CookieBoxs – GDPR/CCPA Cookie Consent & Google Consent Mode v2 vs DigiConsent – Cookie Consent Banner for GDPR, CCPA & ePrivacy Compliance

CookieBoxs is a cookie consent plugin for WordPress that helps site owners manage visitor consent preferences and configure consent-aware integrations. Free features include: Google Consent Mode v2 support Automatic script blocker and cookie cleaner 25+ built-in integrations Content blockers for embedded media and maps 40 interface languages Region presets Consent logging in WordPress Floating settings badge Self-hosted plugin files Optional PRO features include two-phase Cookie Scanner (server + browser-based detection), geo-targeting, additional templates, cookie declaration, consent analytics, tamper-proof consent records with CSV export and printable certificates, A/B testing of banner variants, granular per-service consent, a live banner design editor, branding options, and custom CSS. Documentation: cookieboxs.com Source Code All JavaScript and CSS files included in this plugin are human-readable and not minified or compiled. No build tools (npm, webpack, composer) are required to work with this plugin’s source code. All plugin-authored JavaScript and CSS is written directly and included as-is. Third-party libraries and embed snippets: assets/js/chart.min.js — Chart.js library (MIT License). Source code and unminified version available at: https://github.com/chartjs/Chart.js assets/js/cookieboxs-consent-mode.js — Contains standard third-party integration embed snippets (e.g., Google Tag Manager, Meta Pixel, TikTok Pixel, Microsoft Clarity, Hotjar, LiveChat, Intercom, etc.). These are the official JavaScript snippets provided by each service for website embedding, written in their standard compact form. Each snippet includes a source URL comment pointing to the official documentation. A full list of source URLs is also available in the file header comments. The surrounding plugin logic (consent state management, Google Consent Mode v2 setup, custom script injection) is authored by this plugin and is fully human-readable. Official documentation URLs for all embedded third-party snippets: Google Tag Manager: https://developers.google.com/tag-platform/tag-manager/web Meta Pixel: https://developers.facebook.com/docs/meta-pixel/get-started TikTok Pixel: https://ads.tiktok.com/help/article/get-started-pixel Microsoft Clarity: https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-setup Hotjar: https://help.hotjar.com/hc/en-us/articles/115011639927 Heap Analytics: https://developers.heap.io/docs/web Mixpanel: https://docs.mixpanel.com/docs/tracking-methods/sdks/javascript PostHog: https://posthog.com/docs/libraries/js LinkedIn Insight Tag: https://learn.microsoft.com/en-us/linkedin/marketing/integrations/ads-reporting/insight-tag Pinterest Tag: https://help.pinterest.com/en/business/article/install-the-pinterest-tag Snapchat Pixel: https://businesshelp.snapchat.com/s/article/snap-pixel-about Twitter/X Pixel: https://business.x.com/en/help/campaign-measurement-and-analytics/conversion-tracking-for-websites Microsoft Advertising UET: https://help.ads.microsoft.com/apex/index/3/en/56682 LiveChat: https://developers.livechat.com/docs/getting-started/installing-livechat Crisp: https://docs.crisp.chat/guides/chatbox-sdks/web-sdk/ Tawk.to: https://help.tawk.to/article/adding-a-tawk-to-widget-to-your-website Intercom: https://developers.intercom.com/installing-intercom/web/installation Yandex Metrica: https://yandex.com/support/metrica/code/counter-initialize.html Matomo: https://developer.matomo.org/guides/tracking-javascript-guide Privacy Policy CookieBoxs does not send visitor consent records to the plugin author’s servers. Consent records are stored in the WordPress database. Optional third-party integrations that you configure, such as analytics, advertising, chat, or embedded media services, connect directly from the visitor’s browser to those third-party providers after the relevant consent conditions are met. Admin-only connections used for plugin news, optional deactivation feedback, or optional license validation