Cookie Rocket - Cookie Consent & Privacy Compliance
| 开发者 | templatesrocketwp |
|---|---|
| 更新时间 | 2026年6月11日 02:58 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPL-2.0-or-later |
| 版权网址: | 版权信息 |
标签
下载
详情介绍:
Cookie Rocket is a lightweight cookie consent plugin that actually blocks third-party tracking scripts until your visitors consent — not just a banner on top. Automatic blocking of Google Analytics, Meta Pixel, Hotjar and more, plus Google Consent Mode v2, a cookie scanner and a consent log, are all included in the free version. Native compliance for GDPR, LGPD (Brazil) and LFPDPPP (Mexico).
It is a fully self-hosted alternative to cloud cookie-consent services: no account, no monthly SaaS fee and no external calls. Real script blocking, Google Consent Mode v2 and on-demand cookie scanning are free here — features that comparable consent tools typically gate behind a paid plan or a remote service.
- Automatic script blocking: common third-party trackers (Google Analytics, Meta Pixel, Hotjar, Microsoft Clarity, LinkedIn, TikTok and more) are blocked until consent, with Google Consent Mode v2 built in.
- Built-in cookie scanner: detect on demand which known tracking services are present on your site and the cookies they set.
- Automatic cookie policy / cookie declaration: a single shortcode (or one-click page) publishes a table of every cookie your site uses — provider, purpose and duration — grouped by category and updated from your scans.
- Consent audit log with an admin viewer: every consent decision is recorded and browsable for compliance.
- Editable cookie categories: rename, re-describe and reorder the categories shown on the banner.
- Unified Cookie Banner editor: layout, content (text and labels) and colours, all in one place.
- Zero external scripts and zero CDN dependencies — everything is served from your own site.
- Native compliance for LFPDPPP (Mexico) and LGPD (Brazil).
- GDPR compatible out of the box.
- 100% local — no consent data is sent to third-party servers.
- WooCommerce aware: respects shop pages and checkout.
- Fully customizable colors, fonts sizes, copy and banner position.
- WCAG 2.1 AA accessible: keyboard navigation, focus states, ARIA labels.
- Multisite compatible.
- Five banner layouts: bottom bar, top bar, floating card, modal and drawer.
[cookie-rocket-preferences]— renders a button that re-opens the cookie preferences modal.[cookie-rocket-withdraw]— renders a link that withdraws consent and clears stored preferences.[cookie_rocket_policy]— renders the automatic cookie declaration table (provider, purpose and duration per cookie, grouped by category).
安装:
- Upload the
cookie-rocketfolder to the/wp-content/plugins/directory, or install the plugin through the WordPress plugins screen directly. - Activate the plugin through the Plugins screen in WordPress.
- Go to Cookie Rocket in the admin menu to configure the banner copy, colors and behavior.
- Optionally, place the
[cookie-rocket-preferences]shortcode in your privacy policy page to let visitors update their choices at any time.
屏幕截图:
常见问题:
Does this plugin send any data to external services?
No. Cookie Rocket stores consent entirely in the visitor's browser (cookie + localStorage) and logs events to your own WordPress database. No third-party requests are made.
Is it compatible with caching plugins?
Yes. The banner state is read from a first-party cookie, so caching (page cache, object cache, CDN) does not interfere with consent storage or display.
Does it block third-party scripts automatically?
Yes. The free version automatically blocks the most common third-party tracking scripts — Google Analytics, Meta (Facebook) Pixel, Hotjar, Microsoft Clarity, LinkedIn, TikTok, Google Ads and more — until the visitor accepts the matching cookie category, and it ships Google Consent Mode v2 (default denied) out of the box. Enqueued scripts are blocked by default; an optional setting also blocks scripts pasted directly into your theme or header. Cookie Rocket Pro adds a scanner that discovers and auto-categorizes any script or cookie on your site — including ones not in the built-in list — plus unlimited custom rules.
Is it translation-ready?
Yes. The text domain is cookie-rocket and a complete .pot file is included under /languages/. All banner and modal strings are wrapped for translation. The plugin ships in English by default with Spanish (es_ES) and Brazilian Portuguese (pt_BR) translations bundled, applied automatically on matching locales. WordPress also loads community translations for plugins hosted on WordPress.org, and you can translate the banner yourself with Loco Translate or Poedit, or via WPML/Polylang.
