Brainstorm Force

Most cookie plugins either:
<ul>
<li>Just show a banner</li>
<li>Or make setup feel like preparing for a law exam</li>
</ul>
SureCookie exists because there should be something better.
Something accurate. 
Something simple. 
Something modern. 
Something built properly for WordPress.
SureCookie automatically detects the cookies running on your website, categorizes them intelligently, blocks non-essential scripts before consent, and stores consent logs directly inside your WordPress database.
No traffic limits. 
No SaaS visitor caps. 
No complicated configuration maze.
Just clean, real enforcement.
<a href="https://app.zipwp.com/blueprint/surecookie-n9i" rel=" nofollow ugc">Try the live demo of SureCookie.</a>
<h3>How SureCookie Actually Works</h3>
There are 4 things that matter when it comes to consent:
<ol>
<li>Detection has to be accurate: If you do not know what cookies are actually running on your site, everything else falls apart. SureCookie scans with a real browser, not guesswork.</li>
<li>Enforcement has to be technical: A banner asking for permission means nothing if scripts are already firing. SureCookie blocks non-essential scripts at the code level before consent is given.</li>
<li>Data has to stay under your control: Consent logs belong on your server. Not locked inside a third-party SaaS dashboard you cannot fully control.</li>
<li>Setup has to be simple: Compliance should not require a weekend of configuration. SureCookie gets you from install to enforcement in minutes.</li>
</ol>
Everything in SureCookie revolves around that.
<h3>Real Browser Cookie Detection</h3>
This is important.
Most tools try to guess cookies by scanning HTML.
That is not accurate.
SureCookie uses a Playwright-powered scanning engine at <a href="https://library.surecookie.com/" rel="nofollow ugc">https://library.surecookie.com/</a>.
When you run a scan, it loads your website in a real browser environment. Not static source code. An actual browser session.
That means it detects:
<ul>
<li>Cookies injected dynamically</li>
<li>Scripts loaded after interaction</li>
<li>Conditional third-party trackers</li>
<li>Tag manager injected scripts</li>
<li>Things that only appear after page load</li>
</ul>
It visits your website like a real user would.
That is the difference.
Once detected, cookies are categorized intelligently and automatically.
<h3>Smart Categorization</h3>
After detection, SureCookie categorizes cookies into:
<ul>
<li>Essential</li>
<li>Functional</li>
<li>Analytics</li>
<li>Marketing</li>
</ul>
Most cookies are categorized automatically using a continuously improving detection database.
Everything is editable.
The goal is simple:
Nobody should have to manually research every random cookie string just to get compliant.
<h3>Script Blocking Before Consent</h3>
This part is critical.
Showing a banner is not compliance.
Before consent:
<ul>
<li>Analytics does not run</li>
<li>Marketing pixels do not fire</li>
<li>Tag managers do not execute</li>
<li>Embedded videos do not load tracking</li>
<li>Social widgets are paused</li>
</ul>
Consent is enforced at execution level.
Not just visually.
<h3>Consent Logs Stored Locally</h3>
All consent logs are stored inside your WordPress database in a dedicated custom table.
<ul>
<li>View logs from the admin dashboard</li>
<li>Export for compliance documentation</li>
<li>Delete anytime</li>
<li>Control retention periods</li>
</ul>
Compliance data stays on your server. Not in an external SaaS dashboard.
<h3>Performance by Design</h3>
SureCookie is lightweight from the ground up.
<ul>
<li>No jQuery dependency</li>
<li>Minimal frontend footprint</li>
<li>Dedicated database table for logs</li>
<li>No heavy background processing</li>
</ul>
Blocking non-essential scripts before consent also reduces unnecessary third-party requests, which improves page load performance as a side effect.
<h3>Designed in 2026, Not 2019</h3>
Many WordPress plugins are outdated.
Too many toggles. 
Too much legal jargon. 
Too much friction.
SureCookie is designed to feel modern.
The onboarding is structured:
<ol>
<li>Scan your site</li>
<li>Review detected cookies</li>
<li>Confirm categories</li>
<li>Activate enforcement</li>
</ol>
That is it.
Setup should feel good, not overwhelming.
