From fc4dab5b7154faa69f1f6551a17a64b4a19dbc85 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 27 Aug 2025 16:14:32 +0000
Subject: [PATCH 1/3] Initial plan


From 0e3fabf84f73514640d188fd9fd3845c1e657e35 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 27 Aug 2025 16:23:41 +0000
Subject: [PATCH 2/3] Implement comprehensive cookie consent management for
 Microsoft Clarity and Google Analytics

Co-authored-by: BenjaminMichaelis <22186029+BenjaminMichaelis@users.noreply.github.com>
---
 EssentialCSharp.Web/Views/Home/Privacy.cshtml |  91 +++-
 .../Views/Shared/_Layout.cshtml               |  26 +-
 .../wwwroot/js/consent-manager.js             | 459 ++++++++++++++++++
 3 files changed, 573 insertions(+), 3 deletions(-)
 create mode 100644 EssentialCSharp.Web/wwwroot/js/consent-manager.js

diff --git a/EssentialCSharp.Web/Views/Home/Privacy.cshtml b/EssentialCSharp.Web/Views/Home/Privacy.cshtml
index af4fb195..46a778c6 100644
--- a/EssentialCSharp.Web/Views/Home/Privacy.cshtml
+++ b/EssentialCSharp.Web/Views/Home/Privacy.cshtml
@@ -3,4 +3,93 @@
 }
 <h1>@ViewData["Title"]</h1>
 