Can it generate a cookie policy page?
Yes. Add the [cookie_rocket_policy] shortcode to any page, or go to Cookie Rocket → Cookie Policy and create the page in one click. It publishes a cookie declaration table — each cookie with its provider, purpose and duration, grouped by category — built from your latest scan plus a built-in catalog of the most common third-party cookies. Strictly-necessary cookies are always listed, and the table updates automatically as you re-scan.
Does it work on WordPress Multisite?
Yes. Each site stores its own settings. Activate per-site or network-activate from the network admin.
更新日志:
2.12.0
- New: Law-aware defaults — the banner's default title and message now follow your selected compliance framework (GDPR / LGPD / LFPDPPP). Your custom text always wins.
- New: "Compliance framework" selector in Settings → General. New installs pick it automatically from the site language (es_MX → LFPDPPP, pt_BR → LGPD, EU & UK locales → GDPR).
- New: on existing sites, a one-click suggestion (on Cookie Rocket pages only) offers the framework that matches your site language.
- New: a small, dismissible review request on Cookie Rocket pages after two weeks of use — one click hides it forever.
- Fixed: saving Settings no longer resets the compliance framework to "generic".
- Improved: the consent log now records the configured framework instead of always "generic".
- Removed the non-functional "Dark mode" dropdown from Banner Design — the banner's appearance is set by the theme presets (Light/Dark/Soft/Contrast) and your colour pickers, which is where it belongs.
- Fixed: the cookie policy table showed a hardcoded 180-day consent lifetime instead of your configured value.
- Fixed: the preferences modal description (the explanatory line) was not displayed even when set.
- Fixed: the "Privacy policy" link on the banner now points to your Cookie Policy / privacy page (it was a dead link); it is hidden when no policy page exists.
- Improved privacy: consent-log IP hashes are now salted with your site's secret key (HMAC-SHA-256), so they cannot be reversed — matching the "one-way hash, no raw IP stored" promise.
- Fixed: the floating preferences button no longer stacks duplicate click handlers across consent changes.
- Compatibility: the banner script now registers in a way that works on WordPress 5.9+ (the previous form needed 6.3). Added initial aria-hidden on the banner/modal for assistive tech.
- Fixed: the banner message and modal description were cut off at 200 characters, which truncated longer consent texts (including the built-in GDPR and LFPDPPP templates). The limit is now generous (1000 characters) and counts whole characters, so accented letters are never cut mid-character. After updating, re-pick your template (or just re-save) to store the full text.
- New: an optional "Quick feedback" prompt when you deactivate the plugin, so we can learn what to improve. It is completely opt-in — "Skip & deactivate" sends nothing, and only your selected reason, optional note, plugin/WordPress/PHP versions and site language are ever sent (no personal data, site URL or IP address). Deactivation is never blocked.
- New: full-width banner option — the bottom or top bar can now span the screen edge to edge (Cookie Banner → Layout → Bar width).
- New: optional dim backdrop behind the banner, for a focused consent prompt (Cookie Banner → Layout).
- New: one-click consent-text templates for GDPR, LGPD, LFPDPPP and a generic version that fill the banner title and message (Cookie Banner → Content).
- Everything defaults to the current behaviour, so existing banners are unchanged. Spanish and Portuguese translations included.
- Improved: the bundled Spanish and Brazilian Portuguese translations are now complete and cover all the newer admin screens (Cookie Manager, Your setup, banner content, secondary buttons, preferences modal and more).
- Improved: the secondary-button colour pickers now appear only when the "Solid" style is selected.
- Developer: removed dead code (an unused compliance-health card and an orphan CSS rule).
- New: per-element banner control — the secondary buttons (Reject / Customize) can be styled as a solid colour instead of the default outline (Cookie Banner → Style & colours), and the Customize button can be hidden for a simpler Accept / Reject banner (Cookie Banner → Content).
- These default to the current look (outline buttons, Customize shown), so existing banners are completely unchanged.
