Сүрөттөө
Consentaro helps your site ask visitors for a clear cookie choice, remember that choice, and tell Google what is allowed — without a heavy cookie suite.
Who it is for
- Store owners using WooCommerce and Google tags
- Sites that need Google Consent Mode v2 without complexity
- Anyone who wants a small, fast consent banner
What it does
- Shows a friendly Accept / Deny / Customize banner when needed
- Sets Google Consent Mode v2 defaults (denied until the visitor chooses)
- Loads Google Tag Manager only after a choice (or when a banner is not required)
- Automatically holds known third-party trackers (Analytics, Meta Pixel, TikTok Pixel, and more) inert until the matching consent category is granted, with a review screen to override any script’s category
- Optionally focuses the banner on EU/EEA-style visitors (geo helper)
- Gates WooCommerce dataLayer events (view item, add to cart, purchase) by consent
- Plays nicely with popular page caches (WP Rocket, LiteSpeed, W3 Total Cache)
- Includes a plain-English Guide tab in wp-admin
What it does not do
- It is not legal advice
- It does not replace a full privacy policy or lawyer review for your region
Open Consentaro Guide after activation for a non-technical walkthrough.
Credits
Consentaro is developed and maintained by itsmanzur. All code, design, and assets in this plugin are original work created specifically for Consentaro.
Source code: https://github.com/itsmanzur/consentaro
External services
This plugin can connect to the following third-party services. Both are optional and only activate based on your own configuration; they are not used to track visitors on Consentaro’s behalf.
Google Tag Manager (Google LLC)
If you enter your own Google Tag Manager (GTM) container ID in the plugin settings, Consentaro loads the standard GTM container script from Google’s servers (googletagmanager.com) so that your GTM tags can run. The script is only loaded in the visitor’s browser after a consent decision has been recorded (or immediately, with Google Consent Mode v2 default/denied state, if you have not required a banner), consistent with Google Consent Mode v2. No data is sent to Consentaro or to us; any data transmitted to Google is governed by your own GTM/Google Analytics configuration and Google’s terms.
This service is provided by Google LLC: Terms of Service, Privacy Policy.
ip-api.com (geolocation, optional)
If geo-targeting is enabled in the plugin settings and the visitor’s country cannot be determined from your hosting provider (e.g. a Cloudflare header) or server-level GeoIP data, Consentaro sends the visitor’s IP address, server-side, to ip-api.com to determine their country. This is only used to decide whether the consent banner should be displayed (e.g. to EU/EEA/UK/CH visitors) and is not stored beyond a short server-side cache. No personal data is sent other than the IP address already present in the request.
This service is provided by ip-api.com: Terms of Service, Privacy Policy.
Скриншоттор
Орнотуу
- Upload the
consentarofolder to/wp-content/plugins/, or install the ZIP via Plugins Add New Upload Plugin. - Activate Consentaro through the Plugins screen.
- Open Consentaro in the admin menu.
- Read the Guide tab, then set your options under General and Design.
- (Optional) Enter your GTM container ID, for example
GTM-XXXXXXX. - Test in a private/incognito window: Accept / Deny should hide the banner and remember the choice.
FAQ.KG
-
Do I need Google Tag Manager?
-
No. The banner and Consent Mode defaults work without GTM. Add a GTM ID when you are ready to load tags after consent.
-
Try a private window (an earlier choice may be saved). Confirm the plugin is enabled. If “Geo-based banner” is on and you are outside the EU, the banner may stay hidden on purpose — turn Geo off temporarily to test.
-
Will this slow my site down?
-
Consentaro is built to stay light. Front-end assets are small and load only when needed.
-
Does it work with WooCommerce?
-
Yes. Shop events are sent to the data layer only when the visitor’s consent allows them.
-
Will script blocking break scripts I actually need?
-
It’s built to be conservative: only scripts matching a known tracker signature (Google Analytics, Meta Pixel, TikTok Pixel, and similar) are held back, and only until the matching consent category is granted. Anything Consentaro doesn’t recognize — including your theme, page builder, and WooCommerce scripts — is always left alone. You can also review every detected script under Consentaro Scripts and set its category by hand.
-
Is this a complete GDPR solution by itself?
-
Consentaro helps with Consent Mode and a clear visitor choice. Rules differ by country and business. This plugin does not replace legal advice.
Сын-пикирлер
There are no reviews for this plugin.
Contributors & Developers
“Consentaro – Cookie Consent & Google Consent Mode for WooCommerce” is open source software. The following people have contributed to this plugin.
Мүчөлөрү
Translate “Consentaro – Cookie Consent & Google Consent Mode for WooCommerce” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Өзгөртүүлөр
1.3.0
- Added: script blocking — recognized third-party trackers (Google Analytics, Meta Pixel, TikTok Pixel, LinkedIn Insight, Hotjar, and more) are automatically held inert in the page until the visitor grants the matching consent category, both for tags loaded from an external file and for inline snippets pasted directly into the theme
- Added: Scripts tab under Consentaro settings — review every third-party script detected on the site, see its auto-assigned category, and override it per script
- Added:
consentaro_tracker_signaturesandconsentaro_tracker_content_signaturesfilters so developers can extend or correct auto-detection - Added: unrecognized scripts (theme, page builder, WooCommerce, payment scripts) are never touched — detection is conservative by design
1.2.0
- Security: Cloudflare-supplied geo/IP headers (CF-IPCountry, CF-Connecting-IP) are no longer trusted by default, since a site not actually proxied through Cloudflare could have these headers spoofed to force incorrect country detection and bypass the consent banner
- Added: “This site is behind Cloudflare” toggle on the General tab — enable only if your site genuinely proxies traffic through Cloudflare, to restore the faster header-based geo detection
1.1.0
- Security: the WooCommerce dataLayer event script now uses hex-escaped JSON output, closing a stored-XSS path where a product/order field containing “” could break out of the inline script tag
- Fixed: uninstall cleanup was matching a stale transient prefix and never removed cached geolocation lookups from the database
- Fixed: all internal CSS classes, data attributes, and inline-script markers now consistently use the “consentaro-” prefix instead of a leftover “cf-” shorthand from an earlier plugin name, avoiding collisions with other plugins/services using that prefix
- Fixed: raised the declared minimum WordPress version to 6.6 — the admin bundle depends on the
react-jsx-runtimescript handle, which core only registers from 6.6 onward; on 6.4/6.5 the settings page’s React app failed to mount - Fixed: the settings-updated hook now receives the actual previous settings instead of a duplicate of the new ones
- Fixed: switching admin tabs before saving could silently discard unsaved General/Design edits
- Fixed: an invalid GTM Container ID was silently dropped on save with no warning
- Fixed: the Guide tab’s “enabled” checklist item could show a false state, disconnected from the real toggle
- Fixed: added the standard direct-file-access guard to all class files flagged by Plugin Check
- Fixed: silenced a Plugin Check nonce-verification warning in the activation handler with justification (only an isset() check on a WP-core-set flag, no user input is trusted)
- Added: unsaved-changes warning when leaving the admin page
- Added: inline validation message on the GTM Container ID field
- Added: one-time redirect to the Guide tab right after activation
- Added: Active / Disabled status badge in the admin header
- Added: “Reset to defaults” button on the Design tab
1.0.0
- Initial public release
- Google Consent Mode v2 defaults and updates
- Cookie banner with Accept / Deny / Customize
- Conditional Google Tag Manager loading
- Geo helper for banner display
- WooCommerce event gating (view_item, add_to_cart, purchase)
- Cache compatibility for WP Rocket, LiteSpeed Cache, and W3 Total Cache
- React admin: Guide, General, and Design tabs