-<p>Use this page to detail your site's privacy policy.</p>
+<div class="container">
+    <div class="row">
+        <div class="col-lg-8">
+            <h2>Privacy Policy</h2>
+            <p>At Essential C#, we are committed to protecting your privacy and ensuring you have a positive experience on our website.</p>
+
+            <h3>Information We Collect</h3>
+            <p>We collect information to provide better services to our users. The types of information we collect include:</p>
+            <ul>
+                <li><strong>Usage Information:</strong> How you interact with our website, including pages visited, time spent, and navigation patterns</li>
+                <li><strong>Technical Information:</strong> Browser type, operating system, IP address, and device information</li>
+                <li><strong>Account Information:</strong> When you create an account, we collect your email address and any profile information you provide</li>
+            </ul>
+
+            <h3>How We Use Your Information</h3>
+            <p>We use the information we collect to:</p>
+            <ul>
+                <li>Provide and improve our services</li>
+                <li>Analyze website usage to enhance user experience</li>
+                <li>Communicate with you about updates and features</li>
+                <li>Ensure website security and prevent fraud</li>
+            </ul>
+
+            <h3>Cookies and Tracking Technologies</h3>
+            <p>We use cookies and similar technologies to enhance your browsing experience. Our website uses:</p>
+            <ul>
+                <li><strong>Essential Cookies:</strong> Required for basic website functionality</li>
+                <li><strong>Analytics Cookies:</strong> Help us understand how you use our site (Google Analytics, Microsoft Clarity)</li>
+                <li><strong>Advertising Cookies:</strong> Used to deliver relevant advertisements</li>
+            </ul>
+            
+            <p>You can manage your cookie preferences at any time by clicking the "Cookie Preferences" link in our footer.</p>
+            
+            <div class="mt-3 mb-3">
+                <button class="btn btn-primary" onclick="openConsentPreferences()">
+                    <i class="fa fa-cog me-2"></i>Manage Cookie Preferences
+                </button>
+            </div>
+
+            <h3>Your Rights</h3>
+            <p>Depending on your location, you may have certain rights regarding your personal information:</p>
+            <ul>
+                <li>Access to your personal information</li>
+                <li>Correction of inaccurate information</li>
+                <li>Deletion of your personal information</li>
+                <li>Restriction of processing</li>
+                <li>Data portability</li>
+                <li>Objection to processing</li>
+            </ul>
+
+            <h3>Third-Party Services</h3>
+            <p>Our website uses the following third-party services that may collect information:</p>
+            <ul>
+                <li><strong>Google Analytics:</strong> Web analytics service provided by Google Inc.</li>
+                <li><strong>Microsoft Clarity:</strong> User behavior analytics service provided by Microsoft Corporation</li>
+            </ul>
+
+            <h3>Data Retention</h3>
+            <p>We retain your information only as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy.</p>
+
+            <h3>International Transfers</h3>
+            <p>Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.</p>
+
+            <h3>Contact Us</h3>
+            <p>If you have questions about this privacy policy or your personal information, please contact us through our GitHub repository or at the contact information provided on <a href="https://intellitect.com/about/privacy-policy/" target="_blank">IntelliTect's Privacy Policy</a>.</p>
+
+            <h3>Changes to This Policy</h3>
+            <p>We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page.</p>
+
+            <p><small><em>Last updated: @DateTime.Now.ToString("MMMM dd, yyyy")</em></small></p>
+        </div>
+        <div class="col-lg-4">
+            <div class="card">
+                <div class="card-header">
+                    <h5>Quick Actions</h5>
+                </div>
+                <div class="card-body">
+                    <div class="d-grid gap-2">
+                        <button class="btn btn-outline-primary" onclick="openConsentPreferences()">
+                            <i class="fa fa-cog me-2"></i>Cookie Preferences
+                        </button>
+                        <a href="https://intellitect.com/about/privacy-policy/" target="_blank" class="btn btn-outline-secondary">
+                            <i class="fa fa-external-link me-2"></i>IntelliTect Privacy Policy
+                        </a>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+</div>
diff --git a/EssentialCSharp.Web/Views/Shared/_Layout.cshtml b/EssentialCSharp.Web/Views/Shared/_Layout.cshtml
index e92bdb0c..9ef8c726 100644
--- a/EssentialCSharp.Web/Views/Shared/_Layout.cshtml
+++ b/EssentialCSharp.Web/Views/Shared/_Layout.cshtml
@@ -78,6 +78,10 @@
     <environment exclude="Development">
         <script type="importmap" asp-importmap="@prodMap"></script>
     </environment>
+    <!-- Cookie Consent Manager - Load before analytics -->
+    <script src="~/js/consent-manager.js" asp-append-version="true"></script>
+    
+    <!-- Microsoft Clarity - Will be activated based on consent -->
     <script type="text/javascript">
         (function (c, l, a, r, i, t, y) {
             c[a] = c[a] || function () { (c[a].q = c[a].q || []).push(arguments) };
@@ -85,17 +89,32 @@
             y = l.getElementsByTagName(r)[0]; y.parentNode.insertBefore(t, y);
         })(window, document, "clarity", "script", "g4keetzd2o");
     </script>
+    
     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css">
     <!-- Markdown and sanitization libraries -->
     <script src="https://cdn.jsdelivr.net/npm/marked/marked.min.js"></script>
     <script src="https://cdn.jsdelivr.net/npm/dompurify@3.0.5/dist/purify.min.js"></script>