are described below. External Services This plugin uses external services only for user-configured integrations. Third-party integrations are optional, disabled by default, and only activated when the site administrator enables and configures them. The plugin does not offload any of its own assets (JavaScript, CSS, images) to external servers — all plugin files are included locally. Plugin services VisionSolutions API – plugin news and updates: used in the admin area only; sends plugin version, WordPress version, and site language when an administrator opens the settings page. Provider: VisionSolutions, https://visionsolutions.pl Terms of use: https://visionsolutions.pl/regulamin/ Privacy policy: https://visionsolutions.pl/polityka-prywatnosci/ VisionSolutions API – deactivation feedback (optional): sends selected reason, optional comment, site URL, WordPress version, and PHP version only if an administrator submits feedback during deactivation. Provider: VisionSolutions Terms of use: https://visionsolutions.pl/regulamin/ Privacy policy: https://visionsolutions.pl/polityka-prywatnosci/ VisionSolutions API – PRO license validation (optional): sends license key, site domain, and plugin version on activation and periodic validation. Provider: VisionSolutions Terms of use: https://visionsolutions.pl/regulamin/ Privacy policy: https://visionsolutions.pl/polityka-prywatnosci/ ipapi.co geolocation API (optional, PRO): used only when geo-targeting is enabled and fallback geolocation is needed; sends visitor IP address. Provider: ipapi Terms of use: https://ipapi.co/terms/ Privacy policy: https://ipapi.co/privacy/ Cookie Scanner (admin-initiated, PRO): two-phase scan. Phase 1 (server): sends requests from your server to your own website pages to detect cookies and tracking scripts from HTML. Phase 2 (browser): loads the scanned page in a hidden iframe within the administrator’s browser to detect cookies set by JavaScript (e.g. pixels loaded via Google Tag Manager). All scanning happens locally — no external provider is contacted. Optional integrations (services) These are third-party services that the site administrator can optionally enable. When enabled, the plugin loads the official embed snippet provided by each service, which connects the visitor’s browser directly to that service provider. These are service integrations, not offloaded plugin assets. Each integration is disabled by default and only activates when the administrator provides their account ID. Google Tag Manager – tag management service; may load on page view and use Consent Mode signals. Loaded from: www.googletagmanager.com. Provider: Google LLC. Terms of use: https://marketingplatform.google.com/about/analytics/terms/us/ Privacy policy: https://policies.google.com/privacy Google Analytics 4 – analytics service; loaded from www.googletagmanager.com/gtag/js via wp_enqueue_script. Provider: Google LLC. Terms of use: https://marketingplatform.google.com/about/analytics/terms/us/ Privacy policy: https://policies.google.com/privacy Google Ads – conversion tracking and remarketing service; loaded from www.googletagmanager.com/gtag/js via wp_enqueue_script. Provider: Google LLC. Terms of use: https://ads.google.com/intl/en/home/terms/ Privacy policy: https://policies.google.com/privacy Meta Pixel – advertising measurement service; loaded from connect.facebook.net. Provider: Meta Platforms, Inc. Terms of use: https://www.facebook.com/legal/terms Privacy policy: https://www.facebook.com/privacy/policy/ TikTok Pixel – advertising measurement service; loaded from analytics.tiktok.com. Provider: TikTok Inc. / ByteDance Ltd. Terms of use: https://ads.tiktok.com/i18n/official/policy/business-products-terms Privacy policy: https://www.tiktok.com/legal/privacy-policy Microsoft Clarity – session analytics and heatmaps service; loaded from www.clarity.ms. Provider: Microsoft Corporation. Terms of use: https://clarity.microsoft.com/terms Privacy policy: https://privacy.microsoft.com/en-us/privacystatement Hotjar – heatmaps, recordings, and feedback service; loaded from static.hotjar.com. Provider: Hotjar Ltd. Terms