- Improved: a full admin colour consistency pass — every accent now follows your WordPress admin colour scheme, and stray gold/amber tones were removed (only a single restrained red remains, for genuine "failed/blocking-off" states). Status pills were redesigned to look crisp and finished.
- New: you can now edit the preferences-modal title and description (Cookie Banner → Content → Preferences modal); leave them empty to use the default in your site language.
- Developer: removed dead hero CSS.
- Improved: Categories and the Scanner are now grouped under a single "Cookie Manager" screen with a Categories / Scanner sub-nav, for a cleaner, more focused admin menu.
- Note: existing links to the Scanner keep working; it is now reached through Cookie Manager.
- Improved: the Dashboard now shows a "Your setup" overview — compliance coverage (GDPR, LGPD, LFPDPPP), language, layout and reject-button status at a glance, each linking to where you change it.
- Improved: advanced, rarely-needed options in Settings (raw-HTML script blocking) are tucked behind a "Advanced options" toggle, keeping the screen clean.
- Improved: all banner configuration now lives in one place — the screen is now "Cookie Banner" with Layout, Content and Style & colours tabs, so you no longer jump to Settings to edit the banner text.
- Improved: the banner text, button labels and font sizes moved into Cookie Banner → Content (Settings is now focused on behavior and script blocking).
- Developer: banner content saves via a merge-safe AJAX endpoint, so saving it never touches your other settings.
- Developer: replaced the remaining inline styles with the design system (the Pro panel, scanner results table and field hints) and removed unused CSS, for cleaner and more consistent admin code.
- Improved: small visual consistency pass on the Pro panel and the scanner results table.
- Improved: the Categories screen is fully redesigned — one clean card per consent category with an icon, an "always on" badge and tidy fields (was a bare table).
- Improved: the Cookie Policy and Consent Log screens now use the same premium card layout, with a styled log table, summary stats and clear action labels.
- Developer: removed inline styles in favour of the design system and tightened output escaping across these screens.
- New: a unified, app-like top navigation across every Cookie Rocket screen (brand bar + tabs), so all sections feel like one cohesive plugin instead of separate pages.
- Improved: admin status pills now use a single cohesive accent that follows your WordPress admin colour scheme (no more mismatched grey borders or heavy tints).
- Fixed: the scanner could display a negative "days ago" if the server clock was ahead — the age is now never below zero.
- Accessibility: banner and modal text now meets WCAG AA contrast on every preset (the body text adapts to light and dark themes); keyboard users get a clear focus ring on buttons, toggles and the close control.
- Improved: animations respect the "reduce motion" system setting; the banner never appears on printed pages; right-to-left (RTL) sites get a correctly mirrored layout.
- Improved: secondary text in the preferences modal (category descriptions, badges) is now darker for better readability; tidied redundant responsive CSS.
- Improved: banner and preferences text now render with font smoothing (antialiased / grayscale) and optimized legibility for a crisper, more premium look.
- Improved: headings use subtly tighter letter-spacing; buttons no longer flash a tap highlight on mobile; text size stays stable on mobile.
- Fixed: all banner buttons now share the exact same height, so the action row lines up perfectly (the Accept button was 2px shorter than the others).
- Fixed: the floating box now stacks its buttons in a clean full-width column instead of wrapping unevenly when three buttons are shown.
- Improved: the preferences modal footer now has equal-width buttons with a clear primary/secondary hierarchy and reliable contrast on the white panel.
- Improved: redesigned the Banner Design screen with a cleaner, more professional layout — evenly sized cards, aligned labels and consistent spacing.
- Improved: choosing a layout or style preset now applies instantly (removed the slow live preview that added a delay).
- Improved: the banner's default button text now follows your WordPress language out of the box (English source, with Spanish and Portuguese included).
- Improved: each Overview stat now has a quick link to the relevant screen (consent log, scanner, or re-scan), and long dates no longer overflow the card.
- Improved: the admin accent color now follows your WordPress admin color scheme automatically (it uses the native theme color, so it always matches WP).
- Improved: each Overview stat now has a short description for clarity.
- Improved: more polished "Get started" dashboard with a guided, connected step checklist and a cohesive accent color, for a cleaner first-run experience.
