kaatai

<p>KaaTai Consent Manager is a <strong>privacy-first cookie consent plugin for GDPR-compliant websites</strong>. It gives your visitors full control over cookies and tracking scripts — while keeping you compliant with the GDPR, ePrivacy, and (in Germany) DSGVO and TDDDG. The admin interface is <strong>fully available in English and German</strong>.</p>
<p>Instead of spreading thin across 100+ jurisdictions, KaaTai does one thing exceptionally well: <strong>clean, no-nonsense GDPR consent</strong> — backed by unusually deep coverage of German/DACH law (DSGVO, TDDDG, ePrivacy), among the strictest in Europe. That depth benefits every GDPR site: a curated cookie database, ready-made legal-text templates, vendor presets, and built-in compliance checks. Works on international sites today, with more localized presets on the way.</p>
<h4>Cookie Consent Banner</h4>
<ul>
<li>Customizable consent banner with 3 layouts: Bottom Bar, Centered Popup, Corner Box</li>
<li>All design settings free for all plans: colors, overlay, border radius, spacing, box shadow</li>
<li>Responsive design — works on desktop, tablet, and mobile</li>
<li>WCAG 2.1 compliant: ARIA roles, focus trap, keyboard navigation, semantic HTML</li>
<li>No jQuery dependency — lightweight vanilla JavaScript</li>
<li>Cache-safe: works correctly with all popular caching plugins</li>
</ul>
<h4>Content Blocking</h4>
<ul>
<li>Automatically blocks YouTube, Vimeo, Facebook, Instagram, and Spotify embeds until consent</li>
<li>Blocks Google Maps and OpenStreetMap iframes</li>
<li>Shows privacy-friendly placeholders with click-to-load buttons</li>
<li>MutationObserver detects and blocks dynamically injected content</li>
<li>Auto Script Blocker detects and blocks tracking scripts from third-party plugins (67 known services)</li>
</ul>
<h4>Consent Management</h4>
<ul>
<li>Google Consent Mode v2 — always enabled, sends proper signals to GTM, GA4, and Google Ads</li>
<li>Granular consent — visitors can accept/reject individual vendors, not just categories</li>
<li>5 cookie categories: Essential, Functional, Statistics, Marketing, Performance</li>
<li>Consent choices persist across sessions and can be withdrawn at any time</li>
<li>Consent logging with unique record IDs for GDPR Art. 7(1) compliance (36-month retention)</li>
<li>Global Privacy Control (GPC) — automatically honors browser-level privacy signals</li>
</ul>
<h4>Legal Text Generator</h4>
<ul>
<li>Impressum generator — all mandatory fields per German law (TMG/DDG)</li>
<li>Privacy policy generator — covers all 14 items required by GDPR Art. 13</li>
<li>Shortcodes: [kccm_impressum] and [kccm_datenschutz] for easy page integration</li>
<li>Language-specific shortcodes for multilingual sites (WPML/Polylang): [kccm_datenschutz_en], [kccm_datenschutz_de], [kccm_impressum_en], [kccm_impressum_de] — or the lang=”en|de” attribute</li>
<li>Data for responsible person (Verantwortlicher) stored locally — no external service needed</li>
</ul>
<h4>Vendor Registry</h4>
<ul>
<li>Pre-configured database of 66+ common services with accurate cookie descriptions</li>
<li>Google Analytics, Meta Pixel, Microsoft Clarity, YouTube, Google Maps, and many more</li>
<li>1-click install from the service catalog</li>
<li>Custom vendor support — add your own services with cookie details</li>
</ul>
<h4>Setup Wizard</h4>
<ul>
<li>4-step guided setup: General Settings, Responsible Person, Select Services, Banner Design</li>
<li>Live banner preview during setup</li>
<li>Works without an API key — no account required for basic features</li>
</ul>
<h4>Deep GDPR & DACH Expertise</h4>
<p>The cookie database, legal-text templates, and compliance checks are built around the GDPR and the especially strict German rules (DSGVO, TDDDG, ePrivacy) — so you get compliance depth that also covers the rest of the EU. The plugin is fully translatable and locale-aware: the admin UI ships in <strong>English and German</strong>, legal texts can be rendered per language, and more localized presets are being added.</p>
<h4>Integrations</h4>
<p>KaaTai Consent Manager works with the most popular WordPress plugins and services:</p>
<ul>