of use: https://www.hotjar.com/legal/policies/terms-of-service/ Privacy policy: https://www.hotjar.com/legal/policies/privacy/ Matomo – analytics service; loaded from the site administrator’s configured Matomo instance URL. Provider: InnoCraft Ltd. or the site owner’s Matomo host. Terms of use: https://matomo.org/matomo-cloud-terms-of-service/ Privacy policy: https://matomo.org/matomo-cloud-privacy-policy/ Yandex Metrica – analytics service; loaded from mc.yandex.ru. Provider: Yandex LLC. Terms of use: https://yandex.com/legal/metrica_termsofuse/ Privacy policy: https://yandex.com/legal/confidential/ Heap Analytics – analytics service; loaded from cdn.heapanalytics.com. Provider: Heap Inc. Terms of use: https://heap.io/legal/heap-terms-of-service Privacy policy: https://heap.io/legal/privacy Mixpanel – analytics service; loaded from cdn.mxpnl.com. Provider: Mixpanel, Inc. Terms of use: https://mixpanel.com/legal/terms-of-use/ Privacy policy: https://mixpanel.com/legal/privacy-policy/ PostHog – analytics and feature flags service; loaded from the site administrator’s configured PostHog host. Provider: PostHog, Inc. Terms of use: https://posthog.com/terms Privacy policy: https://posthog.com/privacy LinkedIn Insight Tag – advertising measurement service; loaded from snap.licdn.com. Provider: LinkedIn Corporation. Terms of use: https://www.linkedin.com/legal/l/li-marketing-terms Privacy policy: https://www.linkedin.com/legal/privacy-policy Pinterest Tag – advertising measurement service; loaded from s.pinimg.com. Provider: Pinterest, Inc. Terms of use: https://policy.pinterest.com/en/terms-of-service Privacy policy: https://policy.pinterest.com/en/privacy-policy Snapchat Pixel – advertising measurement service; loaded from sc-static.net. Provider: Snap Inc. Terms of use: https://snap.com/en-US/terms Privacy policy: https://snap.com/en-US/privacy/privacy-policy Twitter/X Pixel – advertising measurement service; loaded from static.ads-twitter.com. Provider: X Corp. Terms of use: https://twitter.com/en/tos Privacy policy: https://twitter.com/en/privacy Microsoft Advertising UET – conversion tracking service; loaded from bat.bing.com. Provider: Microsoft Corporation. Terms of use: https://about.ads.microsoft.com/en-us/policies/legal Privacy policy: https://privacy.microsoft.com/en-us/privacystatement Intercom – customer messaging service; loaded from widget.intercom.io and api-iam.intercom.io. Provider: Intercom, Inc. Terms of use: https://www.intercom.com/legal/terms-and-policies Privacy policy: https://www.intercom.com/legal/privacy LiveChat – support chat service; loaded from cdn.livechatinc.com. Provider: LiveChat, Inc. Terms of use: https://www.livechat.com/legal/terms-of-service/ Privacy policy: https://www.livechat.com/legal/privacy-policy/ Crisp – customer messaging and chat service; loaded from client.crisp.chat. Provider: Crisp IM SAS. Terms of use: https://crisp.chat/en/terms/ Privacy policy: https://crisp.chat/en/privacy/ Tawk.to – support chat service; loaded from embed.tawk.to. Provider: Tawk.to Ltd. Terms of use: https://www.tawk.to/legal/terms-of-service/ Privacy policy: https://www.tawk.to/legal/privacy-policy/ Script blocker safe domains The automatic script blocker does not block scripts from essential service domains (payment gateways, CAPTCHAs, translation). These domains are whitelisted so the script blocker does not interfere with site-critical functionality provided by other plugins or themes. The CookieBoxs plugin itself does not load any files from these domains — they are only whitelisted to prevent breakage: Stripe – payment processing service; loaded by other plugins from js.stripe.com and checkout.stripe.com. Provider: Stripe, Inc. Terms of use: https://stripe.com/legal/ssa Privacy policy: https://stripe.com/privacy PayPal – payment processing service; loaded by other plugins from www.paypal.com and www.paypalobjects.com. Provider: PayPal Holdings, Inc. Terms of use: https://www.paypal.com/us/legalhub/useragreement-full Privacy policy: https://www.paypal.com/us/legalhub/privacy-full Google reCAPTCHA – spam protection service; loaded