- Fix: primary buttons now use native WordPress button styling, so the label is always readable (some color schemes rendered it low-contrast).
- Fix: removed extra card framing around settings tables that caused doubled padding/spacing inside the new collapsible sections. Forms now use clean, native WordPress layout.
- Improved: the Settings and Banner Design screens now use a tidy left sub-navigation with collapsible sections (accordions), so options are grouped and easy to scan.
- Improved: fully neutral, monochrome admin styling (greys, black and white) that blends cleanly into wp-admin.
- Improved: neutral, WordPress-native admin palette. The admin now uses the standard WordPress blue and neutral greys instead of a coloured accent, for a calmer, more familiar look that blends into wp-admin.
- Improved: cleaner, friendlier dashboard. The home screen now opens with a simple "Get started" checklist — activate, scan, publish your policy — so you always know what to do next, plus an at-a-glance overview of your key numbers.
- Tweaks to layout and wording for a more familiar, less cluttered admin experience. No changes to the banner shown to visitors.
- New: premium admin dashboard with a one-glance compliance health check that flags real risks — tracking scripts running before consent, a missing cookie policy page, or an aging tracker scan — and links straight to the fix.
- New: visual banner layout picker. Choose where and how the banner appears (bottom bar, top bar, modal, floating card or side drawer) and its position, with a live preview.
- New: neutral banner style presets (Light, Dark, Soft, Contrast) that adapt to your site without imposing colors.
- New: smart embed placeholders. YouTube, Vimeo, Google Maps, Spotify and other iframes are held behind a click-to-load consent placeholder until the visitor accepts, so they set no cookies beforehand.
- Improved: the cookie scanner has a refreshed interface and now shows how recent your last scan is, so you know when your cookie inventory may be out of date.
- Fix: the modal banner's privacy line is now fully translatable (it was previously shown only in Spanish).
- New: automatic Cookie Policy / cookie declaration. Add the
[cookie_rocket_policy]shortcode — or create the page in one click from Cookie Rocket → Cookie Policy — to publish a table of every cookie your site uses, grouped by category, with its provider, purpose and duration. - The declaration is built from your latest scan plus a built-in catalog of common cookies (Google Analytics, Meta, Hotjar, Microsoft Clarity, LinkedIn, TikTok, X, Google Ads, Pinterest) and updates automatically. Strictly-necessary cookies (and WooCommerce cookies when present) are always listed.
- The new strings are translatable; the bundled Spanish and Brazilian Portuguese translations cover the cookie policy interface.
- New: Brazilian Portuguese (pt_BR) translation, automatically applied on Portuguese-language sites (all pt_* locales).
- New: full internationalization. English is now the source language with a complete Spanish (es_ES) translation bundled, so the plugin shows in English by default and automatically in Spanish on Spanish-language sites (all es_* locales). A complete .pot is included for further translations.
- Existing sites keep their saved banner copy and categories; only the untranslated built-in defaults are affected.
- Documentation: clearer description, short description and search tags that lead with what makes Cookie Rocket different — real script blocking and Google Consent Mode v2 in the free version. No code changes.
- Housekeeping: removed an unused legacy stylesheet (public/css/cookie-rocket.css) that was never enqueued. No functional or visual change — all banner styling is delivered inline.
- New: the "Drawer" banner layout is now a real right-side slide-in panel (previously it was an alias of the floating card). The other layouts — bottom bar, top bar, modal and floating card — are unchanged.
- New: live banner preview on the Banner Design screen. An embedded preview shows your banner with your saved colors, copy and layout without leaving the admin. It uses a preview-only flag; the banner behavior for visitors is unchanged.
- New: Cookie Categories editor (Cookie Rocket → Categorías). Customize the name, description and order of the cookie categories shown on the banner. Cookie Rocket Pro adds creating custom categories and mapping specific scripts/cookies to them.
- New: the admin interface is now fully translatable. All settings, scanner, consent-log and Pro-panel strings are wrapped for translation and included in the .pot. No visible change; the default language is unchanged.
