Description
Super Duper Consent Manager is a consent manager for people who do not want to fiddle with code. Paste the script of Google, Matomo, Meta and co. as the provider gives it to you: the plugin reads the IDs and settings out of it, turns its functions into plain on/off switches and loads the service only after the visitor agrees – for each service separately. Any other script stays where it is built in: the plugin finds it on your pages and keeps it inactive until consent. A built-in consent test then shows you live that nothing loads without consent.
🇨🇭🇩🇪🇦🇹 Hinweis für DACH-Nutzer: Plugin und Support sind auf Deutsch (Schweiz/Deutschland/Österreich) verfügbar. Alle Texte und Einstellungen sind vollständig auf Deutsch übersetzt.
Paste it, switch it, done
- Paste the complete script – including the
<script>tags. The plugin reads the IDs, server addresses and settings out of it and loads the service with its own loader. Your code is not stored. - Automatic recognition of Google Analytics 4, Google Ads, Google Tag Manager, Matomo, Matomo Tag Manager, Meta Pixel, Microsoft Clarity, Hotjar, LinkedIn Insight Tag and TikTok Pixel.
- Every function becomes a switch: green is on, red is off. Matomo for example: count page views, track downloads and outgoing links, track without cookies, respect Do Not Track, count subdomains as one website and more. Google Analytics: automatic page views, Google Signals, personalised advertising, debug mode.
- Further commands of your script, for example events, appear as switches of their own with their values.
- No double loading: if the same service is also built into your theme, that copy is switched off.
- Tracking without JavaScript is removed:
<noscript>pixels would track without asking, so they are left out automatically. - Opt-in or opt-out: one default for all scripts and embeds – load only after consent, or load at once and let visitors switch it off. Each script and provider can override it, for international websites with different rules.
- Eight categories: Necessary (always active), Functional, Preferences, Statistics, Marketing, Social media, Chat & support and External media – each explained to visitors in one sentence.
- Google Consent Mode v2 is sent automatically.
- See what loads: a preview shows what will run after consent.
Scripts built in elsewhere
Tracking code in the theme, in a header and footer plugin, in a page builder module or from another plugin stays where it is. Before a page is sent, the plugin checks every script on it.
- Blocking rules: a server (for example cdn.tracking-example.com) or a keyword of the script. Matching scripts, iframes and tracking pixels wait for consent – visitors decide for each rule separately.
- Found on your website: every script from another server that nothing controls yet is listed in the admin, with the page it was found on. One click turns it into a rule, or takes a known service over with switches.
- Scan whole website: opens every page once, including pages nobody has visited yet. A page you save is checked right away.
- Block newly found scripts (optional): a new script stays off until you decide.
Built-in consent test
Does a script really stay blocked until the visitor agrees? Consent Manager > Test opens your website in its own window with a checking panel beside it. It shows live which scripts load, which cookies are set and which other servers are contacted – and marks in red everything that happens without consent.
- Click “Test as a new visitor” for a clean first visit.
- Accept, reject or switch single services on and off – the panel updates right away.
- Known services built in elsewhere (for example Google Fonts in the theme) are pointed out as well.
- A server nothing controls yet can be blocked with one click from the panel.
- No browser extension needed. Only you see the panel, and only in the test window.
Videos, maps and social media posts
Embedded content is replaced by a short notice until the visitor agrees. Visitors can load a single video or post – it then stays allowed on later visits – or allow the provider for the whole website. Each provider can also be set to opt-out: the content loads at once and visitors can switch it off.
- YouTube and Vimeo videos
- Google Maps
- Facebook and Instagram posts
- X (Twitter), TikTok, Spotify and SoundCloud
It works for embeds in posts, pages, widgets, page builders and custom HTML – no shortcode needed.
For the visitor
- Banner with “Accept all”, “Reject all” and “Choose individually” – equally easy to accept and to reject.
- Settings grouped by category, each service with its own switch and a link to the provider’s privacy policy.
- The choice can be changed at any time with a small button, a menu link (
#suduconman-settings) or the shortcode[suduconman_settings]. - Cookies and browser storage of services without consent are removed on every page view – after a withdrawal, but also data that was there before.
For you
- Seven designs: Classic, Glass, Midnight, Soft, Editorial, Bold and Compact – banner, settings and video placeholders all follow the chosen design.
- Your own colours in every design (colour picker with hex field). Choosing a design only suggests colours, yours stay.
- Live preview in the settings: banner, privacy settings and video placeholder change while you click.
- Three positions: bar at the bottom, box in the corner or window in the middle.
- Your own texts.
- Consent log as proof: every decision with a random consent ID. No IP addresses are stored, entries are deleted after 12 months.