<li><strong>Analytics:</strong> Google Analytics, Google Tag Manager, Matomo, Piwik PRO, Microsoft Clarity, Plausible, Fathom</li>
<li><strong>Marketing:</strong> Meta Pixel (Facebook), Google Ads, Taboola, Outbrain, Awin, Tradedoubler</li>
<li><strong>Embeds:</strong> YouTube, Vimeo, Google Maps, OpenStreetMap, Facebook, Instagram, Spotify</li>
<li><strong>E-Commerce:</strong> WooCommerce (Checkout Banner mode, one-click setup)</li>
<li><strong>Chat & Support:</strong> Tidio, Crisp, Zendesk, Drift, LiveChat</li>
<li><strong>Security:</strong> Google reCAPTCHA, Cloudflare, hCaptcha</li>
<li><strong>Payments:</strong> PayPal, Klarna</li>
<li><strong>Other:</strong> HubSpot, Twitter/X Pixel, Snap Pixel, Gravatar, Site Kit by Google</li>
</ul>
<h4>Premium Features (optional SaaS)</h4>
<p>Connect to the <strong>KaaTai Consent Manager</strong> dashboard to unlock additional features. The SaaS integration is entirely optional — the plugin works fully standalone.</p>
<p>Pricing per domain, incl. 19% VAT:</p>
<p><strong>Free (0 EUR):</strong></p>
<ul>
<li>Cookie banner with all designs and layouts</li>
<li>Local consent logging</li>
<li>Vendor registry (4 vendors)</li>
<li>Content blocking (YouTube, Maps, etc.)</li>
<li>Google Consent Mode v2</li>
<li>Local cookie scanner — scan any single page, unlimited scans (dashboard sync once per day)</li>
<li>Privacy policy (DSE) generator (local)</li>
</ul>
<p><strong>Starter (1,90 EUR/month):</strong></p>
<ul>
<li>66+ vendor presets</li>
<li>Banner logo upload</li>
<li>Cookie scanner — automatic scan of your most important pages (up to 20, from your navigation menus)</li>
<li>Impressum generator (via SaaS)</li>
<li>Auto script blocker</li>
<li>White-label (remove branding)</li>
<li>Ticket support</li>
</ul>
<p><strong>Business (2,49 EUR/month):</strong></p>
<ul>
<li>SaaS legal texts: dashboard archive, version history, DE/EN sync</li>
<li>Playwright deep scan</li>
<li>Audit scanner with compliance score</li>
<li>WooCommerce presets</li>
<li>Central consent logging</li>
<li>Multi-domain support</li>
</ul>
<p><strong>Pro (2,90 EUR/month):</strong></p>
<ul>
<li>Analytics dashboard (consent trends, geo data)</li>
<li>Conversion impact calculator</li>
</ul>
<h4>Useful Links</h4>
<ul>
<li><a href="https://consent-management.kaatai.de" rel="nofollow ugc">Plugin Homepage</a></li>
<li><a href="https://consent-management.kaatai.de/docs" rel="nofollow ugc">Documentation</a></li>
<li><a href="https://wordpress.org/support/plugin/kaatai-consent-manager/" rel="ugc">Support</a></li>
<li><a href="https://github.com/kahramanatalay/consent-by-kaatai" rel="nofollow ugc">GitHub</a></li>
<li><a href="https://translate.wordpress.org/projects/wp-plugins/kaatai-consent-manager" rel="nofollow ugc">Translate KaaTai Consent Manager</a></li>
</ul>
<h4>About KaaTai</h4>
<p>KaaTai Consent Manager is developed by <strong>KaaTai</strong> in Germany. We believe that GDPR compliance should be simple, affordable, and accessible to every website owner — not just enterprises with legal departments. Our goal is to be the best cookie consent solution for the German-speaking market.</p>
<h3>External Services</h3>
<h4>Third-party service references (detection patterns, NOT dependencies)</h4>
<p>This plugin is a <strong>Consent Management Tool</strong>. Its purpose is to detect, categorize, and block third-party tracking scripts until the visitor gives consent. The plugin contains a database of known tracking services with their hostnames and script patterns.</p>
<p>These references are <strong>identification patterns only</strong>. The plugin does <strong>not</strong> load, connect to, or transmit any data to these services. It uses the patterns to recognize scripts already present on your site and block them until consent is granted.</p>
<p>The following services are referenced as detection patterns:</p>
<ul>
<li><strong>Google Analytics</strong> — detected and blocked until “statistics” consent. <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a>, <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms</a></li>
<li><strong>Google Tag Manager</strong> — detected and blocked until “marketing” consent. <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a>, <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms</a></li>