<h3>No Visitor-Based Limits</h3>
Whether a site has 1,000 visitors or 1,000,000 visitors, SureCookie works the same way.
No caps. 
No surprises. 
No usage-based pricing tiers.
<h3>Built for the WordPress Ecosystem</h3>
SureCookie works with:
<ul>
<li>SureCart</li>
<li>WooCommerce</li>
<li>Easy Digital Downloads</li>
<li>Page builders</li>
<li>Analytics tools</li>
<li>Marketing integrations</li>
<li>Multisite setups</li>
</ul>
Consent logic applies across your site.
<h3>Who This Is For</h3>
<ul>
<li>Site owners who want real enforcement, not just a banner</li>
<li>eCommerce stores handling customer data</li>
<li>Agencies managing multiple client sites</li>
<li>Developers who care about clean implementation</li>
<li>Businesses operating in regulated regions</li>
</ul>
If the goal is just the simplest possible banner without caring about detection accuracy, SureCookie is probably not the right fit.
If the goal is modern, accurate, performance-conscious consent management, it is.
<h3>Important Note</h3>
SureCookie provides the technical infrastructure for consent management. Legal compliance depends on your policies and jurisdiction. Always consult a qualified legal professional when needed.
<h3>External Services</h3>
Cookie Scanning: SureCookie connects to <a href="https://library.surecookie.com/" rel="nofollow ugc">https://library.surecookie.com/</a> to provide real browser-based cookie scanning and smart categorization.
When you run a cookie scan, SureCookie sends the URLs of your selected pages to the scanner. A real Playwright-powered browser visits those pages, just like an actual user would, and detects every cookie, tracking script, and third-party service running on your site. Detected cookies are then automatically categorized using a continuously improving detection database.
Consent IP Logs: For region-aware consent, visitor IP addresses are processed through MaxMind integration to determine country-level location, so the correct Country gets into the consent log.
PDF Export (PDFObject): SureCookie allows administrators to download consent logs as PDF files. This feature uses the <a href="https://pdfobject.com/" rel="nofollow ugc">PDFObject</a> library, loaded from the cdnjs Cloudflare CDN: <code>https://cdnjs.cloudflare.com/ajax/libs/pdfobject/2.1.1/pdfobject.min.js</code>. PDFObject is used solely to render the consent log data as a PDF in the browser. No user data is sent to the CDN — the library file itself is fetched and executed locally in the browser. PDFObject is MIT-licensed and GPL-compatible.
<h3>Data Stored Locally</h3>
All consent data is stored inside your WordPress database:
<ul>
<li>User consent choices (categories accepted or rejected)</li>
<li>Timestamps of consent actions</li>
<li>Masked IP address, country and user session ID</li>
<li>Cookie scan results</li>
<li>Plugin configuration settings</li>
</ul>
<h3>Privacy Policy</h3>
SureCookie processes data through its API service at library.surecookie.com to empower cookie scanning and region-aware consent. Here is exactly what happens and why.
What Is Processed and Why:
<ul>
<li>Cookie Scanning: When you run a scan, page URLs are sent to the scanning service where a real browser detects cookies and scripts. Detected cookie information (names, domains, durations) is used to categorize cookies and improve detection accuracy across all SureCookie installations.</li>
<li>Region Detection: Visitor IP addresses are processed through MaxMind to determine country-level location for applying the correct Country into logs. IP addresses are masked before being stored in your database.</li>
<li>Consent Records: Consent choices, timestamps, and user session ID details are logged locally in your WordPress database for compliance documentation.</li>
</ul>
Where Data Lives:
<ul>
<li>All consent logs, scan results, and settings are stored in your WordPress database</li>
<li>Data sent to library.surecookie.com for scanning and geolocation may be temporarily stored for processing</li>
<li>Nothing is sold, shared with third parties, or used for advertising</li>
</ul>
Since visitor data is processed through SureCookie’s services, this should be mentioned in your site’s privacy policy. Full details: <a href="https://surecookie.com/privacy-policy/" rel="nofollow ugc">https://surecookie.com/privacy-policy/</a>
Data Retention and Control:
<ul>
<li>Consent logs and scan results can be viewed, exported, or deleted anytime from your WordPress admin</li>
<li>Retention periods are configurable in plugin settings</li>
</ul>
Security:
<ul>
<li>All data transmission uses HTTPS encryption</li>
<li>API communications are secured with authentication tokens</li>
</ul>
For questions about data processing, visit <a href="https://surecookie.com/support/" rel="nofollow ugc">https://surecookie.com/support/</a>
<h3>About Brainstorm Force</h3>
SureCookie is built by Brainstorm Force, the team behind Astra and other widely used WordPress products.
