Consent form builder¶
The consent form builder is a visual editor for creating consent experiences — cookie banners, event registration forms, marketing opt-ins, and any other form where you need to collect data subject consent. You build the form on the left, see a live preview on the right, and publish it to your site or Transparency Center when ready.
This guide walks through every part of the form builder so you know what each setting does and how the pieces fit together.
Before you start¶
Before building a consent form, you need:
- At least one processing purpose configured in the Purposes section (e.g. Advertising Personalisation, Targeted Marketing, Analytics Storage)
- At least one data processor onboarded (e.g. Dxtra, Google Analytics, Mailchimp, Shopify)
- A clear understanding of what consent you are collecting and why — this determines which purposes and processors to include in the form
Open the form builder¶
Navigate to Consents in the left sidebar. The page has two main areas:
- Cross-Border Data Transfers — A table of transfer consents at the top of the page
- Consent Forms — A table listing all your consent forms below
The Consent Forms table shows each form with its name, last modified date, status (Approved, Draft, Required), version, category, and a privacy indicator. You can filter by status, category, or purpose.
To create a new form, click Create New Form. To edit an existing form, click its name in the table.
Edit Consent Form page¶
The Edit Consent Form page has three configuration areas at the top, followed by the split-screen form editor below.
Select Purposes¶
Choose which processing purposes this consent form covers. Purposes are grouped into categories:
- Customer Support
- Marketing (Non-Targeted)
- Operations and Logistical Support
- Service Improvement and Development
- Service Fulfillment & Delivery
Each purpose within a category shows a colored status badge (Approved, Required, etc.). Select the purposes relevant to this particular consent form — for example, a marketing consent form would include purposes under Marketing (Non-Targeted), while a cookie banner would cover Analytics, Functional, and Targeting purposes.
You can use the Expand/Collapse toggle to manage the purpose list, and click Consent Preview to see how the selected purposes will appear to data subjects.
Select Data Processors¶
Choose which data processors are associated with this consent form. The default is "All processors selected (default)", which includes every onboarded processor (e.g. Dxtra, Eventbrite, Google Analytics, Mailchimp/Marketing, Shopify, SurveyMonkey).
You can narrow the selection to only the processors relevant to this form. For example, a newsletter consent form might only include Dxtra and Mailchimp.
Configuration options¶
Three settings control how the form handles dynamic content:
Mustache variables — Use the syntax {{Variable Name}} to insert dynamic content. Click View all supported variables to see the full list. Unsupported mustache variables export your input as a constant. Note that form field appearance is dependent on the data controller's rendering.
Editing — Unsupported mustache variables will export your input as a constant. Note that form appearance is dependent while editing is required.
Runtime variables — These have a {{ }} prefix and include a production runtime variable. You will need to map the variable to a value when embedding the form, or alternatively remove it.
A checkbox option lets you set all checkboxes and toggle switch values to true (opt-in) by default.
Supported mustache variables¶
The form builder supports dynamic variables that pull live data from your Dxtra configuration. Click View all supported variables in the editor toolbar to see the full reference:
| Variable | Description |
|---|---|
{{Organization Name}} | Inserts your Organization Name |
{{Industry}} | Inserts your industry or sector |
{{Transparency Center}} | Inserts a link to your Transparency Center homepage |
{{Privacy Notice}} | Inserts a link to your Privacy Notice |
{{Cookie Policy}} | Inserts a link to your Cookie & Tracking Technologies Notice |
{{Cookie Preferences}} | Inserts a link to your Cookie Preferences |
{{Preferences}} | Links to your Manage Preferences form |
{{Terms and Conditions}} | Inserts a link to your Terms and Conditions |
{{Data Processors}} | Lists all data processors associated with the Data Controller |
{{Identifiers}} | Lists all identifiers processed by the data processors |
{{Privacy Processors}} | Lists only the processors selected in the Processors Panel |
{{Privacy Identifiers}} | Lists identifiers from only the selected privacy processors |
These variables mean your consent forms stay in sync with your Dxtra configuration. When you add a new processor or update your privacy notice, forms using these variables reflect the change automatically.
Form editor¶
The form editor is a split-screen interface. The left panel is the editor where you build the form. The right panel is a live preview that updates as you make changes.
Form Header Fields¶
The header appears at the top of the consent form.
Section Title — The main heading of your consent form (e.g. "Consent to receive communications regarding your enquiry" or "Consent to Receive Email Newsletter").
Description — Supporting text that appears below the title. Use this to explain the purpose of the form in plain language. A rich-text toolbar provides formatting options: bold, italic, underline, strikethrough, alignment, lists, links, and code formatting.
Form Content¶
The main body of the form, organized into two tabs:
CONSENT tab — The consent text and interactive elements that data subjects see and interact with. This is where you build the form's content sections.
DATA PROCESSING DETAILS tab — A read-only view generated automatically from your selected purposes and processors. It shows data subjects exactly what data is processed, by whom, and for what purpose — organized by consent category (e.g. Customer Support, Marketing, Privacy Policy). Each category displays its legal basis (Consent, Contract, Contractual Necessity, Legitimate Interests) and the identifiers and processors involved.
