danjed

GDPR cookie consent with real script blocking.
Block Google Analytics, Google Tag Manager, Meta Pixel, Hotjar, YouTube embeds, and other third-party services before they reach the browser.
Unlike JavaScript-based consent tools, blocked scripts never reach the browser at all.
Most cookie consent plugins display a banner and rely on JavaScript to stop tracking scripts. In many cases, those scripts can begin loading before the visitor has made a choice.
COOKR takes a different approach.
Scripts are blocked server-side before page delivery. Third-party services cannot execute until consent is explicitly granted. This helps website owners meet GDPR and TTDSG requirements more reliably.
Avoids the client-side race conditions common to JavaScript-only consent tools. No script guessing. No “hope it loads in time.”
Consent enforcement instead of consent theatre.
✓ Server-side script blocking — blocked before the browser receives them 
✓ Google Consent Mode v2 support 
✓ No external consent cloud 
✓ No proxy infrastructure 
✓ No visitor data sent to third parties 
✓ Works entirely on your WordPress installation
Built for site owners, agencies, and developers who want real GDPR cookie consent enforcement.
COOKR CORE includes:
<ul>
<li>Consent banner & preferences UI</li>
<li>Server-side script interception via PHP output buffer</li>
<li>Auto-Blocker for third-party scripts and iframes</li>
<li>Runtime Inspector</li>
<li>CSP-aware restoration with nonce propagation</li>
<li>Google Consent Mode v2 support</li>
<li>Full JavaScript API (<code>window.cookrConsent</code>)</li>
<li>Self-hosted operation — no external services required</li>
</ul>
COOKR RADR additionally includes:
<ul>
<li>Privacy Radar — runtime detection and classification of third-party services</li>
<li>Enforcement Verification Framework — structured protocol for proving enforcement claims</li>
<li>Compatibility Matrix — tested stack database with VERIFIED/PARTIAL/UNKNOWN/FAILED states</li>
<li>Automatic optimizer exclusions — LiteSpeed, WP Rocket, Autoptimize, FlyingPress</li>
<li>Curated signature database with automatic weekly updates</li>
</ul>
<h4>How It Works</h4>
COOKR intercepts scripts in the PHP output buffer using <code>WP_HTML_Tag_Processor</code> before delivery to the browser. Matching script and iframe tags are neutralised server-side and restored only after the visitor grants consent.
There is no client-side race condition because blocking happens before the browser receives the page.
<h4>Auto-Blocker</h4>
Enable in Settings. Off by default.
When enabled, COOKR rewrites matching script tags and iframe tags server-side — setting <code>type="text/plain"</code> and preserving original attributes in <code>data-cookr-*</code> attributes for restoration after consent.
Test after enabling when using WP Rocket, LiteSpeed Cache, NitroPack, or Cloudflare Rocket Loader.
<h4>Runtime Inspector</h4>
The Runtime Inspector exposes third-party runtime activity directly in the browser — blocked scripts, restored services, iframe activity, detected domains.
Enable in Settings. Append <code>?cookr_debug=1</code> to any frontend URL while logged in as administrator.
<h4>CSP-aware</h4>
COOKR supports strict Content Security Policies without requiring <code>unsafe-inline</code>.
Restored scripts preserve CSP integrity via automatic nonce propagation. COOKR reads the nonce WordPress assigns to enqueued scripts at request time and passes it to restored scripts — no manual configuration required.
