Consent Carrd doesn't ship at all
Carrd has native forms, but it has no cookie consent banner, so a Carrd page that sets any analytics or marketing cookie still needs one for GDPR and CCPA. Amabrik's cookie consent holds non-essential trackers until a visitor agrees by category, signals Google Consent Mode v2 and GPC, applies geo rules, and keeps a 13-month consent log you can export with no raw IP stored. That's the difference between looking compliant and being audit-clean, and Carrd gives you nothing here on its own.