<h3>Support</h3>
<ul>
<li><a href="https://wordpress.org/support/plugin/surecookie/" rel="ugc">Support Forum</a></li>
<li><a href="https://surecookie.com/docs/" rel="nofollow ugc">Documentation</a></li>
</ul>

SureCookie – Smarter Cookie Consent solution (Alpha)

Real cookie consent for WordPress. Browser-based scanning, smart categorization, strict script blocking, and consent logs stored in your database.

visionsolutions

CookieBoxs is a cookie consent plugin for WordPress that helps site owners manage visitor consent preferences and configure consent-aware integrations.
Free features include:
<ul>
<li>Google Consent Mode v2 support</li>
<li>Automatic script blocker and cookie cleaner</li>
<li>25+ built-in integrations</li>
<li>Content blockers for embedded media and maps</li>
<li>11 interface languages</li>
<li>Region presets</li>
<li>Consent logging in WordPress</li>
<li>Floating settings badge</li>
<li>Self-hosted plugin files</li>
</ul>
Optional PRO features include two-phase Cookie Scanner (server + browser-based detection), geo-targeting, additional templates, cookie declaration, consent analytics, branding options, custom CSS, and CSV export.
Documentation: <a href="https://cookieboxs.com" rel="nofollow ugc">cookieboxs.com</a>
<h3>Source Code</h3>
All JavaScript and CSS files included in this plugin are human-readable and not minified or compiled. No build tools (npm, webpack, composer) are required to work with this plugin’s source code. All plugin-authored JavaScript and CSS is written directly and included as-is.
Third-party libraries and embed snippets:
<ul>
<li>
<code>assets/js/chart.min.js</code> — Chart.js library (MIT License). Source code and unminified version available at: https://github.com/chartjs/Chart.js
</li>
<li>
<code>assets/js/cookieboxs-consent-mode.js</code> — Contains standard third-party integration embed snippets (e.g., Google Tag Manager, Meta Pixel, TikTok Pixel, Microsoft Clarity, Hotjar, LiveChat, Intercom, etc.). These are the official JavaScript snippets provided by each service for website embedding, written in their standard compact form. Each snippet includes a source URL comment pointing to the official documentation. A full list of source URLs is also available in the file header comments. The surrounding plugin logic (consent state management, Google Consent Mode v2 setup, custom script injection) is authored by this plugin and is fully human-readable.
</li>
</ul>
Official documentation URLs for all embedded third-party snippets:
<ul>
<li>Google Tag Manager: https://developers.google.com/tag-platform/tag-manager/web</li>
<li>Meta Pixel: https://developers.facebook.com/docs/meta-pixel/get-started</li>
<li>TikTok Pixel: https://ads.tiktok.com/help/article/get-started-pixel</li>
<li>Microsoft Clarity: https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-setup</li>
<li>Hotjar: https://help.hotjar.com/hc/en-us/articles/115011639927</li>
<li>Heap Analytics: https://developers.heap.io/docs/web</li>
<li>Mixpanel: https://docs.mixpanel.com/docs/tracking-methods/sdks/javascript</li>
<li>PostHog: https://posthog.com/docs/libraries/js</li>
<li>LinkedIn Insight Tag: https://learn.microsoft.com/en-us/linkedin/marketing/integrations/ads-reporting/insight-tag</li>
<li>Pinterest Tag: https://help.pinterest.com/en/business/article/install-the-pinterest-tag</li>
<li>Snapchat Pixel: https://businesshelp.snapchat.com/s/article/snap-pixel-about</li>
<li>Twitter/X Pixel: https://business.x.com/en/help/campaign-measurement-and-analytics/conversion-tracking-for-websites</li>
<li>Microsoft Advertising UET: https://help.ads.microsoft.com/apex/index/3/en/56682</li>
<li>LiveChat: https://developers.livechat.com/docs/getting-started/installing-livechat</li>
<li>Crisp: https://docs.crisp.chat/guides/chatbox-sdks/web-sdk/</li>
<li>Tawk.to: https://help.tawk.to/article/adding-a-tawk-to-widget-to-your-website</li>
<li>Intercom: https://developers.intercom.com/installing-intercom/web/installation</li>
<li>Yandex Metrica: https://yandex.com/support/metrica/code/counter-initialize.html</li>
<li>Matomo: https://developer.matomo.org/guides/tracking-javascript-guide</li>
</ul>
<h3>Privacy Policy</h3>
CookieBoxs does not send visitor consent records to the plugin author’s servers.
