Orbo – Cookie Consent & Compliance Banner (GDPR, CCPA, PIPEDA)
| 开发者 | orboapp |
|---|---|
| 更新时间 | 2026年7月26日 09:50 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Server-side blocking rewrites each page's finished HTML before it leaves your server, so even tracking scripts pasted directly into your theme or page builder never reach the browser without consent.
- Client-side blocking catches trackers injected later by other plugins, chat widgets, and tag managers.
- Free automatic cookie scanner — Orbo crawls your site, finds the cookies and tracking scripts actually in use, and categorizes them against a signature database. No manual cookie spreadsheets.
- A banner that matches your brand — colors, logo, text, and position are managed in the Orbo dashboard and update on your site without touching code.
- Auto-generated cookie policy page — built from your latest scan and kept current, embedded anywhere with the [orbo_cookie_policy] shortcode.
- Consent logs you can show a regulator — every accept/reject is recorded with a timestamp and the privacy regime that applied (GDPR, CCPA, or PIPEDA), so you can prove consent if you're ever asked.
- Visitors can change their mind — reopen the preferences panel anywhere with the [orbo_cookie_preferences] shortcode.
- Opt-in everywhere — Orbo applies the strictest (opt-in) behavior in every jurisdiction, so you're covered wherever your visitors browse from.
- One small async script — no jQuery, no render-blocking payloads.
- Automatically excluded from JS delay/defer in WP Rocket, LiteSpeed Cache, Autoptimize, and Cloudflare Rocket Loader, so consent and blocking always run first, even on aggressively optimized sites.
- Safe with WooCommerce, Elementor, and other page builders — your own first-party scripts and WordPress core assets are never blocked.
- Install the plugin and create a free Orbo account.
- Orbo scans your site and builds your banner, cookie categories, and policy page automatically.
- Paste your Site Key into the plugin settings — the banner goes live and consent logging starts immediately.
- WordPress plugin guide — setup, shortcodes, and troubleshooting.
- FAQ — quick answers about compliance, scanning, and plans.
- Contact us — we're happy to help with anything else.
- Learn more about Orbo at getorbo.com.
安装:
- Upload and activate the plugin.
- Create a free account at https://dashboard.getorbo.com/signup and follow the setup wizard for your site.
- Copy your site's Site Key from the dashboard.
- Paste it under Settings → Orbo Cookie Consent and save — the plugin checks the connection automatically and shows "Connected" when everything works.
屏幕截图:
常见问题:
Do I need a cookie consent banner on my WordPress site?
If your site uses analytics, advertising pixels, embedded video, or chat widgets and has visitors from the EU/UK (GDPR), California (CCPA/CPRA), Canada (PIPEDA), or Québec (Law 25), then in most cases yes — those laws require you to inform visitors about tracking and, in opt-in regimes, obtain consent before trackers run. A banner that merely announces cookies while trackers load anyway does not meet the opt-in standard.
Does Orbo actually block cookies before consent, or just show a banner?
It actually blocks. Orbo rewrites your pages server-side so known tracking scripts are neutralized before the browser ever sees them, and its banner script blocks trackers that other plugins inject later. Blocked scripts run only after the visitor consents to their category.
Which privacy laws does Orbo help with?
GDPR (EU/UK), CCPA/CPRA (California), PIPEDA (Canada), and Québec Law 25. Orbo applies opt-in consent behavior everywhere — the strictest standard — and records which regime applied to each consent event.
Will the banner slow down my site?
No. The banner is a single small script loaded asynchronously, with no dependencies. Configuration is cached, and the plugin automatically excludes itself from JS-delay features in WP Rocket, LiteSpeed Cache, Autoptimize, and Cloudflare Rocket Loader so nothing breaks on optimized sites.
Does it work with WooCommerce, Elementor, and page builders?
Yes. Blocking rules match known third-party trackers only — your own domain's scripts and WordPress core assets are never touched, so themes, page builders, and store functionality keep working. The server-side pass even catches tracking snippets pasted into page-builder HTML blocks.
Do I need an Orbo account? Is there a free plan?