-    <!-- Google tag (gtag.js) -->
+    
+    <!-- Google tag (gtag.js) - Will be activated based on consent -->
     <script async src="https://www.googletagmanager.com/gtag/js?id=G-761B4BMK2R"></script>
     <script>
         window.dataLayer = window.dataLayer || [];
         function gtag() { dataLayer.push(arguments); }
+        
+        // Initialize gtag but don't configure until consent is given
         gtag('js', new Date());
-        gtag('config', 'G-761B4BMK2R');
+        
+        // Configuration will be handled by consent manager
+        // Only configure if consent is already granted or region doesn't require consent
+        document.addEventListener('DOMContentLoaded', function() {
+            // Small delay to ensure consent manager is initialized
+            setTimeout(function() {
+                if (window.consentManager && 
+                    (window.consentManager.hasAnalyticsConsent() || !window.consentManager.requiresConsent)) {
+                    gtag('config', 'G-761B4BMK2R');
+                }
+            }, 100);
+        });
     </script>
     <style>
         [v-cloak] {
@@ -506,6 +525,9 @@
                 <div class="col-12 col-md-auto align-self-end p-2">
                     <a target="_blank" rel="noreferrer noopener" href="https://intellitect.com/about/privacy-policy/">Privacy</a>
                 </div>
+                <div class="col-12 col-md-auto align-self-end p-2">
+                    <a href="javascript:void(0)" onclick="openConsentPreferences()">Cookie Preferences</a>
+                </div>
                 <div class="col-12 col-md-auto align-self-end p-2"><a asp-route="TermsOfService">Terms Of Service</a></div>
             </div>
         </footer>
diff --git a/EssentialCSharp.Web/wwwroot/js/consent-manager.js b/EssentialCSharp.Web/wwwroot/js/consent-manager.js
new file mode 100644
index 00000000..56d18f20
--- /dev/null
+++ b/EssentialCSharp.Web/wwwroot/js/consent-manager.js
@@ -0,0 +1,459 @@
+/**
+ * Cookie Consent Manager for Essential C#
+ * Implements Google Consent Mode v2 for Microsoft Clarity and Google Analytics
+ * Compliant with GDPR requirements for EEA, UK, and Switzerland
+ */
+
+class ConsentManager {
+    constructor() {
+        this.COOKIE_NAME = 'essential-csharp-consent';
+        this.COOKIE_DURATION = 365; // days
+        this.consentState = {
+            analytics_storage: 'denied',
+            ad_storage: 'denied',
+            ad_user_data: 'denied',
+            ad_personalization: 'denied',
+            functionality_storage: 'granted', // Always granted for essential functionality
+            security_storage: 'granted', // Always granted for security
+            personalization_storage: 'denied'
+        };
+        
+        // Check if user is in EEA/UK/Switzerland region
+        this.requiresConsent = this.checkRegionRequiresConsent();
+        
+        this.init();
+    }
+
+    init() {
+        // Initialize Google Consent Mode
+        this.initGoogleConsentMode();
+        
+        // Load saved consent preferences
+        this.loadConsentPreferences();
+        
+        // Show banner if consent required and not yet given
+        if (this.shouldShowConsentBanner()) {
+            this.showConsentBanner();
+        }
+    }
+
+    initGoogleConsentMode() {
+        // Initialize gtag if not already loaded
+        window.dataLayer = window.dataLayer || [];
+        function gtag(){dataLayer.push(arguments);}
+        window.gtag = window.gtag || gtag;
+        
+        // Set default consent state - denial for all except essential
+        gtag('consent', 'default', this.consentState);
+    }
+
+    checkRegionRequiresConsent() {
+        // Check for forced testing via URL parameter
+        const urlParams = new URLSearchParams(window.location.search);
+        if (urlParams.get('testConsent') === 'true') {
+            return true;
+        }
+        
+        // Simple region detection - in production, you might want to use a more reliable service
+        const timezone = Intl.DateTimeFormat().resolvedOptions().timeZone;
+        
+        // EEA countries, UK, and Switzerland timezones
+        const requiresConsentTimezones = [
+            // Western Europe
+            'Europe/London', 'Europe/Dublin', 'Europe/Lisbon', 'Europe/Madrid', 
+            'Europe/Paris', 'Europe/Amsterdam', 'Europe/Brussels', 'Europe/Luxembourg',
+            'Europe/Zurich', 'Europe/Vienna', 'Europe/Rome', 'Europe/Vatican',
+            'Europe/San_Marino', 'Europe/Malta', 'Europe/Monaco',
+            
+            // Central Europe  
+            'Europe/Berlin', 'Europe/Prague', 'Europe/Budapest', 'Europe/Warsaw',
+            'Europe/Bratislava', 'Europe/Ljubljana', 'Europe/Zagreb', 'Europe/Belgrade',
+            'Europe/Sarajevo', 'Europe/Podgorica', 'Europe/Skopje', 'Europe/Tirane',
+            
+            // Northern Europe
+            'Europe/Stockholm', 'Europe/Oslo', 'Europe/Copenhagen', 'Europe/Helsinki',
+            'Europe/Tallinn', 'Europe/Riga', 'Europe/Vilnius', 'Europe/Reykjavik',
+            
+            // Eastern Europe
+            'Europe/Bucharest', 'Europe/Sofia', 'Europe/Athens', 'Europe/Nicosia',
+            
+            // Additional EEA territories
+            'Atlantic/Canary', 'Atlantic/Madeira', 'Atlantic/Azores',
+            'Europe/Gibraltar', 'Africa/Ceuta'
+        ];
+        
+        return requiresConsentTimezones.includes(timezone);
+    }
+
+    loadConsentPreferences() {
+        const saved = this.getCookie(this.COOKIE_NAME);
+        if (saved) {
+            try {
+                const preferences = JSON.parse(saved);
+                this.consentState = { ...this.consentState, ...preferences };
+                this.updateConsentMode();
+            } catch (e) {
+                console.warn('Failed to parse consent preferences', e);
+            }
+        }
+    }
+
+    shouldShowConsentBanner() {
+        // Show banner if in EEA/UK/Switzerland and no consent stored
+        return this.requiresConsent && !this.getCookie(this.COOKIE_NAME);
+    }
+
+    showConsentBanner() {
