Skildring
GoConsent — privacy compliance for WordPress. Cookies, policies, laws and scans in one plugin, with one setup that works in every US state.
Privacy laws now reach small businesses. California, Colorado, Texas, Virginia, Oregon and more than a dozen other states require clear consent choices, an opt-out for targeted advertising, a respected Global Privacy Control signal and an up-to-date privacy policy. Lawsuits over tracking pixels and chat tools are growing every year. GoConsent handles all of it from one screen, and tells you in plain English what is left to fix.
Cookie consent banner that blocks trackers before consent
- Equal Accept All and Reject All buttons, with category switches right on the banner and a «Your Privacy Choices» panel for analytics, advertising, and maps and videos.
- Full cookie declaration. Every cookie and tracker the scan finds, with provider, purpose, type and expiry, listed by category for visitors and on your Cookie Policy page (
[goconsent_cookie_table]). - Consent receipt and privacy button. Visitors see their Consent ID and can reopen their choices from a floating GoConsent shield on any page.
- Real blocking, not just a notice. Google Analytics, Google Ads, Meta Pixel, TikTok, LinkedIn, Microsoft Clarity, Hotjar and other tags wait until the visitor agrees. Scripts that other plugins add later are held too.
- Google Consent Mode v2 with every signal set to «denied» until consent.
- Global Privacy Control (GPC) honored automatically, as California, Colorado and other states require.
- Click-to-load Google Maps, Street View, YouTube and Vimeo, so a first visit makes no calls to Google.
- Self-hosted Google Fonts. Fonts are copied to your server, so visitors never contact Google.
- Fast and cache-friendly. Works with page caching and loads a small script.
Cookie scanner and compliance report
- Daily cookie and tracker scan of your own pages finds tracking tags, pixels, embeds and unknown scripts, and shows which plugin, theme or page adds each one.
- Compliance score with plain-English issues, sorted by what the law requires for your business and what is only best practice.
- One-click fixes, plus suggested privacy policy wording you can copy or add to your policy.
- Email alerts when a new critical issue appears.
Privacy policy generator and policy pages
- Privacy Policy, Cookie Policy and Accessibility Statement, written from your settings and your latest scan, with the services your site actually uses.
- Works with your editor: the block editor, the classic editor, Elementor and Beaver Builder.
- Safe updates. GoConsent updates only its own sections, keeps your edits, and lets you undo any change.
- Dynamic shortcodes keep your business name, website address, contact form link and «last updated» date current.
Privacy laws in plain English
- Which laws apply to you, based on where your customers are, your size and your industry: CCPA/CPRA (California), CalOPPA, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, plus Washington’s My Health My Data Act, COPPA, GLBA, GDPR, UK GDPR and PIPEDA.
- Laws coming soon (such as Oklahoma, Louisiana, Alabama and Vermont) are flagged before they start.
- Industry checks for health, kids, real estate, restaurants and finance.
Cookie-free traffic stats and proof of consent
- Visitors, pages, sources, devices and UTM campaigns, counted on your own server with no cookies and no stored IP addresses, so you keep seeing traffic even when visitors reject analytics.
- Proof of consent for every choice: a random consent ID, time, policy version and anonymized IP, kept 24 months and downloadable as CSV.
GoConsent Pro
Pro adds more policy pages (Consumer Health Data Privacy Policy, Notice of Financial Incentive, Children’s Privacy Policy, SMS Terms and Terms of Use).
GoConsent is a compliance tool, not legal advice. Have a lawyer review your policies.
External services
GoConsent makes no outside requests on activation, and none until an administrator accepts its terms.
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — optional, off by default. Only when you turn on Host Google Fonts on this site (Consent tab), and only for Google Fonts your theme or plugins already load, your server downloads those font files once and GoConsent serves them from your own site, so visitors» browsers never contact Google. The request contains the font stylesheet address and no visitor or site data. Google’s terms: https://policies.google.com/terms and privacy policy: https://policies.google.com/privacy
Everything else stays on your site:
- The scanner only requests pages of your own site: once a day after the terms are accepted, or when you click Scan now.
- Maps and videos (Google Maps, YouTube, Vimeo) are your site’s own embeds. GoConsent adds none; it holds them until the visitor allows them, then the visitor’s browser loads them as it normally would.
- Traffic statistics and consent records are stored in your own database and are never sent anywhere.