- “Ask everyone again” after important changes.
- Works with page caching – all decisions are made in the visitor’s browser.
- Translated into German (Germany, Austria and Switzerland, informal and formal), English, Spanish, French, Italian and Dutch (informal and formal).
External services
This plugin does not connect to any external service by itself.
It loads the third-party services you set up (for example Google Analytics, Matomo or the Meta Pixel), the scripts it keeps inactive on your pages and the embedded content of your pages (for example YouTube videos or Google Maps) in the visitor’s browser, and only after the visitor has agreed. The website scan only opens pages of your own website. Which data these services receive, and under which terms, is defined by the respective provider. The plugin links each provider’s privacy policy in the privacy settings, for example:
- Google (Analytics, Ads, Tag Manager, YouTube, Maps): https://policies.google.com/privacy
- Meta (Meta Pixel, Facebook, Instagram): https://www.facebook.com/privacy/policy/
- Microsoft Clarity: https://privacy.microsoft.com/privacystatement
- Hotjar: https://www.hotjar.com/legal/policies/privacy/
- LinkedIn: https://www.linkedin.com/legal/privacy-policy
- TikTok: https://www.tiktok.com/legal/privacy-policy
- Vimeo: https://vimeo.com/privacy
- X: https://x.com/en/privacy
- Spotify: https://www.spotify.com/legal/privacy-policy/
- SoundCloud: https://soundcloud.com/pages/privacy
The consent decision itself is stored in a cookie of your own website (suduconman_consent) and, as proof, in a table of your own database without IP address.
Installation
- Upload the plugin and activate it.
- Go to Consent Manager > Scripts and click Add script. Paste the complete script of your service and check the switches. The same service elsewhere on your pages is switched off.
- Click Scan whole website. Scripts built into your theme or other plugins appear under “Found on your website” – block them or take them over.
- Under Banner, choose the layout, texts and colours.
- Under Test, check that nothing loads without consent.
FAQ
-
Where do I get the script?
-
From the service itself, for example Google Analytics (Admin > Data streams > View tag instructions), Matomo (Administration > Websites > Tracking code) or Meta Events Manager. Copy it completely.
-
Does the plugin store my tracking code?
-
No. It reads the IDs, server addresses and settings out of a pasted script and stores only those; the service is then loaded by the plugin’s own JavaScript. Scripts built in elsewhere stay there, the plugin only keeps them inactive until consent.
-
The script of my service is not recognised.
-
Leave it where it is built in – theme, header plugin or page builder – and click Block a script, or wait until it appears under “Found on your website”. Enter its server or a keyword: every matching script on your pages waits until the visitor agrees.
-
How does the plugin block scripts in my theme?
-
WordPress 6.9 lets plugins check the finished page before it is sent. The plugin changes matching scripts to
type="text/plain", so the browser neither loads nor runs them, and turns them back into live scripts after consent. Should a website switch this page check off, the admin screen says so. -
What is the difference between opt-in and opt-out?
-
Opt-in: the script or embed loads only after the visitor agrees. Opt-out: it loads at once, and visitors can switch it off in the privacy settings at any time – the cookies of that service are then removed. You choose this separately for every script and every provider, so a website used worldwide can follow the rules that apply to it.
-
Can I set IP anonymisation?
-
Not in the script. Google Analytics 4 always anonymises IP addresses, and Matomo does it on the Matomo server (Administration > Privacy > Anonymise data). The plugin shows this as a note, so nobody searches for a switch that has no effect.
-
Yes. As long as a service has no consent, its cookies and browser storage entries are removed on every page view – right after the withdrawal, on every following page, and also cookies that were set before the plugin was installed. Which names belong to a service is set under Advanced in the script (filled in automatically for recognised services). Names an allowed service uses too are kept. Cookies of other domains (for example youtube.com or doubleclick.net) cannot be removed by any website; after a withdrawal they are simply no longer sent.
-
How do I check that nothing loads without consent?
-
Go to Consent Manager > Test and click Start test in a new window. Your website opens with a panel on the right. Click “Test as a new visitor”, then accept, reject or switch single services on and off: the panel shows live which scripts, cookies and connections to other servers exist, and marks everything in red that happens without consent. The panel appears only in that test window, never in your other tabs and never for visitors.
-
An embed should load without asking.
-
Add the attribute
data-suduconman-skipto the iframe. -
Does it work with caching plugins?
-
Yes. The page is the same for every visitor; the consent is evaluated in the browser.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Super Duper Consent Manager” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “Super Duper Consent Manager” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.18 – 21.09.2026
- First public release on WordPress.org.
- Versions 1.0.0 to 1.0.17 were internal development versions.
