Title: Super Duper Consent Manager
Author: Super Duper Plugins
Published: <strong>September 21, 2026</strong>
Last modified: September 21, 2026

---

Search plugins

![](https://ps.w.org/super-duper-consent-manager/assets/banner-772x250.png?rev=3704944)

![](https://ps.w.org/super-duper-consent-manager/assets/icon-256x256.png?rev=3704944)

# Super Duper Consent Manager

 By [Super Duper Plugins](https://profiles.wordpress.org/rogerruckstuhl/)

[Download](https://downloads.wordpress.org/plugin/super-duper-consent-manager.1.0.18.zip)

 * [Details](https://wordpress.org/plugins/super-duper-consent-manager/#description)
 * [Reviews](https://wordpress.org/plugins/super-duper-consent-manager/#reviews)
 *  [Installation](https://wordpress.org/plugins/super-duper-consent-manager/#installation)
 * [Development](https://wordpress.org/plugins/super-duper-consent-manager/#developers)

 [Support](https://wordpress.org/support/plugin/super-duper-consent-manager/)

## Description

**Super Duper Consent Manager** is a consent manager for people who do not want 
to fiddle with code. Paste the script of Google, Matomo, Meta and co. as the provider
gives it to you: the plugin reads the IDs and settings out of it, turns its functions
into plain on/off switches and loads the service only after the visitor agrees –
for each service separately. Any other script stays where it is built in: the plugin
finds it on your pages and keeps it inactive until consent. A built-in consent test
then shows you live that nothing loads without consent.

🇨🇭🇩🇪🇦🇹 _Hinweis für DACH-Nutzer: Plugin und Support sind auf Deutsch (Schweiz/Deutschland/
Österreich) verfügbar. Alle Texte und Einstellungen sind vollständig auf Deutsch
übersetzt._

#### Paste it, switch it, done

 * **Paste the complete script** – including the `<script>` tags. The plugin reads
   the IDs, server addresses and settings out of it and loads the service with its
   own loader. Your code is not stored.
 * **Automatic recognition** of Google Analytics 4, Google Ads, Google Tag Manager,
   Matomo, Matomo Tag Manager, Meta Pixel, Microsoft Clarity, Hotjar, LinkedIn Insight
   Tag and TikTok Pixel.
 * **Every function becomes a switch**: green is on, red is off. Matomo for example:
   count page views, track downloads and outgoing links, track without cookies, 
   respect Do Not Track, count subdomains as one website and more. Google Analytics:
   automatic page views, Google Signals, personalised advertising, debug mode.
 * **Further commands** of your script, for example events, appear as switches of
   their own with their values.
 * **No double loading**: if the same service is also built into your theme, that
   copy is switched off.
 * **Tracking without JavaScript is removed**: `<noscript>` pixels would track without
   asking, so they are left out automatically.
 * **Opt-in or opt-out**: one default for all scripts and embeds – load only after
   consent, or load at once and let visitors switch it off. Each script and provider
   can override it, for international websites with different rules.
 * **Eight categories**: Necessary (always active), Functional, Preferences, Statistics,
   Marketing, Social media, Chat & support and External media – each explained to
   visitors in one sentence.
 * **Google Consent Mode v2** is sent automatically.
 * **See what loads**: a preview shows what will run after consent.

#### Scripts built in elsewhere

Tracking code in the theme, in a header and footer plugin, in a page builder module
or from another plugin stays where it is. Before a page is sent, the plugin checks
every script on it.

 * **Blocking rules**: a server (for example cdn.tracking-example.com) or a keyword
   of the script. Matching scripts, iframes and tracking pixels wait for consent–
   visitors decide for each rule separately.
 * **Found on your website**: every script from another server that nothing controls
   yet is listed in the admin, with the page it was found on. One click turns it
   into a rule, or takes a known service over with switches.
 * **Scan whole website**: opens every page once, including pages nobody has visited
   yet. A page you save is checked right away.
 * **Block newly found scripts** (optional): a new script stays off until you decide.

#### Built-in consent test

Does a script really stay blocked until the visitor agrees? **Consent Manager > 
Test** opens your website in its own window with a checking panel beside it. It 
shows live which scripts load, which cookies are set and which other servers are
contacted – and marks in red everything that happens without consent.