Developer notes
- JavaScript API:
GoConsent.open(),GoConsent.get(),GoConsent.loadScript( src, attrs, onload ),GoConsent.onChange( callback ). - Events:
goconsent:changeondocument;goconsent_updatein the dataLayer. - Filters:
goconsent_signatures,goconsent_scan_urls,goconsent_issues,goconsent_law_rules,goconsent_industries,goconsent_render_footer_link,goconsent_filter_page,goconsent_alert_recipients,goconsent_visitor_ip. - Action:
goconsent_loaded.
Third-party assets
GoConsent includes California’s official privacy opt-out icon (assets/img/ca-privacy-options.svg), unchanged. It is published by the California Attorney General for businesses to use on their websites with a «Your Privacy Choices» link, as the California Consumer Privacy Act regulations require: https://oag.ca.gov/privacy/ccpa/icons-download. It is loaded from your own site, never from outside servers.
Skjermbilete






Installasjon
- In WordPress, go to Plugins > Add New, search for GoConsent and click Install Now, then Activate.
- Open GoConsent in the admin menu and accept the terms to turn on protection.
- In Settings, set your business location, industry and where your customers are. GoConsent then checks your site against the laws that apply to you.
- Click Scan now on the Overview, fix what the report shows, and create your policy pages in Tools.
Vanlege spm.
-
Is GoConsent CCPA and CPRA compliant?
-
GoConsent gives you the pieces California requires: an opt-out for the sale and sharing of personal information, Global Privacy Control support, a «Your Privacy Choices» link with the state’s official opt-out icon, and a privacy policy that covers your rights. Compliance also depends on how your business handles data, so have a lawyer review your setup.
-
Does it work for GDPR and the UK?
-
Yes. Visitors choose before any analytics or advertising cookies load, and the Privacy Policy includes a legal basis section when you serve the EU or UK.
-
Does it really block Google Analytics and the Meta Pixel before consent?
-
Yes. Tracking tags are held until the visitor agrees, including tags added later by other scripts. Google Consent Mode v2 is set to «denied» by default.
-
Does it work with Elementor, Beaver Builder and page caching?
-
Yes. The banner works with any theme and with page caching. Policy pages can be created and updated in the block editor, the classic editor, Elementor and Beaver Builder.
-
One first-party cookie,
goconsent, remembers each visitor’s choice for 12 months. Traffic statistics use no cookies. -
Will visitors who click Reject still be counted?
-
Yes, in GoConsent’s cookie-free traffic stats. They are not tracked by Google Analytics or advertising tools.
-
Can I let Google Analytics run before consent?
-
Yes. Turn on «Analytics before consent» in the Consent tab. Advertising stays blocked and visitors can still opt out.
-
How do I add the «Your Privacy Choices» link somewhere else?
-
Use the
[goconsent_choices]shortcode, or link any menu item to#privacy-choices. The floating privacy button (Consent › Banner look) can sit bottom left or bottom right, at any height, or be turned off. -
Use the
[goconsent_cookie_table]shortcode. Addcategory="analytics"(or necessary, media, marketing) to show one category. The Cookie Policy page GoConsent builds already includes it. -
Does GoConsent send my data anywhere?
-
No. Scans, reports, consent records and traffic stats stay in your own WordPress database. See External services below.
Omtalar
There are no reviews for this plugin.
Bidragsytarar og utviklarar
“GoConsent™ – Cookie Consent & Privacy Tools” is open source software. The following people have contributed to this plugin.
ContributorsOmset “GoConsent™ – Cookie Consent & Privacy Tools” til ditt eige språk.
Interested in development?
Les kjeldekoden, sjekk SVN-lageret eller abonner på utviklingsloggen med RSS.
Endringslogg
1.0.68
- Nothing runs in the background, and no outside request is made, until an administrator accepts the terms. Activation only creates the database tables.
- Google Fonts hosting is now opt-in (Consent › Host Google Fonts on this site), off by default. Downloads use the WordPress HTTP API only.
- Google Fonts addresses with several weights (e.g. wght@400;700) are copied in full.
- Output escaping tightened in the banner, privacy button, cookie tables and footer link.
1.0.67
- Accessibility: button and link text now meet WCAG AA contrast with any banner color. Light brand colors get dark text automatically.
- Accessibility: the cookie list in the Cookie Policy can be scrolled with the keyboard.
1.0.66
- New: Banner setting with «US opt-out (no banner)». US visitors get no banner; analytics runs, marketing stays off, and Your Privacy Choices and Global Privacy Control stay in force. Only available when the scan finds no ad tags or session recording; EU & UK visitors always get the banner.
- If a later scan finds an ad tag or session recording, the banner comes back on its own and the compliance report flags it.
1.0.65
- Banner on phones: «Save My Choices» sits on its own row below Reject All and Accept All.
