GDPR & Cookie Consent Suite
Real compliance, not just a banner. Block trackers, prove consent, handle data requests.
Most cookie plugins show a banner and stop there — while Google Analytics and the Meta Pixel keep setting cookies before anyone clicks 'accept'. That's not compliant.
The GDPR & Cookie Consent Suite starts with a clean, fast banner (free) and adds real compliance on the Pro tiers: it blocks known trackers (GA, Meta, TikTok, Hotjar, Clarity, LinkedIn) and YouTube/Vimeo/Maps embeds until the visitor consents, then re-activates them instantly. Every decision is recorded — hashed IP, categories, region, policy version, timestamp — as proof of consent you can export to CSV for an audit.
It goes beyond cookies: a built-in data-subject request form lets visitors ask to access, export, or delete their data, with email verification, a 30-day SLA timer, and one-click hand-off to WordPress's own export/erase tools. Add Google Consent Mode v2, region-aware behaviour (EU opt-in, US opt-out + Global Privacy Control), a cookie scanner with an auto-updating declaration table, and the WP Consent API — and you have a real compliance layer, not a checkbox.
PHP 7.4+
Minimum requirement
Works on modern hosts
Any
Theme compatible
Elementor, Divi, Bricks & more
5.0★
Average rating
From early users
Free
Core version
No credit card ever
Requirements
WordPress
5.0++
PHP
7.4++
WooCommerce
Not needed
Multisite
Supported
Up and running in minutes.
Three simple steps to get real results — no experience needed.
Install and activate
Activate the plugin and the banner appears on your site right away with sensible defaults.
Customize the text and colors
Set your consent message, button labels, privacy policy URL, and brand colors from the plugin settings page.
Go live — it's compliant
The banner records visitor choice in a first-party browser cookie. No third-party services involved.
Built for professionals.
No bloat. No surprises. Just the features that matter.
No third-party services
Consent is stored as a first-party browser cookie. Nothing is sent to external servers.
Under 3KB of JavaScript
The entire banner script is tiny. It won't show up in your Core Web Vitals report.
Works with any theme
Pure CSS and vanilla JavaScript. Compatible with every WordPress theme and page builder.
Everything it can do.
A complete breakdown of every capability — free and Pro.
GDPR & CCPA Ready Out of the Box
Displays a clear Accept/Reject prompt on first visit and stores the visitor's consent decision as a first-party browser cookie. Meets the basic technical requirements of GDPR and CCPA without third-party data processing.
Under 3KB — Zero Performance Impact
The entire banner is under 3KB of vanilla JavaScript with no external dependencies. It won't appear in your Core Web Vitals report, won't delay LCP, and won't cause CLS from banner appearing after paint.
Fully Customizable Appearance
Edit the banner message, button labels, and position (top bar or bottom bar). Pro adds color pickers for the banner background, text, and button colors so it matches your site's design system exactly.
Script Blocking on Reject (Pro)
Pro integrates with Google Tag Manager and direct script tags to block analytics, advertising, and tracking scripts from firing until the visitor accepts. True consent-based tracking — not just a banner.
Geo-Targeting (Pro)
Pro lets you show the banner only to visitors from specific countries or regions. Serve the full consent banner to EU and California visitors while hiding it entirely for jurisdictions where it isn't legally required.
Consent Log Export (Pro)
Pro maintains a database log of each consent decision with timestamp and anonymized IP. Export as CSV for compliance audits. Demonstrates to regulators that real consent was recorded.
Made for web professionals.
Built by a real web design agency — for everyone who needs a professional solution without the bloat.
Any WordPress site
Any site serving visitors in the EU, UK, or California that needs a compliant cookie consent mechanism.
Web agencies
Agencies who want a consistent, lightweight consent solution to deploy across all client sites.
Privacy-first businesses
Businesses that want to comply with cookie laws without adding third-party tracking to their site.
How we stack up.