by other plugins from recaptcha.net. Provider: Google LLC. Terms of use: https://policies.google.com/terms Privacy policy: https://policies.google.com/privacy hCaptcha – spam protection service; loaded by other plugins from js.hcaptcha.com. Provider: Intuition Machines, Inc. Terms of use: https://www.hcaptcha.com/terms Privacy policy: https://www.hcaptcha.com/privacy Cloudflare Turnstile – bot protection service; loaded by other plugins from challenges.cloudflare.com. Provider: Cloudflare, Inc. Terms of use: https://www.cloudflare.com/terms/ Privacy policy: https://www.cloudflare.com/privacypolicy/ Google Translate – translation service widget; loaded by other plugins from translate.google.com and translate.googleapis.com. Provider: Google LLC. Terms of use: https://policies.google.com/terms Privacy policy: https://policies.google.com/privacy Content blockers Content blockers are an optional feature that replaces embedded third-party media (YouTube, Vimeo, Google Maps) with a placeholder until the visitor grants consent. When consent is given, the embed loads normally from the service provider. YouTube – video embeds can be blocked until consent; loaded from www.youtube.com and www.youtube-nocookie.com. Provider: Google LLC. Terms of use: https://www.youtube.com/t/terms Privacy policy: https://policies.google.com/privacy Vimeo – video embeds can be blocked until consent; loaded from player.vimeo.com and vimeo.com. Provider: Vimeo, Inc. Terms of use: https://vimeo.com/terms Privacy policy: https://vimeo.com/privacy Google Maps – map embeds can be blocked until consent; loaded from www.google.com/maps and maps.googleapis.com. Provider: Google LLC. Terms of use: https://cloud.google.com/maps-platform/terms Privacy policy: https://policies.google.com/privacy

🍪 COOKIE CONSENT FOR GDPR, CCPA, LGPD & EPRIVACY DigiConsent is a powerful cookie consent plugin that helps you comply with GDPR (EU), CCPA/CPRA (California), LGPD (Brazil), POPIA (South Africa), and other privacy regulations while maintaining a great user experience. Create beautiful, customizable cookie banners with advanced features like script management, detailed analytics, and geolocation targeting. ✅ FREE FEATURES Everything you need for cookie compliance, included in the free version: Beautiful Cookie Banners – Modern, customizable designs that match your brand Multiple Banner Positions – Bottom, top, fullscreen overlay, or custom positioning Cookie Categories – Essential, analytics, marketing, and functional categories Granular Consent – Let users choose exactly which cookies they accept Consent Logging – Track and audit all consent decisions with timestamps Analytics Dashboard – View acceptance rates, trends, and statistics Advanced Color Picker – RGB/RGBA support with transparency control Import/Export Settings – Easily transfer settings between sites Quick Script Setup – Built-in templates for Google Analytics, Facebook Pixel, and more Google Consent Mode v2 – Full support for Google’s consent framework Privacy Policy Links – Direct links to your privacy policy page Responsive Design – Perfect display on all devices and screen sizes Translation Ready – Full support for multilingual sites 🚀 PRO FEATURES Upgrade to DigiConsent Pro for advanced targeting and behavior control: 🌍 Geolocation Targeting * Country Targeting – Show different banners to visitors from specific countries * EU/EEA Automatic – Target all EU/EEA countries with one click * US State Targeting – Comply with state-specific laws (CPRA, VCDPA, etc.) * IP Geolocation – Automatic visitor location detection using MaxMind GeoLite2 * Location Rules – Create custom rules with different settings per region * Fallback Options – Control what happens when location can’t be detected 🎯 Advanced Behavior Controls * Display Delay – Show banner after X seconds * Scroll Trigger – Display banner after user scrolls X% of page * Exit Intent – Show banner when user attempts to leave * Auto-Hide – Automatically hide banner after X seconds * Page Lock – Prevent page interaction until consent is given * Blur Effect – Blur page content until user makes