What is Termly?
Termly is a US-based legal compliance SaaS founded in 2017 in Spokane, Washington, and acquired by Swedish hosting group group.one in January 2024. As of 2026, Termly serves over 2 million businesses across 150+ countries and processes around 1.7 billion banner views per month, per its own pricing page.
The product splits into two halves: a library of ten attorney-drafted policy generators (privacy policy, cookie policy, T&C, EULA, disclaimer, return policy, shipping policy, acceptable use, impressum, accessibility statement) and a consent management platform (cookie banner, automated cookie scanner, script auto-blocker, consent preference center, Google Consent Mode v2 integration). For US-focused small businesses this is the broadest document suite at the price point — no direct competitor at the $0–$20/month tier offers ten generators.
Pricing — the real numbers
Verified from termly.io/pricing as of June 2026:
- Free — $0: 1 legal policy, 10,000 banner views/month, quarterly cookie scans, basic GCM v2. Visible "Powered by Termly" watermark on the banner.
- Starter — $14/month monthly, ~$10/month annual: 2 policies, 50,000 banner views, monthly scans, regulation monitoring, 5 user seats.
- Pro+ — $20/month monthly, ~$15/month annual: All 10 generators, unlimited edits, unlimited views, weekly scans, auto-updated policies, watermark removal, Advanced GCM v2, IAB TCF 2.3, custom banner styles, multi-language, regional consent rules, consent logs.
- Agency — custom pricing: 10+ sites, bulk discounts, training and onboarding, compliance support.
The multi-site math: Termly charges per domain. A six-site portfolio on Pro+ runs roughly $90/month annual — $1,080/year. Compare with Complianz Pro at €99/year for unlimited WordPress sites, or with iubenda's tier-based licensing. For multi-domain operators below the Agency tier, Termly is one of the more expensive options on the market, per Consent Mode HQ's 2026 review.
What we actually deployed
We run Termly's Free tier on a sister Webflow site — a travel guide with mixed US/EU traffic and Google Analytics 4 as the only paid tracker. The deployment uses:
- Cookie consent banner via Termly's Resource Blocker script (
app.termly.io/resource-blocker/...?autoBlock=on) - Privacy policy generated by Termly's questionnaire, embedded on a hosted page
- Cookie policy populated by the automated cookie scanner
- No T&C, no disclaimer (Free tier limits you to one policy unless you upgrade)
The banner appears as a fixed bottom bar with three buttons — Preferences, Decline, Accept — and a "Cookie Consent Manager by Termly" attribution in the top-left corner. Six cookie categories are exposed in the preferences modal (Essential, Performance & Functionality, Analytics & Customization, Advertising, Social networking, Unclassified), with categories the site has not configured greyed out.
Regulatory coverage
Termly claims support for 30+ regulations and 80+ regions, per its own comparison page. Coverage is deep for US state laws and competent for GDPR/UK GDPR; thinner for non-Western jurisdictions:
- Deep coverage: GDPR (EU), UK GDPR, ePrivacy Directive, CCPA/CPRA (California), CalOPPA, VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), PIPEDA (Canada)
- Stated coverage: LGPD (Brazil), UCPA (Utah), COPPA (no dedicated tool)
- Gaps: POPIA (South Africa) and Australia Privacy Act are not explicitly listed on Termly's product pages as of June 2026
For EU programmatic publishers, the practical reality is more nuanced than the marketing suggests. Without full IAB TCF 2.3 (Pro+ only), Consent Mode HQ documented in May 2026 that Google Ad Manager withholds personalized ad serving for EU users when only Basic GCM is in place — collapsing CPMs in the process. If you monetize EU traffic with programmatic ads, Pro+ is the minimum viable tier, not a nice-to-have.
Google Consent Mode v2
Termly achieved Google CMP Partner Gold status in February 2026 (CMP ID 412 on Google's CMP list) — the top tier of Google's certification program. In practice:
- Free and Starter: Basic GCM v2 — consent signals pass through, but with limited granularity
- Pro+: Advanced GCM v2 with full signal integration; configured from the Termly dashboard with an official GTM template
- Known limitation:
ads_data_redactionandurl_passthroughparameters are not exposed in the Termly UI. Advanced teams must layer custom GTM code on top — which, as Consent Mode HQ put it, "partially defeats the point of paying for a managed CMP"
Microsoft UET Consent Mode was added in April 2025, which is genuinely useful for B2B sites running Microsoft Ads.
Why the Free/Starter → Pro+ jump matters more than it looks. Under Basic Consent Mode (Free, Starter), Google tags stay fully blocked until consent is granted — a declined visitor produces no measurement data at all. Under Advanced Consent Mode (Pro+), tags fire on page load and send stateless, cookieless pings; when consent is denied, Google's conversion modeling uses machine learning to reconstruct a meaningful share of the missing signal. For sites running Google Ads, that's the difference between flying blind on opted-out traffic and keeping attribution intact — and it's the strongest single reason to take the Pro+ upgrade for a US-focused ad-spending site.