+        if (document.getElementById('consent-banner')) return; // Already shown
+
+        const banner = this.createConsentBanner();
+        document.body.appendChild(banner);
+        
+        // Add banner styles if not already added
+        this.addConsentStyles();
+    }
+
+    createConsentBanner() {
+        const banner = document.createElement('div');
+        banner.id = 'consent-banner';
+        banner.className = 'consent-banner';
+        banner.innerHTML = `
+            <div class="consent-banner-content">
+                <div class="consent-banner-text">
+                    <h3>Cookie Preferences</h3>
+                    <p>We use cookies to improve your experience and analyze website usage. You can manage your preferences below.</p>
+                </div>
+                <div class="consent-banner-actions">
+                    <button id="consent-reject-all" class="btn btn-outline-secondary me-2">Reject All</button>
+                    <button id="consent-accept-all" class="btn btn-primary me-2">Accept All</button>
+                    <button id="consent-customize" class="btn btn-outline-primary">Customize</button>
+                </div>
+            </div>
+            <div id="consent-details" class="consent-details" style="display: none;">
+                <div class="consent-category">
+                    <label class="consent-switch">
+                        <input type="checkbox" id="consent-essential" checked disabled>
+                        <span class="consent-slider"></span>
+                        <div class="consent-info">
+                            <strong>Essential Cookies</strong>
+                            <p>Required for basic site functionality and security. Cannot be disabled.</p>
+                        </div>
+                    </label>
+                </div>
+                <div class="consent-category">
+                    <label class="consent-switch">
+                        <input type="checkbox" id="consent-analytics">
+                        <span class="consent-slider"></span>
+                        <div class="consent-info">
+                            <strong>Analytics Cookies</strong>
+                            <p>Help us understand how you use our site to improve your experience.</p>
+                        </div>
+                    </label>
+                </div>
+                <div class="consent-category">
+                    <label class="consent-switch">
+                        <input type="checkbox" id="consent-advertising">
+                        <span class="consent-slider"></span>
+                        <div class="consent-info">
+                            <strong>Advertising Cookies</strong>
+                            <p>Used to deliver relevant advertisements and measure their effectiveness.</p>
+                        </div>
+                    </label>
+                </div>
+                <div class="consent-actions">
+                    <button id="consent-save-preferences" class="btn btn-primary">Save Preferences</button>
+                </div>
+            </div>
+        `;
+
+        // Add event listeners
+        this.addBannerEventListeners(banner);
+        
+        return banner;
+    }
+
+    addBannerEventListeners(banner) {
+        banner.querySelector('#consent-accept-all').addEventListener('click', () => {
+            this.acceptAllConsent();
+        });
+
+        banner.querySelector('#consent-reject-all').addEventListener('click', () => {
+            this.rejectAllConsent();
+        });
+
+        banner.querySelector('#consent-customize').addEventListener('click', () => {
+            this.showCustomizeOptions();
+        });
+
+        banner.querySelector('#consent-save-preferences').addEventListener('click', () => {
+            this.saveCustomPreferences();
+        });
+    }
+
+    showCustomizeOptions() {
+        const details = document.getElementById('consent-details');
+        if (details) {
+            details.style.display = details.style.display === 'none' ? 'block' : 'none';
+            
+            // Load current preferences into checkboxes
+            document.getElementById('consent-analytics').checked = 
+                this.consentState.analytics_storage === 'granted';
+            document.getElementById('consent-advertising').checked = 
+                this.consentState.ad_storage === 'granted';
+        }
+    }
+
+    acceptAllConsent() {
+        this.consentState = {
+            ...this.consentState,
+            analytics_storage: 'granted',
+            ad_storage: 'granted',
+            ad_user_data: 'granted',
+            ad_personalization: 'granted',
+            personalization_storage: 'granted'
+        };
+        
+        this.saveConsentAndClose();
+    }
+
+    rejectAllConsent() {
+        this.consentState = {
+            ...this.consentState,
+            analytics_storage: 'denied',
+            ad_storage: 'denied',
+            ad_user_data: 'denied',
+            ad_personalization: 'denied',
+            personalization_storage: 'denied'
+        };
+        
+        this.saveConsentAndClose();
+    }
+
+    saveCustomPreferences() {
+        const analyticsChecked = document.getElementById('consent-analytics').checked;
+        const advertisingChecked = document.getElementById('consent-advertising').checked;
+        
+        this.consentState = {
+            ...this.consentState,
+            analytics_storage: analyticsChecked ? 'granted' : 'denied',
+            ad_storage: advertisingChecked ? 'granted' : 'denied',
+            ad_user_data: advertisingChecked ? 'granted' : 'denied',
+            ad_personalization: advertisingChecked ? 'granted' : 'denied',
+            personalization_storage: analyticsChecked ? 'granted' : 'denied'
+        };
+        
+        this.saveConsentAndClose();
+    }
+
+    saveConsentAndClose() {
+        // Save consent to cookie
+        this.setCookie(this.COOKIE_NAME, JSON.stringify(this.consentState), this.COOKIE_DURATION);
+        
+        // Update consent mode
+        this.updateConsentMode();
+        
