Royal Plugins

RoyalComply is a cookie consent and privacy compliance plugin for WordPress. It blocks analytics and marketing scripts until consent is given, supports Google Consent Mode v2, and adapts banner behavior based on the visitor’s jurisdiction (GDPR, CCPA, and 19 US state privacy laws).
The plugin runs entirely on your server. It does not connect to any external services.
Features:
<ul>
<li>Script blocking — Uses the WordPress <code>script_loader_tag</code> filter to change the <code>type</code> attribute of analytics and marketing scripts to <code>text/plain</code> until consent is given, preventing execution.</li>
<li>Google Consent Mode v2 — Outputs the <code>gtag('consent', 'default', {...})</code> call with a denied state before Google Tag Manager loads, and sends <code>consent update</code> events when the visitor makes a choice.</li>
<li>Regional banner behavior — Detects the visitor’s region from CDN request headers (Cloudflare <code>CF-IPCountry</code> etc.) with a browser-timezone fallback. Banner behavior switches between opt-in (GDPR), opt-out (CCPA), and other jurisdictions as configured.</li>
<li>Cookie scanner — Scans your site’s rendered HTML for known third-party script patterns (Google Analytics, Facebook Pixel, Hotjar, etc.) and matches them against a built-in database of 50+ cookie names. The scanner reads HTML your site already produces. No outbound HTTP requests are made.</li>
<li>Consent logging — Stores each consent choice with a SHA-256 hashed visitor identifier, timestamp, and category selections. Exportable to CSV. No IP addresses or personally identifiable information are stored.</li>
<li>Banner customization — 6 position options, bar or box layout, full color control. Combined CSS and JavaScript on the frontend is under 8KB.</li>
<li>Geo detection — Reads the <code>CF-IPCountry</code> and similar headers already present in the incoming request. Falls back to the browser’s timezone via JavaScript. No IP lookup service is called.</li>
</ul>
Cookie Categories:
<ul>
<li>Necessary — Always allowed. WordPress sessions, WooCommerce cart, PHP sessions.</li>
<li>Analytics — Google Analytics, Hotjar, Clarity, Matomo, Plausible.</li>
<li>Marketing — Facebook Pixel, Google Ads, LinkedIn, TikTok, Pinterest.</li>
<li>Preferences — Language selection (Polylang, WPML, qTranslate).</li>
</ul>
Compliance Coverage:
<ul>
<li>GDPR (EU/EEA) — Opt-in consent required</li>
<li>CCPA (California) — Opt-out with “Do Not Sell” link</li>
<li>VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), TIPA (Tennessee), ICDPA (Indiana), MTCDPA (Montana), TDPSA (Texas), OCPA (Oregon), DPDPA (Delaware), FDBR (Florida), NJDPA (New Jersey), NHDPA (New Hampshire), KCDPA (Kentucky), NEBDPA (Nebraska), ICDPA (Iowa), MCDPA (Maryland), MNDPA (Minnesota)</li>
</ul>
<h3>External services</h3>
RoyalComply does not connect to any third-party services. The plugin runs entirely on your own WordPress install and does not send data to any external server, API, or CDN.
The built-in cookie scanner makes a single loopback HTTP request to your own site’s homepage (<code>home_url( '/' )</code>) using the WordPress <code>wp_remote_get()</code> function, with a 10-second timeout. This request goes to the same WordPress install; no third-party service is contacted. The scanner then reads the returned <code>Set-Cookie</code> response headers and the HTML response body, and searches the body for known third-party script hostnames (for example <code>google-analytics.com</code>, <code>connect.facebook.net</code>, <code>js.stripe.com</code>, <code>widget.intercom.io</code>, <code>cdnjs.cloudflare.com</code>). These hostnames are stored as pattern strings inside the plugin and are compared against the response body using PHP’s <code>stripos()</code> function. The plugin does not make any network requests to the services the pattern strings refer to; it only reads HTML that your own site already generates.
The scanner runs only when the site administrator clicks the “Scan Site” button in the RoyalComply admin screen. It is not run on a schedule and is not triggered by visitors.
Geo detection reads HTTP headers that are already present in the incoming page request (for example Cloudflare’s <code>CF-IPCountry</code> header) and, as a JavaScript fallback, reads the visitor’s timezone from the browser using <code>Intl.DateTimeFormat().resolvedOptions().timeZone</code>. No IP geolocation API is contacted.
Google Consent Mode v2 outputs a <code>gtag('consent', 'default', {...})</code> JavaScript call in the page. This call runs in the visitor’s browser and is consumed by Google Tag Manager or gtag.js if those are already installed on the site. RoyalComply itself does not load Google’s scripts; the integration only configures the consent state that the site’s existing Google scripts read.

RoyalComply

GDPR and CCPA cookie consent banner with Google Consent Mode v2. Blocks analytics and marketing scripts until the visitor gives consent.