Content sections¶
The Form Content area is built from stackable sections. Each section has a type, and you add sections using the + Add Section button, which presents a section type selector with icon buttons.
The available section types are:
Form Input — A text input field for collecting data from the data subject.
- Form Input Key — Internal key used to store this value (e.g. "email", "firstName")
- Form Input Label — The label displayed to the data subject
- Form Input Type — The input type (Text, Email, Number, etc.)
- Placeholder — Hint text shown inside the empty field
Section Title — A heading with a rich-text description area. Use this to break the form into logical segments. The description supports full rich-text formatting and can include mustache variables for dynamic content.
Checkbox Label — A checkbox with a label. Use this for consent statements like "Yes, I agree to receive communications regarding my inquiry, as well as marketing emails."
You can reorder sections using the arrow icons on each section header, and delete sections using the remove (×) button.
Form Footer¶
The footer controls the action buttons at the bottom of the consent form.
Section Title — An optional heading for the footer area.
Description — Optional text above the buttons.
Primary Button Label — The main action button text (e.g. "Confirm My Choice", "Accept All"). This is the positive consent action.
Secondary Button Label — The secondary action button text (e.g. "Cancel", "Reject All"). This allows the data subject to decline.
Live preview¶
The right panel shows exactly what data subjects will see. The preview updates in real time as you edit the left panel. It includes:
- The rendered consent text with formatting
- Processor badges — Colored labels showing which data processors are involved (e.g. Dxtra, Eventbrite, Google Analytics, Mailchimp, Shopify)
- Identifier badges — Labels showing which personal data identifiers are collected (e.g. email, IP address, cookie identifiers, geolocation)
- The data subject's Data Subject DID — Their unique Decentralized Identifier, with a copy button
- A link to the Transparency Center for full details
- The Data Processing Details tab showing per-category breakdowns
- The action buttons (Primary and Secondary) as configured in the footer
Tip
Use the preview to check that your form reads clearly, that processor and identifier badges are correct, and that the Data Processing Details tab shows accurate information before publishing.
Built-in form templates¶
When creating a new form, Dxtra offers pre-built templates for common consent scenarios:
- Marketing & Communications — Newsletter sign-ups, promotional emails
- Public Use of Data — Research, public datasets
- Research & Development — Product research, user studies
- Sensitive Data — Health data, biometric data, special categories
- Service Improvement & Feedback — Surveys, feedback forms
- User Generated Content (UGC) — Reviews, comments, social content
Templates pre-populate the form with purpose-specific consent text, appropriate purposes, and suggested processors. You can customize every element after selecting a template.
Example: Email newsletter consent form¶
Here is a typical workflow for building an email newsletter consent form:
- Click Create New Form and select the Marketing & Communications template
- Under Select Purposes, check the marketing-related purposes (e.g. Advertising Personalisation, Targeted Marketing)
- Under Select Data Processors, select the processors involved (e.g. Dxtra, Mailchimp)
- In the Form Header, set the Section Title to "Consent to Receive Email Newsletter"
- In the Description, write the consent explanation: "We would love to keep you updated on our latest products, services, and special offers. By providing your email address and checking the box below, you agree that
{{Organization Name}}may send you a regular email newsletter." - Add a Form Input section for the email address (Key:
email, Label: "Email Address", Type: Email) - Add a Checkbox Label with the consent statement: "Yes, I agree to receive email newsletters"
- In the Form Footer, set the Primary Button to "Confirm My Choice" and the Secondary Button to "Cancel"
- Check the preview to verify processor badges, identifier badges, and Data Processing Details
- Save and approve the form
Publishing and embedding¶
Once you save and approve a consent form, it becomes available for deployment:
- Cookie consent banner — Deploy as a modal overlay on your website using the Tag Manager script
- Embedded form — Include in your application using the
<transparency-center>web component or individual consent components - Transparency Center — Forms appear automatically in the Consents section of your Transparency Center
Only approved consent forms can be activated in the Transparency Center. Draft or unapproved forms remain editable but are not visible to data subjects.
See Tag Manager: consent enforcement for details on how deployed consent forms interact with your analytics and tracking tags.
Consent form list¶
The Consent Forms table on the main Consents page shows all your forms:
| Column | Description |
|---|---|
| Form | Form name and last modified date |
| Version | Current version number |
| Category | The consent category (e.g. Consent, Required) |
| Status | Approval status — Approved, Draft, or Required |
| Privacy | Privacy indicator |
From this table you can create new forms, edit existing ones, duplicate a form as a starting point, or archive forms you no longer need.
Related¶
- Purpose & consent management — Overview of consent categories and processing purposes
- Configure processing purposes — Define what you do with personal data
- Tag Manager: consent enforcement — How tags respect consent categories
- Transparency Center — Where data subjects manage their consent preferences
Not legal advice
AI-generated content does not constitute legal advice. Consult a qualified legal professional for advice specific to your jurisdiction and business context.