vgdevsolutions

<p><strong>VGDev Cookie Banner for Consent Mode v2</strong> is a lightweight, self-hosted GDPR cookie consent solution that integrates natively with Google Consent Mode v2, Google Tag Manager (GTM) and Google Analytics 4 (GA4).</p>
<p>All consent signals start as <code>denied</code> and are updated in real time based on the visitor’s choices — fully compliant with Google’s requirements for EU markets.</p>
<h4>Key Features</h4>
<ul>
<li>✅ <strong>Google Consent Mode v2</strong> — all 7 consent signals managed automatically</li>
<li>✅ <strong>Google Tag Manager (GTM)</strong> — head snippet + body noscript injected automatically</li>
<li>✅ <strong>Google Analytics 4 (GA4)</strong> — standalone gtag.js support (when GTM is not used)</li>
<li>✅ <strong>GDPR Compliant</strong> — consent defaults to denied before any tracking occurs</li>
<li>✅ <strong>Multilingual Privacy Policy</strong> — set a different privacy policy URL per language</li>
<li>✅ <strong>29 built-in languages</strong> — auto-detected via WPML, Polylang or WordPress locale</li>
<li>✅ <strong>Performance Mode</strong> — lazy loads the banner after user interaction (boosts PageSpeed score)</li>
<li>✅ <strong>Force Consent</strong> — block the page until the user makes a choice</li>
<li>✅ <strong>Fully customizable</strong> — colors, layout, position, floating button, and more</li>
<li>✅ <strong>Self-hosted</strong> — no external consent management platform needed</li>
<li>✅ <strong>Lightweight</strong> — no jQuery dependency for the front-end script</li>
</ul>
<h4>Google Consent Mode v2 Signals</h4>
<p>The plugin manages all required consent signals:</p>
<ul>
<li><code>ad_storage</code></li>
<li><code>ad_user_data</code></li>
<li><code>ad_personalization</code></li>
<li><code>analytics_storage</code></li>
<li><code>functionality_storage</code></li>
<li><code>personalization_storage</code></li>
<li><code>security_storage</code></li>
</ul>
<h4>Consent Categories</h4>
<ul>
<li><strong>Necessary</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <code>security_storage</code></li>
<li><strong>Functionality</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <code>functionality_storage</code>, <code>personalization_storage</code>, <code>security_storage</code></li>
<li><strong>Analytics</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <code>analytics_storage</code>, <code>security_storage</code></li>
<li><strong>Marketing</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> <code>ad_storage</code>, <code>ad_user_data</code>, <code>ad_personalization</code>, <code>personalization_storage</code></li>
</ul>
<h4>Multilingual Support</h4>
<p>Works out of the box with WPML, Polylang and WordPress locale. You can also set per-language privacy policy URLs so visitors always see the privacy page in their own language.</p>
<h4>Performance Mode</h4>
<p>Enable lazy loading to load the cookie banner only after the first user interaction (scroll, click, mouse move or touch). Since Google PageSpeed Insights does not simulate interactions, the banner will not appear in the performance audit — significantly improving your Core Web Vitals score.</p>
<h4>Built-in Languages</h4>
<p>English, Greek, German, French, Spanish, Italian, Portuguese, Dutch, Polish, Czech, Slovak, Hungarian, Romanian, Bulgarian, Croatian, Serbian, Slovenian, Estonian, Latvian, Lithuanian, Finnish, Swedish, Danish, Norwegian, Russian, Ukrainian, Chinese, Japanese, Arabic.</p>
<h3>External Services</h3>
<p>This plugin connects to external services provided by Google when the site administrator configures a Google Tag Manager (GTM) Container ID or a Google Analytics 4 (GA4) Measurement ID in the plugin settings.</p>
<h4>Google Tag Manager (GTM)</h4>
<p>When a GTM Container ID is entered in the plugin settings, the plugin loads the Google Tag Manager JavaScript snippet from Google’s servers. This happens on every front-end page load.</p>
<ul>
<li><strong>What it does:</strong> Loads the GTM container script so that tags configured inside GTM (analytics, advertising, etc.) can fire according to consent status.</li>
<li><strong>What data is sent:</strong> The GTM Container ID and standard browser information (IP address, user agent, page URL, referrer) are sent to Google’s servers when the script is loaded. Additional data may be collected depending on the tags configured within GTM by the site administrator.</li>
<li><strong>When it is sent:</strong> On every front-end page load, after the consent defaults have been set.</li>
<li><strong>Service provider:</strong> Google LLC</li>
<li><strong>Terms of Service:</strong> <a href="https://www.google.com/analytics/terms/tag-manager/" rel="nofollow ugc">https://www.google.com/analytics/terms/tag-manager/</a></li>
<li><strong>Privacy Policy:</strong> <a href="https://policies.google.com/privacy" rel="nofollow ugc">https://policies.google.com/privacy</a></li>
</ul>
<h4>Google Analytics 4 (GA4) via gtag.js</h4>
<p>When a GA4 Measurement ID is entered and no GTM Container ID is configured, the plugin loads the Google Analytics gtag.js script from Google’s servers.</p>
<ul>
<li><strong>What it does:</strong> Loads the GA4 measurement script to collect website analytics data (page views, events, etc.) according to consent status.</li>
<li><strong>What data is sent:</strong> The GA4 Measurement ID and standard browser information (IP address, user agent, page URL, referrer) are sent to Google’s servers. Analytics data (page views, session data, events) is only collected according to the visitor’s consent choices.</li>
<li><strong>When it is sent:</strong> On every front-end page load, after the consent defaults have been set. Actual analytics data collection depends on user consent.</li>
<li><strong>Service provider:</strong> Google LLC</li>
<li><strong>Terms of Service:</strong> <a href="https://marketingplatform.google.com/about/analytics/terms/us/" rel="nofollow ugc">https://marketingplatform.google.com/about/analytics/terms/us/</a></li>
<li><strong>Privacy Policy:</strong> <a href="https://policies.google.com/privacy" rel="nofollow ugc">https://policies.google.com/privacy</a></li>
</ul>
<p><strong>Note:</strong> No data is sent to any external service by this plugin unless the site administrator explicitly configures a GTM Container ID or GA4 Measurement ID. The cookie consent preferences are stored locally in the visitor’s browser and are not transmitted to any external server.</p>