Syed Balkhi

WPBeginner

Mircea Sandu

WPCode

<h4>Customizable Cookie Banner + Website Compliance Scanner</h4>
WPConsent is the easiest way to add a GDPR / CCPA cookie consent banner to your WordPress website. You can customize the banner to match your website’s branding and configure how it looks.
Our easy-to-use website cookie scanner will automatically detect and list popular services used on your website. Our built-in integration provides you with details and a list of cookies used by each service, so you can easily configure them to comply with GDPR, CCPA / CPRA, ePrivacy, DSGVO, TTDSG, LGPD, POPIA, APA, RGPD, PIPEDA, and other global privacy regulations.
With the automatic script blocking feature, WPConsent will detect and block common tracking scripts / cookies like Google Analytics, Facebook Pixel, and more until the user gives consent. This ensures that those services can’t add 3rd party cookies without user consent as required by GDPR and other privacy regulations.
All cookie consent data is self-hosted on your website like it should be, making WPConsent the most privacy conscious solution.
<blockquote>
WPConsent Pro 
 This plugin is the Lite version of WPConsent Pro, which comes with geolocation options, records of consent, multilanguage, IAB TCF v2.2 integration, and more plugins automatically detected. <a href="https://wpconsent.com/?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin" rel="nofollow ugc">Click here to purchase the best premium WordPress consent plugin now!</a>
</blockquote>
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/7fcP9QO8bKQ?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h4>Fully Customizable Cookie Banner</h4>
The cookie banner should match your website’s branding and be easy to use. We give you many options in order to improve the consent rates on your website while being in full compliance with GDPR, CCPA, and other privacy laws:
<ul>
<li>Choose from multiple banner layouts and positions.</li>
<li>Customize all colors and text to match your website’s branding.</li>
<li>Add your logo for a professional look.</li>
<li>Multiple button styles to choose from.</li>
</ul>
<h4>Automatic Script Blocking</h4>
WPConsent will automatically prevent many popular tracking scripts from adding cookies on your website to improve GDPR compliance. There’s no need to change the tracking solutions you use in order to use WPConsent. We are continuously adding new scripts to our block list, if you have a specific script you’d like us to block, please <a href="https://wpconsent.com/contact/?utm_source=wprepo&utm_medium=link&utm_campaign=liteplugin" rel="nofollow ugc">reach out</a>.
Automatically detected scripts:
<ul>
<li>Google Analytics</li>
<li>Google Ads</li>
<li>Facebook Pixel</li>
<li>Microsoft Clarity</li>
<li>Pinterest Tag</li>
<li>and many more…</li>
</ul>
Google Consent Mode v2 is now supported, allowing you to use Google Analytics and Google Ads without cookies until the user gives consent. Our integration automatically works whether you add the scripts using <a href="https://wordpress.org/plugins/insert-headers-and-footers/" rel="ugc">WPCode</a>, a plugin like <a href="https://wordpress.org/plugins/google-analytics-for-wordpress/" rel="ugc">MonsterInsights</a> or even if using Google Tag Manager.
<h4>Website Compliance Scanner</h4>
Our goal with WPConsent was to create a WordPress privacy compliance plugin that’s both EASY and POWERFUL.
That’s why we added a built-in website cookie scanner that detects many popular services used on your website.
But that’s not all, with our API integration you can get details about services and cookies used by each service automatically configured on your site.
These are the details included with each service:
<ul>
<li>Service Name</li>
<li>Service Description</li>
<li>Service Category</li>
<li>Service Privacy/Data URL (if 3rd party)</li>
<li>List of Cookies with description and duration</li>
</ul>
<h4>Smart Content Blocking</h4>
Prevent 3rd party content from being loaded before consent is given.
WPConsent can automatically block content like YouTube, Vimeo, DailyMotion, Google Maps, reCAPTCHA and more until the user gives consent.
Dynamic placeholders are displayed for YouTube, Vimeo and DailyMotion for a better user experience. The placeholder images are loaded from your website for improved privacy compliance with GDPR, CCPA, and more.
You can easily customize which content is blocked from the admin area.
<h4>Supports Key Global Privacy Regulations</h4>
The WPConsent plugin offers a high degree of flexibility, making it a valuable tool for addressing a wide array of cookie law, data protection, and privacy regulations. This includes, but is not limited to:
<ul>
<li>GDPR: The General Data Protection Regulation, ePrivacy Directive, ePrivacy Regulation (European Union)</li>
<li>CCPA: The California Consumer Privacy Act (California, United States)</li>
<li>LGPD: The Brazilian General Data Protection Law (Brazil)</li>
<li>AAP: Australia’s Privacy Principles (Australia)</li>
<li>PECR: The Privacy and Electronic Communications Regulations (UK)</li>
<li>PIPEDA: The Personal Information Protection and Electronic Documents Act (Canada)</li>
<li>and many other international standards and laws.</li>
</ul>
<h4>Branding Guideline</h4>
WPConsent™ is a trademark of WPConsent LLC. When writing about the WPConsent plugin, please make sure to uppercase the initial 3 letters.
WPConsent (correct) 
WP Consent (incorrect) 
wpconsent (incorrect)
<h4>DISCLAIMER</h4>
This plugin is not a guarantee of website compliance. It is your responsibility to ensure your website meets all applicable cookie law requirements with GDPR, CCPA, and other global privacy laws.

WPConsent – Cookie Consent Banner for Privacy Compliance (GDPR / CCPA)


Just installed the free version to take a look. Blindingly fast, zero speed impact. Amazing plugin. Will try pro if I ever develop another website.


Zero effect on page speed


This is an extremely well thought out and designed plugin for important functionality most of us probably don't want to have to deal with. Easy to set up and flexible to make the cookie notice match your site design. I especially like how the plugin can analyze your site and determine which cookies are present.



I'm sure going forward this plugin is going to be on every site I build!


Excellent plugin

Improve WordPress privacy compliance. Custom GDPR / CCPA cookie consent banner, full site cookie scanner, automatic script blocking and cookie policy

RoyalComply vs WPConsent – Cookie Consent Banner for Privacy Compliance (GDPR / CCPA)