Consent records are stored in the WordPress database. Optional third-party integrations that you configure, such as analytics, advertising, chat, or embedded media services, connect directly from the visitor’s browser to those third-party providers after the relevant consent conditions are met.
Admin-only connections used for plugin news, optional deactivation feedback, or optional license validation are described below.
<h3>External Services</h3>
This plugin uses external services only for user-configured integrations. Third-party integrations are optional, disabled by default, and only activated when the site administrator enables and configures them. The plugin does not offload any of its own assets (JavaScript, CSS, images) to external servers — all plugin files are included locally.
<h4>Plugin services</h4>
<ul>
<li>
VisionSolutions API – plugin news and updates: used in the admin area only; sends plugin version, WordPress version, and site language when an administrator opens the settings page. Provider: VisionSolutions, https://visionsolutions.pl 
Terms of use: https://visionsolutions.pl/regulamin/ 
Privacy policy: https://visionsolutions.pl/polityka-prywatnosci/
</li>
<li>
VisionSolutions API – deactivation feedback (optional): sends selected reason, optional comment, site URL, WordPress version, and PHP version only if an administrator submits feedback during deactivation. Provider: VisionSolutions 
Terms of use: https://visionsolutions.pl/regulamin/ 
Privacy policy: https://visionsolutions.pl/polityka-prywatnosci/
</li>
<li>
VisionSolutions API – PRO license validation (optional): sends license key, site domain, and plugin version on activation and periodic validation. Provider: VisionSolutions 
Terms of use: https://visionsolutions.pl/regulamin/ 
Privacy policy: https://visionsolutions.pl/polityka-prywatnosci/
</li>
<li>
ipapi.co geolocation API (optional, PRO): used only when geo-targeting is enabled and fallback geolocation is needed; sends visitor IP address. Provider: ipapi 
Terms of use: https://ipapi.co/terms/ 
Privacy policy: https://ipapi.co/privacy/
</li>
<li>
Cookie Scanner (admin-initiated, PRO): two-phase scan. Phase 1 (server): sends requests from your server to your own website pages to detect cookies and tracking scripts from HTML. Phase 2 (browser): loads the scanned page in a hidden iframe within the administrator’s browser to detect cookies set by JavaScript (e.g. pixels loaded via Google Tag Manager). All scanning happens locally — no external provider is contacted.
</li>
</ul>
<h4>Optional integrations (services)</h4>
These are third-party services that the site administrator can optionally enable. When enabled, the plugin loads the official embed snippet provided by each service, which connects the visitor’s browser directly to that service provider. These are service integrations, not offloaded plugin assets. Each integration is disabled by default and only activates when the administrator provides their account ID.
<ul>
<li>
Google Tag Manager – tag management service; may load on page view and use Consent Mode signals. Loaded from: www.googletagmanager.com. Provider: Google LLC. 
Terms of use: https://marketingplatform.google.com/about/analytics/terms/us/ 
Privacy policy: https://policies.google.com/privacy
</li>
<li>
Google Analytics 4 – analytics service; loaded from www.googletagmanager.com/gtag/js via wp_enqueue_script. Provider: Google LLC. 
Terms of use: https://marketingplatform.google.com/about/analytics/terms/us/ 
Privacy policy: https://policies.google.com/privacy
</li>
<li>
Google Ads – conversion tracking and remarketing service; loaded from www.googletagmanager.com/gtag/js via wp_enqueue_script. Provider: Google LLC. 
