Royal Plugins

RoyalComply is a cookie consent and privacy compliance plugin for WordPress. It blocks analytics and marketing scripts until consent is given, supports Google Consent Mode v2, and adapts banner behavior based on the visitor’s jurisdiction (GDPR, CCPA, and 19 US state privacy laws).
The plugin runs entirely on your server. It does not connect to any external services.
Features:
<ul>
<li>Script blocking — Uses the WordPress <code>script_loader_tag</code> filter to change the <code>type</code> attribute of analytics and marketing scripts to <code>text/plain</code> until consent is given, preventing execution.</li>
<li>Google Consent Mode v2 — Outputs the <code>gtag('consent', 'default', {...})</code> call with a denied state before Google Tag Manager loads, and sends <code>consent update</code> events when the visitor makes a choice.</li>
<li>Regional banner behavior — Detects the visitor’s region from CDN request headers (Cloudflare <code>CF-IPCountry</code> etc.) with a browser-timezone fallback. Banner behavior switches between opt-in (GDPR), opt-out (CCPA), and other jurisdictions as configured.</li>
<li>Cookie scanner — Scans your site’s rendered HTML for known third-party script patterns (Google Analytics, Facebook Pixel, Hotjar, etc.) and matches them against a built-in database of 50+ cookie names. The scanner reads HTML your site already produces. No outbound HTTP requests are made.</li>
<li>Consent logging — Stores each consent choice with a SHA-256 hashed visitor identifier, timestamp, and category selections. Exportable to CSV. No IP addresses or personally identifiable information are stored.</li>
<li>Banner customization — 6 position options, bar or box layout, full color control. Combined CSS and JavaScript on the frontend is under 8KB.</li>
<li>Geo detection — Reads the <code>CF-IPCountry</code> and similar headers already present in the incoming request. Falls back to the browser’s timezone via JavaScript. No IP lookup service is called.</li>
</ul>
Cookie Categories:
<ul>
<li>Necessary — Always allowed. WordPress sessions, WooCommerce cart, PHP sessions.</li>
<li>Analytics — Google Analytics, Hotjar, Clarity, Matomo, Plausible.</li>
<li>Marketing — Facebook Pixel, Google Ads, LinkedIn, TikTok, Pinterest.</li>
<li>Preferences — Language selection (Polylang, WPML, qTranslate).</li>
</ul>
Compliance Coverage:
<ul>
<li>GDPR (EU/EEA) — Opt-in consent required</li>
<li>CCPA (California) — Opt-out with “Do Not Sell” link</li>
<li>VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), TIPA (Tennessee), ICDPA (Indiana), MTCDPA (Montana), TDPSA (Texas), OCPA (Oregon), DPDPA (Delaware), FDBR (Florida), NJDPA (New Jersey), NHDPA (New Hampshire), KCDPA (Kentucky), NEBDPA (Nebraska), ICDPA (Iowa), MCDPA (Maryland), MNDPA (Minnesota)</li>
</ul>
<h3>External services</h3>
RoyalComply does not connect to any third-party services. The plugin runs entirely on your own WordPress install and does not send data to any external server, API, or CDN.
The built-in cookie scanner makes a single loopback HTTP request to your own site’s homepage (<code>home_url( '/' )</code>) using the WordPress <code>wp_remote_get()</code> function, with a 10-second timeout. This request goes to the same WordPress install; no third-party service is contacted. The scanner then reads the returned <code>Set-Cookie</code> response headers and the HTML response body, and searches the body for known third-party script hostnames (for example <code>google-analytics.com</code>, <code>connect.facebook.net</code>, <code>js.stripe.com</code>, <code>widget.intercom.io</code>, <code>cdnjs.cloudflare.com</code>). These hostnames are stored as pattern strings inside the plugin and are compared against the response body using PHP’s <code>stripos()</code> function. The plugin does not make any network requests to the services the pattern strings refer to; it only reads HTML that your own site already generates.
The scanner runs only when the site administrator clicks the “Scan Site” button in the RoyalComply admin screen. It is not run on a schedule and is not triggered by visitors.
Geo detection reads HTTP headers that are already present in the incoming page request (for example Cloudflare’s <code>CF-IPCountry</code> header) and, as a JavaScript fallback, reads the visitor’s timezone from the browser using <code>Intl.DateTimeFormat().resolvedOptions().timeZone</code>. No IP geolocation API is contacted.
Google Consent Mode v2 outputs a <code>gtag('consent', 'default', {...})</code> JavaScript call in the page. This call runs in the visitor’s browser and is consumed by Google Tag Manager or gtag.js if those are already installed on the site. RoyalComply itself does not load Google’s scripts; the integration only configures the consent state that the site’s existing Google scripts read.

