cookielex

CookieLex is a consent management platform for websites that need a configurable cookie banner and related privacy tools.
This plugin connects a WordPress site to a CookieLex account or CookieLex site key. After the site is connected, the plugin loads the CookieLex CMP script on public WordPress pages so the CookieLex banner can display and use the banner configuration from your CookieLex dashboard.
Depending on your CookieLex account and site configuration, CookieLex can help you manage consent choices, cookie categories, consent logging, cookie scanning, and privacy or cookie policy tools. Configuration is managed in CookieLex, not primarily inside WordPress.
Website owners remain responsible for configuring CookieLex appropriately for their site, jurisdiction, installed scripts, policies, and legal obligations. This plugin and the CookieLex service can support privacy compliance workflows, but they do not guarantee compliance with GDPR, ePrivacy, CCPA/CPRA, or any other law.
<h3>External services</h3>
This plugin connects to CookieLex services so it can connect your WordPress site to CookieLex, load the hosted consent banner, and synchronize the site connection.
This service is provided by CookieLex.
Website: https://cookielex.com/
Terms and conditions: https://app.cookielex.com/terms-and-conditions
Privacy policy: https://app.cookielex.com/privacy-policy
Production service domain used by the plugin: https://app.cookielex.com/
The plugin makes these external requests:
<ul>
<li>When an administrator clicks “Connect to CookieLex”, WordPress redirects the administrator to <code>https://app.cookielex.com/integrations/wordpress/connect</code>.</li>
<li>The connect request includes the WordPress callback URL, site URL, a temporary state value, plugin version, and WordPress version.</li>
<li>When CookieLex redirects back to WordPress with a connection token, the plugin sends that token to <code>https://app.cookielex.com/api/integrations/wordpress/exchange</code>.</li>
<li>After a successful connection, the plugin stores a heartbeat token in the WordPress option <code>cookielexccpc_heartbeat_token</code> and sends a daily WP-Cron heartbeat to <code>https://app.cookielex.com/api/integrations/wordpress/heartbeat</code>.</li>
<li>When a site key is saved or returned by the connection flow, the public site loads the CookieLex CMP script from the configured embed URL. By default this is <code>https://app.cookielex.com/cmp/embed/{site_key}</code>.</li>
</ul>
Data sent to CookieLex by this plugin may include:
<ul>
<li>Site key.</li>
<li>Site URL or domain.</li>
<li>WordPress version.</li>
<li>Plugin version.</li>
<li>Temporary connection state and connection token during the administrator connect flow.</li>
<li>Heartbeat token during the daily heartbeat request. The token is sent in a POST JSON request body and is used only to authenticate the plugin installation status.</li>
<li>Connection metadata returned by CookieLex, such as embed URL, dashboard URL, domain, and connection time, which is stored in the WordPress option <code>cookielexccpc_settings</code>.</li>
<li>Daily heartbeat metadata, including site key, plugin version, WordPress version, and site/domain information. This is used to show whether the WordPress plugin is actively installed and recently seen in CookieLex.</li>
</ul>
The frontend CookieLex CMP script is loaded by visitors’ browsers from CookieLex servers. That browser request includes normal web request data, such as IP address and user agent, as part of the request to CookieLex. The CMP script may process visitor consent choices according to your CookieLex account and banner configuration.
This plugin does not send raw WordPress administrator passwords to CookieLex. The WordPress admin screen masks the stored site key and does not print raw connection or heartbeat tokens.
CookieLex provides this service under its terms and conditions at https://app.cookielex.com/terms-and-conditions and privacy policy at https://app.cookielex.com/privacy-policy.
<h3>Data storage</h3>
The plugin stores only the integration settings needed to connect WordPress to CookieLex.
Data stored in WordPress options may include:
<ul>
<li><code>cookielexccpc_settings</code>: site key, embed URL, dashboard URL, connected domain, connection time, heartbeat URL, and last heartbeat time.</li>
<li><code>cookielexccpc_heartbeat_token</code>: heartbeat token returned by CookieLex after the site is connected.</li>
</ul>
The plugin also stores a temporary connection state in the transient <code>cookielexccpc_connect_state</code> during the administrator connect flow. This transient expires after 10 minutes.
When the site is disconnected from the CookieLex admin page, the plugin removes the stored CookieLex settings, heartbeat token, and scheduled heartbeat event. When the plugin is uninstalled, <code>uninstall.php</code> removes the same stored options, scheduled event, and temporary connection transient.