VGDev Cookie Banner for Consent Mode v2

GDPR cookie consent banner with Google Consent Mode v2, GTM & GA4 integration. Lightweight, self-hosted, multilingual, fully customizable.

Darwin Digital

<p><strong>Darwin Cookie Consent</strong> shows visitors a clear cookie banner, lets them choose what to accept, and sends those choices to your analytics and marketing tools through Google Consent Mode v2. No tracking runs until consent is given.</p>
<p>The plugin includes admin controls for legal links, appearance, integrations, localized frontend messaging, and privacy-safe reporting.</p>
<h4>Key Features</h4>
<ul>
<li>GDPR cookie consent banner and settings modal</li>
<li>Google Consent Mode v2 support</li>
<li>Editable localized content for English, French, German, and Spanish</li>
<li>Automatic content selection by WordPress site locale</li>
<li>WordPress editor support for the banner message and modal intro</li>
<li>Configurable legal page links for privacy, terms, and cookie policy</li>
<li>Integration controls for Google Tag Manager, GA4, Matomo, Facebook Pixel, LinkedIn Insight Tag, and Pardot</li>
<li>Separate Ad Personalization consent handling</li>
<li>Required Strictly Necessary Cookies row always enabled in the popup</li>
<li>Aggregate admin metrics for recent banner views and accepts</li>
<li>Resettable metrics counters with no personal data stored in the metrics table</li>
</ul>
<h4>Consent Categories</h4>
<ul>
<li><strong>Strictly Necessary Cookies</strong>: always required and always enabled</li>
<li><strong>Analytics</strong>: used for analytics tools such as Google Analytics and Matomo</li>
<li><strong>Marketing</strong>: used for marketing-related tracking integrations</li>
<li><strong>Ad Personalization</strong>: handled separately from general marketing consent</li>
</ul>
<h4>Privacy and Data Handling</h4>
<ul>
<li>Localized content is stored in WordPress options</li>
<li>Consent metrics store aggregate daily counts only — no personal identifiers are stored in the metrics table</li>
<li>The consent log table stores a SHA-256 hash of the visitor IP address and the browser user agent alongside the encoded consent payload; no plain-text IP addresses are stored</li>
<li>Consent Mode signals are updated based on saved user choices</li>
<li>No data is transmitted to the plugin author or any third-party service by this plugin itself</li>
</ul>
<h3>External Services</h3>
<p>This plugin can load scripts from third-party services when those integrations are configured in the plugin settings. No external requests are made unless the corresponding integration is enabled by the site administrator.</p>
<h4>Google Tag Manager</h4>
<p>When a GTM container ID is provided, this plugin loads the Google Tag Manager script from <code>googletagmanager.com</code>. Google Consent Mode defaults are applied before GTM loads so that no tracking occurs without user consent.</p>
<ul>
<li>Data sent: page URL and GTM container ID as part of the script request.</li>
<li>When: on every frontend page load, only if a GTM container ID is configured.</li>
<li>Service provider: Google LLC — <a href="https://marketingplatform.google.com/about/analytics/terms/us/" rel="nofollow ugc">Terms of Service</a> | <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>Google Analytics (GA4)</h4>
<p>When a GA4 measurement ID is provided and GTM is not in use, this plugin loads the gtag.js script from <code>googletagmanager.com</code>. The script only fires after measurement consent is granted.</p>
<ul>
<li>Data sent: page URL and measurement ID as part of the script request.</li>
<li>When: on every frontend page load after measurement consent is granted, only if a GA4 ID is configured.</li>
<li>Service provider: Google LLC — <a href="https://marketingplatform.google.com/about/analytics/terms/us/" rel="nofollow ugc">Terms of Service</a> | <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>Google Fonts</h4>
<p>When the default plugin font is selected, this plugin loads the Roboto typeface from Google Fonts. The stylesheet is fetched from <code>fonts.googleapis.com</code> and the font files are served from <code>fonts.gstatic.com</code>. A preconnect resource hint is also added for both domains.</p>
<ul>
<li>Data sent: browser and referrer information as part of the font request (standard browser HTTP headers).</li>
<li>When: on every frontend page load when the default font option is active.</li>
