Cookie Settings
The Cookie Settings tab controls how long the visitor's consent decision is remembered.
Cookie Lifetime
| Option | Behavior |
|---|---|
| Session | The consent cookie expires when the browser is closed. Visitors will see the consent dialog again on their next visit. (default) |
| Days | The consent cookie persists for a configurable number of days. |
Storage Duration (Days)
| Setting | Details |
|---|---|
| Field | Storage Duration (days) |
| Type | Number |
| Default | 7 |
| Range | 1–365 |
| Visible when | Cookie Lifetime is set to Days |
Sets how many days the consent decision is stored. After this period, the cookie expires and the visitor will see the consent dialog again.
Common values:
| Days | Use Case |
|---|---|
| 7 | Re-ask weekly — cautious approach |
| 30 | Monthly — balanced approach |
| 90 | Quarterly — reduced friction |
| 365 | Annual — minimum interruption |
Technical Details
The consent cookie has the following properties:
| Property | Value |
|---|---|
| Name | slga-consent |
| Possible values | agree or decline |
| HttpOnly | Yes — the cookie is not readable by JavaScript |
| Secure | Yes, when your site forces HTTPS |
| SameSite | Lax |
| Path | Uses Joomla's configured cookie path (default: /) |
| Domain | Uses Joomla's configured cookie domain |
How Consent Is Recorded
- The visitor clicks Accept or Decline in the consent dialog
- The form submits a POST request to the current page with the value
agreeordecline - The plugin validates the CSRF token to prevent tampering
- If valid, the consent cookie is set with the configured lifetime
- The page reloads with the consent decision applied
Revoking Consent
Visitors can revoke their consent by clearing their browser cookies. There is no built-in "revoke consent" button — the consent dialog will reappear once the cookie is deleted or expires.