+        // Update Clarity consent
+        this.updateClarityConsent();
+        
+        // Remove banner
+        this.removeConsentBanner();
+    }
+
+    updateConsentMode() {
+        if (window.gtag) {
+            gtag('consent', 'update', this.consentState);
+            
+            // Configure Google Analytics if analytics consent is granted
+            if (this.consentState.analytics_storage === 'granted') {
+                gtag('config', 'G-761B4BMK2R');
+            }
+        }
+    }
+
+    updateClarityConsent() {
+        // Send consent signal to Microsoft Clarity
+        if (window.clarity) {
+            const analyticsConsent = this.consentState.analytics_storage === 'granted';
+            clarity('consent', analyticsConsent);
+        }
+    }
+
+    removeConsentBanner() {
+        const banner = document.getElementById('consent-banner');
+        if (banner) {
+            banner.remove();
+        }
+    }
+
+    addConsentStyles() {
+        if (document.getElementById('consent-styles')) return; // Already added
+
+        const styles = document.createElement('style');
+        styles.id = 'consent-styles';
+        styles.textContent = `
+            .consent-banner {
+                position: fixed;
+                bottom: 0;
+                left: 0;
+                right: 0;
+                background: #ffffff;
+                border-top: 3px solid #007bff;
+                box-shadow: 0 -4px 12px rgba(0,0,0,0.15);
+                z-index: 10000;
+                font-family: inherit;
+            }
+
+            .consent-banner-content {
+                max-width: 1200px;
+                margin: 0 auto;
+                padding: 20px;
+                display: flex;
+                align-items: center;
+                justify-content: space-between;
+                gap: 20px;
+            }
+
+            .consent-banner-text h3 {
+                margin: 0 0 8px 0;
+                font-size: 1.2rem;
+                color: #333;
+            }
+
+            .consent-banner-text p {
+                margin: 0;
+                color: #666;
+                font-size: 0.95rem;
+            }
+
+            .consent-banner-actions {
+                display: flex;
+                gap: 10px;
+                flex-wrap: wrap;
+            }
+
+            .consent-details {
+                border-top: 1px solid #eee;
+                padding: 20px;
+                max-width: 1200px;
+                margin: 0 auto;
+            }
+
+            .consent-category {
+                margin-bottom: 20px;
+            }
+
+            .consent-switch {
+                display: flex;
+                align-items: center;
+                gap: 15px;
+                cursor: pointer;
+                padding: 15px;
+                border: 1px solid #ddd;
+                border-radius: 8px;
+                background: #f8f9fa;
+            }
+
+            .consent-switch input[type="checkbox"] {
+                width: 20px;
+                height: 20px;
+                margin: 0;
+            }
+
+            .consent-info strong {
+                display: block;
+                margin-bottom: 5px;
+                color: #333;
+            }
+
+            .consent-info p {
+                margin: 0;
+                color: #666;
+                font-size: 0.9rem;
+            }
+
+            .consent-actions {
+                text-align: center;
+                margin-top: 20px;
+            }
+
+            @media (max-width: 768px) {
+                .consent-banner-content {
+                    flex-direction: column;
+                    text-align: center;
+                }
+                
+                .consent-banner-actions {
+                    justify-content: center;
+                    width: 100%;
+                }
+            }
+        `;
+        
+        document.head.appendChild(styles);
+    }
+
+    // Cookie utility methods
+    setCookie(name, value, days) {
+        const expires = new Date();
+        expires.setTime(expires.getTime() + (days * 24 * 60 * 60 * 1000));
+        document.cookie = `${name}=${value};expires=${expires.toUTCString()};path=/;SameSite=Lax`;
+    }
+
+    getCookie(name) {
+        const nameEQ = name + "=";
+        const ca = document.cookie.split(';');
+        for (let i = 0; i < ca.length; i++) {
+            let c = ca[i];
+            while (c.charAt(0) === ' ') c = c.substring(1, c.length);
+            if (c.indexOf(nameEQ) === 0) return c.substring(nameEQ.length, c.length);
+        }
+        return null;
+    }
+
+    // Public API for consent preference management
+    openConsentPreferences() {
+        this.showConsentBanner();
+        // If banner already exists, show customize options
+        setTimeout(() => {
+            if (document.getElementById('consent-banner')) {
+                this.showCustomizeOptions();
+            }
+        }, 100);
+    }
+
+    // Check current consent status
+    hasAnalyticsConsent() {
+        return this.consentState.analytics_storage === 'granted';
+    }
+
+    hasAdvertisingConsent() {
+        return this.consentState.ad_storage === 'granted';
+    }
+
+    // Method to revoke consent (useful for "forget me" functionality)
+    revokeAllConsent() {
+        this.rejectAllConsent();
+        // Also clear any existing tracking cookies
+        this.clearTrackingCookies();
+    }
+
+    clearTrackingCookies() {
+        // Clear common tracking cookies
+        const trackingCookies = ['_ga', '_gid', '_gat', '_clck', '_clsk'];
+        trackingCookies.forEach(cookieName => {
+            document.cookie = `${cookieName}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/`;
+        });
+    }
+}
+
+// Initialize consent manager when DOM is ready
+document.addEventListener('DOMContentLoaded', function() {
+    window.consentManager = new ConsentManager();
+});
+
+// Global function for opening consent preferences
+window.openConsentPreferences = function() {
+    if (window.consentManager) {
+        window.consentManager.openConsentPreferences();
+    }
+};
\ No newline at end of file