a choice * ESC Key Close – Allow users to close banner with ESC key 🎨 Enhanced Design Options * Hero Media – Add images or videos to your banner * Video Backgrounds – Autoplay, loop, and mute controls * Multiple Layouts – Additional banner layout options * Per-Location Customization – Different designs for different countries ⚙️ Regional Compliance * Regional Consent Modes – Different opt-in/opt-out behavior per location * Regional Google Consent Mode – Location-specific GCM settings * Consent Expiry Per Region – Different cookie lifetimes by location * Regional Button Visibility – Show/hide buttons based on location 📜 Custom Script Management * Head Scripts – Add custom JavaScript/tracking codes to the document head * Body Scripts – Inject scripts right after the opening body tag * Footer Scripts – Add scripts before the closing body tag * Per-Category Scripts – Assign custom scripts to specific cookie categories * Consent-Based Loading – Scripts only execute after user consent Learn more about DigiConsent Pro → 🎨 Extensive Customization Every aspect of the cookie banner can be customized: Colors & Transparency – Advanced color picker with RGBA support Typography – Customize fonts, sizes, and styles Button Styling – Full control over button appearance Animations – Choose from slide, fade, zoom, or no animation Custom Content – Write your own banner text and privacy policy links Logo Integration – Add your brand logo to the banner 📊 Analytics & Reporting Track consent performance with detailed analytics: Consent Statistics – View total accepts, rejects, and acceptance rates Trend Charts – Visualize consent data over time Category Analytics – See which cookie categories users accept most Geographic Distribution – View consents by country (requires Pro) Device Analytics – Track consents by device type Consent Logs – Detailed audit trail of all consent decisions Export Data – Download consent logs for compliance reporting 🔧 Developer-Friendly Built with developers in mind: Clean Code – Well-structured, documented codebase Hooks & Filters – Extensive customization options REST API Ready – Modern WordPress development practices No jQuery – Vanilla JavaScript for better performance Template Override – Override templates in your theme 🚀 Performance Optimized DigiConsent is built for speed: Lightweight – Minimal footprint on page load Conditional Loading – Scripts load only when needed Optimized Assets – Minified CSS and JavaScript No External Dependencies – Everything self-contained Cache Compatible – Works with all major caching plugins 🤝 Privacy First We take privacy seriously: No Data Collection – DigiConsent doesn’t send data to external servers Local Storage – All consent data stored on your server Open Source – Transparent, auditable code Regular Updates – Stay compliant with changing regulations Privacy Law Compliant – Built for GDPR, CCPA, LGPD, ePrivacy and other regulations External Services IMPORTANT: DigiConsent itself does not connect to any external services. However, it provides optional integration templates that allow users to add third-party tracking and analytics scripts to their cookie categories. These scripts are only loaded when users provide the necessary IDs/keys and when visitors consent to the respective cookie category. When you configure these optional integrations, the following external services may be contacted: Analytics Services (Optional) Google Analytics 4 * Purpose: Web analytics and tracking * Data Sent: User behavior, page views, events (configured by site owner) * When: Only when visitor consents to analytics cookies AND site owner has configured a GA4 Measurement ID * Service URL: https://www.googletagmanager.com/gtag/js * Privacy Policy: https://policies.google.com/privacy * Terms of Service: https://marketingplatform.google.com/about/analytics/terms/us/ Google Tag Manager * Purpose: Tag and script management * Data Sent: Varies based on configured tags * When: Only when visitor consents to analytics cookies AND site owner has configured a GTM Container ID * Service URL: https://www.googletagmanager.com/gtm.js * Privacy