<li><strong>Meta Pixel (Facebook)</strong> — detected and blocked until “marketing” consent. <a href="https://www.facebook.com/privacy/policy/" rel="nofollow ugc">Privacy Policy</a>, <a href="https://www.facebook.com/legal/terms" rel="nofollow ugc">Terms</a></li>
<li><strong>Cloudflare</strong> — detected and categorized as “essential”. <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Privacy Policy</a>, <a href="https://www.cloudflare.com/website-terms/" rel="nofollow ugc">Terms</a></li>
<li><strong>Google reCAPTCHA</strong> — detected and categorized as “functional”. <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a>, <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms</a></li>
<li><strong>Piwik PRO / Matomo</strong> — detected and blocked until “statistics” consent. <a href="https://piwik.pro/privacy-policy/" rel="nofollow ugc">Privacy Policy</a></li>
<li><strong>Microsoft Clarity</strong> — detected and blocked until “statistics” consent. <a href="https://privacy.microsoft.com/privacystatement" rel="nofollow ugc">Privacy Policy</a>, <a href="https://www.microsoft.com/licensing/terms" rel="nofollow ugc">Terms</a></li>
</ul>
<p>No data is sent to any of these services by this plugin.</p>
<h4>KaaTai Consent Manager SaaS (optional, requires API key)</h4>
<p>This plugin optionally connects to servers operated by <strong>KaaTai</strong> (<code>consent-management.kaatai.de</code>). These connections are <strong>only made when the site administrator has entered an API key</strong>. Without an API key, no external connections occur.</p>
<p><strong>Service:</strong> KaaTai Consent Manager SaaS<br />
<strong>Service URL:</strong> <a href="https://consent-management.kaatai.de" rel="nofollow ugc">https://consent-management.kaatai.de</a><br />
<strong>What it does:</strong> License validation, consent analytics, cookie scanner, service library, legal text generation.<br />
<strong>What data is sent:</strong> API key, domain, consent configuration, anonymized consent events (no PII), scan results.<br />
<strong>Privacy Policy:</strong> <a href="https://consent-management.kaatai.de/datenschutz" rel="nofollow ugc">https://consent-management.kaatai.de/datenschutz</a><br />
<strong>Terms of Service:</strong> <a href="https://consent-management.kaatai.de/agb" rel="nofollow ugc">https://consent-management.kaatai.de/agb</a></p>
<h4>Data transmitted when an API key is configured</h4>
<ol>
<li><strong>License Validation</strong> (<code>/api/license/validate</code>) — API key sent to verify license status and features. Cached for 24 hours.</li>
<li><strong>Config Sync</strong> (<code>/api/consent/config</code>) — Consent configuration sent when settings are saved. No personal visitor data.</li>
<li><strong>Consent Events</strong> (<code>/api/consent/event</code>) — Anonymized consent events via sendBeacon(). Contains: action, categories, hashed session ID, policy hash. No PII.</li>
<li><strong>Legal Texts</strong> (<code>/api/legal/impressum</code>, <code>/api/legal/privacy-policy</code>) — Legal text content fetched from SaaS. Cached for 24 hours.</li>
<li><strong>Newsletter</strong> (<code>/api/newsletter/subscribe-by-key</code>) — Only when administrator clicks “Subscribe”.</li>
<li><strong>Scanner</strong> (<code>/api/scan/results</code>) — Scan results synced to SaaS dashboard (Business plan+).</li>
<li><strong>Cookie Definitions</strong> (<code>/api/cookies/definitions</code>) — Cookie descriptions fetched for Service Library.</li>
</ol>
<h4>Data stored on the external server</h4>
<ul>
<li>License/API key association and plan details</li>
<li>Aggregated consent statistics (no personal data)</li>
<li>Consent configuration snapshots</li>
<li>Scan results (URLs and detected services)</li>
</ul>
<h4>User consent</h4>
<p>The site administrator gives explicit consent by entering and saving an API key. The API key can be removed at any time to stop all external communication.</p>


KaaTai Consent Manager

GDPR cookie consent made simple. Consent Mode v2, cookie scanner & legal-text generator. Deep DSGVO expertise, admin UI in English & German.

