<div class="woo-sc-box alert">
TCF v2.3 takes effect on 28 February 2026 — sites that don’t update may have consent rejected, causing ads to switch to limited mode and reduce revenue. This plugin supports the latest IAB TCF v2.3 consent requirements
</div>
WebToffee GDPR Cookie Consent for WooCommerce helps websites comply with privacy laws like GDPR, CCPA, and more by enabling cookie consent management through customizable banners, popups, and widgets.
It blocks non-essential cookies until consent is given, supports granular control by cookie category, integrates with Google Consent Mode v2, IAB TCF v2.3, and Microsoft Clarity Consent Mode, and offers features like Geo-targeting, multilingual support, advanced cookie scanning, consent logs, and a built-in cookie policy generator.
<img class="size-medium wp-image-18734005527500 aligncenter" src="https://woocommerce.com/wp-content/uploads/2025/07/Frame-6637-1.png?w=840" alt="Advanced Features of the GDPR Cookie Consent extension " width="840" height="388" />
<img class="wp-image-18734005526928 alignright" src="https://woocommerce.com/wp-content/uploads/2025/07/GDPR-EU-Cookie-Law-Compliance-1.png?w=800" alt="GDPR and EU cookie law compliance" width="451" height="463" />
GDPR and EU Cookie Law Compliance
Ensure your website meets GDPR and EU Cookie Law requirements with built-in tools for transparent consent management. The extension enables prior consent collection, automatic blocking of non-essential cookies, and clear categorization of cookie types. It also provides users with granular control over their consent preferences and the ability to revoke consent at any time.
Supported EU cookie laws:
<ul>
<li>GDPR (EU and UK)</li>
<li>LGPD (Brazil)</li>
<li>PIPEDA (Canada)</li>
<li>Privacy Act (Australia)</li>
<li>POPIA (South Africa)</li>
<li>nFADP (Switzerland)</li>
<li>PDPL (Argentina)</li>
<li>PDPL (Andorra)</li>
</ul>
<img class="wp-image-18734005526958 alignleft" style="letter-spacing: -0.176px" src="https://woocommerce.com/wp-content/uploads/2025/07/CPRA-and-US-Cookie-Consent-1.png?w=800" alt="CCPA/CPRA and US cookie consent" width="451" height="463" />
 
CCPA/CPRA and US Cookie Consent
Comply with CCPA, CPRA, and other U.S. privacy regulations by enabling clear opt-out mechanisms and transparent cookie usage disclosures. The extension supports “Do Not Sell or Share My Personal Information” links, honors Global Privacy Control (GPC) signals, and allows users to decline non-essential cookies.
Supported US State Laws: CCPA/CPRA (California), VCDPA (Virginia), CTDPA (Connecticut), CPA (Colorado), UCPA (Utah)
<img class="alignright wp-image-18734005527316" src="https://woocommerce.com/wp-content/uploads/2025/07/Deploy-a-Customizable-Cookie-Consent-Banner-2.png?w=800" alt="Deploy a Customizable Cookie Consent Banner " width="451" height="463" />
 
 
 
 
Deploy A Customizable Cookie Consent Banner
Design and display a fully customizable, ADA-compliant, and responsive cookie consent banner that aligns with your brand and complies with privacy laws.
Choose from various layouts like popups, bars, or boxes, and customize colors, text, and buttons to match your site’s look and feel. This extension allows you to add Accept, Reject, and Settings buttons to give users clear and accessible choices for managing their cookie preferences.
 
