danjed

<p>GDPR cookie consent with real script blocking.</p>
<p>Block Google Analytics, Google Tag Manager, Meta Pixel, Hotjar, YouTube embeds, and other third-party services before they reach the browser.</p>
<p>Unlike JavaScript-based consent tools, blocked scripts never reach the browser at all.</p>
<p>Most cookie consent plugins display a banner and rely on JavaScript to stop tracking scripts. In many cases, those scripts can begin loading before the visitor has made a choice.</p>
<p>COOKR takes a different approach.</p>
<p>Scripts are blocked server-side before page delivery. Third-party services cannot execute until consent is explicitly granted. This helps website owners meet GDPR and TTDSG requirements more reliably.</p>
<p>Avoids the client-side race conditions common to JavaScript-only consent tools. No script guessing. No “hope it loads in time.”</p>
<p>Consent enforcement instead of consent theatre.</p>
<p>✓ Server-side script blocking — blocked before the browser receives them<br />
✓ Google Consent Mode v2 support<br />
✓ No external consent cloud<br />
✓ No proxy infrastructure<br />
✓ No visitor data sent to third parties<br />
✓ Works entirely on your WordPress installation</p>
<p>Built for site owners, agencies, and developers who want real GDPR cookie consent enforcement.</p>
<p>COOKR CORE includes:</p>
<ul>
<li>Consent banner & preferences UI</li>
<li>Server-side script interception via PHP output buffer</li>
<li>Auto-Blocker for third-party scripts and iframes</li>
<li>Runtime Inspector</li>
<li>CSP-aware restoration with nonce propagation</li>
<li>Google Consent Mode v2 support</li>
<li>Full JavaScript API (<code>window.cookrConsent</code>)</li>
<li>Self-hosted operation — no external services required</li>
</ul>
<p>COOKR RADR additionally includes:</p>
<ul>
<li>Privacy Radar — runtime detection and classification of third-party services</li>
<li>Enforcement Verification Framework — structured protocol for proving enforcement claims</li>
<li>Compatibility Matrix — tested stack database with VERIFIED/PARTIAL/UNKNOWN/FAILED states</li>
<li>Automatic optimizer exclusions — LiteSpeed, WP Rocket, Autoptimize, FlyingPress</li>
<li>Curated signature database with automatic weekly updates</li>
</ul>
<h4>How It Works</h4>
<p>COOKR intercepts scripts in the PHP output buffer using <code>WP_HTML_Tag_Processor</code> before delivery to the browser. Matching script and iframe tags are neutralised server-side and restored only after the visitor grants consent.</p>
<p>There is no client-side race condition because blocking happens before the browser receives the page.</p>
<h4>Auto-Blocker</h4>
<p>Enable in Settings. Off by default.</p>
<p>When enabled, COOKR rewrites matching script tags and iframe tags server-side — setting <code>type="text/plain"</code> and preserving original attributes in <code>data-cookr-*</code> attributes for restoration after consent.</p>
<p>Test after enabling when using WP Rocket, LiteSpeed Cache, NitroPack, or Cloudflare Rocket Loader.</p>
<h4>Runtime Inspector</h4>
<p>The Runtime Inspector exposes third-party runtime activity directly in the browser — blocked scripts, restored services, iframe activity, detected domains.</p>
<p>Enable in Settings. Append <code>?cookr_debug=1</code> to any frontend URL while logged in as administrator.</p>
<h4>CSP-aware</h4>
<p>COOKR supports strict Content Security Policies without requiring <code>unsafe-inline</code>.</p>
<p>Restored scripts preserve CSP integrity via automatic nonce propagation. COOKR reads the nonce WordPress assigns to enqueued scripts at request time and passes it to restored scripts — no manual configuration required.</p>