Policy: https://policies.google.com/privacy * Terms of Service: https://marketingplatform.google.com/about/analytics/terms/us/ Hotjar * Purpose: Behavior analytics and user feedback * Data Sent: User interactions, heatmaps, session recordings * When: Only when visitor consents to analytics cookies AND site owner has configured a Hotjar Site ID * Service URL: https://static.hotjar.com * Privacy Policy: https://www.hotjar.com/legal/policies/privacy/ * Terms of Service: https://www.hotjar.com/legal/policies/terms-of-service/ Marketing Services (Optional) Facebook Pixel * Purpose: Ad tracking and conversion measurement * Data Sent: Page views, events, user behavior * When: Only when visitor consents to marketing cookies AND site owner has configured a Facebook Pixel ID * Service URL: https://connect.facebook.net and https://www.facebook.com/tr * Privacy Policy: https://www.facebook.com/privacy/policy/ * Terms of Service: https://www.facebook.com/legal/terms LinkedIn Insight Tag * Purpose: LinkedIn ad tracking and analytics * Data Sent: Page views, conversions, demographic data * When: Only when visitor consents to marketing cookies AND site owner has configured a LinkedIn Partner ID * Service URL: https://snap.licdn.com and https://px.ads.linkedin.com * Privacy Policy: https://www.linkedin.com/legal/privacy-policy * Terms of Service: https://www.linkedin.com/legal/user-agreement TikTok Pixel * Purpose: TikTok ad tracking and analytics * Data Sent: Page views, events, conversions * When: Only when visitor consents to marketing cookies AND site owner has configured a TikTok Pixel ID * Service URL: https://analytics.tiktok.com * Privacy Policy: https://www.tiktok.com/legal/privacy-policy * Terms of Service: https://www.tiktok.com/legal/terms-of-use Functional Services (Optional) Google Maps * Purpose: Interactive maps display * Data Sent: Location requests, map interactions * When: Only when visitor consents to functional cookies AND site owner has configured a Google Maps API Key * Service URL: https://maps.googleapis.com * Privacy Policy: https://policies.google.com/privacy * Terms of Service: https://cloud.google.com/maps-platform/terms Google reCAPTCHA * Purpose: Spam and bot prevention * Data Sent: User interaction data, browser information * When: Only when visitor consents to functional cookies AND site owner has configured a reCAPTCHA Site Key * Service URL: https://www.google.com/recaptcha/api.js * Privacy Policy: https://policies.google.com/privacy * Terms of Service: https://policies.google.com/terms Intercom * Purpose: Customer messaging and support * Data Sent: User information, messages, behavior data * When: Only when visitor consents to functional cookies AND site owner has configured an Intercom App ID * Service URL: https://widget.intercom.io and https://api-iam.intercom.io * Privacy Policy: https://www.intercom.com/legal/privacy * Terms of Service: https://www.intercom.com/legal/terms-and-policies Zendesk Chat * Purpose: Customer support chat * Data Sent: Chat messages, user information * When: Only when visitor consents to functional cookies AND site owner has configured a Zendesk Key * Service URL: https://static.zdassets.com * Privacy Policy: https://www.zendesk.com/company/agreements-and-terms/privacy-notice/ * Terms of Service: https://www.zendesk.com/company/agreements-and-terms/master-subscription-agreement/ Note: All of these integrations are completely optional. DigiConsent does not send any data to these services unless you explicitly configure the integration AND visitors provide consent. You are responsible for ensuring compliance with the terms of service and privacy policies of any third-party services you choose to integrate. Upgrade to Pro Get DigiConsent Pro for advanced features: 📜 Custom script management (head, body, footer injection) 🌍 Geolocation targeting (countries, EU, US states) 🎯 Advanced behavior controls (delays, scroll triggers, exit intent) 📍 Location-based rules with regional settings 🎨 Hero media support (images and videos) ⚙️ Regional compliance features 🔄 Priority support and updates Upgrade to DigiConsent Pro →