From d3852efbd09a9b8098a5560dc282e5c41334d57c Mon Sep 17 00:00:00 2001
From: Benjamin Michaelis <git@relay.benjamin.michaelis.net>
Date: Wed, 3 Sep 2025 17:20:02 -0700
Subject: [PATCH 3/3] updates

---
 EssentialCSharp.Web/Views/Home/Privacy.cshtml | 95 -------------------
 .../Views/Shared/_Layout.cshtml               | 14 +--
 .../wwwroot/js/consent-manager.js             | 79 ++++++++++++---
 3 files changed, 70 insertions(+), 118 deletions(-)
 delete mode 100644 EssentialCSharp.Web/Views/Home/Privacy.cshtml

diff --git a/EssentialCSharp.Web/Views/Home/Privacy.cshtml b/EssentialCSharp.Web/Views/Home/Privacy.cshtml
deleted file mode 100644
index 46a778c6..00000000
--- a/EssentialCSharp.Web/Views/Home/Privacy.cshtml
+++ /dev/null
@@ -1,95 +0,0 @@
-@{
-    ViewData["Title"] = "Privacy Policy";
-}
-<h1>@ViewData["Title"]</h1>
-
-<div class="container">
-    <div class="row">
-        <div class="col-lg-8">
-            <h2>Privacy Policy</h2>
-            <p>At Essential C#, we are committed to protecting your privacy and ensuring you have a positive experience on our website.</p>
-
-            <h3>Information We Collect</h3>
-            <p>We collect information to provide better services to our users. The types of information we collect include:</p>
-            <ul>
-                <li><strong>Usage Information:</strong> How you interact with our website, including pages visited, time spent, and navigation patterns</li>
-                <li><strong>Technical Information:</strong> Browser type, operating system, IP address, and device information</li>
-                <li><strong>Account Information:</strong> When you create an account, we collect your email address and any profile information you provide</li>
-            </ul>
-
-            <h3>How We Use Your Information</h3>
-            <p>We use the information we collect to:</p>
-            <ul>
-                <li>Provide and improve our services</li>
-                <li>Analyze website usage to enhance user experience</li>
-                <li>Communicate with you about updates and features</li>
-                <li>Ensure website security and prevent fraud</li>
-            </ul>
-
-            <h3>Cookies and Tracking Technologies</h3>
-            <p>We use cookies and similar technologies to enhance your browsing experience. Our website uses:</p>
-            <ul>
-                <li><strong>Essential Cookies:</strong> Required for basic website functionality</li>
-                <li><strong>Analytics Cookies:</strong> Help us understand how you use our site (Google Analytics, Microsoft Clarity)</li>
-                <li><strong>Advertising Cookies:</strong> Used to deliver relevant advertisements</li>
-            </ul>
-            
-            <p>You can manage your cookie preferences at any time by clicking the "Cookie Preferences" link in our footer.</p>
-            
-            <div class="mt-3 mb-3">
-                <button class="btn btn-primary" onclick="openConsentPreferences()">
-                    <i class="fa fa-cog me-2"></i>Manage Cookie Preferences
-                </button>
-            </div>
-
-            <h3>Your Rights</h3>
-            <p>Depending on your location, you may have certain rights regarding your personal information:</p>
-            <ul>
-                <li>Access to your personal information</li>
-                <li>Correction of inaccurate information</li>
-                <li>Deletion of your personal information</li>
-                <li>Restriction of processing</li>
-                <li>Data portability</li>
-                <li>Objection to processing</li>
-            </ul>
-
-            <h3>Third-Party Services</h3>
-            <p>Our website uses the following third-party services that may collect information:</p>
-            <ul>
-                <li><strong>Google Analytics:</strong> Web analytics service provided by Google Inc.</li>
-                <li><strong>Microsoft Clarity:</strong> User behavior analytics service provided by Microsoft Corporation</li>
-            </ul>
-
-            <h3>Data Retention</h3>
-            <p>We retain your information only as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy.</p>
-
-            <h3>International Transfers</h3>
-            <p>Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.</p>
-
-            <h3>Contact Us</h3>
-            <p>If you have questions about this privacy policy or your personal information, please contact us through our GitHub repository or at the contact information provided on <a href="https://intellitect.com/about/privacy-policy/" target="_blank">IntelliTect's Privacy Policy</a>.</p>
-
-            <h3>Changes to This Policy</h3>
-            <p>We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page.</p>
-
-            <p><small><em>Last updated: @DateTime.Now.ToString("MMMM dd, yyyy")</em></small></p>
-        </div>
-        <div class="col-lg-4">
-            <div class="card">
-                <div class="card-header">
-                    <h5>Quick Actions</h5>
-                </div>
-                <div class="card-body">
-                    <div class="d-grid gap-2">
-                        <button class="btn btn-outline-primary" onclick="openConsentPreferences()">
-                            <i class="fa fa-cog me-2"></i>Cookie Preferences
-                        </button>
-                        <a href="https://intellitect.com/about/privacy-policy/" target="_blank" class="btn btn-outline-secondary">
-                            <i class="fa fa-external-link me-2"></i>IntelliTect Privacy Policy
-                        </a>
-                    </div>
-                </div>
-            </div>
-        </div>
-    </div>
-</div>
diff --git a/EssentialCSharp.Web/Views/Shared/_Layout.cshtml b/EssentialCSharp.Web/Views/Shared/_Layout.cshtml
index 9ef8c726..305a78cb 100644
--- a/EssentialCSharp.Web/Views/Shared/_Layout.cshtml
+++ b/EssentialCSharp.Web/Views/Shared/_Layout.cshtml
@@ -105,15 +105,11 @@
         gtag('js', new Date());
         