Integrations
Termly is cloud-hosted and platform-agnostic. Quality varies:
- WordPress: Dedicated 5-star plugin, mature and widely deployed
- Webflow: Universal script embed via Custom Code — confirmed working on our deployment
- Squarespace: Script injection via Code Injection — works for basic banner
- Wix: Script embed; no Wix App Market listing
- Duda: Dedicated guide, listed in Duda App Store
- Shopify: Custom HTML embed only — no native Shopify app and no API, a gap flagged by Enzuzo's 2026 comparison. For Shopify merchants, CookieYes or Pandectes are stronger options.
- GTM and GA4: Supported via GCM v2 routing; works correctly on Pro+
Setup friction — where Termly actually loses points
This is the central critique and the reason Termly does not score higher in this review.
Termly's marketing claims policies can be created in "as little as ten minutes." That's technically true for someone who already knows which regulations apply to their site, what cookie categories mean, and how to interpret a scanner result. For the average solo operator, it's not.
The setup wizard asks questions like jurisdiction and data types, but does not explain why a certain regulation applies or what the consequences of a wrong answer would be. As G2 reviewer Trevor G. put it in September 2024: "Sometimes it would be good to know why you should select a certain policy requirement."
The automated cookie scanner frequently produces "Unclassified" cookies requiring manual review. Capterra reviewer MA Moustafa A. (January 2025): "Although the cookies scanner is effective overall, it occasionally misses certain cookies or categorizes them incorrectly, requiring manual adjustments." For single-page applications built in React, Vue, or Next.js, Consent Mode HQ confirmed in May 2026 that "Termly's crawler frequently misses late-firing tags."
Compare with iubenda, which offers a personalized installation call available on request on every plan and describes its setup as a guided walkthrough. Termly's training and onboarding are reserved for the Agency plan. Below Agency, you get a help center, knowledge base articles, and live chat during business hours — and as of June 2026 the pricing page lists support hours as Mon–Fri, 9AM–1PM EST. That's four hours a day.
What real users say
Aggregate ratings as of June 2026:
- Trustpilot: 4.7/5 across 547 reviews — "Excellent" category
- Capterra: 4.7/5 across 80 reviews
- G2: 4.3/5 across 45 reviews
- BBB: A+ accredited
What positive reviews consistently praise:
- Speed of policy creation — most users complete a privacy policy in under 30 minutes
- All-in-one value — ten generators plus the CMP in one dashboard
- Auto-updating policies — Termly pushes regulatory updates automatically
What negative reviews consistently flag:
- Inconsistent customer support. The most repeated complaint across all platforms. From a 2025 Trustpilot review: "After hours of waiting, we only received one short reply asking for a few security details. We provided the information immediately — and then nothing. No answers, no solutions, no follow-up. Just silence."
- Downgrade data loss. G2 reviewer Tomáš N. (May 2024): "After switching to the free version, my entire banner was canceled... support has not been communicating for a week."
- Per-domain pricing compounds fast. Capterra reviewer Marko S. (August 2025): "If you run more platforms it will be hard to prove that you are building them. Could be a bit cheaper on professional plans."
- Autoblocker over-aggression. Termly's script auto-blocker can block essential first-party functionality including live chat widgets and reviews widgets. Capterra reviewer Dan S.: "The autoblocker blocks some of our most popular apps on our website."
Trust signals
- Google CMP Partner Gold status (February 2026, CMP ID 412)
- IAB TCF 2.3 approved (available on Pro+ only)
- BBB A+ accredited
- IAPP Silver Member (International Association of Privacy Professionals)
- EU data center available at
eu.consent.api.termly.io— auto-assigned for EU signups, migration available on request for existing accounts - SOC 2: Not publicly confirmed. No report listed on Termly's site as of June 2026.
- ISO 27001: Not publicly confirmed.
- DPA (Data Processing Agreement): Not publicly downloadable; must request via support
The absence of public SOC 2 and ISO 27001 documentation is a real gap for enterprise buyers and for EU operators assessing Article 28 GDPR processor obligations. For a solopreneur on the Free tier this doesn't matter. For a SaaS handling sensitive data, it does.
Termly vs the alternatives
Compared head-to-head with the tools we cover:
- vs iubenda: iubenda wins on EU depth, multi-language (27 languages vs banner-only Pro+), and guided onboarding. Termly wins on policy breadth, US state coverage, and phone support. For US-focused small businesses Termly is usually the better first pick; for EU publishers or multi-language sites iubenda is more defensible. See our full comparison.
- vs CookieYes: CookieYes is a banner-first tool with a more generous free tier (25,000 banner views/month vs 10,000) and a native Shopify app. Termly bundles legal documents that CookieYes doesn't offer. If you need both, you'd pair CookieYes for the banner with Termly's free policy generator — or just buy Termly Pro+.
- vs Complianz: If you're WordPress-only and self-host, Complianz Pro (€99/year for unlimited sites) beats Termly on price for multi-site operators. Termly wins if you have non-WordPress sites in the portfolio.
