GDPR Cookiebot & Tag Setup

I need my existing Cookiebot banner fully configured so that it meets current EU GDPR / ePrivacy requirements and works flawlessly with my Google Tag implementation. The banner must load in a detailed, description-rich format and automatically block every script on the site except those I mark as necessary—namely Session cookies, Security cookies and Preferences cookies. No other tags, pixels or iframes may fire until a visitor gives the proper consent.

Google Tag (via GTM or hard-coded) has to respect the same categories, so you’ll map Cookiebot’s consent state to my analytics, marketing and functional tags, making sure nothing slips through. Once everything is set, I want the banner suppressed for Googlebot and Bingbot so search engines can crawl the site without seeing consent prompts or running into blocked resources.

Deliverables
• Cookiebot configured with detailed category descriptions, auto-blocking enabled
• Necessary cookies (Session, Security, Preferences) whitelisted; all others blocked until consent
• Google Tag implementation connected to Cookiebot consent data layer
• User-agent rule that hides the banner for Googlebot and Bingbot while still loading all site assets
• Final verification: site passes Cookiebot compliance test and Lighthouse crawl without consent errors

If you’ve handled similar GDPR roll-outs with Cookiebot and Google Tag before, I’d love to hear how quickly you can have this live and bullet-proof.