1.0.64
- Banner: «Save My Choices» is always shown, so visitors can keep the choices on screen without picking Reject All or Accept All.
1.0.63
- Your Privacy Choices: Marketing & advertising no longer folds; its opt-out line and cookie list are always in view.
1.0.62
- Readme: credits the source of California’s opt-out icon.
1.0.61
- The «Your Privacy Choices» link now carries California’s official opt-out icon, as the state requires for that link title. Footer link and [goconsent_choices] alike.
- The icon also sits beside the Your Privacy Choices title.
- Your Privacy Choices: each category folds open, so the panel is shorter. Names, cookie counts and switches stay in view; the marketing opt-out line always shows.
1.0.60
- Banner styles are now passed with wp_add_inline_script() and applied by the script; no inline style tags are printed.
1.0.59
- GoConsent no longer touches back-office requests: wp-admin, AJAX, REST and cron pages are never buffered, rewritten or shown the banner. Fixes Google Maps staying blocked inside standalone CRM pages.
- Staff don’t get the banner or blocking: anyone who can edit content, plus CRM roles (MLS Genie, Jetpack CRM, WP ERP, Groundhogg, WooCommerce and any role with «crm» access). Choose the roles under Consent › Protection › Staff. Visitors and clients with accounts still get the banner.
- New goconsent_skip_request filter: return true to leave a request alone. Also goconsent_staff_roles and goconsent_is_staff.
- «Open site» previews the banner for staff.
1.0.58
- Cookie list: ConvertBox is described as pop-ups for offers, announcements and notices, not only promotions.
1.0.57
- Banner: category switches (Necessary, Analytics, Maps & videos, Marketing) right on the banner. «Save My Choices» appears once a visitor changes one; Reject All and Accept All stay equal. «Customize» is now «Cookie details».
- Cookie declaration: every cookie and tracker found by the GoConsent™ scan, with provider, purpose, type and how long it lasts, listed by category in Your Privacy Choices and the Cookie Policy.
- New [goconsent_cookie_table] shortcode; the generated Cookie Policy page now includes it, so the list stays current after every scan.
- Consent receipt: Your Privacy Choices shows the visitor’s Consent ID, when it was saved and what it allows, with a Copy button.
- Privacy button: a floating GoConsent shield reopens Your Privacy Choices after a choice. On/off, bottom left or right, and height are under Consent › Banner look.
- Global Privacy Control notice now shows on the banner itself, and the Marketing switch locks off.
1.0.56
- Contact-page lookup uses simpler database queries (passes WordPress.org Plugin Check with no errors).
1.0.55
- Deleting the other GoConsent copy (free or Pro) no longer shows «There has been a critical error», and the shared settings and data are kept.
1.0.54
- GoConsent Pro replaces GoConsent: activating Pro switches the free copy off, and all settings, scans and stats carry over.
- After moving between GoConsent and GoConsent Pro, the page cache is cleared so the banner loads from the right place.
1.0.53
- New WordPress.org description, FAQ and screenshots list.
- Traffic tab loads on sites that use plain permalinks (it showed «No route was found»).
- Internal release.
1.0.52
- Tools finds existing policy pages under a parent page (such as /legal/cookie-policy/) and by title (such as «Cookies Policy» or «Accessibility»).
1.0.51
- Tools: the Pro badge turns green when Pro features are included.
1.0.50
- Internal release.
1.0.49
- New admin menu icon, centered.
1.0.47
- The Tools tab now sits before Settings.
1.0.46
- Privacy Policy now includes how to opt out of sale, sharing and targeted ads, so the separate Your Privacy Choices page is gone from Tools.
1.0.44
- New tagline: “Privacy compliance for WordPress,” under the logo and in the plugin description.
1.0.43
- Tools tab: Recommended pages are marked by their badge and outline only, using GoConsent’s own colors.
1.0.42
- The Tools tab now sits before Terms.
1.0.41
- New Tools tab: GoConsent builds your policy pages (Privacy Policy, Cookie Policy, Accessibility Statement) from your settings and latest scan, and marks the ones your site needs as Recommended.
- Create makes a draft for you to review and publish. Update changes only GoConsent’s own sections and keeps your edits; Undo puts the page back.
- Works with the block editor, the classic editor, Elementor (Text Editor widget) and Beaver Builder (Text Editor module).
- Dynamic codes keep names, addresses and dates current: [goconsent_site_name], [goconsent_site_url], [goconsent_privacy_email], [goconsent_contact_link], [goconsent_updated] (the page’s last-modified date). Your site’s own codes are used when they exist.