<h4>Developer JS API</h4>
<pre><code>cookrConsent.has('analytics')
cookrConsent.require('marketing', callback)
cookrConsent.whenConsented('analytics').then(fn)
cookrConsent.on('consent' | 'change' | 'decline' | 'reset', handler)
cookrConsent.off(event, handler)
cookrConsent.getConsent()
cookrConsent.getExpiry()
cookrConsent.categories()
cookrConsent.reset()
</code></pre>
<h4>Consent Categories</h4>
<ul>
<li><strong>Necessary</strong> — Always active.</li>
<li><strong>Analytics</strong> — GA, GTM, Matomo, Hotjar, Clarity, etc.</li>
<li><strong>Marketing</strong> — Meta Pixel, Google Ads, TikTok, LinkedIn, etc.</li>
<li><strong>External Media</strong> — YouTube, Vimeo, Google Maps, etc.</li>
</ul>
<h4>Does COOKR require an external cloud service?</h4>
<p>No. COOKR runs entirely on your WordPress installation.</p>
<h4>Does visitor consent data leave the server?</h4>
<p>No. Consent data is stored locally on your site.</p>
<h4>Is the Auto-Blocker enabled by default?</h4>
<p>No. Enable and test it after installation, particularly when using caching or JavaScript optimization plugins.</p>
<h4>Which services can be blocked?</h4>
<p>Any third-party script or iframe matching configured domains. Examples: Google Tag Manager, Meta Pixel, YouTube embeds, TikTok Analytics.</p>
<h4>Does COOKR support Google Consent Mode v2?</h4>
<p>Yes. Enable in settings when using GTM or GA4.</p>
<h4>How do I inspect runtime activity?</h4>
<p>Enable the Runtime Inspector in settings and append <code>?cookr_debug=1</code> to any frontend URL while logged in as administrator.</p>
<h4>Does COOKR store personal data?</h4>
<p>The consent log stores a hashed IP (not the raw IP address), consent choices, and a timestamp. The raw IP address is never stored.</p>
<h4>Is COOKR compatible with strict CSP?</h4>
<p>Yes. COOKR automatically reads the nonce WordPress assigns to enqueued scripts and passes it to restored scripts, preserving compatibility with <code>strict-dynamic</code> CSP policies. No manual configuration is required.</p>
<h4>Will COOKR work with caching plugins such as LiteSpeed Cache, WP Rocket, or Cloudflare?</h4>
<p>Yes, but always test after enabling script optimization features such as JavaScript combine, defer, delay, or Rocket Loader. COOKR performs script blocking server-side, but aggressive optimization plugins may alter script delivery and should be verified on your site.</p>
<p>RADR v1.9.8 adds automatic exclusion filters for LiteSpeed Cache, WP Rocket, Autoptimize, and FlyingPress — COOKR registers itself as excluded from JS combination pipelines automatically.</p>
<h4>Does COOKR require HTTPS?</h4>
<p>Yes. COOKR requires HTTPS for consent state to persist correctly across page loads. Modern browsers restrict cookie behaviour on HTTP origins — on HTTP, the consent cookie may not persist, causing the banner to reappear on every page load. HTTPS is also a legal recommendation under GDPR for any site collecting consent.</p>
<h4>What WordPress version is required?</h4>
<p>WordPress 6.2 or higher. COOKR uses <code>WP_HTML_Tag_Processor</code> for safe, attribute-aware script rewriting, introduced in WP 6.2.</p>
<h3>External Services</h3>
<p>This plugin does not connect to any external service by default.</p>
<p>The auto-blocker contains a built-in list of known third-party domains (such as googletagmanager.com, connect.facebook.net, maps.googleapis.com, etc.) that is used purely as a local reference to identify and block scripts before consent. No data is sent to these domains by this plugin — the list is pattern-matching data stored locally in the plugin code.</p>