- vs Cookiebot: Cookiebot has deeper IAB TCF integration and stronger scanning accuracy on SPAs. For EU publishers running programmatic ads, Cookiebot is the safer pick. Termly is cheaper and broader.
Who should buy Termly in 2026
Good fit
- US-based small businesses and solopreneurs that need a full document library in one place
- Sites with primarily US/North American audiences where CCPA, CPRA, and other US state laws are the dominant compliance requirements
- Non-WordPress sites (Webflow, Squarespace, custom HTML) that need a cloud-hosted CMP
- Single-domain operators with under 50,000 monthly visitors and no EU programmatic ad revenue — the Free or Starter tier is genuinely adequate
- Agencies managing client sites that can negotiate the Agency plan
Bad fit
- EU publishers monetizing with programmatic ads — IAB TCF 2.3 only available on Pro+, and Cookiebot or Usercentrics have deeper TCF integration
- Multi-domain operators below the Agency tier — per-domain pricing scales painfully
- Sites built on React/Vue/Next.js SPAs — scanner accuracy degrades
- Shopify merchants — no native Shopify app
- Anyone requiring SOC 2 or ISO 27001 documentation — confirmed gaps as of June 2026
- Non-technical site owners who want the platform to teach them compliance — Termly assumes you already know. Use iubenda instead.
The verdict
Termly is a legitimate, well-funded compliance tool that does its core job — generating legally defensible policy documents and deploying a functional cookie consent banner — without requiring a lawyer. For a site like the one we run it on, the Free tier delivers real compliance value at zero cost, and the "Powered by Termly" watermark is a reasonable trade for that.
The critique that Termly offers less guidance than iubenda is accurate and well-supported. The platform expects users to know which regulations apply to them, what cookie categories mean, and how to interpret scanner results — assumptions that hold for tech-savvy operators but fail the average small business owner. The Free tier is genuinely useful, not just a trial teaser, but its visible watermark, 10K-view cap, and lack of regional consent rules mean it's a starting point, not a permanent solution.
The 4.0/5 rating reflects: strong policy generator breadth, a usable free tier, Google CMP Gold status, and a competent CMP — offset by structural setup friction, narrow support hours (4 hours/day), per-domain pricing that scales poorly, and confirmed gaps in EU legal depth and enterprise security documentation.
Termly — start free, upgrade to Pro+ when it actually matters
If you're US-focused and document-hungry, the Free tier is a legitimate starting point. Plan to budget for Pro+ (~$15/month annual) before your traffic, EU ad revenue, or watermark visibility justifies the upgrade.
Try Termly FreeFAQ
Is Termly really free?
Yes. The Free tier includes one legal policy, the cookie banner with up to 10,000 banner views per month, quarterly cookie scans, and basic Google Consent Mode v2. The catch is a visible "Powered by Termly" watermark link in the banner. Removing it requires Pro+ ($20/month or ~$15/month annual).
Does Termly support Google Consent Mode v2?
Yes — Termly is a Google CMP Partner with Gold status as of February 2026. Basic GCM v2 is available on Free and Starter; Advanced GCM v2 with full signal integration requires Pro+. The UI does not expose granular control over ads_data_redaction or url_passthrough, so advanced teams add custom GTM code on top.
How does Termly compare with iubenda?
Termly wins on policy breadth (10 generators vs 3), US state law coverage, and phone support. iubenda wins on EU legal depth, multi-language (27 languages), and guided onboarding (personalized installation calls on every plan). For US-focused small businesses, Termly is usually the better first pick; for EU publishers or multi-language sites, iubenda is more defensible. Full comparison here.
Will Termly work on Shopify?
Technically yes, via custom HTML embed — but Termly has no native Shopify app and no Shopify API integration, a gap flagged by Enzuzo's 2026 comparison. For Shopify merchants, CookieYes or Pandectes are stronger choices.
Is Termly's free tier GDPR-compliant?
Yes — the Free tier banner, with appropriate configuration, can satisfy GDPR consent requirements for a small site. The structural caveats: regional consent rules require Pro+ (so EU visitors see the same banner as US visitors on Free), IAB TCF 2.3 requires Pro+, and consent logs require Pro+. For a low-traffic non-monetized site, Free is genuinely adequate. For an EU programmatic publisher, it isn't.
What happens if I downgrade from Pro+ to Free?
Multiple verified reviewers report losing banner configuration and settings when downgrading. Plan to take screenshots of your configuration before any plan change, and assume downgrades are not lossless.
Related guides
- iubenda Review 2026: Worth $20/month?
- CookieYes Review 2026: Free Tier, Setup, Real Cost
- Find your fit: best privacy tools by use case
- Enzuzo Review 2026: 10 domains for $59/mo
- iubenda vs Termly vs Osano: Complete Comparison 2026
- Best Cookie Consent Tools 2026: Compared & Ranked
- What is GDPR? A plain-English guide
- How we score compliance tools