WordPress.org

Veneto

Get WordPress
WordPress.org

Plugin Directory

CookieFix – Cookie Consent & Compliance

CookieFix – Cookie Consent & Compliance

By inksect
Download

Description

CookieFix is a Consent Management Platform (CMP) that helps your WordPress site comply with GDPR, CCPA, and ePrivacy regulations.

Features:

  • Automatic third-party script blocking until visitor consent
  • Customizable consent banner (colors, text, position)
  • Cookie declaration table via shortcode
  • Google Consent Mode v2 support
  • TCF 2.0 compatible
  • Multi-language support (auto-detection)
  • WooCommerce compatible
  • Works with all caching plugins

How it works:

  1. The plugin injects a lightweight inline script into your site’s <head>
  2. This script automatically blocks third-party cookies and tracking scripts
  3. A consent banner appears asking visitors for their preferences
  4. Scripts are only unblocked after the visitor gives consent
  5. All consent records are stored for GDPR compliance proof

External Services

This plugin connects to the CookieFix consent management service (operated by CookieFix, https://cookiefix.ro). It is a client for that service and does not work without a CookieFix account and Domain Key.

What is loaded and sent, and when:

  • On every front-end page load, the plugin outputs an inline script that fetches the consent widget from https://cdn.cookiefix.ro/cc.js (with https://cookiefix.ro/api/public/widget as a fallback) and the banner configuration for your Domain Key from https://cookiefix.ro/api/public/config/{domain-key}. The request includes the visitor’s IP address and user agent, as any HTTP request does.
  • When a visitor accepts, rejects or customizes cookie categories, the choice is sent to https://cookiefix.ro/api/public/consent together with an anonymous consent identifier, the chosen categories, the page URL, the banner version and the visitor’s user agent. The IP address is used only to derive the country and is stored hashed. This record is the site owner’s proof of consent under GDPR.
  • When you save the Domain Key in Settings > CookieFix, the plugin validates it against https://cookiefix.ro/api/public/config/{domain-key}.
  • The [cookiefix_declaration] shortcode loads the cookie declaration table for your domain from https://cdn.cookiefix.ro/cd.js.

No data is sent to CookieFix from the WordPress admin other than the Domain Key validation above. The plugin does not send any data about your WordPress users.

Terms of service: https://cookiefix.ro/en/terms
Privacy policy: https://cookiefix.ro/en/privacy

Installation

  1. Upload the cookiefix folder to /wp-content/plugins/
  2. Activate the plugin through the ‘Plugins’ menu
  3. Go to Settings > CookieFix
  4. Enter your Domain Key from the CookieFix Dashboard
  5. Save settings – the banner will appear on your site immediately

To display a cookie declaration table:

Add the shortcode [cookiefix_declaration] to any page or post.

FAQ

My site uses a Content-Security-Policy. What do I need to allow?

Add https://cdn.cookiefix.ro and https://cookiefix.ro to both script-src and connect-src. The embed loads the widget with fetch() and evaluates it inline, so 'unsafe-inline' and 'unsafe-eval' are also needed in script-src. If the widget cannot load, the plugin releases the blocked scripts (so the site keeps working) and prints an explanation in the browser console.

The banner blocks a script that is required for my site. How do I exclude it?

Add data-cc-ignore to that script tag, or set the “Allowed hosts” option (or the data-cc-allow="host1.com,host2.com" attribute on the embed) with the domains that must always load. Analytics domains are classified as “statistics”, advertising domains as “marketing”, and consent tools such as Google Funding Choices are never blocked.

Where do I get a Domain Key?

Sign up for a free account at cookiefix.ro and add your domain. The Domain Key will be shown in the “Your Scripts” section.

Does it work with WooCommerce?

Yes. The plugin automatically whitelists WooCommerce core scripts and payment gateway scripts so they are never blocked.

Does it work with caching plugins?

Yes. The banner script is inline HTML and is preserved by all caching plugins including WP Super Cache, W3 Total Cache, WP Rocket, and LiteSpeed Cache.

What is Blocking Mode?

Automatic (recommended): All third-party scripts are blocked until the visitor consents. This is the safest option for GDPR compliance.

Manual: Only scripts you have categorized in the CookieFix dashboard are blocked. Use this if automatic blocking causes issues.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“CookieFix – Cookie Consent & Compliance” is open source software. The following people have contributed to this plugin.

Contributors

Translate “CookieFix – Cookie Consent & Compliance” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.0.5

  • Auto-blocker now classifies analytics scripts (Google Analytics, Tag Manager, Hotjar, Clarity…) as “statistics” instead of “marketing” even before the widget loads
  • Consent and security tools (Google Funding Choices, reCAPTCHA, Cloudflare Turnstile) are never blocked
  • New data-cc-allow attribute support and data-cc-ignore on individual tags for site-specific allow-lists
  • If the widget cannot be loaded (e.g. Content-Security-Policy), blocked scripts are released and a console error explains what to allow
  • Banner language follows the page language (<html lang>) before the browser language

1.0.4

  • Removed the self-hosted update mechanism; updates are delivered through WordPress.org
  • Documented external services in the readme

1.0.3

  • WordPress.org compliance: proper output escaping throughout
  • Updated text domain to match WordPress.org plugin slug
  • Removed remote image loading from settings page
  • Tested up to WordPress 6.9

1.0.2

  • Self-hosted auto-update system – updates appear in WordPress like any other plugin
  • Plugin info popup with changelog in “View Details”

1.0.1

  • Domain Key validation against CookieFix API on save
  • Error message when Domain Key is invalid or not found
  • Success message showing the connected domain name on valid key
  • Green “Connected to: domain.com” badge displayed next to the field

1.0.0

  • Initial release
  • Cookie consent banner with auto-blocking
  • Cookie declaration shortcode and widget
  • WooCommerce compatibility
  • Multi-language support

Meta

Ratings

No reviews have been submitted yet.

Your review

See all reviews

Contributors

Support

Got something to say? Need help?

View support forum