<div class="woo-sc-box alert">
TCF v2.3 takes effect on 28 February 2026 — sites that don’t update may have consent rejected, causing ads to switch to limited mode and reduce revenue. This plugin supports the latest IAB TCF v2.3 consent requirements
</div>
WebToffee GDPR Cookie Consent for WooCommerce helps websites comply with privacy laws like GDPR, CCPA, and more by enabling cookie consent management through customizable banners, popups, and widgets.
It blocks non-essential cookies until consent is given, supports granular control by cookie category, integrates with Google Consent Mode v2, IAB TCF v2.3, and Microsoft Clarity Consent Mode, and offers features like Geo-targeting, multilingual support, advanced cookie scanning, consent logs, and a built-in cookie policy generator.
<img class="size-medium wp-image-18734005527500 aligncenter" src="https://woocommerce.com/wp-content/uploads/2025/07/Frame-6637-1.png?w=840" alt="Advanced Features of the GDPR Cookie Consent extension " width="840" height="388" />
<img class="wp-image-18734005526928 alignright" src="https://woocommerce.com/wp-content/uploads/2025/07/GDPR-EU-Cookie-Law-Compliance-1.png?w=800" alt="GDPR and EU cookie law compliance" width="451" height="463" />
GDPR and EU Cookie Law Compliance
Ensure your website meets GDPR and EU Cookie Law requirements with built-in tools for transparent consent management. The extension enables prior consent collection, automatic blocking of non-essential cookies, and clear categorization of cookie types. It also provides users with granular control over their consent preferences and the ability to revoke consent at any time.
Supported EU cookie laws:
<ul>
<li>GDPR (EU and UK)</li>
<li>LGPD (Brazil)</li>
<li>PIPEDA (Canada)</li>
<li>Privacy Act (Australia)</li>
<li>POPIA (South Africa)</li>
<li>nFADP (Switzerland)</li>
<li>PDPL (Argentina)</li>
<li>PDPL (Andorra)</li>
</ul>
<img class="wp-image-18734005526958 alignleft" style="letter-spacing: -0.176px" src="https://woocommerce.com/wp-content/uploads/2025/07/CPRA-and-US-Cookie-Consent-1.png?w=800" alt="CCPA/CPRA and US cookie consent" width="451" height="463" />
 
CCPA/CPRA and US Cookie Consent
Comply with CCPA, CPRA, and other U.S. privacy regulations by enabling clear opt-out mechanisms and transparent cookie usage disclosures. The extension supports “Do Not Sell or Share My Personal Information” links, honors Global Privacy Control (GPC) signals, and allows users to decline non-essential cookies.
Supported US State Laws: CCPA/CPRA (California), VCDPA (Virginia), CTDPA (Connecticut), CPA (Colorado), UCPA (Utah)
<img class="alignright wp-image-18734005527316" src="https://woocommerce.com/wp-content/uploads/2025/07/Deploy-a-Customizable-Cookie-Consent-Banner-2.png?w=800" alt="Deploy a Customizable Cookie Consent Banner " width="451" height="463" />
 
 
 
 
Deploy A Customizable Cookie Consent Banner
Design and display a fully customizable, ADA-compliant, and responsive cookie consent banner that aligns with your brand and complies with privacy laws.
Choose from various layouts like popups, bars, or boxes, and customize colors, text, and buttons to match your site’s look and feel. This extension allows you to add Accept, Reject, and Settings buttons to give users clear and accessible choices for managing their cookie preferences.
 
 
 
<img class="alignleft wp-image-18734005527329" src="https://woocommerce.com/wp-content/uploads/2025/07/Advanced-Cookie-Scanner-with-Automatic-Cookie-Blocker-1.png?w=800" alt="Advanced Cookie Scanner with Automatic Cookie Blocker " width="451" height="463" />
 
Advanced Cookie Scanner With Automatic Cookie Blocker
Effortlessly manage cookies on your website with the built-in advanced cookie scanner and automatic cookie blocker. The extension scans your website to detect all cookies in use and automatically categorizes them into groups like Necessary, Analytics, Advertising, and more. 
Once scanned, it enables you to block non-essential cookies by default until user consent is obtained, ensuring full compliance with GDPR and similar regulations.
<img class="alignright wp-image-18734005527336" style="letter-spacing: -0.176px" src="https://woocommerce.com/wp-content/uploads/2025/07/Deploy-a-Customizable-Cookie-Consent-Banner-3.png?w=800" alt="Certified Google CMP Partner with Google Consent Mode, Microsoft Clarity Consent Mode & UET Support " width="451" height="463" />
 
 
 
Certified Google CMP Partner with  Google Consent Mode, Microsoft Clarity Consent Mode, and UET Support
As a Google-certified Consent Management Platform (CMP), the extension offers seamless integration with Google’s ads and analytical services. It ensures your website stays compliant with the latest standards for data privacy and digital advertising.
Supported Integration:
<ul>
<li style="font-weight: 400">Google Consent Mode</li>
<li style="font-weight: 400">UET Consent Mode</li>
<li style="font-weight: 400">Microsoft Clarity Consent Mode</li>
<li style="font-weight: 400">IAB TCF v2.3</li>
</ul>
<img class="alignleft wp-image-18734005527358" src="https://woocommerce.com/wp-content/uploads/2025/07/Geo-Targeted-Cookie-Banner-1.png?w=800" alt="Geo-Targeted Cookie Banner " width="451" height="463" />
 
 
 
