestions as a starting checklist rather than a final legal answer.
🎉 Cookie consent as a certified CMP
The banner side is a Google-certified consent-management platform with Consent Mode v2 and IAB TCF support. In the live configurator I could switch the regional rules (GDPR and LGPD are shown), edit the format and position, the theme, text size, and the privacy widget, and the consent log keeps a record for audit. For a small business that’s important because it keeps ads and analytics loading in the regions where you’re allowed to. I configured the preview but didn’t embed it on a live domain, so I can’t vouch for the deployment in my own environment.
⚖️ Terms, auto-updates, and the modular add-ons
Beyond the core privacy and cookie tools, there’s a terms and conditions generator and a set of pro add-ons: a register of data-processing activities, data-subject rights management, a centralized consent database, and consent proof for cookies and forms. The feature that justifies the subscription for most buyers is the auto-update: when regulations change, the legal team updates the clauses and your document reflects it. My caveat is that the pro modules are billed separately, so the €4.99 headline is the floor, not the full ceiling if you need them.
What Real Users Actually Say
iubenda has one of the broader review footprints in this category, so there’s a real signal here. Here’s what I found.
The Aggregate Scores
iubenda sits at roughly 4.7 out of 5 on Capterra (around 190 reviews), about 4.6 out of 5 on G2 (a smaller review base), and 4.5 out of 5 on Trustpilot across several hundred reviews. Reviewers most often credit the breadth of the legal documents, the peace of mind, and the time it saves over manual work, with customer support repeatedly named.
— Third-party ratings cross-checked through Capterra, G2, and Trustpilot roundups, October 2026
The Recurring Criticism
The honest pattern in the negative feedback splits two ways. Setup and configuration are scored lower than daily use, with reviewers calling the initial configuration chaotic and describing a real learning curve; and per-site cost at scale is the other complaint, along with billing disputes that show up on Trustpilot. Some enterprise features are modular add-ons, so a fully loaded setup costs more than the entry price suggests.
— Reviewer patterns across G2, Consently, and Trustpilot, October 2026
Read the high score correctly: this is a mature, well-liked product, but the gap between easy day-to-day use and a confusing first setup is the thing to plan for. Set aside an hour for the first configuration rather than assuming it’s five minutes, and your experience will be closer to the positive reviews.
Pricing: Every Plan, Laid Bare
iubenda prices per site, with a free plan and three paid tiers. The figures below are the yearly prices billed annually, in euros, as shown on the pricing page; monthly billing costs a little more.
| Plan | Price (per site, billed yearly) | What You Get |
|---|---|---|
| Free | $0 | Basic policy with limited clauses and iubenda branding, enough for a low-traffic test rather than a professional site. |
| Essentials | €4.99/mo | Up to 25K pageviews, standard privacy & cookie policy, one language, monthly scans, up to 20 clauses, mild branding. |
| Advanced (most popular) | €19.99/mo | Up to 50K pageviews, complete legal documents, all languages, geo-targeting, monthly scans, up to 30 clauses. |
| Ultimate | €79.99/mo | Up to 150K pageviews, advanced documents, full branding removal, hourly scans, geo-targeting, mobile SDK, analytics, consent recovery, unlimited clauses. |
A few honest caveats. Prices shown don’t include VAT, which is calculated at checkout. Extra pageviews beyond a plan’s cap run at about €0.05 per 1,000, and the pro modules (consent database, rights management, opt-in booster) are billed separately at around €5 per 1,000 consents. For a single small site, Essentials is usually the realistic floor rather than the branded free plan; for a multi-language store, expect to land on Advanced.
The Unfiltered Pros & Cons
Pros
- ✓ Scanner-driven setup with 2,400+ lawyer-maintained clauses catches services you’d otherwise miss
- ✓ A Google-certified CMP with Consent Mode v2 and IAB TCF keeps ads and analytics compliant
- ✓ Documents auto-update when laws change, with a permanent consent log for audit
- ✓ Cheap €4.99 entry tier and strong WordPress, Shopify, GTM, and API integrations
- ✓ Broad, mostly positive review base across Capterra, G2, and Trustpilot
Cons
- ✗ The first configuration is scattered and has a real learning curve, with setup scored below daily use
- ✗ Branding and the single-language limit only lift on the higher paid tiers
- ✗ Pro modules and extra pageviews are add-on costs, so a full setup exceeds the headline price
- ✗ Per-site pricing gets expensive across many properties and for high traffic
- ✗ I did not embed a live policy myself, so the deployment on a real domain is unverified here
Final Verdict
iubenda is one of the safest choices in a category where getting it wrong is genuinely costly. It bundles scanner-driven policies, a certified consent banner, and terms into a cheap, auto-updating subscription, and it has the review base to back it up. The tradeoffs are a messy first setup, branding on the lower tiers, and add-on costs that surface when you scale, none of which are dealbreakers for a small business that plans an hour for the configuration.
If you have one site and want compliance you can answer for without a legal retainer, start on Essentials and move up if you need multiple languages or full branding. Run the scan, review the recommended clauses, and publish once you’ve matched them to the services you actually use. Just don’t treat the generated documents as a substitute for legal advice on a genuinely unusual business.
If your needs are narrower, a dedicated cookie banner or a simpler generator can cost less, but you’ll usually end up buying the privacy policy and terms separately, which is why iubenda’s all-in-one model wins for most small sites. It’s a well-established, defensible choice rather than a flashy one.
Frequently Asked Questions
Is iubenda free to use?
There is a free plan with a basic, limited-clause policy that carries iubenda branding and suits a low-traffic test. Professional sites generally move to Essentials at €4.99 per site a month billed yearly, which removes the hard limits and adds monthly scans.
Is iubenda legally binding and GDPR compliant?
iubenda generates lawyer-maintained policies and runs a Google-certified CMP with Consent Mode v2 and IAB TCF support, and it keeps a permanent consent log. It is designed to align with GDPR, CCPA, LGPD, and other regimes, but it is a tool, not legal advice, and an unusual business should have a lawyer review the output.
What does iubenda cost?
Billed yearly, the paid tiers are Essentials at €4.99, Advanced at €19.99, and Ultimate at €79.99 per site per month, with monthly billing a little higher. Extra pageviews and pro modules such as consent databases and rights management are billed separately.
Does iubenda work with WordPress and Shopify?
Yes. There are one-click plugins for WordPress and Shopify, plus Google Tag Manager, Consent Mode v2, a mobile SDK, and an API, so most small businesses can add the banner and policy without writing code.
About the Author
