Cookiemator

Description

Cookiemator is a lightweight, comprehensive, and self-hosted solution designed to comply with European GDPR (RGPD) and Spanish AEPD cookie guidelines in WordPress without relying on external monthly subscriptions.

Key Features

• Two-Layer Compliance (AEPD & GDPR Guidelines): Initial first-layer banner featuring “Accept all” and “Reject all” buttons with identical size, color, and visual prominence (zero dark patterns), plus a “Settings” button in third position.
• Multi-Tab Preferences Modal (Second Layer): Popup modal with Consent, Details, and About Cookies tabs, granular category switches, and a top-right close button (X).
• Preventive Script & Iframe Blocking: Automatically intercepts non-essential scripts (Analytics, advertising pixels, heatmaps) and external iframes (YouTube, Vimeo, Google Maps) until the visitor grants explicit consent.
• Native Google Consent Mode v2: Outputs default and updated signals (ad_storage, ad_user_data, ad_personalization, analytics_storage, and personalization_storage) directly in <head>.
• Hybrid Cookie Catalog (Automated WP-Cron Scanner + Manual Editor): Periodically scans your site HTML and active cookies via WP-Cron (daily, weekly, or monthly) while allowing you to manually add, edit, or remove cookies.
• GDPR Audit Log in Database: Records each user consent with a unique UUID and anonymized IP address, ready to export as CSV.
• Built-in Shortcodes: Use [rgcookies_link] to reopen the preferences modal from anywhere and [rgcookies_declaration] to display the categorized cookie declaration table on your Cookie Policy page.

External Services

This plugin does not send any data to external servers by itself. However, it allows the site administrator to optionally configure conditional loading (strictly after user consent) for the following third-party services:

• Google Fonts: If the administrator selects a Google Font (Inter, Poppins, Roboto, Montserrat) instead of inheriting the theme font, the stylesheet is loaded from https://fonts.googleapis.com (Google Privacy Policy).
• Google Analytics 4 / Google Tag Manager / Google Ads: If the administrator configures their tracking IDs in the plugin settings, scripts connect to https://www.googletagmanager.com only after the visitor accepts the corresponding category (Google Privacy Policy).
• Meta Pixel (Facebook): If a Pixel ID is configured, it connects to https://connect.facebook.net after Marketing consent is granted (Meta Privacy Policy).
• TikTok Pixel: If a Pixel ID is configured, it connects to https://analytics.tiktok.com after Marketing consent is granted (TikTok Privacy Policy).
• LinkedIn Insight Tag: If a Partner ID is configured, it connects to https://snap.licdn.com after Marketing consent is granted (LinkedIn Privacy Policy).
• Microsoft Clarity: If a Project ID is configured, it connects to https://www.clarity.ms after Analytics consent is granted (Microsoft Privacy Statement).
• Hotjar: If a Site ID is configured, it connects to https://static.hotjar.com after Analytics consent is granted (Hotjar Privacy Policy).