TWDH GDPR & Cookie Consent Suite vs. CookieYes
Free vs Pro — side by side.
See exactly what each tier includes before you decide.
Simple, transparent pricing.
No surprises. No hidden fees. Use the free version forever.
$0
forever
- Consent banner with accept-all / reject-all parity
- Preferences panel with granular categories
- Bar, box, modal, or full-screen layouts
- Privacy policy link + configurable expiry
- Re-open preferences anytime
- Under 3KB JavaScript payload
$79/yr
per year · 1 site
- Prior blocking — GA, Meta, TikTok, Hotjar & more blocked until consent
- Embed placeholders for YouTube / Vimeo / Maps
- Cookie scanner + auto declaration table ([twdh_cookie_declaration])
- Google Consent Mode v2 + WP Consent API
- Consent audit log with CSV export (proof of consent)
- Data-subject requests (DSAR) — access / export / delete, WP-core wired
- Region-aware: EU opt-in, US CCPA opt-out + Global Privacy Control
- Auto-updates as compliance rules change
$129/yr
per year · up to 3 sites
- Prior blocking — GA, Meta, TikTok, Hotjar & more blocked until consent
- Embed placeholders for YouTube / Vimeo / Maps
- Cookie scanner + auto declaration table ([twdh_cookie_declaration])
- Google Consent Mode v2 + WP Consent API
- Consent audit log with CSV export (proof of consent)
- Data-subject requests (DSAR) — access / export / delete, WP-core wired
- Region-aware: EU opt-in, US CCPA opt-out + Global Privacy Control
- Auto-updates as compliance rules change
$199/yr
per year · unlimited sites
- Prior blocking — GA, Meta, TikTok, Hotjar & more blocked until consent
- Embed placeholders for YouTube / Vimeo / Maps
- Cookie scanner + auto declaration table ([twdh_cookie_declaration])
- Google Consent Mode v2 + WP Consent API
- Consent audit log with CSV export (proof of consent)
- Data-subject requests (DSAR) — access / export / delete, WP-core wired
- Region-aware: EU opt-in, US CCPA opt-out + Global Privacy Control
- Auto-updates as compliance rules change
What people are saying.
“Simple setup, clean design, and it doesn't slow down my site at all. Checked compliance with my lawyer and it covers what's needed.”
Sandra P.
E-commerce Owner
“Finally a cookie plugin that doesn't nuke my Core Web Vitals. Installs in minutes and looks great.”
Alex W.
SEO Consultant
“I put this on every client site now. It's exactly what most small businesses need — nothing more, nothing less.”
Fiona R.
Freelance Developer
What's new.
Recent updates and improvements.
- Rebuilt as a full GDPR & Cookie Consent Suite
- Pro: prior blocking — GA, Meta, TikTok, Hotjar & more blocked until consent
- Pro: click-to-load placeholders for YouTube/Vimeo/Maps embeds
- Pro: cookie scanner + auto declaration table ([twdh_cookie_declaration])
- Pro: data-subject request (DSAR) form with email verification + WP-core export/erase
- Pro: region-aware — EU opt-in, US CCPA opt-out + Global Privacy Control
- Pro: Google Consent Mode v2 + WP Consent API
- Pro: consent audit log with CSV export (proof of consent)
- License-gated auto-updates
- Banner: accept-all / reject-all parity + bar/box/modal/wall layouts
- Pro: geo-targeting — show banner by country/region
- Pro: consent log export as CSV
- Improved banner animation performance
- Pro: Google Tag Manager consent mode integration
- Pro: script blocking on reject
- Added banner position option (top/bottom)
- Added Reject button with separate consent cookie
- Customizable button labels
- Reduced script size from 4.2KB to 2.8KB
- Initial release — Accept banner, consent cookie, configurable message
Common questions.
Everything you need to know before getting started.
It's free.
Download the free version and be up and running in minutes. Upgrade to Pro whenever you're ready for more.