CookieLex Cookie Consent & Privacy Compliance

Add the CookieLex consent banner to WordPress and connect your site to CookieLex.

cirvgreen

WordPress privacy compliance without the complexity. Cirv Comply gives you a customizable cookie consent banner, privacy policy generator, and consent logging — all in one lightweight plugin.
GDPR fines have exceeded $4.5 billion. The EU Accessibility Act is in effect. CCPA enforcement is accelerating. Your WordPress site needs proper cookie consent and privacy compliance — Cirv Comply makes it effortless.
<h4>Why You Need This</h4>
<ul>
<li>$4.5B+ in GDPR fines issued to date — and growing</li>
<li>CCPA enforcement now includes small businesses</li>
<li>EU Cyber Resilience Act (Sept 2026) adds new requirements</li>
<li>96% of websites have cookie compliance issues</li>
<li>One plugin handles consent, policy, and logging</li>
</ul>
<h4>Free Features</h4>
Customizable Cookie Consent Banner 
Choose from 4 positions (bottom bar, top bar, corner popup). Customize colors, text, and button labels. Accept All, Reject, and granular Cookie Settings options.
Cookie Categories 
4 built-in categories: Necessary (always on), Analytics, Marketing, and Other. Visitors choose exactly which cookies they accept.
Privacy Policy Generator 
Generate a privacy policy based on your WordPress setup. Detects WooCommerce, contact form plugins, and includes cookie policy, data rights, and retention sections.
Consent Logging 
Logs visitor consent decisions with timestamps. IP addresses stored as SHA-256 hashes for GDPR compliance. Proof of consent for regulators.
Consent Statistics Dashboard 
See total consents, acceptance/rejection rates, and custom selections at a glance.
<h4>Pro Features</h4>
<ul>
<li>Geo-Targeted Banners – Show GDPR banner to EU visitors, CCPA to California, LGPD to Brazil</li>
<li>Auto-Detect Plugin Cookies – Automatically identifies cookies from WooCommerce, Google Analytics, Facebook Pixel, Mailchimp, and 50+ plugins</li>
<li>Plugin-Aware Policy Generator – Generates specific privacy disclosures for each active plugin</li>
<li>Exportable Audit Log – Export consent log to CSV for compliance audits</li>
<li>Data Subject Request Portal – Built-in form for data access, erasure, and portability requests</li>
<li>Right to Erasure Automation – Integrates with WordPress privacy tools for one-click data deletion</li>
<li>Multi-Jurisdiction – GDPR, CCPA, LGPD, PIPEDA templates and compliance rules</li>
<li>Compliance Score – Dashboard showing your overall privacy compliance status</li>
<li>Priority Support – 24-hour response time</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Install & Activate – Banner appears automatically on your site</li>
<li>Customize – Adjust colors, text, and position in settings</li>
<li>Configure Categories – Set up cookie categories for granular consent</li>
<li>Generate Policy – Create a privacy policy with one click</li>
<li>Monitor – Track consent rates and compliance status</li>
</ol>
<h4>Technical Highlights</h4>
<ul>
<li>Lightweight — no external API dependencies</li>
<li>Vanilla JavaScript banner (no jQuery required on frontend)</li>
<li>SameSite=Lax cookies for security</li>
<li>GDPR-safe IP hashing (SHA-256 with WordPress salt)</li>
<li>Multisite compatible</li>
<li>Translation ready</li>
<li>Works with any theme and page builder</li>
</ul>
<h3>Additional Info</h3>
Privacy & GDPR Compliance: 
Cirv Comply itself does not collect personal data. Consent logs store hashed IP addresses (SHA-256) for regulatory proof. All processing is local.
Related Plugins: 
* Cirv Box – Schema.org structured data for better Google rankings 
* Cirv Guard – WCAG accessibility compliance scanning 
* Cirv Pulse – Core Web Vitals performance monitoring
Support & Documentation: 
* Built-in help in plugin settings 
* Online documentation: https://cirvgreen.com 
* Support forum: WordPress.org support forum 
* Email: support@cirvgreen.com
<h3>Third-Party Service Usage</h3>
This plugin does not connect to any third-party or external services. All functionality runs entirely on your WordPress server with no external API calls, data transmissions, or remote dependencies.

GDPR Cookie Consent & Privacy Compliance — Cirv Comply

GDPR & CCPA cookie consent banner with privacy policy generator and consent logging. Make your WordPress site privacy-compliant — no code.

CookieLex Cookie Consent & Privacy Compliance vs GDPR Cookie Consent & Privacy Compliance — Cirv Comply