Consent Collector JP
| 开发者 |
ypsupport
freemius |
|---|---|
| 更新时间 | 2026年7月25日 00:10 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Automatically generates an external transmission disclosure page: Built-in templates for the 6 most common services — Google Analytics (GA4), Google Tag Manager, Google AdSense, Meta Pixel, YouTube embeds, and X (Twitter) embeds. Any other service can also be registered manually, so full legal compliance is possible with the free version alone.
- First-run setup wizard: After activation, the wizard walks you through selecting the services you use from the built-in templates, configuring the banner, and registering scripts.
- No dark patterns: Implied consent (e.g. "scrolling counts as consent") and cookie walls are not implemented, not even as an option. The "Accept All" and "Essential Only" buttons always have equal visual weight.
- Zero external requests, lightweight: The banner never loads external fonts or CDN resources. Additional HTTP requests are kept to a minimum.
- No external connections for its core functionality: The consent banner, tag blocking, and external transmission disclosure page all run entirely on your own server; no visitor data is ever sent to this plugin's developer or to any third party as part of that functionality. (The bundled Freemius licensing library contacts Freemius's servers solely for license validation and update checks, as is standard for commercially licensed WordPress plugins; this does not involve visitor data. The optional Premium GeoIP feature also downloads a public IP-to-country database file from db-ip.com roughly once a month to enable region-based banner behavior.)
- Consent logs stored on your own server: No consent records are transferred to servers outside your control. The visitor's IP address is never stored -- not even a hashed or otherwise derived value. Each log row is identified only by a random ID generated in the visitor's browser. Log retention is the same for every user: logs are kept indefinitely by default, and you can optionally set a retention period (e.g. delete logs older than 30 days) from the settings screen.
- Fully compatible with page caching: All banner display and consent-state logic run client-side in JavaScript, so the plugin works correctly even on sites using static page caching.
- Google Consent Mode v2 (basic): Automatically sends the "denied" default and per-category consent/withdrawal signals to
gtag()for sites already using Google tags (GA4 / Google Ads), so those tags respect visitor consent out of the box. Does nothing if the site has nogtag()defined. - Re-consent when your policy changes: Update the "banner version" setting and every visitor -- including those who already consented -- will be asked again the next time they visit.
- Visitors can change or withdraw their consent at any time -- withdrawals are logged just like consents, and automatically propagated to Google Consent Mode v2.
安装:
- Upload and activate the plugin.
- The first-run setup wizard will appear automatically. Follow the on-screen steps to select the services you use, and configure the banner.
- You can change any setting at any time from the "Consent Collector JP" menu.
屏幕截图:
常见问题:
Does this plugin guarantee full legal compliance?
No. This plugin is a tool to help support compliance, not a substitute for legal advice. Whether the generated disclosures and your actual site operation meet applicable legal requirements is the responsibility of the site operator.
What are Japan's "External Transmission Rules"?
They are rules under Japan's Telecommunications Business Act (effective June 2023) that require operators to notify or publicly disclose the content, destination, and purpose of visitor information sent to external providers via Cookies or similar technologies. See the Ministry of Internal Affairs and Communications' explanatory pages for details.
Does this work with page caching plugins?
Yes. Banner display and consent-state logic run entirely in the visitor's browser (JavaScript); the server never outputs different HTML per visitor. The plugin is designed to work alongside common page-caching setups.
Is there a difference in legal compliance capability between the free and Premium versions?
No. The free version alone, combined with templates and manual registration, can achieve full legal compliance. The Premium version adds convenience, ongoing monitoring, and multilingual/international features — it does not gate compliance itself behind a paywall.
What if another plugin or my theme already outputs a tag like Google Analytics?
Tags such as Google Analytics (GA4) must be registered through this plugin's "Categories & Tags" tab to be covered by its pre-consent blocking and Google Consent Mode integration. A tag output directly by another plugin or by your theme is outside this plugin's control -- it will run regardless of visitor consent, and registering the same tag here as well would only cause it to load twice. If another plugin or your theme is already outputting such a tag, disable that output first, then register the tag through this plugin's "Categories & Tags" tab instead.
Can visitors withdraw their consent?
Yes. A re-consent link -- the [ypcm_reconsent] shortcode or a footer link -- lets visitors change or withdraw consent at any time. After withdrawal, the affected tags will no longer be loaded on subsequent page views, and withdrawals are recorded with the same detail as consents.
更新日志:
- Fix: Scripts registered with both inline code and an external script URL are now output as two separate tags, so the inline code runs correctly after consent. Previously the inline part never executed because browsers ignore the body of a script tag that has a src attribute. This issue affected such registrations (including the standard GA4 snippet) since 1.0.0. Workaround registrations (code and URL as two separate tags) continue to work and need no change.
- New: Generated external-transmission policy pages now include a re-consent link ("Cookie ・同意設定を変更する") so visitors can always change or withdraw consent. Existing pages gain the link on next regeneration.
- New: Documented the consent withdrawal feature (readme, admin help tab). Withdrawal link display text unified.
- Internal: Added template snapshot storage (groundwork for template-update notifications in a future release).
- Security: If your site sits behind a reverse proxy or CDN, detecting the visitor's real IP address (used for the consent rate limit and Premium's GeoIP feature) now requires you to specify which proxies to trust, instead of a simple on/off switch. This closes a way a visitor could fake their IP address to get around the rate limit. If you previously had this turned on, please revisit the GeoIP settings tab to re-enter your trusted proxies -- you'll see a notice there guiding you through it.
- Security: The Premium site scanner's background page check now verifies SSL certificates by default.
- Fix: Made the Premium GeoIP database update more robust, so an interrupted update can no longer leave the database in a broken state.
- Initial release.