         // Configuration will be handled by consent manager
-        // Only configure if consent is already granted or region doesn't require consent
-        document.addEventListener('DOMContentLoaded', function() {
-            // Small delay to ensure consent manager is initialized
-            setTimeout(function() {
-                if (window.consentManager && 
-                    (window.consentManager.hasAnalyticsConsent() || !window.consentManager.requiresConsent)) {
-                    gtag('config', 'G-761B4BMK2R');
-                }
-            }, 100);
+        // Listen for consent manager initialization event
+        document.addEventListener('consentManagerReady', function(event) {
+            if (event.detail.hasAnalyticsConsent || !event.detail.requiresConsent) {
+                gtag('config', 'G-761B4BMK2R');
+            }
         });
     </script>
     <style>
diff --git a/EssentialCSharp.Web/wwwroot/js/consent-manager.js b/EssentialCSharp.Web/wwwroot/js/consent-manager.js
index 56d18f20..ceb16233 100644
--- a/EssentialCSharp.Web/wwwroot/js/consent-manager.js
+++ b/EssentialCSharp.Web/wwwroot/js/consent-manager.js
@@ -5,9 +5,10 @@
  */
 
 class ConsentManager {
-    constructor() {
+    constructor(options = {}) {
         this.COOKIE_NAME = 'essential-csharp-consent';
         this.COOKIE_DURATION = 365; // days
+        this.GOOGLE_ANALYTICS_ID = options.googleAnalyticsId || 'G-761B4BMK2R';
         this.consentState = {
             analytics_storage: 'denied',
             ad_storage: 'denied',
@@ -35,6 +36,21 @@ class ConsentManager {
         if (this.shouldShowConsentBanner()) {
             this.showConsentBanner();
         }
+        
+        // Dispatch initialization event for other scripts to listen to
+        this.dispatchInitializationEvent();
+    }
+
+    dispatchInitializationEvent() {
+        // Create and dispatch custom event to signal consent manager is ready
+        const event = new CustomEvent('consentManagerReady', {
+            detail: {
+                hasAnalyticsConsent: this.hasAnalyticsConsent(),
+                hasAdvertisingConsent: this.hasAdvertisingConsent(),
+                requiresConsent: this.requiresConsent
+            }
+        });
+        document.dispatchEvent(event);
     }
 
     initGoogleConsentMode() {
@@ -54,7 +70,8 @@ class ConsentManager {
             return true;
         }
         