- More policy pages (Consumer Health Data, Financial Incentive, Children’s Privacy, SMS Terms, Terms of Use) are listed as part of GoConsent Pro.
- Google Street View now loads with Maps & videos (it was waiting for advertising consent).
- The privacy-rights check also recognizes «know and access … correct … delete» wording.
1.0.40
- Privacy page checks no longer use an old copy of the page when the site is in maintenance mode or the page can’t be fetched; they read the saved page instead.
- Elementor and Beaver Builder privacy pages: wording added in the builder is found right away.
- Suggested wording shows «&» in business names correctly (was «&»).
1.0.39
- Privacy pages built with Beaver Builder or Elementor get «Copy & fix» again (they were mistaken for theme-built pages).
1.0.38
- Settings > Who you serve: states are listed A–Z down each column (one column on phones). New boxes above them for United States (selects every state), Canada, European Union and United Kingdom.
1.0.37
- After updating, WordPress no longer keeps showing «There is a new version» for the version you just installed.
1.0.36
- New Laws tab: a plain-English card for each privacy law GoConsent checks (who it covers, what it asks of you, citation, link to the official text). Laws that apply to you come first, then laws starting soon; other laws are collapsed and searchable.
- On the Overview, «Required by» names link to that law’s card.
1.0.35
- The report now knows which privacy laws apply to your business. Settings > Who you serve asks where your customers are and your size; GoConsent checks 24 state privacy laws (including Oklahoma, Louisiana, Alabama and Vermont, enacted in 2026), California, Delaware and Nevada website-notice laws, Washington and Nevada health data laws, COPPA, GLBA, GDPR, UK GDPR and PIPEDA.
- Checks a law requires show as warnings and name the law. Everything else is a best-practice tip that doesn’t lower your score, with suggested wording.
- Laws starting soon (or thresholds dropping, like Delaware in 2027) are flagged ahead of time.
- New check: Consumer Health Data Privacy Policy for health businesses serving Washington or Nevada.
- Rules reviewed 2026-10-09. Not legal advice.
1.0.34
- «Copy» sits next to «Copy & fix», for the next issues once the editor is already open.
1.0.33
- «Copy & fix» copies the suggested wording and opens the privacy page in its editor (block editor, Elementor or Beaver Builder) in a new tab. «Review policy» opens it for the yearly review.
- «Add to Privacy Policy» only shows for pages made with the WordPress editor, where the added text reaches visitors.
- Coming back to GoConsent after editing re-checks the privacy policy automatically.
1.0.32
- New Restaurant industry (Settings): checks the privacy policy covers reservation and ordering services, allergy and dietary notes, loyalty and gift card programs (California Notice of Financial Incentive) and marketing emails and texts, with suggested wording for each. Choosing it turns on maps by default.
1.0.31
- Restaurant booking and ordering widgets (Resy, OpenTable, Tock, SevenRooms, Toast) are recognised as necessary, so they keep working and aren’t flagged for review.
1.0.30
- Scanner requests pages with WordPress’s own user agent, so host firewalls that block «scanner» user agents let it through.
- When a page is blocked, the scan message quotes the error page and names the web server, to show who blocked it.
1.0.29
- Internal release.
1.0.28
- Scanner works with Defender’s «Empty headers» bot protection turned on (it now sends standard request headers).
1.0.27
- When a firewall blocks the scanner, GoConsent names it (Defender, Wordfence, Solid Security, Sucuri, Cloudflare, ModSecurity or the web host) and shows the server IP address to allowlist.
1.0.26
- On phones, the admin tabs become a dropdown.
1.0.25
- Scanner reads pages on hosts where a site can’t verify its own SSL certificate when calling itself (same rule WordPress uses for its own checks).
- «Some pages couldn’t be scanned» now says why: firewall, timeout, SSL, connection, password protection or server error.
1.0.24
- Internal release.
1.0.23
- Mobile banner: text, policy links, Reject All / Accept All and Customize are centered.
1.0.22
- «Re-ask all visitors» confirms in a GoConsent dialog, centered and in GoConsent colors, instead of a red «Click again to confirm» button.
1.0.21
- More space between text and buttons in the banner, Your Privacy Choices and the map and video notices.
1.0.20
- Browsers always load the current GoConsent files after an update, even on sites where another plugin rewrites file version numbers.
1.0.19
- The banner, Your Privacy Choices and the Cookie Policy now render in their own Shadow DOM, so theme and page-builder styles (including !important rules) can no longer change them. Older browsers fall back to the scoped stylesheet.
