CookieFix – Cookie Consent & Compliance

Description

CookieFix is a Consent Management Platform (CMP) that helps your WordPress site comply with GDPR, CCPA, and ePrivacy regulations.

Features:

  • Automatic third-party script blocking until visitor consent
  • Customizable consent banner (colors, text, position)
  • Cookie declaration table via shortcode
  • Google Consent Mode v2 support
  • TCF 2.0 compatible
  • Multi-language support (auto-detection)
  • WooCommerce compatible
  • Works with all caching plugins

How it works:

  1. The plugin injects a lightweight inline script into your site’s <head>
  2. This script automatically blocks third-party cookies and tracking scripts
  3. A consent banner appears asking visitors for their preferences
  4. Scripts are only unblocked after the visitor gives consent
  5. All consent records are stored for GDPR compliance proof

External Services

This plugin connects to the CookieFix consent management service (operated by CookieFix, https://cookiefix.ro). It is a client for that service and does not work without a CookieFix account and Domain Key.

What is loaded and sent, and when:

  • On every front-end page load, the plugin outputs an inline script that fetches the consent widget from https://cdn.cookiefix.ro/cc.js (with https://cookiefix.ro/api/public/widget as a fallback) and the banner configuration for your Domain Key from https://cookiefix.ro/api/public/config/{domain-key}. The request includes the visitor’s IP address and user agent, as any HTTP request does.
  • When a visitor accepts, rejects or customizes cookie categories, the choice is sent to https://cookiefix.ro/api/public/consent together with an anonymous consent identifier, the chosen categories, the page URL, the banner version and the visitor’s user agent. The IP address is used only to derive the country and is stored hashed. This record is the site owner’s proof of consent under GDPR.
  • When you save the Domain Key in Settings > CookieFix, the plugin validates it against https://cookiefix.ro/api/public/config/{domain-key}.
  • The [cookiefix_declaration] shortcode loads the cookie declaration table for your domain from https://cdn.cookiefix.ro/cd.js.

No data is sent to CookieFix from the WordPress admin other than the Domain Key validation above. The plugin does not send any data about your WordPress users.

Terms of service: https://cookiefix.ro/en/terms
Privacy policy: https://cookiefix.ro/en/privacy

Installation

  1. Upload the cookiefix folder to /wp-content/plugins/
  2. Activate the plugin through the ‘Plugins’ menu
  3. Go to Settings > CookieFix
  4. Enter your Domain Key from the CookieFix Dashboard
  5. Save settings – the banner will appear on your site immediately

To display a cookie declaration table:

Add the shortcode [cookiefix_declaration] to any page or post.

FAQ

Where do I get a Domain Key?

Sign up for a free account at cookiefix.ro and add your domain. The Domain Key will be shown in the “Your Scripts” section.

Does it work with WooCommerce?

Yes. The plugin automatically whitelists WooCommerce core scripts and payment gateway scripts so they are never blocked.

Does it work with caching plugins?

Yes. The banner script is inline HTML and is preserved by all caching plugins including WP Super Cache, W3 Total Cache, WP Rocket, and LiteSpeed Cache.

What is Blocking Mode?

Automatic (recommended): All third-party scripts are blocked until the visitor consents. This is the safest option for GDPR compliance.

Manual: Only scripts you have categorized in the CookieFix dashboard are blocked. Use this if automatic blocking causes issues.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“CookieFix – Cookie Consent & Compliance” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

1.0.4

  • Removed the self-hosted update mechanism; updates are delivered through WordPress.org
  • Documented external services in the readme

1.0.3

  • WordPress.org compliance: proper output escaping throughout
  • Updated text domain to match WordPress.org plugin slug
  • Removed remote image loading from settings page
  • Tested up to WordPress 6.9

1.0.2

  • Self-hosted auto-update system – updates appear in WordPress like any other plugin
  • Plugin info popup with changelog in “View Details”

1.0.1

  • Domain Key validation against CookieFix API on save
  • Error message when Domain Key is invalid or not found
  • Success message showing the connected domain name on valid key
  • Green “Connected to: domain.com” badge displayed next to the field

1.0.0

  • Initial release
  • Cookie consent banner with auto-blocking
  • Cookie declaration shortcode and widget
  • WooCommerce compatibility
  • Multi-language support