Terms of use: https://ads.google.com/intl/en/home/terms/ 
Privacy policy: https://policies.google.com/privacy
</li>
<li>
Meta Pixel – advertising measurement service; loaded from connect.facebook.net. Provider: Meta Platforms, Inc. 
Terms of use: https://www.facebook.com/legal/terms 
Privacy policy: https://www.facebook.com/privacy/policy/
</li>
<li>
TikTok Pixel – advertising measurement service; loaded from analytics.tiktok.com. Provider: TikTok Inc. / ByteDance Ltd. 
Terms of use: https://ads.tiktok.com/i18n/official/policy/business-products-terms 
Privacy policy: https://www.tiktok.com/legal/privacy-policy
</li>
<li>
Microsoft Clarity – session analytics and heatmaps service; loaded from www.clarity.ms. Provider: Microsoft Corporation. 
Terms of use: https://clarity.microsoft.com/terms 
Privacy policy: https://privacy.microsoft.com/en-us/privacystatement
</li>
<li>
Hotjar – heatmaps, recordings, and feedback service; loaded from static.hotjar.com. Provider: Hotjar Ltd. 
Terms of use: https://www.hotjar.com/legal/policies/terms-of-service/ 
Privacy policy: https://www.hotjar.com/legal/policies/privacy/
</li>
<li>
Matomo – analytics service; loaded from the site administrator’s configured Matomo instance URL. Provider: InnoCraft Ltd. or the site owner’s Matomo host. 
Terms of use: https://matomo.org/matomo-cloud-terms-of-service/ 
Privacy policy: https://matomo.org/matomo-cloud-privacy-policy/
</li>
<li>
Yandex Metrica – analytics service; loaded from mc.yandex.ru. Provider: Yandex LLC. 
Terms of use: https://yandex.com/legal/metrica_termsofuse/ 
Privacy policy: https://yandex.com/legal/confidential/
</li>
<li>
Heap Analytics – analytics service; loaded from cdn.heapanalytics.com. Provider: Heap Inc. 
Terms of use: https://heap.io/legal/heap-terms-of-service 
Privacy policy: https://heap.io/legal/privacy
</li>
<li>
Mixpanel – analytics service; loaded from cdn.mxpnl.com. Provider: Mixpanel, Inc. 
Terms of use: https://mixpanel.com/legal/terms-of-use/ 
Privacy policy: https://mixpanel.com/legal/privacy-policy/
</li>
<li>
PostHog – analytics and feature flags service; loaded from the site administrator’s configured PostHog host. Provider: PostHog, Inc. 
Terms of use: https://posthog.com/terms 
Privacy policy: https://posthog.com/privacy
</li>
<li>
LinkedIn Insight Tag – advertising measurement service; loaded from snap.licdn.com. Provider: LinkedIn Corporation. 
Terms of use: https://www.linkedin.com/legal/l/li-marketing-terms 
Privacy policy: https://www.linkedin.com/legal/privacy-policy
</li>
<li>
Pinterest Tag – advertising measurement service; loaded from s.pinimg.com. Provider: Pinterest, Inc. 
Terms of use: https://policy.pinterest.com/en/terms-of-service 
Privacy policy: https://policy.pinterest.com/en/privacy-policy
</li>
<li>
Snapchat Pixel – advertising measurement service; loaded from sc-static.net. Provider: Snap Inc. 
Terms of use: https://snap.com/en-US/terms 
Privacy policy: https://snap.com/en-US/privacy/privacy-policy
</li>
<li>
Twitter/X Pixel – advertising measurement service; loaded from static.ads-twitter.com. Provider: X Corp. 
Terms of use: https://twitter.com/en/tos 
Privacy policy: https://twitter.com/en/privacy
</li>
<li>
Microsoft Advertising UET – conversion tracking service; loaded from bat.bing.com. Provider: Microsoft Corporation. 
Terms of use: https://about.ads.microsoft.com/en-us/policies/legal 
Privacy policy: https://privacy.microsoft.com/en-us/privacystatement
</li>
<li>
Intercom – customer messaging service; loaded from widget.intercom.io and api-iam.intercom.io. Provider: Intercom, Inc. 
