Orbo – Cookie Consent & Compliance Banner (GDPR, CCPA, PIPEDA)

Description

Orbo shows a customizable cookie consent banner and stops tracking scripts
from running until your visitor agrees — so your WordPress site can comply
with GDPR, CCPA/CPRA, PIPEDA, and Québec Law 25.

Most cookie banners just sit on top of the page while Google Analytics, Meta
Pixel, and other trackers fire anyway. That isn’t valid consent — the
trackers must be blocked before the visitor agrees. Orbo blocks them in
two layers:

• Server-side blocking rewrites each page’s finished HTML before it
  leaves your server, so even tracking scripts pasted directly into your
  theme or page builder never reach the browser without consent.
• Client-side blocking catches trackers injected later by other
  plugins, chat widgets, and tag managers.

Everything you need to get compliant

• Free automatic cookie scanner — Orbo crawls your site, finds the
  cookies and tracking scripts actually in use, and categorizes them
  against a signature database. No manual cookie spreadsheets.
• A banner that matches your brand — colors, logo, text, and position
  are managed in the Orbo dashboard and update on your site without
  touching code.
• Auto-generated cookie policy page — built from your latest scan and
  kept current, embedded anywhere with the [orbo_cookie_policy] shortcode.
• Consent logs you can show a regulator — every accept/reject is
  recorded with a timestamp and the privacy regime that applied (GDPR,
  CCPA, or PIPEDA), so you can prove consent if you’re ever asked.
• Visitors can change their mind — reopen the preferences panel
  anywhere with the [orbo_cookie_preferences] shortcode.
• Opt-in everywhere — Orbo applies the strictest (opt-in) behavior in
  every jurisdiction, so you’re covered wherever your visitors browse from.

Fast, light, and compatible

• One small async script — no jQuery, no render-blocking payloads.
• Automatically excluded from JS delay/defer in WP Rocket, LiteSpeed
  Cache, Autoptimize, and Cloudflare Rocket Loader, so consent and
  blocking always run first, even on aggressively optimized sites.
• Safe with WooCommerce, Elementor, and other page builders — your own
  first-party scripts and WordPress core assets are never blocked.

Who it’s for

Orbo is built for small-business site owners — and the freelancers and
agencies who look after their sites — in Canada, the United States, and
anywhere GDPR-level consent applies. If you run analytics, ads, or a chat
widget and your visitors are in a jurisdiction with a privacy law, you need
consent that actually holds up. Orbo makes that a five-minute job instead
of a legal project.

How it works

1. Install the plugin and create a free Orbo account.
2. Orbo scans your site and builds your banner, cookie categories, and
   policy page automatically.
3. Paste your Site Key into the plugin settings — the banner goes live and
   consent logging starts immediately.

An Orbo account is required. This plugin is a thin connector — all
configuration (banner design, cookie categories, blocking rules) lives in
the Orbo dashboard, and the banner, cookie scanning, and consent-record
functionality is provided by the Orbo service. A free plan is available
and works for small sites; no credit card is required to start.

Orbo helps you run a compliant consent flow, but no software makes
compliance automatic on its own — this plugin is not legal advice. If you
are unsure what your site requires, talk to a privacy professional.

Docs & support

• WordPress plugin guide — setup,
  shortcodes, and troubleshooting.
• FAQ — quick answers about compliance,
  scanning, and plans.
• Contact us — we’re happy to help with
  anything else.
• Learn more about Orbo at getorbo.com.

External services

This plugin relies on the Orbo platform (operated by Orbo,
https://getorbo.com) to function. No external requests are made until you
save a Site Key on the settings page (Settings → Orbo Cookie Consent) — with no
Site Key configured, the plugin contacts no external servers.

Once a Site Key is saved, the plugin communicates with these Orbo endpoints:

• cdn.getorbo.com — the consent banner script (consent.js) is loaded in
  visitors’ browsers on every page. Through it, visitors’ consent choices
  are sent to Orbo together with the Site Key so that consent can be
  recorded and proven, as described in the Orbo privacy policy.
• config.getorbo.com — your server fetches this site’s script-blocking
  rules and banner configuration (the request contains the Site Key),
  cached locally for one hour.
• dashboard.getorbo.com — a connection heartbeat (weekly, at most once
  daily while you use wp-admin, and when you save the key or click “Test
  Connection”) sends the Site Key and this site’s address so Orbo can
  verify the key belongs to this domain, and the [orbo_cookie_policy] shortcode
  fetches your generated cookie policy (the request contains the Site Key),
  cached locally for one hour.

Orbo terms of service: https://getorbo.com/terms-of-service/
Orbo privacy policy: https://getorbo.com/privacy-policy/
Orbo data processing agreement: https://getorbo.com/data-processing-agreement/