Super Duper Consent Manager
| 开发者 | rogerruckstuhl |
|---|---|
| 更新时间 | 2026年9月25日 02:02 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Paste the complete script - including the
<script>tags. The plugin reads the IDs, server addresses and settings out of it and loads the service with its own loader. Your code is not stored. - Automatic recognition of Google Analytics 4, Google Ads, Google Tag Manager, Matomo, Matomo Tag Manager, Meta Pixel, Microsoft Clarity, Hotjar, LinkedIn Insight Tag and TikTok Pixel.
- Every function becomes a switch: green is on, red is off. Matomo for example: count page views, track downloads and outgoing links, track without cookies, respect Do Not Track, count subdomains as one website and more. Google Analytics: automatic page views, Google Signals, personalised advertising, debug mode.
- Further commands of your script, for example events, appear as switches of their own with their values.
- No double loading: if the same service is also built into your theme, that copy is switched off.
- Tracking without JavaScript is removed:
<noscript>pixels would track without asking, so they are left out automatically. - Opt-in or opt-out: one default for all scripts and embeds - load only after consent, or load at once and let visitors switch it off. Each script and provider can override it, for international websites with different rules.
- Eight categories: Necessary (always active), Functional, Preferences, Statistics, Marketing, Social media, Chat & support and External media - each explained to visitors in one sentence.
- Google Consent Mode v2 is sent automatically.
- See what loads: a preview shows what will run after consent.
- Blocking rules: a server (for example cdn.tracking-example.com) or a keyword of the script. Matching scripts, iframes and tracking pixels wait for consent - visitors decide for each rule separately.
- Found on your website: every script from another server that nothing controls yet is listed in the admin - with every page it sits on and where it sits in the page: its address, the head or the body, and the
idit carries, which usually names the plugin or theme it comes from. One click turns it into a rule, or takes a known service over with switches. - Scan whole website: opens every page once, including pages nobody has visited yet. A page you save is checked right away.
- Block newly found scripts (optional): a new script stays off until you decide.
- Click "Test as a new visitor" for a clean first visit.
- Accept, reject or switch single services on and off - the panel updates right away.
- Known services built in elsewhere (for example Google Fonts in the theme) are pointed out as well.
- A server nothing controls yet can be blocked with one click from the panel.
- No browser extension needed. Only you see the panel, and only in the test window.
- YouTube and Vimeo videos
- Google Maps
- Facebook and Instagram posts
- X (Twitter), TikTok, Spotify and SoundCloud
- Banner with "Accept all", "Reject all" and "Choose individually" - equally easy to accept and to reject.
- Settings grouped by category, each service with its own switch and a link to the provider's privacy policy.
- The choice can be changed at any time with a small button, a menu link (
#suduconman-settings) or the shortcode[suduconman_settings]. - Cookies and browser storage of services without consent are removed on every page view - after a withdrawal, but also data that was there before.
- Seven designs: Classic, Glass, Midnight, Soft, Editorial, Bold and Compact - banner, settings and video placeholders all follow the chosen design.
- Your own colours in every design (colour picker with hex field). Choosing a design only suggests colours, yours stay.
- Live preview in the settings: banner, privacy settings and video placeholder change while you click.
- Three positions: bar at the bottom, box in the corner or window in the middle.
- Your own texts.
- Consent log as proof: every decision with a random consent ID. No IP addresses are stored, entries are deleted after 12 months.
- "Ask everyone again" after important changes.
- Works with page caching - all decisions are made in the visitor's browser.
- Translated into German (Germany, Austria and Switzerland, informal and formal), English, Spanish, French, Italian and Dutch (informal and formal).
安装:
- Upload the plugin and activate it.
- Go to Consent Manager > Scripts and click Add script. Paste the complete script of your service and check the switches. The same service elsewhere on your pages is switched off.
- Click Scan whole website. Scripts built into your theme or other plugins appear under "Found on your website" - block them or take them over.
- Under Banner, choose the layout, texts and colours.
- Under Test, check that nothing loads without consent.
常见问题:
Where do I get the script?
From the service itself, for example Google Analytics (Admin > Data streams > View tag instructions), Matomo (Administration > Websites > Tracking code) or Meta Events Manager. Copy it completely.
Does the plugin store my tracking code?
No. It reads the IDs, server addresses and settings out of a pasted script and stores only those; the service is then loaded by the plugin's own JavaScript. Scripts built in elsewhere stay there, the plugin only keeps them inactive until consent.
The script of my service is not recognised.
Leave it where it is built in - theme, header plugin or page builder - and click Block a script, or wait until it appears under "Found on your website". Enter its server or a keyword: every matching script on your pages waits until the visitor agrees.
How does the plugin block scripts in my theme?
WordPress 6.9 lets plugins check the finished page before it is sent. The plugin changes matching scripts to type="text/plain", so the browser neither loads nor runs them, and turns them back into live scripts after consent. Should a website switch this page check off, the admin screen says so.
What is the difference between opt-in and opt-out?
Opt-in: the script or embed loads only after the visitor agrees. Opt-out: it loads at once, and visitors can switch it off in the privacy settings at any time - the cookies of that service are then removed. You choose this separately for every script and every provider, so a website used worldwide can follow the rules that apply to it.
Can I set IP anonymisation?
Not in the script. Google Analytics 4 always anonymises IP addresses, and Matomo does it on the Matomo server (Administration > Privacy > Anonymise data). The plugin shows this as a note, so nobody searches for a switch that has no effect.
Are cookies removed when a visitor withdraws consent?
Yes. As long as a service has no consent, its cookies and browser storage entries are removed on every page view - right after the withdrawal, on every following page, and also cookies that were set before the plugin was installed. Which names belong to a service is set under Advanced in the script (filled in automatically for recognised services). Names an allowed service uses too are kept. Cookies of other domains (for example youtube.com or doubleclick.net) cannot be removed by any website; after a withdrawal they are simply no longer sent.
How do I check that nothing loads without consent?
Go to Consent Manager > Test and click Start test in a new window. Your website opens with a panel on the right. Click "Test as a new visitor", then accept, reject or switch single services on and off: the panel shows live which scripts, cookies and connections to other servers exist, and marks everything in red that happens without consent. The panel appears only in that test window, never in your other tabs and never for visitors.
An embed should load without asking.
Add the attribute data-suduconman-skip to the iframe.
Does it work with caching plugins?
Yes. The page is the same for every visitor; the consent is evaluated in the browser.
更新日志:
- Improved: The list of found scripts now shows every page a script was found on, as a link, instead of only the first one.
- Improved: It also shows where the script sits in the page - its address or that it is written into the page, the head or the body, and the id it carries, which usually names the plugin or theme it comes from.
- Improved: An address that only appears as text in a script, such as the Flash download address in the translated texts of the WordPress media player, says so in the list. It is found and blocked like every other one - nothing that really calls home is played down.
- First public release on WordPress.org.
- Versions 1.0.0 to 1.0.17 were internal development versions.