Darwin Digital

<p><strong>Darwin Cookie Consent</strong> shows visitors a clear cookie banner, lets them choose what to accept, and sends those choices to your analytics and marketing tools through Google Consent Mode v2. No tracking runs until consent is given.</p>
<p>The plugin includes admin controls for legal links, appearance, integrations, localized frontend messaging, and privacy-safe reporting.</p>
<h4>Key Features</h4>
<ul>
<li>GDPR cookie consent banner and settings modal</li>
<li>Google Consent Mode v2 support</li>
<li>Editable localized content for English, French, German, and Spanish</li>
<li>Automatic content selection by WordPress site locale</li>
<li>WordPress editor support for the banner message and modal intro</li>
<li>Configurable legal page links for privacy, terms, and cookie policy</li>
<li>Integration controls for Google Tag Manager, GA4, Matomo, Facebook Pixel, LinkedIn Insight Tag, and Pardot</li>
<li>Separate Ad Personalization consent handling</li>
<li>Required Strictly Necessary Cookies row always enabled in the popup</li>
<li>Aggregate admin metrics for recent banner views and accepts</li>
<li>Resettable metrics counters with no personal data stored in the metrics table</li>
</ul>
<h4>Consent Categories</h4>
<ul>
<li><strong>Strictly Necessary Cookies</strong>: always required and always enabled</li>
<li><strong>Analytics</strong>: used for analytics tools such as Google Analytics and Matomo</li>
<li><strong>Marketing</strong>: used for marketing-related tracking integrations</li>
<li><strong>Ad Personalization</strong>: handled separately from general marketing consent</li>
</ul>
<h4>Privacy and Data Handling</h4>
<ul>
<li>Localized content is stored in WordPress options</li>
<li>Consent metrics store aggregate daily counts only — no personal identifiers are stored in the metrics table</li>
<li>The consent log table stores a SHA-256 hash of the visitor IP address and the browser user agent alongside the encoded consent payload; no plain-text IP addresses are stored</li>
<li>Consent Mode signals are updated based on saved user choices</li>
<li>No data is transmitted to the plugin author or any third-party service by this plugin itself</li>
</ul>
<h3>External Services</h3>
<p>This plugin can load scripts from third-party services when those integrations are configured in the plugin settings. No external requests are made unless the corresponding integration is enabled by the site administrator.</p>
<h4>Google Tag Manager</h4>
<p>When a GTM container ID is provided, this plugin loads the Google Tag Manager script from <code>googletagmanager.com</code>. Google Consent Mode defaults are applied before GTM loads so that no tracking occurs without user consent.</p>
<ul>
<li>Data sent: page URL and GTM container ID as part of the script request.</li>
<li>When: on every frontend page load, only if a GTM container ID is configured.</li>
<li>Service provider: Google LLC — <a href="https://marketingplatform.google.com/about/analytics/terms/us/" rel="nofollow ugc">Terms of Service</a> | <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>Google Analytics (GA4)</h4>
<p>When a GA4 measurement ID is provided and GTM is not in use, this plugin loads the gtag.js script from <code>googletagmanager.com</code>. The script only fires after measurement consent is granted.</p>
<ul>
<li>Data sent: page URL and measurement ID as part of the script request.</li>
<li>When: on every frontend page load after measurement consent is granted, only if a GA4 ID is configured.</li>
<li>Service provider: Google LLC — <a href="https://marketingplatform.google.com/about/analytics/terms/us/" rel="nofollow ugc">Terms of Service</a> | <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>Google Fonts</h4>
<p>When the default plugin font is selected, this plugin loads the Roboto typeface from Google Fonts. The stylesheet is fetched from <code>fonts.googleapis.com</code> and the font files are served from <code>fonts.gstatic.com</code>. A preconnect resource hint is also added for both domains.</p>
<ul>
<li>Data sent: browser and referrer information as part of the font request (standard browser HTTP headers).</li>
<li>When: on every frontend page load when the default font option is active.</li>
<li>Service provider: Google LLC — <a href="https://fonts.google.com/about" rel="nofollow ugc">Terms of Service</a> | <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>Facebook Pixel</h4>
