Privatto -- WordPress 插件

Privatto

开发者	interativus sergioinglez
更新时间	2026年7月13日 20:42
PHP版本:	7.4 及以上
WordPress版本:	7.0
版权:	GPLv2 or later
版权网址:	版权信息

下载

1.4.0

详情介绍:

Privatto is a self-hosted consent management platform (CMP) for WordPress, built with Brazil's LGPD and the GDPR in mind. It requires no external service. Main features:

Granular consent banner with per-category preferences (necessary, analytics, marketing, embeds).
Automatic blocking of third-party scripts and iframes via output buffering: matching <script> tags are switched to type="text/plain" before the page reaches the browser, so nothing runs before consent.
Google Consent Mode v2 injected with everything denied by default, updated when the visitor decides.
Proof of consent stored in your own database table: unique consent ID, action, categories (JSON), policy version, hashed IP (optional), country, user agent, page URL, and UTC timestamp. Exportable to CSV for audits.
LGPD document generator: privacy policy, terms of use, cookie policy, returns policy, and a plain-language summary, built from a guided form. Optional AI text refinement (Groq API) for the business description only — mandatory legal clauses never go through AI.
Data subject rights form (LGPD art. 18) with tracked protocols, 15-day response deadline monitoring, and an admin queue.
Simplified record of processing activities (ROPA) export, as required by ANPD Resolution CD/ANPD No. 2/2022, including for small-scale processing agents.
"Cookie preferences" reopen link so visitors can change or revoke consent at any time.

Important notice: the generated documents are a structured starting point aligned with the LGPD; they are not legal advice. Review by a lawyer is recommended, especially for complex operations.

安装:

Upload the plugin through Plugins → Add New → Upload Plugin, or copy the privatto folder to /wp-content/plugins/.
Activate the plugin. The consent table and default options are created on activation.
Follow the onboarding wizard, then fine-tune under Privatto → Settings.
Generate your legal documents under Privatto → LGPD Documents.

升级注意事项:

1.4.0 Security and standards-compliance release. WordPress 6.2 or later is now required.

常见问题:

Does it depend on any external service?

No. Banner, blocking, consent records, and document generation all run on your own site. The only optional external call is the Groq API, used exclusively to refine free-text descriptions if you provide an API key.

How does the tag blocking work?

The plugin buffers the full page output on template_redirect, injects Google Consent Mode v2 (all denied) right after <head>, and rewrites any <script> whose src or body matches the configured patterns. When the visitor consents, the allowed scripts are restored and executed.

Where is the proof of consent stored?

In a dedicated table (wp_pvto_consents). Each decision records a UUID, action, categories, policy version, optional irreversible IP hash, country, user agent, URL, and UTC date/time. You can view it under Privatto → Logs and export it to CSV.

Is uninstall data removal opt-in?

Yes. By default, uninstalling keeps the consent tables (they are your audit evidence) and only removes settings. To delete everything, define PVTO_DELETE_DATA as true in wp-config.php before removing the plugin.

更新日志: