visionsolutions

CookieBoxs is a cookie consent plugin for WordPress that helps site owners manage visitor consent preferences and configure consent-aware integrations.
Free features include:
<ul>
<li>Google Consent Mode v2 support</li>
<li>Automatic script blocker and cookie cleaner</li>
<li>25+ built-in integrations</li>
<li>Content blockers for embedded media and maps</li>
<li>40 interface languages</li>
<li>Region presets</li>
<li>Consent logging in WordPress</li>
<li>Floating settings badge</li>
<li>Self-hosted plugin files</li>
</ul>
Optional PRO features include two-phase Cookie Scanner (server + browser-based detection), geo-targeting, additional templates, cookie declaration, consent analytics, tamper-proof consent records with CSV export and printable certificates, A/B testing of banner variants, granular per-service consent, a live banner design editor, branding options, and custom CSS.
Documentation: <a href="https://cookieboxs.com" rel="nofollow ugc">cookieboxs.com</a>
<h3>Source Code</h3>
All JavaScript and CSS files included in this plugin are human-readable and not minified or compiled. No build tools (npm, webpack, composer) are required to work with this plugin’s source code. All plugin-authored JavaScript and CSS is written directly and included as-is.
Third-party libraries and embed snippets:
<ul>
<li>
<code>assets/js/chart.min.js</code> — Chart.js library (MIT License). Source code and unminified version available at: https://github.com/chartjs/Chart.js
</li>
<li>
<code>assets/js/cookieboxs-consent-mode.js</code> — Contains standard third-party integration embed snippets (e.g., Google Tag Manager, Meta Pixel, TikTok Pixel, Microsoft Clarity, Hotjar, LiveChat, Intercom, etc.). These are the official JavaScript snippets provided by each service for website embedding, written in their standard compact form. Each snippet includes a source URL comment pointing to the official documentation. A full list of source URLs is also available in the file header comments. The surrounding plugin logic (consent state management, Google Consent Mode v2 setup, custom script injection) is authored by this plugin and is fully human-readable.
</li>
</ul>
Official documentation URLs for all embedded third-party snippets:
<ul>
<li>Google Tag Manager: https://developers.google.com/tag-platform/tag-manager/web</li>
<li>Meta Pixel: https://developers.facebook.com/docs/meta-pixel/get-started</li>
<li>TikTok Pixel: https://ads.tiktok.com/help/article/get-started-pixel</li>
<li>Microsoft Clarity: https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-setup</li>
<li>Hotjar: https://help.hotjar.com/hc/en-us/articles/115011639927</li>
<li>Heap Analytics: https://developers.heap.io/docs/web</li>
<li>Mixpanel: https://docs.mixpanel.com/docs/tracking-methods/sdks/javascript</li>
<li>PostHog: https://posthog.com/docs/libraries/js</li>
<li>LinkedIn Insight Tag: https://learn.microsoft.com/en-us/linkedin/marketing/integrations/ads-reporting/insight-tag</li>
<li>Pinterest Tag: https://help.pinterest.com/en/business/article/install-the-pinterest-tag</li>
<li>Snapchat Pixel: https://businesshelp.snapchat.com/s/article/snap-pixel-about</li>
<li>Twitter/X Pixel: https://business.x.com/en/help/campaign-measurement-and-analytics/conversion-tracking-for-websites</li>
<li>Microsoft Advertising UET: https://help.ads.microsoft.com/apex/index/3/en/56682</li>
<li>LiveChat: https://developers.livechat.com/docs/getting-started/installing-livechat</li>
<li>Crisp: https://docs.crisp.chat/guides/chatbox-sdks/web-sdk/</li>
<li>Tawk.to: https://help.tawk.to/article/adding-a-tawk-to-widget-to-your-website</li>
<li>Intercom: https://developers.intercom.com/installing-intercom/web/installation</li>
<li>Yandex Metrica: https://yandex.com/support/metrica/code/counter-initialize.html</li>
<li>Matomo: https://developer.matomo.org/guides/tracking-javascript-guide</li>
</ul>
<h3>Privacy Policy</h3>
CookieBoxs does not send visitor consent records to the plugin author’s servers.
Consent records are stored in the WordPress database. Optional third-party integrations that you configure, such as analytics, advertising, chat, or embedded media services, connect directly from the visitor’s browser to those third-party providers after the relevant consent conditions are met.
Admin-only connections used for plugin news, optional deactivation feedback, or optional license validation are described below.
<h3>External Services</h3>
This plugin uses external services only for user-configured integrations. Third-party integrations are optional, disabled by default, and only activated when the site administrator enables and configures them. The plugin does not offload any of its own assets (JavaScript, CSS, images) to external servers — all plugin files are included locally.
<h4>Plugin services</h4>
<ul>
<li>
VisionSolutions API – plugin news and updates: used in the admin area only; sends plugin version, WordPress version, and site language when an administrator opens the settings page. Provider: VisionSolutions, https://visionsolutions.pl 
Terms of use: https://visionsolutions.pl/regulamin/ 
Privacy policy: https://visionsolutions.pl/polityka-prywatnosci/
</li>
<li>
VisionSolutions API – deactivation feedback (optional): sends selected reason, optional comment, site URL, WordPress version, and PHP version only if an administrator submits feedback during deactivation. Provider: VisionSolutions 
Terms of use: https://visionsolutions.pl/regulamin/ 
Privacy policy: https://visionsolutions.pl/polityka-prywatnosci/
</li>
<li>
VisionSolutions API – PRO license validation (optional): sends license key, site domain, and plugin version on activation and periodic validation. Provider: VisionSolutions 
Terms of use: https://visionsolutions.pl/regulamin/ 
Privacy policy: https://visionsolutions.pl/polityka-prywatnosci/
</li>
<li>
ipapi.co geolocation API (optional, PRO): used only when geo-targeting is enabled and fallback geolocation is needed; sends visitor IP address. Provider: ipapi 
Terms of use: https://ipapi.co/terms/ 
Privacy policy: https://ipapi.co/privacy/
</li>
<li>
Cookie Scanner (admin-initiated, PRO): two-phase scan. Phase 1 (server): sends requests from your server to your own website pages to detect cookies and tracking scripts from HTML. Phase 2 (browser): loads the scanned page in a hidden iframe within the administrator’s browser to detect cookies set by JavaScript (e.g. pixels loaded via Google Tag Manager). All scanning happens locally — no external provider is contacted.
</li>
</ul>
<h4>Optional integrations (services)</h4>
These are third-party services that the site administrator can optionally enable. When enabled, the plugin loads the official embed snippet provided by each service, which connects the visitor’s browser directly to that service provider. These are service integrations, not offloaded plugin assets. Each integration is disabled by default and only activates when the administrator provides their account ID.
<ul>
<li>
Google Tag Manager – tag management service; may load on page view and use Consent Mode signals. Loaded from: www.googletagmanager.com. Provider: Google LLC. 
Terms of use: https://marketingplatform.google.com/about/analytics/terms/us/ 
Privacy policy: https://policies.google.com/privacy
</li>
<li>
Google Analytics 4 – analytics service; loaded from www.googletagmanager.com/gtag/js via wp_enqueue_script. Provider: Google LLC. 
Terms of use: https://marketingplatform.google.com/about/analytics/terms/us/ 
Privacy policy: https://policies.google.com/privacy
</li>
<li>
Google Ads – conversion tracking and remarketing service; loaded from www.googletagmanager.com/gtag/js via wp_enqueue_script. Provider: Google LLC. 
Terms of use: https://ads.google.com/intl/en/home/terms/ 
Privacy policy: https://policies.google.com/privacy
</li>
<li>
Meta Pixel – advertising measurement service; loaded from connect.facebook.net. Provider: Meta Platforms, Inc. 
Terms of use: https://www.facebook.com/legal/terms 
Privacy policy: https://www.facebook.com/privacy/policy/
</li>
<li>
TikTok Pixel – advertising measurement service; loaded from analytics.tiktok.com. Provider: TikTok Inc. / ByteDance Ltd. 
Terms of use: https://ads.tiktok.com/i18n/official/policy/business-products-terms 
Privacy policy: https://www.tiktok.com/legal/privacy-policy
</li>
<li>
Microsoft Clarity – session analytics and heatmaps service; loaded from www.clarity.ms. Provider: Microsoft Corporation. 
Terms of use: https://clarity.microsoft.com/terms 
Privacy policy: https://privacy.microsoft.com/en-us/privacystatement
</li>
<li>
Hotjar – heatmaps, recordings, and feedback service; loaded from static.hotjar.com. Provider: Hotjar Ltd. 
Terms of use: https://www.hotjar.com/legal/policies/terms-of-service/ 
Privacy policy: https://www.hotjar.com/legal/policies/privacy/
</li>
<li>
Matomo – analytics service; loaded from the site administrator’s configured Matomo instance URL. Provider: InnoCraft Ltd. or the site owner’s Matomo host. 
Terms of use: https://matomo.org/matomo-cloud-terms-of-service/ 
Privacy policy: https://matomo.org/matomo-cloud-privacy-policy/
</li>
<li>
Yandex Metrica – analytics service; loaded from mc.yandex.ru. Provider: Yandex LLC. 
Terms of use: https://yandex.com/legal/metrica_termsofuse/ 
Privacy policy: https://yandex.com/legal/confidential/
</li>
<li>
Heap Analytics – analytics service; loaded from cdn.heapanalytics.com. Provider: Heap Inc. 
Terms of use: https://heap.io/legal/heap-terms-of-service 
Privacy policy: https://heap.io/legal/privacy
</li>
<li>
Mixpanel – analytics service; loaded from cdn.mxpnl.com. Provider: Mixpanel, Inc. 
Terms of use: https://mixpanel.com/legal/terms-of-use/ 
Privacy policy: https://mixpanel.com/legal/privacy-policy/
</li>
<li>
PostHog – analytics and feature flags service; loaded from the site administrator’s configured PostHog host. Provider: PostHog, Inc. 
Terms of use: https://posthog.com/terms 
Privacy policy: https://posthog.com/privacy
</li>
<li>
LinkedIn Insight Tag – advertising measurement service; loaded from snap.licdn.com. Provider: LinkedIn Corporation. 
Terms of use: https://www.linkedin.com/legal/l/li-marketing-terms 
Privacy policy: https://www.linkedin.com/legal/privacy-policy
</li>
<li>
Pinterest Tag – advertising measurement service; loaded from s.pinimg.com. Provider: Pinterest, Inc. 
Terms of use: https://policy.pinterest.com/en/terms-of-service 
Privacy policy: https://policy.pinterest.com/en/privacy-policy
</li>
<li>
Snapchat Pixel – advertising measurement service; loaded from sc-static.net. Provider: Snap Inc. 
Terms of use: https://snap.com/en-US/terms 
Privacy policy: https://snap.com/en-US/privacy/privacy-policy
</li>
<li>
Twitter/X Pixel – advertising measurement service; loaded from static.ads-twitter.com. Provider: X Corp. 
Terms of use: https://twitter.com/en/tos 
Privacy policy: https://twitter.com/en/privacy
</li>
<li>
Microsoft Advertising UET – conversion tracking service; loaded from bat.bing.com. Provider: Microsoft Corporation. 
Terms of use: https://about.ads.microsoft.com/en-us/policies/legal 
Privacy policy: https://privacy.microsoft.com/en-us/privacystatement
</li>
<li>
Intercom – customer messaging service; loaded from widget.intercom.io and api-iam.intercom.io. Provider: Intercom, Inc. 
Terms of use: https://www.intercom.com/legal/terms-and-policies 
Privacy policy: https://www.intercom.com/legal/privacy
</li>
<li>
LiveChat – support chat service; loaded from cdn.livechatinc.com. Provider: LiveChat, Inc. 
Terms of use: https://www.livechat.com/legal/terms-of-service/ 
Privacy policy: https://www.livechat.com/legal/privacy-policy/
</li>
<li>
Crisp – customer messaging and chat service; loaded from client.crisp.chat. Provider: Crisp IM SAS. 
Terms of use: https://crisp.chat/en/terms/ 
Privacy policy: https://crisp.chat/en/privacy/
</li>
<li>
Tawk.to – support chat service; loaded from embed.tawk.to. Provider: Tawk.to Ltd. 
Terms of use: https://www.tawk.to/legal/terms-of-service/ 
Privacy policy: https://www.tawk.to/legal/privacy-policy/
</li>
</ul>
<h4>Script blocker safe domains</h4>
The automatic script blocker does not block scripts from essential service domains (payment gateways, CAPTCHAs, translation). These domains are whitelisted so the script blocker does not interfere with site-critical functionality provided by other plugins or themes. The CookieBoxs plugin itself does not load any files from these domains — they are only whitelisted to prevent breakage:
<ul>
<li>
Stripe – payment processing service; loaded by other plugins from js.stripe.com and checkout.stripe.com. Provider: Stripe, Inc. 
Terms of use: https://stripe.com/legal/ssa 
Privacy policy: https://stripe.com/privacy
</li>
<li>
PayPal – payment processing service; loaded by other plugins from www.paypal.com and www.paypalobjects.com. Provider: PayPal Holdings, Inc. 
Terms of use: https://www.paypal.com/us/legalhub/useragreement-full 
Privacy policy: https://www.paypal.com/us/legalhub/privacy-full
</li>
<li>
Google reCAPTCHA – spam protection service; loaded by other plugins from recaptcha.net. Provider: Google LLC. 
Terms of use: https://policies.google.com/terms 
Privacy policy: https://policies.google.com/privacy
</li>
<li>
hCaptcha – spam protection service; loaded by other plugins from js.hcaptcha.com. Provider: Intuition Machines, Inc. 
Terms of use: https://www.hcaptcha.com/terms 
Privacy policy: https://www.hcaptcha.com/privacy
</li>
<li>
Cloudflare Turnstile – bot protection service; loaded by other plugins from challenges.cloudflare.com. Provider: Cloudflare, Inc. 
Terms of use: https://www.cloudflare.com/terms/ 
Privacy policy: https://www.cloudflare.com/privacypolicy/
</li>
<li>
Google Translate – translation service widget; loaded by other plugins from translate.google.com and translate.googleapis.com. Provider: Google LLC. 
Terms of use: https://policies.google.com/terms 
Privacy policy: https://policies.google.com/privacy
</li>
</ul>
<h4>Content blockers</h4>
Content blockers are an optional feature that replaces embedded third-party media (YouTube, Vimeo, Google Maps) with a placeholder until the visitor grants consent. When consent is given, the embed loads normally from the service provider.
<ul>
<li>
YouTube – video embeds can be blocked until consent; loaded from www.youtube.com and www.youtube-nocookie.com. Provider: Google LLC. 
Terms of use: https://www.youtube.com/t/terms 
Privacy policy: https://policies.google.com/privacy
</li>
<li>
Vimeo – video embeds can be blocked until consent; loaded from player.vimeo.com and vimeo.com. Provider: Vimeo, Inc. 
Terms of use: https://vimeo.com/terms 
Privacy policy: https://vimeo.com/privacy
</li>
<li>
Google Maps – map embeds can be blocked until consent; loaded from www.google.com/maps and maps.googleapis.com. Provider: Google LLC. 
Terms of use: https://cloud.google.com/maps-platform/terms 
Privacy policy: https://policies.google.com/privacy
</li>
</ul>

CookieBoxs – GDPR/CCPA Cookie Consent & Google Consent Mode v2

Cookie consent plugin for managing visitor consent with Google Consent Mode v2, script blocking, content blockers, and optional integrations.

MaxtDesign

<h4>The MaxtDesign Cookie Consent Manager That Actually Works</h4>
Most WordPress consent plugins either don’t actually control tracking (they just show a form) or they’re so bloated they slow down your site significantly. MaxtDesign Cookie Consent is different: proper Google Consent Mode v2 implementation in under 10KB.
<h4>Why This Plugin?</h4>
For Site Owners: 
You need CCPA/GDPR compliance but don’t want to sacrifice site performance or deal with complex configuration.
For Developers: 
You want clean, efficient code that follows WordPress standards and doesn’t conflict with other plugins.
For Agencies: 
You manage multiple client sites and need a reliable, lightweight solution that just works.
<h4>Key Features</h4>
✓ Actually Controls Tracking 
Unlike “checkbox theater” plugins that only show forms, this plugin properly implements Google Consent Mode v2, ensuring GA4 and Google Ads respect user choices.
✓ Blazing Fast (<10KB) 
Zero performance overhead. No database queries during page load. Pure localStorage-based consent management.
✓ Three Style Presets 
Choose from Minimal, Modern, or Bold popup styles. Customize colors to match your brand.
✓ Works Everywhere 
Compatible with any theme. Works with Elementor (optional). Mobile responsive. Accessibility compliant (WCAG 2.1 AA).
✓ Developer-Friendly 
Clean code following WordPress standards. Two shortcodes for easy integration. No jQuery dependency. Vanilla JavaScript.
✓ Privacy-First 
No server-side user tracking. No external API calls. User consent stored locally. GDPR/CCPA compliant by design.
<h4>What is Google Consent Mode v2?</h4>

Google Consent Mode v2 (GCM v2) became mandatory in March 2024 for GA4 and Google Ads in the EU. It’s Google’s framework for managing user consent signals across their advertising and analytics products.
This plugin implements all four required consent types:
<ul>
<li>analytics_storage – Google Analytics cookies</li>
<li>ad_storage – Advertising cookies </li>
<li>ad_user_data – User data for advertising</li>
<li>ad_personalization – Personalized advertising</li>
</ul>
Without proper GCM v2 implementation, your GA4 and Google Ads tracking may be unreliable or non-compliant.
<h4>How It Works</h4>
<ol>
<li>Visitor arrives → Consent popup appears (customizable position, style, timing)</li>
<li>User chooses → Three options: Accept All, Analytics Only, or Decline All</li>
<li>Consent stored → User choice saved in localStorage (privacy-friendly, no server tracking)</li>
<li>GCM signals updated → Google Analytics and Ads respect the user’s choice immediately</li>
<li>No repeat popup → Cookie remembers they’ve seen popup (configurable duration)</li>
</ol>
<h4>Popup Customization</h4>
Style Presets: 
* Minimal – Clean and subtle 
* Modern – Rounded and polished 
* Bold – Strong and prominent
Position Options: 
* Top banner 
* Bottom banner 
* Center modal
Animation Options: 
* Slide in 
* Fade in 
* No animation
Color Customization: 
Primary color picker to match your brand
<h4>Shortcodes</h4>
Display Current Status:
<pre><code>[mdcc_consent_status]
</code></pre>
Shows consent chips: “Analytics: On/Off” and “Ads: On/Off”
Manage Consent Interface:
<pre><code>[mdcc_manage_consent title="Your Privacy Choices"]
</code></pre>
Full consent management with Accept/Analytics/Decline buttons and current status display.
Both shortcodes update in real-time when consent changes.
<h4>Optional Elementor Integration</h4>
Prefer to use a custom Elementor popup? Simply enter your Elementor Popup ID in settings, and the plugin will use your custom popup instead while maintaining proper GCM v2 functionality.
<h4>Technical Specifications</h4>
<ul>
<li>Size: <10KB total (CSS + JS combined, gzipped)</li>
<li>Performance: Zero database queries during page load</li>
<li>Storage: localStorage-based (no server-side user tracking)</li>
<li>Dependencies: None (vanilla JavaScript, no jQuery)</li>
<li>Compatibility: WordPress 5.8+, PHP 7.4+</li>
<li>Standards: WCAG 2.1 AA accessible, mobile responsive</li>
</ul>
<h4>Perfect For</h4>