-        // Simple region detection - in production, you might want to use a more reliable service
+        // Timezone-based region detection for GDPR compliance
+        // Users can change timezones, but this provides reasonable detection for most cases
         const timezone = Intl.DateTimeFormat().resolvedOptions().timeZone;
         
         // EEA countries, UK, and Switzerland timezones
@@ -90,7 +107,23 @@ class ConsentManager {
         if (saved) {
             try {
                 const preferences = JSON.parse(saved);
-                this.consentState = { ...this.consentState, ...preferences };
+                
+                // Validate and only apply known consent properties for security
+                const validConsentKeys = [
+                    'analytics_storage', 'ad_storage', 'ad_user_data', 
+                    'ad_personalization', 'functionality_storage', 
+                    'security_storage', 'personalization_storage'
+                ];
+                
+                const validatedPreferences = {};
+                validConsentKeys.forEach(key => {
+                    if (preferences.hasOwnProperty(key) && 
+                        (preferences[key] === 'granted' || preferences[key] === 'denied')) {
+                        validatedPreferences[key] = preferences[key];
+                    }
+                });
+                
+                this.consentState = { ...this.consentState, ...validatedPreferences };
                 this.updateConsentMode();
             } catch (e) {
                 console.warn('Failed to parse consent preferences', e);
@@ -261,20 +294,30 @@ class ConsentManager {
 
     updateConsentMode() {
         if (window.gtag) {
-            gtag('consent', 'update', this.consentState);
-            
-            // Configure Google Analytics if analytics consent is granted
-            if (this.consentState.analytics_storage === 'granted') {
-                gtag('config', 'G-761B4BMK2R');
+            try {
+                gtag('consent', 'update', this.consentState);
+                
+                // Configure Google Analytics if analytics consent is granted
+                if (this.consentState.analytics_storage === 'granted') {
+                    gtag('config', 'G-761B4BMK2R');
+                }
+            } catch (error) {
+                console.warn('Failed to update Google Consent Mode:', error);
             }
         }
     }
 
     updateClarityConsent() {
-        // Send consent signal to Microsoft Clarity
+        // Send consent signal to Microsoft Clarity using Consent API v2
         if (window.clarity) {
-            const analyticsConsent = this.consentState.analytics_storage === 'granted';
-            clarity('consent', analyticsConsent);
+            try {
+                clarity('consentv2', {
+                    ad_Storage: this.consentState.ad_storage,
+                    analytics_Storage: this.consentState.analytics_storage
+                });
+            } catch (error) {
+                console.warn('Failed to update Clarity consent:', error);
+            }
         }
     }
 
@@ -435,11 +478,15 @@ class ConsentManager {
         this.rejectAllConsent();
         // Also clear any existing tracking cookies
         this.clearTrackingCookies();
+        // Erase Clarity cookies according to documentation
+        if (window.clarity) {
+            clarity('consent', false);
+        }
     }
 
     clearTrackingCookies() {
-        // Clear common tracking cookies
-        const trackingCookies = ['_ga', '_gid', '_gat', '_clck', '_clsk'];
+        // Clear common tracking cookies (Google Analytics and Microsoft Clarity)
+        const trackingCookies = ['_ga', '_gid', '_gat', '_clck', '_clsk', 'CLID', 'ANONCHK', 'MR', 'MUID', 'SM'];
         trackingCookies.forEach(cookieName => {
             document.cookie = `${cookieName}=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/`;
         });
@@ -448,7 +495,11 @@ class ConsentManager {
 
 // Initialize consent manager when DOM is ready
 document.addEventListener('DOMContentLoaded', function() {
-    window.consentManager = new ConsentManager();
+    // Check for configuration from script tag data attributes
+    const configScript = document.querySelector('script[data-consent-config]');
+    const config = configScript ? JSON.parse(configScript.dataset.consentConfig) : {};
+    
+    window.consentManager = new ConsentManager(config);
 });
 
 // Global function for opening consent preferences