Yes, an account is required — the banner design, cookie categories, scan results, and consent records all live in the Orbo dashboard. There is a free plan suitable for small sites, and no credit card is needed to start.
How do I show my cookie policy or let visitors change their consent?
Add the [orbo_cookie_policy] shortcode to a page to embed your auto-generated, always-current cookie policy, and use [orbo_cookie_preferences] anywhere (for example in your footer) to let visitors reopen the consent preferences panel.
Can I prove a visitor consented?
Yes. Every consent event is logged with a timestamp, the choices made per category, the banner version shown, and the privacy regime that applied. Consent logs are retained per your plan and exportable from the dashboard.
What happens if I deactivate the plugin?
The banner and blocking stop immediately, and your site makes no further requests to Orbo. Your configuration and consent history remain in your Orbo account. The settings page also has a Disconnect button that removes the saved Site Key without deactivating the plugin.
Where can I get help?
Start with the plugin guide at https://getorbo.com/wordpress-plugin/ and the FAQ at https://getorbo.com/faq/. You can reach us any time via https://getorbo.com/contact/, or post in this plugin's support forum here on WordPress.org.
更新日志:
- The settings page now has a proper connected view: connection status for your domain, your site at a glance (last cookie scan, cookies tracked, banner views this month), and quick links to your dashboard.
- New Disconnect button — removes the saved Site Key and stops the banner, blocking, and all requests to Orbo, without deactivating the plugin. Your Orbo account and consent records are untouched.
- The saved Site Key is now masked on the settings page (only the key prefix and last characters are shown).
- Help & support links (plugin guide, FAQ, contact, support forum) on the settings page.
- An occasional, fully dismissible review request — shown only on the plugin's own settings page, and only after Orbo has been protecting the site for a while.
- Updated the Plugin URI to the plugin's page at getorbo.com/wordpress-plugin.
- All internal names (classes, constants, options, transients, cron hook, settings group) now use the unique "orbo_ccb" prefix, per wordpress.org plugin-directory requirements. Stored settings migrate automatically on update — your site key and connection status are preserved.
- Shortcodes renamed: [cookie_policy] is now [orbo_cookie_policy] and [manage_cookie_preferences] is now [orbo_cookie_preferences]. If you use them on any page, update the tags after upgrading.
- On WordPress 6.9+, the whole-page blocking pass now uses core's template enhancement output buffer; on older versions the plugin's own buffer is explicitly opened and closed in a matched pair.
- Server-side blocking now covers the whole page, not just scripts registered through WordPress: a final rewrite pass over the finished HTML neuters matching tracker tags pasted directly into themes or page builders, before the browser ever sees them. (Browsers queue such scripts for execution the instant the parser reads them, so client-side blocking alone cannot reliably stop them.)
- Neutered tags now keep their original attributes (defer, id, …) so scripts are restored faithfully after consent.
- Fix: a blocking rule matching the site's own domain could disable the site's first-party scripts (including WordPress core ones, breaking page builders like Elementor). Domain rules now match script hostnames exactly (domain or subdomain, never a URL substring), rules for the site's own domain are ignored, and WordPress core assets are never blocked under any rule.
- Compatibility with caching/optimization plugins: the consent script is now automatically excluded from JS delay, defer, combine, and localize in Cloudflare Rocket Loader, LiteSpeed Cache, WP Rocket, and Autoptimize, so the banner and tracker blocking always run immediately.
- The connection check now verifies your site key belongs to this site's domain and reports a clear mismatch error if not.
- Connection status refreshes automatically (at most once daily) while you use wp-admin, and a notice appears on the Plugins screen if the connection breaks.
- Updated terms of service / privacy policy links; added the data processing agreement link. Internal code-comment cleanup.
- Renamed the admin menu entry to "Orbo Cookie Consent" and added a Settings link on the Plugins screen.
- Redesigned the admin settings page as a guided three-step onboarding experience (create account → scan & customize in the app → paste site key). Save/test-connection behavior is unchanged.
- Heartbeat fires immediately when a site key is saved (setup wizard support).