Okito Cookie Consent

Description

Okito Cookie Consent is a lightweight WordPress plugin that connects your website to the Okito cookie consent platform. A single CDN script handles banner display, consent management, Google Consent Mode v2, IAB TCF v2.2, and automatic language detection.

How it works

1. Install the plugin
2. Get your Website Key from app.okito.com
3. Paste the key into Settings and save

The plugin injects a single script tag into your site’s head. Banner rendering is handled by Okito’s script, not by PHP on your server.

Key features

• Full compliance — GDPR, CCPA, LGPD, IAB TCF v2.2
• Single async CDN script in the document head
• Visual banner builder in the Okito dashboard
• Automatic language detection (many languages)
• Google Consent Mode v2 integration
• Analytics and consent metrics in the Okito dashboard
• Cookie scanning and categorization via Okito
• Responsive banner layout
• Optional script blocking until consent (configured in Okito)

Pricing

Okito offers several plans including a free tier. See pricing on app.okito.com for current options.

External services

This plugin relies on Okito, a third-party cookie consent and compliance platform operated by Okito (https://okito.com). It is required for the plugin to function: the banner, consent storage, IAB TCF v2.2 signals, Google Consent Mode v2 and the cookie scanner are all delivered by Okito’s service. A free plan is available.

The plugin contacts the Okito service in two ways:

1. CDN script load (visitor’s browser, public pages only when the banner is enabled)

• Endpoint: https://app.okito.com/js/{WEBSITE_KEY}
• When: On every public page view in the visitor’s browser, after the plugin is enabled and a Website Key is configured.
• What is sent: The visitor’s browser performs a standard HTTPS request for the script file. This means Okito receives the Website Key (as part of the URL), the visitor’s IP address, User-Agent and the standard Referer header sent by the browser. While the banner is displayed, it stores the visitor’s consent choices in the browser (cookies / local storage) and reports anonymized consent metrics to Okito so they can be shown in your Okito dashboard.
• Why: This is what renders the cookie consent banner, captures the visitor’s choice, blocks/unblocks tagged third-party scripts and feeds the Okito analytics for that website.

1. Admin “Test Connection” request (server-side, WordPress admin only)

• Endpoint: https://app.okito.com/js/{WEBSITE_KEY}?healthcheck=1
• When: Only when an administrator clicks the “Test Connection” button on the Okito → Settings page.
• What is sent: A standard HTTPS GET request from your server containing only the Website Key entered in the form. No visitor data, posts or user information is transmitted.
• Why: To verify that the Website Key is valid against the Okito CDN.

The plugin does not send any other data to Okito or any other third party. No personal data of WordPress visitors is transmitted by PHP code in this plugin.

Use of the Okito service is subject to:

• Okito Terms of Service: https://okito.com/terms-of-service/
• Okito Privacy Policy: https://okito.com/privacy-policy/

Site administrators are responsible for ensuring their own privacy policy describes the use of Okito where required by law. Suggested wording is registered with WordPress and visible under Settings → Privacy after this plugin is active.

Privacy

This plugin:

• Saves your Okito Website Key and an enabled/disabled flag in the WordPress options table.
• When enabled, loads the script described in External services on public pages so visitors see the cookie banner and consent features.

Suggested wording for your Privacy Policy is available in WordPress under Settings → Privacy after this plugin is active.