<li>Service provider: Google LLC — <a href="https://fonts.google.com/about" rel="nofollow ugc">Terms of Service</a> | <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>Facebook Pixel</h4>
<p>When a Facebook Pixel ID is provided, this plugin loads the Facebook Pixel script from <code>connect.facebook.net</code>. The script only fires after marketing consent is granted.</p>
<ul>
<li>Data sent: page URL and pixel ID as part of the script request.</li>
<li>When: on every frontend page load after marketing consent is granted, only if a Pixel ID is configured.</li>
<li>Service provider: Meta Platforms, Inc. — <a href="https://www.facebook.com/legal/terms" rel="nofollow ugc">Terms of Service</a> | <a href="https://www.facebook.com/privacy/policy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>LinkedIn Insight Tag</h4>
<p>When a LinkedIn Partner ID is provided, this plugin loads the LinkedIn Insight Tag from <code>snap.licdn.com</code>. The script only fires after marketing consent is granted.</p>
<ul>
<li>Data sent: page URL and partner ID as part of the script request.</li>
<li>When: on every frontend page load after marketing consent is granted, only if a Partner ID is configured.</li>
<li>Service provider: LinkedIn Corporation — <a href="https://www.linkedin.com/legal/user-agreement" rel="nofollow ugc">Terms of Service</a> | <a href="https://www.linkedin.com/legal/privacy-policy" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>Salesforce Pardot</h4>
<p>When Pardot account and campaign IDs are provided, this plugin loads the Pardot tracking script from <code>pi.pardot.com</code>. The script only fires after marketing consent is granted.</p>
<ul>
<li>Data sent: page URL and account/campaign IDs as part of the script request.</li>
<li>When: on every frontend page load after marketing consent is granted, only if Pardot IDs are configured.</li>
<li>Service provider: Salesforce, Inc. — <a href="https://www.salesforce.com/company/legal/" rel="nofollow ugc">Terms of Service</a> | <a href="https://www.salesforce.com/company/legal/privacy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h4>Matomo</h4>
<p>When a Matomo URL and site ID are provided, this plugin loads the Matomo tracking script from the configured Matomo instance. The script only fires after measurement consent is granted.</p>
<ul>
<li>Data sent: page URL and site ID to the configured Matomo instance.</li>
<li>When: on every frontend page load after measurement consent is granted, only if Matomo is configured.</li>
<li>Service provider: InnoCraft Ltd — <a href="https://matomo.org/website-terms/" rel="nofollow ugc">Terms of Service</a> | <a href="https://matomo.org/privacy-policy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h3>Privacy Policy</h3>
<p>This plugin stores data locally in your WordPress database only. No data is transmitted to the plugin author or any third-party service by this plugin itself.</p>
<h4>Data stored locally</h4>
<ul>
<li><strong>Consent log table</strong> (<code>{prefix}darwin_gdpr_consent_log</code>): When a visitor saves their consent choices, the plugin records a SHA-256 hash of the visitor’s IP address, the browser user-agent string, and the encoded consent payload. No plain-text IP addresses are stored. Entries are automatically deleted after the configured retention period (default: 180 days).</li>
<li><strong>Aggregate metrics table</strong> (<code>{prefix}darwin_gdpr_metrics</code>): Stores daily totals of banner views and consent accepts as integer counts. No visitor identifiers of any kind are stored in this table.</li>
<li><strong>Plugin options</strong>: Localized content strings and appearance settings are stored in the WordPress options table. These contain no visitor data.</li>
</ul>
<h4>Third-party service data</h4>
<p>When optional integrations are configured by the site administrator, scripts from third-party services are loaded in the visitor’s browser. Those services may collect data as described in their respective privacy policies, which are linked in the External Services section above. No data is sent to those services until the visitor grants the relevant consent category.</p>
<p>Site administrators should ensure their own privacy policy reflects the data practices described above, particularly the storage of hashed IP addresses and user-agent strings in the consent log.</p>


Darwin Cookie Consent

Cookie banner for Google Consent Mode v2, GDPR & FADP. Includes four built-in languages, privacy-safe metrics, and appearance controls.

VGDev Cookie Banner for Consent Mode v2 vs Darwin Cookie Consent