Tony Wang4 min readWhich Cookie-Consent Tool a Site Uses Predicts Its Size, Same as Everything Else Here
Cookie-consent tools split the same way everything else in this census does - enterprise CMPs skew top-heavy, self-serve ones skew tail-heavy.
Cookie-consent banners are the least glamorous technology in this entire census, and they still can't escape the pattern. Split five consent-management platforms by rank tier and the same enterprise-vs-self-serve line this census keeps finding in every other category shows up here too.
Enterprise CMPs and self-serve banners split cleanly
| Consent platform | Top 10K | 10K-100K | 100K-1M |
|---|---|---|---|
| Didomi5.52x top-heavy | 0.85% | 0.518% | 0.154% |
| OneTrust4.47x top-heavy | 6.6% | 4.197% | 1.477% |
| Cookiebotmildly tail-heavy | 0.68% | 1.053% | 0.955% |
| Termlymildly tail-heavy | 0.09% | 0.181% | 0.129% |
| CookieYesmildly tail-heavy | 0.4% | 0.624% | 0.622% |
| Platform | Top 10K | 10K–100K | 100K–1M | Direction |
|---|---|---|---|---|
| Didomi | 0.85% | 0.52% | 0.15% | 5.52× top-heavy |
| OneTrust | 6.60% | 4.20% | 1.48% | 4.47× top-heavy |
| Cookiebot | 0.68% | 1.05% | 0.96% | 0.71× (mildly tail-heavy) |
| Termly | 0.09% | 0.18% | 0.13% | 0.70× (mildly tail-heavy) |
| CookieYes | 0.40% | 0.62% | 0.62% | 0.64× (mildly tail-heavy) |
OneTrust is by far the largest single presence at the top of the list — 6.60% of the top 10,000 sites, more than four times its 1.48% share of the tail. OneTrust and Didomi share the same profile: both are sold to legal and compliance teams, both require real integration work across a company's full data pipeline (not just a banner on the homepage), and both are priced for organizations with the budget and regulatory exposure to justify it. Cookiebot, Termly, and CookieYes are the opposite kind of product — self-serve, install-it-yourself banners a small site can set up without talking to anyone.
The domains behind OneTrust's top-tier number
A spot-check of OneTrust's top-10,000 domains reads exactly like a list of organizations with real compliance exposure: sony.net, salesforce-sites.com, nutanix.com, telia.com (a major Nordic/Baltic telecom), bill.com, and tvp.pl (Poland's public broadcaster). These aren't sites that stumbled into a cookie banner — they're organizations for whom "who handles our GDPR/CCPA compliance" was a real, budgeted decision.
One more confirmation of the same axis
This is the fifth category in this census series where the same shape shows up: email providers (Google Workspace/Proton top-heavy, Microsoft 365 flat, Zoho tail-heavy), certificate authorities (DigiCert top-heavy, Let's Encrypt tail-heavy), live chat (Drift top-heavy, Tawk.to/LiveChat tail-heavy), and DNS providers (NS1/Akamai top-heavy, GoDaddy/DigitalOcean tail-heavy). Cookie-consent tooling — arguably the least interesting technology decision a site owner ever makes — sorts exactly the same way. The pattern isn't really about any one of these categories. It's a general property of how deliberateness and budget distribute themselves across the web, and this census keeps finding fresh ways to measure it.
Limits, stated plainly
Didomi's absolute counts are on the smaller side of this comparison (85 / 466 / 1,388 across the three bands), so read its exact ratio as directional rather than decimal-precise, the same caution this census applies to any smaller-sample cut. As always, correlation isn't causation: choosing OneTrust doesn't make a company bigger, and the more likely direction of causality is that companies large enough to carry real regulatory exposure are also the ones with the budget to buy a dedicated compliance platform rather than install a free banner.
Query the full Tech Stack dataset
1,000,000 fingerprinted domains — CDN, CMS, ecommerce, consent management and more — over one REST API, ranked by Tranco traffic rank.
Frequently asked questions
Which cookie-consent management platform correlates with higher-traffic websites?
OneTrust and Didomi, by a wide margin. In Crawlora's 1,000,000-domain tech-stack census, OneTrust runs 6.60% of the top 10,000 Tranco-ranked sites, falling to 1.48% of the 100K-1M tail (4.47x top-heavy); Didomi shows an even sharper gradient (5.52x).
Which cookie-consent platforms correlate with lower-traffic websites?
Cookiebot, Termly, and CookieYes - all self-serve, install-it-yourself consent banners - are each mildly tail-heavy (0.64-0.71x), the opposite direction from enterprise platforms like OneTrust and Didomi.
What companies use OneTrust for cookie consent?
A spot-check of OneTrust's top-10,000 domains in this census found sony.net, salesforce-sites.com, nutanix.com, telia.com (a major European telecom), bill.com, and tvp.pl (Poland's public broadcaster) - organizations with real regulatory compliance exposure and budget for a dedicated platform.
Is there a general pattern in how enterprise vs. self-serve technology choices distribute across the web?
Yes - this is the fifth technology category in this census series confirming the same shape: email providers, certificate authorities, live chat, and DNS providers all split the same way, with a deliberately-chosen enterprise option concentrating toward the top of the web and a self-serve/free default climbing toward the tail.