Terms of use: https://www.intercom.com/legal/terms-and-policies 
Privacy policy: https://www.intercom.com/legal/privacy
</li>
<li>
LiveChat – support chat service; loaded from cdn.livechatinc.com. Provider: LiveChat, Inc. 
Terms of use: https://www.livechat.com/legal/terms-of-service/ 
Privacy policy: https://www.livechat.com/legal/privacy-policy/
</li>
<li>
Crisp – customer messaging and chat service; loaded from client.crisp.chat. Provider: Crisp IM SAS. 
Terms of use: https://crisp.chat/en/terms/ 
Privacy policy: https://crisp.chat/en/privacy/
</li>
<li>
Tawk.to – support chat service; loaded from embed.tawk.to. Provider: Tawk.to Ltd. 
Terms of use: https://www.tawk.to/legal/terms-of-service/ 
Privacy policy: https://www.tawk.to/legal/privacy-policy/
</li>
</ul>
<h4>Script blocker safe domains</h4>
The automatic script blocker does not block scripts from essential service domains (payment gateways, CAPTCHAs, translation). These domains are whitelisted so the script blocker does not interfere with site-critical functionality provided by other plugins or themes. The CookieBoxs plugin itself does not load any files from these domains — they are only whitelisted to prevent breakage:
<ul>
<li>
Stripe – payment processing service; loaded by other plugins from js.stripe.com and checkout.stripe.com. Provider: Stripe, Inc. 
Terms of use: https://stripe.com/legal/ssa 
Privacy policy: https://stripe.com/privacy
</li>
<li>
PayPal – payment processing service; loaded by other plugins from www.paypal.com and www.paypalobjects.com. Provider: PayPal Holdings, Inc. 
Terms of use: https://www.paypal.com/us/legalhub/useragreement-full 
Privacy policy: https://www.paypal.com/us/legalhub/privacy-full
</li>
<li>
Google reCAPTCHA – spam protection service; loaded by other plugins from recaptcha.net. Provider: Google LLC. 
Terms of use: https://policies.google.com/terms 
Privacy policy: https://policies.google.com/privacy
</li>
<li>
hCaptcha – spam protection service; loaded by other plugins from js.hcaptcha.com. Provider: Intuition Machines, Inc. 
Terms of use: https://www.hcaptcha.com/terms 
Privacy policy: https://www.hcaptcha.com/privacy
</li>
<li>
Cloudflare Turnstile – bot protection service; loaded by other plugins from challenges.cloudflare.com. Provider: Cloudflare, Inc. 
Terms of use: https://www.cloudflare.com/terms/ 
Privacy policy: https://www.cloudflare.com/privacypolicy/
</li>
<li>
Google Translate – translation service widget; loaded by other plugins from translate.google.com and translate.googleapis.com. Provider: Google LLC. 
Terms of use: https://policies.google.com/terms 
Privacy policy: https://policies.google.com/privacy
</li>
</ul>
<h4>Content blockers</h4>
Content blockers are an optional feature that replaces embedded third-party media (YouTube, Vimeo, Google Maps) with a placeholder until the visitor grants consent. When consent is given, the embed loads normally from the service provider.
<ul>
<li>
YouTube – video embeds can be blocked until consent; loaded from www.youtube.com and www.youtube-nocookie.com. Provider: Google LLC. 
Terms of use: https://www.youtube.com/t/terms 
Privacy policy: https://policies.google.com/privacy
</li>
<li>
Vimeo – video embeds can be blocked until consent; loaded from player.vimeo.com and vimeo.com. Provider: Vimeo, Inc. 
Terms of use: https://vimeo.com/terms 
Privacy policy: https://vimeo.com/privacy
</li>
<li>
Google Maps – map embeds can be blocked until consent; loaded from www.google.com/maps and maps.googleapis.com. Provider: Google LLC. 
Terms of use: https://cloud.google.com/maps-platform/terms 
Privacy policy: https://policies.google.com/privacy
</li>
</ul>

CookieBoxs – GDPR/CCPA Cookie Consent & Google Consent Mode v2

Cookie consent plugin for managing visitor consent with Google Consent Mode v2, script blocking, content blockers, and optional integrations.

SureCookie – Smarter Cookie Consent solution (Alpha) vs CookieBoxs – GDPR/CCPA Cookie Consent & Google Consent Mode v2