<h4>Developer JS API</h4>
<pre><code>cookrConsent.has('analytics')
cookrConsent.require('marketing', callback)
cookrConsent.whenConsented('analytics').then(fn)
cookrConsent.on('consent' | 'change' | 'decline' | 'reset', handler)
cookrConsent.off(event, handler)
cookrConsent.getConsent()
cookrConsent.getExpiry()
cookrConsent.categories()
cookrConsent.reset()
</code></pre>
<h4>Consent Categories</h4>
<ul>
<li>Necessary — Always active.</li>
<li>Analytics — GA, GTM, Matomo, Hotjar, Clarity, etc.</li>
<li>Marketing — Meta Pixel, Google Ads, TikTok, LinkedIn, etc.</li>
<li>External Media — YouTube, Vimeo, Google Maps, etc.</li>
</ul>
<h4>Does COOKR require an external cloud service?</h4>
No. COOKR runs entirely on your WordPress installation.
<h4>Does visitor consent data leave the server?</h4>
No. Consent data is stored locally on your site.
<h4>Is the Auto-Blocker enabled by default?</h4>
No. Enable and test it after installation, particularly when using caching or JavaScript optimization plugins.
<h4>Which services can be blocked?</h4>
Any third-party script or iframe matching configured domains. Examples: Google Tag Manager, Meta Pixel, YouTube embeds, TikTok Analytics.
<h4>Does COOKR support Google Consent Mode v2?</h4>
Yes. Enable in settings when using GTM or GA4.
<h4>How do I inspect runtime activity?</h4>
Enable the Runtime Inspector in settings and append <code>?cookr_debug=1</code> to any frontend URL while logged in as administrator.
<h4>Does COOKR store personal data?</h4>
The consent log stores a hashed IP (not the raw IP address), consent choices, and a timestamp. The raw IP address is never stored.
<h4>Is COOKR compatible with strict CSP?</h4>
Yes. COOKR automatically reads the nonce WordPress assigns to enqueued scripts and passes it to restored scripts, preserving compatibility with <code>strict-dynamic</code> CSP policies. No manual configuration is required.
<h4>Will COOKR work with caching plugins such as LiteSpeed Cache, WP Rocket, or Cloudflare?</h4>
Yes, but always test after enabling script optimization features such as JavaScript combine, defer, delay, or Rocket Loader. COOKR performs script blocking server-side, but aggressive optimization plugins may alter script delivery and should be verified on your site.
RADR v1.9.8 adds automatic exclusion filters for LiteSpeed Cache, WP Rocket, Autoptimize, and FlyingPress — COOKR registers itself as excluded from JS combination pipelines automatically.
<h4>Does COOKR require HTTPS?</h4>
Yes. COOKR requires HTTPS for consent state to persist correctly across page loads. Modern browsers restrict cookie behaviour on HTTP origins — on HTTP, the consent cookie may not persist, causing the banner to reappear on every page load. HTTPS is also a legal recommendation under GDPR for any site collecting consent.
<h4>What WordPress version is required?</h4>
WordPress 6.2 or higher. COOKR uses <code>WP_HTML_Tag_Processor</code> for safe, attribute-aware script rewriting, introduced in WP 6.2.
<h3>External Services</h3>
This plugin does not connect to any external service by default.
The auto-blocker contains a built-in list of known third-party domains (such as googletagmanager.com, connect.facebook.net, maps.googleapis.com, etc.) that is used purely as a local reference to identify and block scripts before consent. No data is sent to these domains by this plugin — the list is pattern-matching data stored locally in the plugin code.