RoyalComply

GDPR and CCPA cookie consent banner with Google Consent Mode v2. Blocks analytics and marketing scripts until the visitor gives consent.

hostriver

Welcome to the seamless world of eCookies by HostRiver – the plugin designed to make your GDPR compliance journey a breeze! With our user-friendly tool, you can effortlessly implement Google Consent Mode v2 and set up your cookie consent banner in just a few clicks.
eCookies by HostRiver is the ultimate solution for those seeking simplicity without compromising functionality. Whether you’re a seasoned website owner or just starting your online journey, our plugin offers unmatched ease of use.
Join countless others who have embraced eCookies by HostRiver and experience GDPR compliance made easy! Install now and let your website shine while staying compliant.
<h3>Key Features</h3>
<ul>
<li>Simplified Google Consent Mode v2 Integration: Say goodbye to complex setups! Our plugin automates the process, ensuring hassle-free implementation.</li>
<li>Customizable Cookie Consent Banner: Tailor the banner to match your website’s aesthetics with our range of predefined color themes. Choose the perfect position for display and make it yours!</li>
<li>Easy Integration with Google Tag Manager: With a single click, seamlessly integrate Google Tag Manager into your website, streamlining your tracking and analytics efforts.</li>
<li>Cookie auto-blocking: Automatically block non-essential cookies to ensure GDPR compliance.</li>
<li>Out-of-the-Box Compatibility with PixelYourSite Plugin: We’ve got you covered! Our plugin works harmoniously with PixelYourSite, ensuring smooth operation without any compatibility issues.</li>
<li>Preference center: Offer a second layer of control through a preference center within the banner. Allow site visitors to provide granular consent for specific cookie categories, giving them the choice to opt in or opt-out.</li>
<li>Revisit consent button: Visitors can either permanently dismiss the cookie banner or access it later through a revisit consent button.</li>
<li>Sleek Design and Instant Activation: Enjoy a sleek, modern design that enhances user experience. Once activated, our plugin works its magic instantly, requiring no further configuration if you’re happy with the default cookie banner design.</li>
</ul>
But that’s not all! eCookies by HostRiver is completely free, regardless of the number of pages on your website. Plus, it’s currently available in both Romanian and English, with more languages on the horizon.
Join the growing community of website owners who trust eCookies by HostRiver for their GDPR compliance needs. Install now and experience simplicity, functionality, and peace of mind.
Get started with eCookies by HostRiver today – your website deserves it!
<h3>The eCookies by HostRiver Plugin Uses The Following Cookie Only</h3>
<ul>
<li>cc_cookie – eCookies establishes this cookie to retain users’ consent preferences, ensuring their choices are honored upon revisiting this site. No personal information from site visitors is gathered or stored in the process.</li>
</ul>
<h3>External Services Used</h3>
This plugin integrates with Google Tag Manager, a third-party service that helps manage JavaScript and HTML tags used for tracking and analytics on your website.
Google Tag Manager: The plugin allows the use of Google Tag Manager for handling various analytics and marketing services, such as Google Analytics and other marketing tools. This requires the loading of Google’s scripts via your website.
<ul>
<li>Google Tag Manager Privacy Policy: <a href="https://policies.google.com/privacy" rel="nofollow ugc">Google Privacy & Terms</a></li>
<li>Google Tag Manager Terms of Service: <a href="https://marketingplatform.google.com/about/analytics/tag-manager/terms/" rel="nofollow ugc">Google Tag Manager Terms</a></li>
</ul>
By using this plugin, you agree to the data collection practices as outlined in Google’s privacy policy. For full transparency, the plugin only implements Google Tag Manager if it has been configured by the site administrator. It does not store any personal information about visitors unless specified by the configured services within Google Tag Manager.
<h3>Useful Links</h3>
<a href="https://hostriver.ro/suport/?utm_source=wordpress&utm_medium=plugin&utm_campaign=wordpress_page&utm_content=l_1&ref=WPCY" rel="nofollow ugc">Support</a>

eCookies by HostRiver – Google Consent Mode v2 and GDPR Cookie Banner Integration

Quickly activate Google Consent Mode v2 to ensure GDPR compliance for your site, also compatible with PixelYourSite plugin

RoyalComply vs eCookies by HostRiver – Google Consent Mode v2 and GDPR Cookie Banner Integration