 * Click “Test as a new visitor” for a clean first visit.
 * Accept, reject or switch single services on and off – the panel updates right
   away.
 * Known services built in elsewhere (for example Google Fonts in the theme) are
   pointed out as well.
 * A server nothing controls yet can be blocked with one click from the panel.
 * No browser extension needed. Only you see the panel, and only in the test window.

#### Videos, maps and social media posts

Embedded content is replaced by a short notice until the visitor agrees. Visitors
can load a single video or post – it then stays allowed on later visits – or allow
the provider for the whole website. Each provider can also be set to opt-out: the
content loads at once and visitors can switch it off.

 * YouTube and Vimeo videos
 * Google Maps
 * Facebook and Instagram posts
 * X (Twitter), TikTok, Spotify and SoundCloud

It works for embeds in posts, pages, widgets, page builders and custom HTML – no
shortcode needed.

#### For the visitor

 * Banner with “Accept all”, “Reject all” and “Choose individually” – equally easy
   to accept and to reject.
 * Settings grouped by category, each service with its own switch and a link to 
   the provider’s privacy policy.
 * The choice can be changed at any time with a small button, a menu link (`#suduconman-
   settings`) or the shortcode `[suduconman_settings]`.
 * Cookies and browser storage of services without consent are removed on every 
   page view – after a withdrawal, but also data that was there before.

#### For you

 * Seven designs: Classic, Glass, Midnight, Soft, Editorial, Bold and Compact – 
   banner, settings and video placeholders all follow the chosen design.
 * Your own colours in every design (colour picker with hex field). Choosing a design
   only suggests colours, yours stay.
 * Live preview in the settings: banner, privacy settings and video placeholder 
   change while you click.
 * Three positions: bar at the bottom, box in the corner or window in the middle.
 * Your own texts.
 * Consent log as proof: every decision with a random consent ID. No IP addresses
   are stored, entries are deleted after 12 months.
 * “Ask everyone again” after important changes.
 * Works with page caching – all decisions are made in the visitor’s browser.
 * Translated into German (Germany, Austria and Switzerland, informal and formal),
   English, Spanish, French, Italian and Dutch (informal and formal).

### External services

This plugin does not connect to any external service by itself.

It loads the third-party services you set up (for example Google Analytics, Matomo
or the Meta Pixel), the scripts it keeps inactive on your pages and the embedded
content of your pages (for example YouTube videos or Google Maps) in the visitor’s
browser, and only after the visitor has agreed. The website scan only opens pages
of your own website. Which data these services receive, and under which terms, is
defined by the respective provider. The plugin links each provider’s privacy policy
in the privacy settings, for example:

 * Google (Analytics, Ads, Tag Manager, YouTube, Maps): https://policies.google.
   com/privacy
 * Meta (Meta Pixel, Facebook, Instagram): https://www.facebook.com/privacy/policy/
 * Microsoft Clarity: https://privacy.microsoft.com/privacystatement
 * Hotjar: https://www.hotjar.com/legal/policies/privacy/
 * LinkedIn: https://www.linkedin.com/legal/privacy-policy
 * TikTok: https://www.tiktok.com/legal/privacy-policy
 * Vimeo: https://vimeo.com/privacy
 * X: https://x.com/en/privacy
 * Spotify: https://www.spotify.com/legal/privacy-policy/
 * SoundCloud: https://soundcloud.com/pages/privacy

The consent decision itself is stored in a cookie of your own website (`suduconman_consent`)
and, as proof, in a table of your own database without IP address.

## Installation

 1. Upload the plugin and activate it.
 2. Go to **Consent Manager > Scripts** and click **Add script**. Paste the complete
    script of your service and check the switches. The same service elsewhere on your
    pages is switched off.
 3. Click **Scan whole website**. Scripts built into your theme or other plugins appear
    under “Found on your website” – block them or take them over.
 4. Under **Banner**, choose the layout, texts and colours.
 5. Under **Test**, check that nothing loads without consent.