<p>When a Facebook Pixel ID is provided, this plugin loads the Facebook Pixel script from <code>connect.facebook.net</code>. The script only fires after marketing consent is granted.</p>
<ul>
<li>Data sent: page URL and pixel ID as part of the script request.</li>
<li>When: on every frontend page load after marketing consent is granted, only if a Pixel ID is configured.</li>
<li>Service provider: Meta Platforms, Inc. — <a href="https://www.facebook.com/legal/terms" rel="nofollow ugc">Terms of Service</a> | <a href="https://www.facebook.com/privacy/policy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>LinkedIn Insight Tag</h4>
<p>When a LinkedIn Partner ID is provided, this plugin loads the LinkedIn Insight Tag from <code>snap.licdn.com</code>. The script only fires after marketing consent is granted.</p>
<ul>
<li>Data sent: page URL and partner ID as part of the script request.</li>
<li>When: on every frontend page load after marketing consent is granted, only if a Partner ID is configured.</li>
<li>Service provider: LinkedIn Corporation — <a href="https://www.linkedin.com/legal/user-agreement" rel="nofollow ugc">Terms of Service</a> | <a href="https://www.linkedin.com/legal/privacy-policy" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>Salesforce Pardot</h4>
<p>When Pardot account and campaign IDs are provided, this plugin loads the Pardot tracking script from <code>pi.pardot.com</code>. The script only fires after marketing consent is granted.</p>
<ul>
<li>Data sent: page URL and account/campaign IDs as part of the script request.</li>
<li>When: on every frontend page load after marketing consent is granted, only if Pardot IDs are configured.</li>
<li>Service provider: Salesforce, Inc. — <a href="https://www.salesforce.com/company/legal/" rel="nofollow ugc">Terms of Service</a> | <a href="https://www.salesforce.com/company/legal/privacy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>Matomo</h4>
<p>When a Matomo URL and site ID are provided, this plugin loads the Matomo tracking script from the configured Matomo instance. The script only fires after measurement consent is granted.</p>
<ul>
<li>Data sent: page URL and site ID to the configured Matomo instance.</li>
<li>When: on every frontend page load after measurement consent is granted, only if Matomo is configured.</li>
<li>Service provider: InnoCraft Ltd — <a href="https://matomo.org/website-terms/" rel="nofollow ugc">Terms of Service</a> | <a href="https://matomo.org/privacy-policy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h3>Privacy Policy</h3>
<p>This plugin stores data locally in your WordPress database only. No data is transmitted to the plugin author or any third-party service by this plugin itself.</p>
<h4>Data stored locally</h4>
<ul>
<li><strong>Consent log table</strong> (<code>{prefix}darwin_gdpr_consent_log</code>): When a visitor saves their consent choices, the plugin records a SHA-256 hash of the visitor’s IP address, the browser user-agent string, and the encoded consent payload. No plain-text IP addresses are stored. Entries are automatically deleted after the configured retention period (default: 180 days).</li>
<li><strong>Aggregate metrics table</strong> (<code>{prefix}darwin_gdpr_metrics</code>): Stores daily totals of banner views and consent accepts as integer counts. No visitor identifiers of any kind are stored in this table.</li>
<li><strong>Plugin options</strong>: Localized content strings and appearance settings are stored in the WordPress options table. These contain no visitor data.</li>
</ul>
<h4>Third-party service data</h4>
<p>When optional integrations are configured by the site administrator, scripts from third-party services are loaded in the visitor’s browser. Those services may collect data as described in their respective privacy policies, which are linked in the External Services section above. No data is sent to those services until the visitor grants the relevant consent category.</p>
<p>Site administrators should ensure their own privacy policy reflects the data practices described above, particularly the storage of hashed IP addresses and user-agent strings in the consent log.</p>


Darwin Cookie Consent

Cookie banner for Google Consent Mode v2, GDPR & FADP. Includes four built-in languages, privacy-safe metrics, and appearance controls.

KaaTai Consent Manager vs Darwin Cookie Consent