CookiePeak - Consent Banner

CookiePeak - Consent Banner is the official WordPress client for the CookiePeak consent management product at https://cookiepeak.com, operated by FloBa Media (https://www.floba-media.de). CookiePeak is our own product name and domain. Connect your site to CookiePeak and ship a customized cookie consent banner with one click (OAuth or Website ID). Features

• Early script loading in the document head (before most tracking plugins)
• OAuth connect with your CookiePeak account
• Shortcode [cookiepeak_settings] for privacy policy / footer links
• Optional custom CDN URL for banner.js
• Google Consent Mode v2 support
• GDPR / CCPA oriented workflows

External services This plugin relies on external services. Details below are also listed so site owners know what is contacted and why. CookiePeak (required for banner functionality) Service: CookiePeak consent management (https://cookiepeak.com), operated by FloBa Media. What it is used for:

• Loading the consent banner script (banner.js) and banner configuration
• Optional OAuth connection from wp-admin to manage websites
• Receiving consent log events and aggregated page-view counts used by CookiePeak What data is sent and when:
• Frontend (when a Website ID is configured and the banner is enabled): the site loads banner.js and fetches banner configuration for that Website ID
• When a visitor saves consent choices: consent categories/choices and a hashed session identifier are sent to the CookiePeak API (raw IP addresses are not stored)
• Aggregated page-view counts for usage metering
• OAuth in wp-admin: authorization code / token exchange and API calls to list or create websites; access and refresh tokens are stored in the WordPress database (not publicly) Legal / privacy links (operator):
• Service: https://cookiepeak.com
• Privacy policy: https://www.floba-media.de/datenschutz
• Legal notice (Impressum / operator terms): https://www.floba-media.de/impressum Without a Website ID (and with the banner disabled) the plugin does not call CookiePeak on the public frontend.

Third-party scripts already on your WordPress site This plugin does not embed or call Google Tag Manager, Google Analytics, Meta Pixel, or similar services by itself. If your theme or other plugins already output those scripts, CookiePeak may rewrite their script tags so they only run after the matching consent category is granted. Any data those third-party scripts transmit is controlled by those providers and by your own site setup, not by CookiePeak initiating those connections. Setup

1. Install and activate the plugin
2. Go to Settings → CookiePeak and connect via OAuth, or enter your Website ID
3. Done – the banner is injected on frontend pages automatically

0.4.9

• Tested up to WordPress 7.1

0.4.8

• Plugin Review: prefixed shortcode cookiepeak_settings
• Explicitly close output buffer on shutdown
• Expand External services documentation in readme
• Do not ship bundled .po/.mo (wordpress.org translation system)
• Display name: CookiePeak - Consent Banner (official cookiepeak.com plugin)

0.4.7

• Fix fatal TypeError in OAuth redirect: cookiepeak_settings_url() now accepts query arg arrays

0.4.6

• Plugin Check: remove hidden .gitkeep, set script version, max 5 tags
• Multilingual admin UI: English source + German (de_DE) translations
• load_plugin_textdomain for DE/EN based on WordPress site language

0.4.5

• Verified against WordPress 7.0.2 (Tested up to: 7.0)
• Re-checked Plugin Check findings before release

0.4.4

• Plugin Check fixes: cookiepeak_ / COOKIEPEAK_ prefixes
• Enqueue banner.js via wp_enqueue_script (no hardcoded script tags)
• Remove HEREDOC, improve sanitization / i18n
• Settings link on the Plugins screen
• English readme + Tested up to 7.0
• Document CookiePeak as external service

0.4.3-beta

• Author: FloBa Media (product name remains CookiePeak)

0.4.2-beta

• Plugin folder, ZIP and admin slug: CookiePeak / cookiepeak
• Display names fully switched to CookiePeak

0.4.1-beta

• Default app URL: cookiepeak.com
• Migration from cookies.floba-media.de → cookiepeak.com
• Hourly banner.js cache busting

0.3.2-beta

• Beta versioning (0.x)
• Consent unlock after accept (boot stub)
• Output-buffer blocking + cache purge on update