 
 
<img class="alignleft wp-image-18734005527329" src="https://woocommerce.com/wp-content/uploads/2025/07/Advanced-Cookie-Scanner-with-Automatic-Cookie-Blocker-1.png?w=800" alt="Advanced Cookie Scanner with Automatic Cookie Blocker " width="451" height="463" />
 
Advanced Cookie Scanner With Automatic Cookie Blocker
Effortlessly manage cookies on your website with the built-in advanced cookie scanner and automatic cookie blocker. The extension scans your website to detect all cookies in use and automatically categorizes them into groups like Necessary, Analytics, Advertising, and more. 
Once scanned, it enables you to block non-essential cookies by default until user consent is obtained, ensuring full compliance with GDPR and similar regulations.
<img class="alignright wp-image-18734005527336" style="letter-spacing: -0.176px" src="https://woocommerce.com/wp-content/uploads/2025/07/Deploy-a-Customizable-Cookie-Consent-Banner-3.png?w=800" alt="Certified Google CMP Partner with Google Consent Mode, Microsoft Clarity Consent Mode & UET Support " width="451" height="463" />
 
 
 
Certified Google CMP Partner with  Google Consent Mode, Microsoft Clarity Consent Mode, and UET Support
As a Google-certified Consent Management Platform (CMP), the extension offers seamless integration with Google’s ads and analytical services. It ensures your website stays compliant with the latest standards for data privacy and digital advertising.
Supported Integration:
<ul>
<li style="font-weight: 400">Google Consent Mode</li>
<li style="font-weight: 400">UET Consent Mode</li>
<li style="font-weight: 400">Microsoft Clarity Consent Mode</li>
<li style="font-weight: 400">IAB TCF v2.3</li>
</ul>
<img class="alignleft wp-image-18734005527358" src="https://woocommerce.com/wp-content/uploads/2025/07/Geo-Targeted-Cookie-Banner-1.png?w=800" alt="Geo-Targeted Cookie Banner " width="451" height="463" />
 
 
 
Geo-Targeted Cookie Banner
Display cookie consent banners only where legally required using the extension’s built-in geo-targeting feature.
This allows you to show or hide banners based on a visitor’s location, ensuring compliance with region-specific privacy laws like GDPR (EU), CCPA/CPRA (California), and more, without disrupting the user experience for others.
By targeting users based on their IP addresses, you can minimize banner fatigue for global audiences while maintaining full compliance in applicable regions.
<img class="alignright wp-image-18734005527375" src="https://woocommerce.com/wp-content/uploads/2025/07/Native-WordPress-Cookie-Consent-Solution-1.png?w=800" alt="Native WordPress Cookie Consent Solution" width="438" height="450" />
 
 
 
Native WordPress Cookie Consent Solution
This cookie consent solution integrates seamlessly with your site and supports the WP Consent API for smooth, reliable consent handling.
All consent data is securely stored in your own database—never on external servers—ensuring full control, privacy, and compliance with data storage regulations.
<img class="alignleft wp-image-18734005527391" src="https://woocommerce.com/wp-content/uploads/2025/07/Built-In-Free-Cookie-Policy-Generator-1.png?w=800" alt="Built-In Free Cookie Policy Generator " width="451" height="463" />
 
 
 
 
 
 
Built-In Free Cookie Policy Generator
Easily generate a compliant cookie policy for your website with this extension’s built-in cookie policy generator. It automatically pulls details from your scanned cookies, categorizes them, and creates a clear, user-friendly cookie policy page.
<img class="alignright wp-image-18734005527402" src="https://woocommerce.com/wp-content/uploads/2025/07/Keep-a-Consent-Log-2.png?w=800" alt="Keep a Consent Log " width="451" height="508" />
 
 
 
 
 
 
 
Keep A Consent Log
Maintain a complete, anonymized record of user consent to support compliance and auditing needs. The extension logs each visitor’s cookie preferences along with the date, time, and masked IP address.
You can easily export these consent logs in CSV format for legal reference, reporting, or internal review, ensuring transparency and accountability in your consent management process.
<img class="alignleft wp-image-18734005527420" src="https://woocommerce.com/wp-content/uploads/2025/07/Keep-a-Consent-Log-3.png?w=800" alt="Translation-Ready for WordPress Multilingual Websites" width="451" height="508" />
 
 
 
 
 
 
Translation-Ready for WordPress Multilingual Websites
Seamlessly deliver cookie consent experiences in multiple languages with built-in multilingual support.
The extension is fully compatible with popular translation tools like WPML, qTranslate, and Polylang, ensuring your banner aligns with the language settings of your website.
English is the default language, and the extension comes preloaded with several widely spoken European languages out of the box.