COOKR – Cookie Consent & Script Blocking

GDPR cookie consent with server-side script blocking. Prevent Google Analytics, GTM, Meta Pixel and third-party embeds from loading before consent.

consentmanager Cookie Banner

The <a href="https://consentmanager.net/" rel="nofollow ugc">consentmanager Cookie Banner</a> provides a comprehensive, effortlessly integrated Consent Management Platform (CMP) plugin tailored for WordPress. Create your consent banner in minutes and protect your website(s) from legal fines, designed by privacy experts for companies of all sizes and industries. It supports global compliance with key privacy laws such as GDPR (EU), CCPA (US) , FADP (Switzerland), PIPEDA (Canada) and privacy frameworks such as the IAB Transparency and Consent Framework v2.2 and the Global Privacy Platform (GPP). In addition, consentmanager keeps pace with a wide range of internet-related requirements that are critical for professionals in marketing, advertising, analytics, and related fields. Users can achieve full compliance with Google Consent Mode v2 and other Google services, including Google AdSense, Google Ad Manager and Google AdMob, and safeguard your monetisation efforts with the Google-certified CMP from consentmanager. The consentmanager WordPress plugin gives you access to an advanced CMP framework with seamless compatibility with over 2500 tools and language support for over 30 options.
Designed for plug and play simplicity, consentmanager users can go much further with the use of A/B testing functionality, advanced machine learning and the ability to use our reporting tools of over 30 metrics. With the ability for customisation, our platform is tailored to the specific needs of your site. It has a built-in cookie crawler and offers **extensive customization options to match your site’s aesthetic, enhancing the user experience without compromising on compliance.
How does it work?
Our CMP solution is very simple to integrate:
<ol>
<li>Simply login to your consentmanager.net account</li>
<li>Setup the cookie banner for your website(s)</li>
<li>Copy your CMP-ID which you can find in your consentmanager dashboard, and paste it into the consentmanager wordpress plugin</li>
</ol>
And you’re done!
Our platform will automatically start gathering cookie consent notices from your visitors. As soon as the code is in your website, advertisers will have access to the consent data via the open source API defined by the IAB TCF.
In addition you will get detailed reports which show you how your visitors are behaving with the consent layer, how many consents you get and how you can optimize your strategy in order to obtain higher rates of consent.
Features
<ul>
<li>Fully customisable: Tailor your cookie banner to fit seamlessly into your website’s aesthetic.</li>
<li>A Google certified CMP and fully compliant with Google Consent Mode v2.</li>
<li>Integrated Cookie Crawler: Automatically detect and manage cookies and trackers on your site.</li>
<li>Multi-language support: Reach a global audience with support for over 30 languages.</li>
<li>Comprehensive compliance: Ensures compliance with GDPR, CCPA, FADP, PIPEDA and other key regulations.</li>
<li>Easy integration: Simply copy and paste your unique CMP ID into the consentmanager WordPress plugin.</li>
<li>Extensive tool compatibility: Works seamlessly with over 2500 tools and platforms.</li>
<li>IAB TCF Framework participation: A proud member and co-author of the IAB TCF & GPP Framework, our CMP ensures compliance with industry standards.</li>
</ul>
Quick Facts
To help you understand the scope and effectiveness of the consentmanager WordPress plugin, consider these quick facts:
<ul>
<li>consentmanager’s Cookie Notice has helped more than 25,000 websites become compliant</li>
<li>Compatible with major solutions like Google Analytics, Facebook, Hubspot, and many more.</li>
<li>Exclusively utilizes European servers for data storage, ensuring data sovereignty and compliance with “Schrems II” requirements.</li>
<li>Supports website integration, AMP-sites, and mobile apps (Android/iOS), with optional age-verification mechanisms.</li>
</ul>
Tools offered by consentmanager:
<ul>
<li>Consent/Cookie Banner Generator</li>
<li>Privacy policy text generator</li>
<li>Whistleblower Software</li>
<li>Mobile SDK Integration</li>
<li>Data Subject Rights Management</li>
<li>Privacy-friendly Website Analytics</li>
</ul>
Support and Updates
The consentmanager team is dedicated to providing continuous updates and support, ensuring your website remains compliant with evolving privacy regulations. For assistance or more details, visit our support center or contact us directly.
<ul>
<li><a href="https://help.consentmanager.net/" rel="nofollow ugc">Support Centre</a></li>
<li><a href="https://www.consentmanager.net/contact/" rel="nofollow ugc">Contact us</a></li>
<li><a href="mailto:support@consentmanager.net" rel="nofollow ugc">E-Mail us</a></li>
</ul>
About consentmanager
With over a decade of experience in the adtech industry and a commitment to data privacy and compliance, consentmanager has established itself as a trusted leader in consent management. Our Cookie Banner technology empowers businesses across the globe to manage user consent effectively, fostering trust and ensuring compliance with international privacy laws.

Great tool

First of all, the plugin works.

BUT...

Coding standards? Not existing.

Security? Who cares, we just save directly from $_POST without any sanitization.

Writing a 5* review for your own plugin? Yeah, absolutely what everyone should do... at least they don't hide it.

Extremely poorly written code

The consentmanager Cookie Banner and Cookie Notice allows you to easily collect cookie consent from your website visitors, ensuring GDPR compliance.

COOKR – Cookie Consent & Script Blocking vs consentmanager Cookie Banner