COOKR – Cookie Consent & Script Blocking

GDPR cookie consent with server-side script blocking. Prevent Google Analytics, GTM, Meta Pixel and third-party embeds from loading before consent.

mlemiesz

<p><strong>CookiePilot is a professional, affordable alternative to Cookiebot</strong> — starting at just 29 PLN/month with <strong>no subpage limits</strong>. Unlike Cookiebot, you pay per domain, not per the number of subpages. No hidden costs. No surprises.</p>
<p>Manage cookie consent banners across all your websites from one central dashboard. Full compliance with GDPR, PKE, ePrivacy, and Google Consent Mode v2.</p>
<p>🇵🇱 <strong>Polish product — Polish support, Polish invoices (VAT), Polish law expertise.</strong></p>
<h4>Why Choose CookiePilot over Cookiebot?</h4>
<ul>
<li>✅ <strong>29 PLN/month</strong> vs Cookiebot’s expensive subpage-based pricing</li>
<li>✅ <strong>Unlimited subpages</strong> — one domain, no traffic or page count limits on Pro plan</li>
<li>✅ <strong>Polish support</strong> — chat and email in Polish, understanding of PKE & RODO</li>
<li>✅ <strong>Ultra-light script (<15KB)</strong> — Cookiebot and others often ship 30–50KB+</li>
<li>✅ <strong>Daily cookie scanning</strong> — competitors scan monthly</li>
<li>✅ <strong>Free plan available</strong> — 1 domain, 10,000 pageviews/month, no credit card required</li>
</ul>
<p><a href="https://cookiepilot.io/porownania/cookiebot-alternatywa" rel="nofollow ugc">Compare CookiePilot vs Cookiebot <span aria-hidden="true" class="wp-exclude-emoji">→</span></a></p>
<p><h4>Key Features</h4>
</p>
<ul>
<li><strong>Visual Banner Editor</strong> — Customize colors, texts, and layout without any coding</li>
<li><strong>Google Consent Mode v2</strong> — Full compliance with Google’s latest requirements</li>
<li><strong>Multiple Languages</strong> — Polish and English out of the box</li>
<li><strong>Script Blocking</strong> — Automatically blocks 50+ tracking scripts until user consent</li>
<li><strong>Agency Mode</strong> — Generate one-time installation codes for client websites</li>
<li><strong>Consent Records</strong> — Store proof of consent for 5–6 years as required by RODO/PKE</li>
<li><strong>Analytics</strong> — Track consent rates and user interactions</li>
<li><strong>Stripe Integration</strong> — Manage subscriptions directly from WordPress admin</li>
</ul>
<h4>Cookiebot Alternative — Detailed Comparison</h4>
<ul>
<li><strong>Price</strong> — CookiePilot: 29 PLN/month | Cookiebot: based on subpages</li>
<li><strong>Subpage limit</strong> — CookiePilot: Unlimited | Cookiebot: limited by plan</li>
<li><strong>Script weight</strong> — CookiePilot: <15KB | Cookiebot: 30–50KB+</li>
<li><strong>Cookie scanning</strong> — CookiePilot: Daily | Cookiebot: Monthly</li>
<li><strong>Polish support</strong> — CookiePilot: ✅ | Cookiebot: ❌</li>
<li><strong>Polish invoices</strong> — CookiePilot: ✅ | Cookiebot: ❌</li>
<li><strong>PKE compliance</strong> — CookiePilot: ✅ | Cookiebot: ❌</li>
<li><strong>Free plan</strong> — CookiePilot: ✅ | Cookiebot: Limited</li>
</ul>
<p><h4>How It Works</h4>
</p>
<ol>
<li>Install and activate the plugin</li>
<li>Create a free CookiePilot account (no credit card needed)</li>
<li>Customize your cookie banner with the visual editor</li>
<li>Your banner is live — consent records saved automatically</li>
</ol>
<h4>Agency Mode</h4>
<p>Web agencies can manage all client websites from one dashboard:</p>
<ol>
<li>Agency creates a one-time token in CookiePilot dashboard</li>
<li>Client installs plugin and enters the code</li>
<li>Domain is automatically linked to the agency account</li>
<li>Agency manages all client domains from one place — white-label available on Business plan</li>
</ol>
<h4>Cookie Categories</h4>
<ul>
<li><strong>Necessary</strong> — Essential for website functionality (always enabled)</li>
<li><strong>Analytics</strong> — Usage tracking (Google Analytics, GA4, etc.)</li>
<li><strong>Marketing</strong> — Advertising and retargeting</li>
<li><strong>Preferences</strong> — User customization settings</li>
</ul>
<h4>Supported Trackers (50+)</h4>
<p>CookiePilot automatically detects and manages:</p>
<ul>
<li>Google Analytics / GA4</li>
<li>Google Tag Manager</li>
<li>Facebook Pixel</li>
<li>LinkedIn Insight Tag</li>
<li>Hotjar</li>
<li>Mixpanel</li>
<li>TikTok Pixel</li>
<li>And 50+ more trackers automatically blocked until consent</li>
</ul>
<h4>UODO & PKE Compliance</h4>
<p>CookiePilot stores all consent records with full audit trails:</p>
<ul>
<li>Who consented, when, what, and how</li>
<li>Banner version history</li>
<li>CSV/PDF/JSON export on demand</li>
<li>Consent retention for required 5–6 years</li>
<li>Full compliance with Art. 399 PKE and RODO Art. 7</li>
</ul>
<h3>External Services</h3>
<p>This plugin connects to the CookiePilot API to provide cookie consent management functionality.</p>
<h4>What data is sent and when</h4>
<ul>
<li><strong>Domain registration</strong>: When you add your domain, the site URL is sent to create your consent banner configuration</li>
<li><strong>Banner configuration</strong>: The plugin fetches your customized banner settings (colors, texts, layout) from the API</li>
<li><strong>Consent records</strong>: When visitors interact with the cookie banner, their consent choices are sent to the API for compliance record-keeping</li>
<li><strong>Pageview counting</strong>: Anonymous pageview counts are sent to track usage against your plan limits</li>
</ul>
<h4>Service Details</h4>
<p>This service is provided by CookiePilot.</p>
<ul>
<li>Service URL: https://api.cookiepilot.io</li>
<li>Website: https://cookiepilot.io</li>
<li>Cookiebot Alternative: https://cookiepilot.io/porownania/cookiebot-alternatywa</li>
<li>Terms of Service: https://cookiepilot.io/regulamin</li>
<li>Privacy Policy: https://cookiepilot.io/polityka-prywatnosci</li>
</ul>
<p>The plugin requires an active connection to the CookiePilot API to function. Without it, the consent banner cannot be displayed or configured.</p>


CookiePilot – Cookie Consent & GDPR | Cookiebot Alternative

Affordable Cookiebot alternative — 29 PLN/month, unlimited subpages, full GDPR & Google Consent Mode v2. Polish support included.

COOKR – Cookie Consent & Script Blocking vs CookiePilot – Cookie Consent & GDPR | Cookiebot Alternative