@php
/**
 * GDPR cookie-consent banner — OFF by default. Shown once to a visitor until they
 * accept; a first-party cookie remembers the choice. Colours follow the admin's
 * Branding primary colour. Nothing is loaded or tracked here — it is a notice only.
 */
if (setting('gdpr_enabled', '0') !== '1' || !empty(request()->cookie('qm_cookie_consent'))) {
    return;
}
$gMsg = trim((string) setting('gdpr_message', ''));
$gBtn = trim((string) setting('gdpr_button_text', '')) ?: t_raw('admin.settings.default_gdpr_accept');
$gUrl = trim((string) setting('gdpr_policy_url', ''));
@endphp
<div class="qm-cookie" id="qm-cookie" role="dialog" aria-live="polite" aria-label="{{ t_raw('cookie.consent_aria') }}">
    <p class="qm-cookie-text">{{ $gMsg }}@if ($gUrl !== '') <a href="{{ url($gUrl) }}">{{ t_raw('home.hero.s4_cta_learn') }}</a>@endif</p>
    <button type="button" class="qm-btn qm-btn-sm qm-cookie-accept" data-cookie-accept>{{ $gBtn }}</button>
</div>
<script>(function () {
    var b = document.querySelector('[data-cookie-accept]');
    if (!b) { return; }
    b.addEventListener('click', function () {
        document.cookie = 'qm_cookie_consent=1; path=/; max-age=31536000; samesite=Lax';
        var el = document.getElementById('qm-cookie');
        if (el && el.parentNode) { el.parentNode.removeChild(el); }
    });
}());</script>