1.0.18
- Region-aware defaults (on by default): visitors in Europe (EU, EEA, UK, Switzerland) get analytics and maps & videos off until they choose, as GDPR expects, even where the site turns them on by default for US visitors. Detected from the browser’s time zone, so it works behind page caches and nothing is sent anywhere. Banner and cookie policy wording follow.
1.0.17
- New «Maps & videos» choice in Your Privacy Choices (Google Maps, YouTube, Vimeo), separate from marketing. Visitors who leave it off can still load each map or video with a click.
- New «Maps & videos on by default» setting. Choosing Real estate as the industry turns it on, so listing maps and video tours load without a click; visitors can turn them off.
- New Real estate industry check: the privacy policy should mention maps and video tours.
- Your Privacy Choices notes that some features, like maps and videos, won’t load unless allowed.
- Proof-of-consent records and CSV include the Maps & videos choice.
1.0.16
- Plugin details no longer warn «not tested with your version of WordPress» on point releases (for example 7.1.3 when tested up to 7.1).
1.0.15
- New GoConsent™ logo in the admin header and new shield icon in the admin menu.
1.0.14
- Code review pass for the WordPress.org directory: database queries use placeholders for table names, PHP 8.1+ compatibility fixes, translator notes.
- Admin notices show only on the Dashboard and Plugins screens and can be dismissed.
- Suggested text for Settings Privacy Policy Guide explains the consent cookie, proof-of-consent records and cookie-free stats.
- Consent records CSV: cells a spreadsheet could run as formulas are neutralised.
- Traffic stats ignore floods (more than 300 page views an hour from one visitor).
1.0.13
- Google Fonts: when another plugin stops WordPress from downloading the fonts, GoConsent downloads them directly (server to Google, no visitor data) and, if that fails too, names the plugin in the warning.
1.0.12
- Google Fonts self-hosting works with large font sets (for example Poppins in every weight, 54 files): files download several at a time, in the background and during scans, and a run that is cut short picks up where it stopped. Visitors never wait on a download.
- Fonts loaded with a changing version number are recognised as the same font.
- The Google Fonts warning now says why the fonts aren’t copied yet (progress, blocked connection, error from Google) and what to do.
1.0.11
- Google Maps: listing galleries and other components with Map or Street View buttons are no longer covered. The photos show as normal, and the Google Maps notice appears only when a visitor clicks Map or Street View; after «Load map» the map opens.
- Map buttons stay visible while Maps waits for consent, even where the component would hide them.
- Only empty map areas get the notice up front.
1.0.10
- Name shown as GoConsent™ in the Plugins list and admin menu.
1.0.9
- Internal release.
1.0.8
- New GoConsent shield icon in the admin menu.
1.0.7
- Tested with WordPress 7.1.
- Uninstall also removes script approvals and the scan lock.
- Diagnostic logging only when WP_DEBUG_LOG is on.
1.0.6
- Scanner shows what added each script: the plugin or theme, the page-builder module and page it was pasted into (with an Edit page link), or a header/footer snippet. Scripts with no identifiable source are flagged.
- Approve button for scripts that need review: one click keeps the suggested category. Approved scripts show who approved them and when, with Undo.
1.0.5
- Google Maps waits for the visitor: the Maps JavaScript API (theme and plugin loaders, including scripts that load it on the fly) and Static Maps images load only after «Load map» or Accept All. Map areas show a Load map placeholder.
- New privacy policy check and suggested wording for Google Maps. The cookie policy now explains maps.
- «Analytics before consent» now runs Google Analytics without cookies until the visitor chooses.
- Scanner also checks one recent item from each custom post type (listings, vehicles, products).
- Scanner is safe on small hosting plans: one scan at a time, 8-second page timeout, and it stops after two slow or failed pages or 45 seconds, so it can’t tie up the site’s PHP workers.
- Banner and dialog styles are scoped so themes and page builders can’t override them.
- Banner: Privacy Policy and Cookie Policy links sit on their own row.
1.0.4
- Privacy policy checks now read the page as visitors see it, including text built into the theme.
- When the theme builds the privacy page, «Add to Privacy Policy» is hidden and the policy date is read from the page.
1.0.3
- Proof of consent: every Accept, Reject or Save is recorded (anonymized IP, 24-month retention). Download as CSV in the Consent tab.
- HQ Rental Software is labelled as adding a session ID to page URLs in the cookie policy.
1.0.2
- Banner links no longer pick up the theme’s all-caps style.
1.0.1
- Banner links: removed the forced zero padding.
1.0.0
- First release.