- New: Consent Log viewer (Cookie Rocket → Consent Log). A read-only, paginated table of recorded consent events (date, action, accepted categories, policy version, anonymized visitor hash) plus totals, so you can demonstrate compliance. Cookie Rocket Pro adds CSV export and date/action/country filtering.
- New: full translation readiness. All banner and modal strings are now wrapped for translation and a complete .pot file is shipped under /languages/. WordPress auto-loads translations for plugins hosted here; you can also translate the banner with Loco Translate or Poedit, or via WPML/Polylang.
- New: built-in Cookie Scanner (Cookie Rocket → Scanner). Scan your site on demand to discover which known third-party tracking services are present, with their category and the cookies they set, and confirm what Cookie Rocket is blocking. Cookie Rocket Pro adds scheduled scans and detection of cookies that are not in the built-in list.
- Fix: the default cookie categories and settings are now created automatically if they are missing (for example when the plugin files were copied in without running activation). Such installs previously showed an empty preferences modal and could block scripts that "Accept all" was unable to re-enable.
- Fix: "Accept all" and the preferences modal now correctly grant the chosen cookie categories. A long-standing bug read the category list incorrectly, so accepting analytics/marketing did not actually enable those scripts. In 1.1.0 this prevented blocked scripts from being re-activated after consent; they now re-activate as expected.
- New: automatic script blocking. Cookie Rocket now neutralizes the most common third-party tracking scripts (Google Analytics, Meta Pixel, Hotjar, Microsoft Clarity, LinkedIn, TikTok, Google Ads, Pinterest, X) until the visitor accepts the matching category, then re-activates them in the browser. The banner now genuinely blocks cookies instead of only recording a choice.
- New: Google Consent Mode v2 is now built into the free version — a default "denied" state is emitted in the page head before any Google tag loads, and updated when the visitor consents.
- New: optional raw-HTML blocking (Settings → Script Blocking) also neutralizes tracking scripts pasted directly into the theme or header, not only enqueued ones. Off by default.
- New: best-effort cookie cleanup removes known analytics and marketing cookies when consent is rejected or withdrawn.
- New: "Script Blocking" settings section with toggles for Consent Mode, enqueued-script blocking and raw-HTML blocking.
- Fix: banner title, body and button labels set on the Settings screen are now applied on the front-end. Previously the customized copy was saved but ignored, so the banner always showed the built-in defaults.
- Fix: the "Consent Duration (days)" setting is now honored. Previously consent always expired at the 365-day default regardless of the configured value.
- Fix: the consent audit log records events again. A parameter-name mismatch between the front-end script and the AJAX handler prevented consent actions from being written to the log.
- Fix: corrected the cookie name referenced in the FAQ for manual script gating (the first-party consent cookie is
cookroco_consent).
- Changed: the post-consent floating preferences button now defaults to OFF (was ON in 1.0.3) for a cleaner out-of-the-box experience. Visitors can still re-open preferences via the
[cookie-rocket-preferences]shortcode placed wherever you want (footer, menu, etc.). Existing installations that had it enabled keep it enabled. - Added: the Pro features panel now lists "Customizable floating button" — Cookie Rocket Pro adds position (left/right/center), color, icon and label customization for the floating button.
- Fix: the preferences modal close button (X) and Escape key now work correctly after the visitor has already consented. Previously, event handlers were only bound while the banner was visible, so re-opening the modal via the floating button left the X non-functional.
- Fix: the modal title typography is now forced to a clean sans-serif system stack and no longer inherits the theme's heading font (some themes were applying script/serif fonts to the modal headline).
- New setting: "Show Floating Button" (Settings page) lets administrators hide the bottom-left circular button that appears after consent. Defaults to ON for backwards compatibility.
- Added a Pro features showcase panel at the bottom of the Settings page so users can discover what is included in Cookie Rocket Pro (geo-detection, cookie scanner, Google Consent Mode v2, WooCommerce mode, audit log + CSV export). No popups, no admin notices, single discreet CTA — fully compliant with WordPress.org plugin guidelines.
- Visual refresh: preferences modal now uses the Templates Rocket brand palette (lime green #80e040 + near-black #0a0f1a) for visual consistency with the brand. No functional changes.
- Initial release on WordPress.org.