## FAQ

### Where do I get the script?

From the service itself, for example Google Analytics (Admin > Data streams > View
tag instructions), Matomo (Administration > Websites > Tracking code) or Meta Events
Manager. Copy it completely.

### Does the plugin store my tracking code?

No. It reads the IDs, server addresses and settings out of a pasted script and stores
only those; the service is then loaded by the plugin’s own JavaScript. Scripts built
in elsewhere stay there, the plugin only keeps them inactive until consent.

### The script of my service is not recognised.

Leave it where it is built in – theme, header plugin or page builder – and click**
Block a script**, or wait until it appears under “Found on your website”. Enter 
its server or a keyword: every matching script on your pages waits until the visitor
agrees.

### How does the plugin block scripts in my theme?

WordPress 6.9 lets plugins check the finished page before it is sent. The plugin
changes matching scripts to `type="text/plain"`, so the browser neither loads nor
runs them, and turns them back into live scripts after consent. Should a website
switch this page check off, the admin screen says so.

### What is the difference between opt-in and opt-out?

Opt-in: the script or embed loads only after the visitor agrees. Opt-out: it loads
at once, and visitors can switch it off in the privacy settings at any time – the
cookies of that service are then removed. You choose this separately for every script
and every provider, so a website used worldwide can follow the rules that apply 
to it.

### Can I set IP anonymisation?

Not in the script. Google Analytics 4 always anonymises IP addresses, and Matomo
does it on the Matomo server (Administration > Privacy > Anonymise data). The plugin
shows this as a note, so nobody searches for a switch that has no effect.

### Are cookies removed when a visitor withdraws consent?

Yes. As long as a service has no consent, its cookies and browser storage entries
are removed on every page view – right after the withdrawal, on every following 
page, and also cookies that were set before the plugin was installed. Which names
belong to a service is set under Advanced in the script (filled in automatically
for recognised services). Names an allowed service uses too are kept. Cookies of
other domains (for example youtube.com or doubleclick.net) cannot be removed by 
any website; after a withdrawal they are simply no longer sent.

### How do I check that nothing loads without consent?

Go to **Consent Manager > Test** and click **Start test in a new window**. Your 
website opens with a panel on the right. Click “Test as a new visitor”, then accept,
reject or switch single services on and off: the panel shows live which scripts,
cookies and connections to other servers exist, and marks everything in red that
happens without consent. The panel appears only in that test window, never in your
other tabs and never for visitors.

### An embed should load without asking.

Add the attribute `data-suduconman-skip` to the iframe.

### Does it work with caching plugins?

Yes. The page is the same for every visitor; the consent is evaluated in the browser.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Super Duper Consent Manager” is open source software. The following people have
contributed to this plugin.

Contributors

 *   [ Super Duper Plugins ](https://profiles.wordpress.org/rogerruckstuhl/)

[Translate “Super Duper Consent Manager” into your language.](https://translate.wordpress.org/projects/wp-plugins/super-duper-consent-manager)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/super-duper-consent-manager/),
check out the [SVN repository](https://plugins.svn.wordpress.org/super-duper-consent-manager/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/super-duper-consent-manager/)
by [RSS](https://plugins.trac.wordpress.org/log/super-duper-consent-manager/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.18 – 21.09.2026

 * First public release on WordPress.org.
 * Versions 1.0.0 to 1.0.17 were internal development versions.

## Meta

 *  Version **1.0.18**
 *  Last updated **1 day ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.9 or higher **
 *  Tested up to **7.1.2**
 *  PHP version ** 8.0 or higher **
 * Tags
 * [consent](https://wordpress.org/plugins/tags/consent/)[cookie banner](https://wordpress.org/plugins/tags/cookie-banner/)
   [GDPR](https://wordpress.org/plugins/tags/gdpr/)[google consent mode](https://wordpress.org/plugins/tags/google-consent-mode/)
   [matomo](https://wordpress.org/plugins/tags/matomo/)
 *  [Advanced View](https://wordpress.org/plugins/super-duper-consent-manager/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/super-duper-consent-manager/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/super-duper-consent-manager/reviews/)

## Contributors

 *   [ Super Duper Plugins ](https://profiles.wordpress.org/rogerruckstuhl/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/super-duper-consent-manager/)