Geo-Targeted Cookie Banner
Display cookie consent banners only where legally required using the extension’s built-in geo-targeting feature.
This allows you to show or hide banners based on a visitor’s location, ensuring compliance with region-specific privacy laws like GDPR (EU), CCPA/CPRA (California), and more, without disrupting the user experience for others.
By targeting users based on their IP addresses, you can minimize banner fatigue for global audiences while maintaining full compliance in applicable regions.
<img class="alignright wp-image-18734005527375" src="https://woocommerce.com/wp-content/uploads/2025/07/Native-WordPress-Cookie-Consent-Solution-1.png?w=800" alt="Native WordPress Cookie Consent Solution" width="438" height="450" />
 
 
 
Native WordPress Cookie Consent Solution
This cookie consent solution integrates seamlessly with your site and supports the WP Consent API for smooth, reliable consent handling.
All consent data is securely stored in your own database—never on external servers—ensuring full control, privacy, and compliance with data storage regulations.
<img class="alignleft wp-image-18734005527391" src="https://woocommerce.com/wp-content/uploads/2025/07/Built-In-Free-Cookie-Policy-Generator-1.png?w=800" alt="Built-In Free Cookie Policy Generator " width="451" height="463" />
 
 
 
 
 
 
Built-In Free Cookie Policy Generator
Easily generate a compliant cookie policy for your website with this extension’s built-in cookie policy generator. It automatically pulls details from your scanned cookies, categorizes them, and creates a clear, user-friendly cookie policy page.
<img class="alignright wp-image-18734005527402" src="https://woocommerce.com/wp-content/uploads/2025/07/Keep-a-Consent-Log-2.png?w=800" alt="Keep a Consent Log " width="451" height="508" />
 
 
 
 
 
 
 
Keep A Consent Log
Maintain a complete, anonymized record of user consent to support compliance and auditing needs. The extension logs each visitor’s cookie preferences along with the date, time, and masked IP address.
You can easily export these consent logs in CSV format for legal reference, reporting, or internal review, ensuring transparency and accountability in your consent management process.
<img class="alignleft wp-image-18734005527420" src="https://woocommerce.com/wp-content/uploads/2025/07/Keep-a-Consent-Log-3.png?w=800" alt="Translation-Ready for WordPress Multilingual Websites" width="451" height="508" />
 
 
 
 
 
 
Translation-Ready for WordPress Multilingual Websites
Seamlessly deliver cookie consent experiences in multiple languages with built-in multilingual support.
The extension is fully compatible with popular translation tools like WPML, qTranslate, and Polylang, ensuring your banner aligns with the language settings of your website.
English is the default language, and the extension comes preloaded with several widely spoken European languages out of the box.

GDPR Cookie Consent

Deploy a cookie banner to comply with GDPR, CCPA, and other privacy laws.

<ul class="wccom-tick-list-primary">
<li>Signup Verification</li>
<li>Checkout Verification</li>
<li>Login Authentication</li>
<li>Customizable Verification Experience</li>
</ul>
<hr class="wccom-product-heading__hr" />
<h3>Signup Verification</h3>
When a user registers on your WooCommerce store, they must verify their email before their account is created. As soon as they complete the signup form, an automated verification email with a unique OTP (One-Time Password) is sent to their inbox. A verification popup appears on the registration page, prompting users to enter the OTP. If they do not verify their email, their account remains uncreated, ensuring that only valid customers can register. Users can request a new OTP if needed, and the verification process remains seamless and secure. This feature helps prevent fake registrations, spam accounts, and unauthorized signups, improving your store’s security and data accuracy.
<img class="aligncenter size-full wp-image-18734004926401" src="https://woocommerce.com/wp-content/uploads/2021/06/signup-verification.png" alt="" width="527" height="489" />
<h3>Checkout Verification</h3>
For guest users who want to make a purchase, email verification is required before completing the checkout process. This ensures that only genuine users can place orders, reducing fraudulent and spam purchases. When a guest user enters their email on the cart or checkout page, a verification email with an OTP (One-Time Password) is sent to their inbox. They must enter the OTP to proceed with the order.
Additionally, there is an option to require checkout verification only for free orders, ensuring that users claiming free products verify their email before completing the order.
<img class="aligncenter size-full wp-image-18734004926411" src="https://woocommerce.com/wp-content/uploads/2021/06/checkout-verification.png" alt="" width="534" height="506" />
<h3>Login Authentication</h3>
Enhance the security of your WooCommerce store with Login Authentication, ensuring that only verified users can access their accounts. This feature provides two levels of authentication to protect user accounts from unauthorized access.
The first option sends an email notification whenever a user logs in, informing them of the login activity, including details such as the device and location. This helps users stay informed and take action if any suspicious activity is detected.
The second option adds an extra layer of security by requiring email verification when a user logs in from a different browser, a new device, or after a certain period of inactivity. In this case, an OTP (One-Time Password) is sent to the registered email, and the user must enter it to complete the login process. Without verifying the OTP, they will not be able to access their account, ensuring protection against unauthorized logins.
<img class="aligncenter size-full wp-image-18734004926416" src="https://woocommerce.com/wp-content/uploads/2021/06/login-authentication.png" alt="" width="636" height="489" />
<h3>Customizable Verification Experience</h3>
Enhance the user experience with a fully customizable verification popup and email design. Store admins can personalize the verification popup’s layout, colors, text, and styling to match their brand identity, ensuring a seamless and professional look.
Additionally, the verification email content can be customized to include personalized messages, branding elements, and clear instructions for users to complete their email verification. These customization options help create a cohesive and branded experience while improving user engagement and trust.
<img class="aligncenter size-full wp-image-18734004926417" src="https://woocommerce.com/wp-content/uploads/2021/06/customizable-verification-experience.png" alt="" width="641" height="381" />

Customer Email Verification

The Customer Email Verification will verify your customers’ email addresses during registration and checkout to reduce registration and spam orders.

GDPR Cookie Consent vs Customer Email Verification