DSGVO.pro Cookie Banner

A fully self-contained cookie banner for WordPress — no account, no registration, no phone-home. The banner logic ships inside the plugin and runs entirely on your own server. What sets it apart from other cookie plugins: a built-in compliance scanner that checks your whole website against 14 German and EU laws — GDPR (DSGVO), BDSG, TDDDG, DDG, the EU AI Act (KI-VO), BFSG, UWG, BGB, UrhG, VerpackG, ElektroG, JuSchG, PAngV and VSBG. You see the results directly in your WordPress admin. Features

• Blocks trackers before consent — recognizes the most common trackers (Google Analytics/gtag, Google Tag Manager container, Google Ads, Meta/Facebook Pixel, TikTok Pixel, LinkedIn Insight, Microsoft Clarity, Bing, Hotjar, Pinterest, Jetpack Stats, Matomo/Piwik) by their script source and holds the <script> tag itself back (type="text/plain") until the matching category is accepted — not just a signal sent after the fact
• Accept / Reject / Settings — three clearly balanced buttons, as required by GDPR Art. 7
• Google Consent Mode v2 — sends the correct signals to gtag() when it is installed
• Shopify Customer Privacy API — syncs with Shopify.customerPrivacy.setTrackingConsent() on WooCommerce-Shopify hybrid setups
• Configurable categories — turn Analytics / Marketing / Functional on or off
• localStorage-based consent — the plugin sets no cookies of its own and makes no server calls
• Light / Dark mode — respects the visitor's prefers-color-scheme
• Translation-ready — ships with German and English, more languages via the included .pot file

What script blocking does NOT cover (stated plainly)

• A self-hosted or otherwise unlisted tracker is not recognized and not touched.
• Tags configured inside Google Tag Manager are invisible to us — only the GTM container load itself is blocked; if a GTM tag fires trackers of its own, that is between the site owner and their GTM configuration.
• Third-party <iframe> embeds (YouTube, Google Maps, …) are out of scope for this version.
• Add data-dsgvo-skip to any <script> tag to exempt it by hand, and the "Block trackers before consent" checkbox under Settings → DSGVO.pro Banner turns the whole feature off if it ever conflicts with something on your site.

Pro features (optional) If you create an account on dsgvo.pro, you can unlock the following with a SiteID:

• Compliance score badge in the banner
• Unlimited scans (free tier = one scan on install)
• Monitoring alerts — an email when your score drops after a deployment
• Auto categories — the plugin derives the categories your site needs from the scan

Pro runs through the same plugin — just enter your SiteID in the settings. Privacy In the free version this plugin sends no data to external servers. The banner logic runs entirely locally. The only outbound calls are:

• Scan button (optional, only when you click it) -> POST https://dsgvo.pro/api/scan/public
• Pro activation (optional, only when you enter a SiteID) -> handshake with https://dsgvo.pro/api/banner/<siteId>

Details in the privacy policy.

1.0.3

• Script blocking now also recognizes Jetpack Stats (stats.wp.com, _stq.push) and self-hosted Matomo/Piwik (_paq.push) — Jetpack Stats was the tracker found live and unblocked on a real client site that started this feature, and it was missing from the 1.0.2 list
• No other behaviour change

1.0.2

• Consent-gated script blocking: the plugin now recognizes the most common trackers (Google Analytics/gtag, Google Tag Manager container, Google Ads, Meta/Facebook Pixel, TikTok Pixel, LinkedIn Insight, Microsoft Clarity, Bing, Hotjar, Pinterest) and holds their <script> tags back (type="text/plain") until the matching category is accepted, instead of only signaling consent to them after they may already have loaded
• New "Block trackers before consent" setting (on by default) with an honest description of what it does and does not cover, plus a data-dsgvo-skip escape hatch for any script tag
• No change to existing categories, Consent Mode v2, or Shopify Privacy API behaviour

1.0.1

• Full German translation of the admin scan panel and the cookie banner (previously only partially localized)
• German now renders for every German locale, including Deutsch (Sie) / de_DE_formal, de_AT and de_CH
• Hardened translated strings against markup injection before they reach the page
• No changes to the banner behaviour or the data it stores

1.0.0

• Initial release
• Cookie banner with Accept / Reject / Settings
• Google Consent Mode v2 integration
• Shopify Customer Privacy API sync
• German and English translations
• WP admin settings for categories and badge