Add CookieBot for consent management via Google Tag Manager

[bjester]

Background

We use Google Tag Manager (GTM) for managing analytics, which we gather to make more informed decisions regarding Studio features. We use CookieBot as our consent management platform (CMP) and have its banner configured to show on the learningequality.org website.

Assignee of this issue must be an LE team member.

Desired behavior

• A CookieBot tag should be added through GTM such that the CookieBot banner shows on the Studio website
• The CookieBot tag should be integrated such that our analytics tag does not trigger unless consent has been given (again see existing website implementation)

Current behavior

• We thought we had CookieBot integrated with Studio, because the policy we manage on the LE website includes Studio, but that seems not to be the case. The CookieBot banner does not appear on Studio

Additional requirements

• Another Github issue is written up to prevent the use of server-side cookies prior to consent given through CookieBot

Value add

This ensures we're compliant as an international organization

Possible tradeoffs

We may decide to use some other tool instead of CookieBot in the future, but through GTM, we have good abstraction from it, meaning it can easily be swapped out.

[bjester]

For questions, ask @bjester

[bjester]

For full GDPR compliance, we'll also need to address the use of server-side cookies prior to given consent, which involves a bit more work, but requires this to be completed first.