Cookie Settings
The Cookie tab controls how long the visitor's consent decision is remembered.

Cookie Lifetime
| Option | Behavior |
|---|---|
| Session | The consent cookie expires when the browser is closed. Visitors will see the consent dialog again on their next visit. (default) |
| Days | The consent cookie persists for a configurable number of days. |
Storage Duration (Days)
| Setting | Details |
|---|---|
| Field | Storage Duration (days) |
| Type | Number |
| Default | 7 |
| Range | 1–365 |
| Visible when | Cookie Lifetime is set to Days |
Sets how many days the consent decision is stored. After this period, the cookie expires and the visitor will see the consent dialog again.
Common values:
| Days | Use Case |
|---|---|
| 7 | Re-ask weekly — cautious approach |
| 30 | Monthly — balanced approach |
| 90 | Quarterly — reduced friction |
| 365 | Annual — minimum interruption |
Technical Details
The consent cookie has the following properties:
| Property | Value |
|---|---|
| Name | slgm-consent |
| Possible values | agree or decline |
| HttpOnly | Yes — the cookie is not readable by JavaScript |
| Secure | Yes, when Force HTTPS is set to Entire Site in Global Configuration |
| SameSite | Lax |
| Path | Joomla's Cookie Path if you set one in Global Configuration, otherwise / (the whole site) |
| Domain | Uses Joomla's configured cookie domain |
How Consent Is Recorded
- The visitor clicks Accept or Decline in the consent dialog
- The form submits a POST request to the current page with the value
agreeordecline - The plugin validates the CSRF token to prevent tampering
- If valid, the consent cookie is set with the configured lifetime
- The page reloads with the consent decision applied
Because the cookie path is / by default, a decision made on one page applies on every page of the site.
Demo mode never saves the cookie. See Demo Mode.
Revoking Consent
Visitors can revoke their consent by clearing their browser cookies. There is no built-in "revoke consent" button — the consent dialog will reappear once the slgm-consent cookie is deleted or expires.