Title: Privatto
Author: Sergio Inglez
Published: <strong>Июль 13, 2026-ж.</strong>
Last modified: Июль 13, 2026-ж.

---

Плагиндерди издөө

![](https://ps.w.org/privatto/assets/banner-772x250.png?rev=3605989)

![](https://ps.w.org/privatto/assets/icon-256x256.png?rev=3605989)

# Privatto

 Автору [Sergio Inglez](https://profiles.wordpress.org/sergioinglez/)

[Жүктөө](https://downloads.wordpress.org/plugin/privatto.2.1.0.zip)

 * [Кенен маалымат](https://ky.wordpress.org/plugins/privatto/#description)
 * [Сын-пикирлер](https://ky.wordpress.org/plugins/privatto/#reviews)
 *  [Орнотуу](https://ky.wordpress.org/plugins/privatto/#installation)
 * [Development](https://ky.wordpress.org/plugins/privatto/#developers)

 [Колдоо](https://wordpress.org/support/plugin/privatto/)

## Сүрөттөө

Privatto is a self-hosted consent management platform (CMP) for WordPress, built
with Brazil’s LGPD and the GDPR in mind. It requires no external service.

**Main features:**

 * Granular consent banner with per-category preferences (necessary, analytics, 
   marketing, embeds).
 * Automatic blocking of third-party scripts and iframes via output buffering: matching`
   <script>` tags are switched to `type="text/plain"` before the page reaches the
   browser, so nothing runs before consent.
 * Google Consent Mode v2 injected with everything denied by default, updated when
   the visitor decides.
 * Proof of consent stored in your own database table: unique consent ID, action,
   categories (JSON), policy version, hashed IP (optional), country, user agent,
   page URL, and UTC timestamp. Exportable to CSV for audits.
 * LGPD document generator: privacy policy, terms of use, cookie policy, returns
   policy, and a plain-language summary, built from a guided form. Optional AI text
   refinement (Groq API) for the business description only — mandatory legal clauses
   never go through AI.
 * Data subject rights form (LGPD art. 18) with tracked protocols, 15-day response
   deadline monitoring, and an admin queue.
 * Simplified record of processing activities (ROPA) export, as required by ANPD
   Resolution CD/ANPD No. 2/2022, including for small-scale processing agents.
 * “Cookie preferences” reopen link so visitors can change or revoke consent at 
   any time.

**Important notice:** the generated documents are a structured starting point aligned
with the LGPD; they are not legal advice. Review by a lawyer is recommended, especially
for complex operations.

### External services

This plugin connects to one optional third-party service:

Groq API — used only if you paste a Groq API key in Privatto  LGPD Documents. It
is used to (1) rewrite, in more natural language, the free-text description of your
site/business that you typed into the document form, and (2) generate a plain-language
summary of your privacy policy for the same document. Only that free text (and the
derived facts needed to build the summary) is sent; the mandatory legal clauses 
are always generated locally and never sent to the API. This call happens only when
you click the “Refine with AI” / “Generate summary with AI” buttons — never automatically
and never on the public-facing site. If no key is configured, these buttons are 
disabled and everything works normally without any external call.
 Service: Groq(
https://groq.com ). Terms of Service: https://groq.com/terms-of-use · Privacy Policy:
https://groq.com/privacy-policy

Note: the plugin also ships a static reference catalog (service name, vendor, and
known script/domain signatures) used only to help the document generator recognize
and describe third-party services _that your own site may already be using_ (e.g.
Google Analytics, Meta Pixel, Stripe) when writing your cookie policy. This catalog
does not make any outbound request to those services — it is local, offline pattern-
matching against your own site’s HTML.

## Орнотуу

 1. Upload the plugin through Plugins  Add New  Upload Plugin, or copy the `privatto`
    folder to `/wp-content/plugins/`.
 2. Activate the plugin. The consent table and default options are created on activation.
 3. Follow the onboarding wizard, then fine-tune under **Privatto  Settings**.
 4. Generate your legal documents under **Privatto  LGPD Documents**.

## FAQ.KG

### Does it depend on any external service?

No. Banner, blocking, consent records, and document generation all run on your own
site. The only optional external call is the Groq API, used exclusively to refine
free-text descriptions if you provide an API key.

### How does the tag blocking work?

The plugin buffers the full page output on `template_redirect`, injects Google Consent
Mode v2 (all denied) right after `<head>`, and rewrites any `<script>` whose `src`
or body matches the configured patterns. When the visitor consents, the allowed 
scripts are restored and executed.

### Where is the proof of consent stored?

In a dedicated table (`wp_pvto_consents`). Each decision records a UUID, action,
categories, policy version, optional irreversible IP hash, country, user agent, 
URL, and UTC date/time. You can view it under **Privatto  Logs** and export it to
CSV.

### Is uninstall data removal opt-in?

Yes. By default, uninstalling keeps the consent tables (they are your audit evidence)
and only removes settings. To delete everything, define `PVTO_DELETE_DATA` as `true`
in `wp-config.php` before removing the plugin.

## Сын-пикирлер

There are no reviews for this plugin.

## Contributors & Developers

“Privatto” is open source software. The following people have contributed to this
plugin.

Мүчөлөрү

 *   [ Sergio Inglez ](https://profiles.wordpress.org/sergioinglez/)

[Translate “Privatto” into your language.](https://translate.wordpress.org/projects/wp-plugins/privatto)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/privatto/), check out
the [SVN repository](https://plugins.svn.wordpress.org/privatto/), or subscribe 
to the [development log](https://plugins.trac.wordpress.org/log/privatto/) by [RSS](https://plugins.trac.wordpress.org/log/privatto/?limit=100&mode=stop_on_copy&format=rss).

## Өзгөртүүлөр

#### 1.4.0

 * Security hardening: prepared statements with the `%i` identifier placeholder,
   input unslashing/sanitization, output escaping.
 * Internationalization: translators comments and ordered placeholders.
 * Readme rewritten to WordPress.org standards.

## Мета

 *  Нуска **1.4.0**
 *  Акыркы жаңыртуу **1 ай мурун**
 *  Активдүү орнотуулар **Fewer than 10**
 *  WordPress нускасы ** 6.2 же андан жогору **
 *  Tested up to **7.0.4**
 *  PHP нускасы ** 7.4 же андан жогору **
 *  Тил
 * [English (US)](https://wordpress.org/plugins/privatto/)
 * Тег:
 * [consent mode](https://ky.wordpress.org/plugins/tags/consent-mode/)[cookie consent](https://ky.wordpress.org/plugins/tags/cookie-consent/)
   [GDPR](https://ky.wordpress.org/plugins/tags/gdpr/)[lgpd](https://ky.wordpress.org/plugins/tags/lgpd/)
   [privacy](https://ky.wordpress.org/plugins/tags/privacy/)
 *  [Advanced View](https://ky.wordpress.org/plugins/privatto/advanced/)

## Рейтинг

Азырынча эч кандай сын-пикир жок.

[Your review](https://wordpress.org/support/plugin/privatto/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/privatto/reviews/)

## Мүчөлөрү

 *   [ Sergio Inglez ](https://profiles.wordpress.org/sergioinglez/)

## Колдоо

Комментарийлер барбы? Жардам керекпи?

 [Колдоо форумун көрүү](https://wordpress.org/support/plugin/privatto/)