<ul>
<li>WordPress sites using GA4 or Google Ads</li>
<li>CCPA/GDPR compliance requirements</li>
<li>Performance-conscious developers</li>
<li>Agency client sites needing scalable consent management</li>
<li>Anyone tired of bloated consent plugins</li>
</ul>
<h4>What This Plugin Doesn’t Do</h4>
<ul>
<li>Not a cookie scanner – Doesn’t automatically detect all cookies on your site</li>
<li>Not a full compliance suite – Focuses on consent management for Google tracking</li>
<li>Not multi-platform tracking – Free version handles GA4/Ads only (Pro version coming with Facebook, Hotjar, etc.)</li>
</ul>
For comprehensive cookie auditing and multi-platform tracking control, consider our Pro version (launching 2025).
<h4>Coming in Pro Version</h4>
<ul>
<li>Facebook Pixel control</li>
<li>Hotjar tracking control</li>
<li>LinkedIn Insight Tag</li>
<li>TikTok Pixel</li>
<li>Custom script control</li>
<li>Consent analytics dashboard</li>
<li>Geolocation-based prompts</li>
<li>White-label mode for agencies</li>
</ul>
<h3>Privacy Policy</h3>
MaxtDesign Cookie Consent does not collect, store, or transmit any user data. All consent preferences are stored locally in the user’s browser using localStorage. No information is sent to external servers.
However, this plugin manages consent for third-party services (Google Analytics, Google Ads). Those services have their own privacy policies:
<ul>
<li>Google Analytics Privacy Policy: https://policies.google.com/privacy</li>
<li>Google Ads Privacy Policy: https://policies.google.com/technologies/ads</li>
</ul>
It is your responsibility to include appropriate disclosures in your site’s privacy policy about the tracking services you use.
<h3>Support</h3>
For support, please use the <a href="https://wordpress.org/support/plugin/maxtdesign-cookie-consent" rel="ugc">WordPress.org support forum</a>.
<h3>Credits</h3>
Developed by MaxtDesign – <a href="https://maxtdesign.com" rel="nofollow ugc">https://maxtdesign.com</a>
Special thanks to the WordPress community for feedback and testing.

MaxtDesign Cookie Consent – Google Consent Mode v2


Installed, tested and validated. Works like a charm. I use it with Google Tag Manager - just pasted in the Google-supported small scripts in the page headers, installed this plugin, and things work.



My first use is with a site built with Bricks Builder. I have put the shortcode 'mdcc_manage_consent' in a Bricks off-canvas which slides in when activating a small trigger icon at the bottom of the page. A trigger icon is not automatically provided by this plugin, but can very easily be fixed this way if you want to allow visitors to revisit their consent settings.



I have had a few support questions, and replies and fixes are immediate and perfect. Bravo!


Excellent plugin with great support

Free cookie consent that actually controls Google Analytics & Ads (not just a banner). 10x lighter than $50/month alternatives. GDPR/CCPA.

CookieBoxs – GDPR/CCPA Cookie Consent & Google Consent Mode v2 vs MaxtDesign Cookie Consent – Google Consent Mode v2