GDPR Cookie Consent

Deploy a cookie banner to comply with GDPR, CCPA, and other privacy laws.

<h2>Increase security without changing your site</h2>
There are plenty of security extensions, so why should you choose this one?
Invisible reCaptcha has been built with three major aims:
<ol>
<li>Fight bots without changing your website layout or requiring any action from the end user.</li>
<li>Be as simple as possible to set up. Starting from scratch, you’ll be ready in less than 10 minutes.</li>
<li>Not weigh down your pages: only a 4KB javascript file (no jQuery-dependent), and only where needed.</li>
</ol>
It’s developed by <a href="https://lcweb.it/" target="_blank" rel="noopener">LCweb</a>: creating the best WordPress premium plugins since 2012.
<h2 id="h-top-3-features">The security system you prefer</h2>
The choice is yours:
<ul class="wccom-tick-list-primary">
<li>Google reCaptcha v2 – eventually asking for a popup puzzle solve</li>
<li>Google reCaptcha v3 – totally passive</li>
<li>Honey-pot – doesn’t rely on any third-party library, being super-fast and GDPR-proof</li>
</ul>
All of them are totally free to be used. No extra subscription is needed!
<h2>Complete forms coverage</h2>
Choose whether to use it on one/all of these contexts:
<ul class="wccom-tick-list-primary">
<li>WordPress login forms</li>
<li>WordPress registration forms</li>
<li>WordPress password reset form</li>
<li>WooCommerce login form</li>
<li>WooCommerce registration form</li>
<li>WooCommerce password reset form</li>
<li>WooCommerce checkout form</li>
<li>WooCommerce checkout (Gutenberg block)</li>
</ul>
<h2>Prevent brute-force attacks</h2>
What if traditional anti-spam measures aren’t enough? Bot behavior is similar to that of real users; the ultimate solution is to prevent unlimited submissions.
<ul class="wccom-tick-list-primary">
<li>Tracks any server activity linked to the above-listed form submissions</li>
<li>Sets a submission limit that blocks further actions for a specified period</li>
<li>Prevents server outages caused by repeated attempts</li>
<li>Prevents bots from guessing credentials and improves website security</li>
</ul>
<h2>Refused interactions log</h2>
Discover how your security works behind the scenes. This extension tracks every failed attempt, helping you understand and strengthen your site’s defenses.
<ul class="wccom-tick-list-primary">
<li>Logs every failed anti-spam or reCAPTCHA validation</li>
<li>Displays IP addresses, timestamps and target pages involved</li>
<li>Helps detect recurring attack patterns and suspicious behavior</li>
<li>Assists in creating precise server or firewall rules</li>
</ul>
<h2>Extras</h2>
A simple-to-use extension doesn’t have to be a poor one. Here are some fine tunings included:
<ul class="wccom-tick-list-primary">
<li>reCaptcha v3 target score: set the target value to mark users as bots</li>
<li>reCaptcha badge hiding: Do you want to have a 100% clean result? The plugin can hide the side-page badge</li>
<li>target only guests: do you want to affect the checkout form only for new users? It’s indeed possible!</li>
<li>ajax-based websites support: do you have a website loading forms asynchronously? Invisible reCaptcha is compatible also for them!</li>
<li>Fully compatible with <a href="https://be.elementor.com/visit/?bta=1930&brand=elementor" target="_blank" rel="noopener">Elementor Pro</a> checkout!</li>
</ul>

Invisible reCAPTCHA

The simplest way to boost security against bots and brute-force attacks.

GDPR Cookie Consent vs Invisible reCAPTCHA