GDPR support – Cookie _fbp set without consent

Hi,

Your plugin sets the _fbp cookie server-side via PHP, making it impossible for consent management platforms (CMPs) to prevent the cookie from being created before the user has given consent.

Please see https://github.com/facebookincubator/Facebook-Pixel-for-Wordpress/blob/main/core/class-facebookparambuilder.php#L147, and the simplified stack trace of the plugin’s loading code:

class FacebookForWordpress {
    public function __construct() {
        FacebookParamBuilder::server_setup();
    }
}
new FacebookForWordpress();

Please add a WordPress filter or another suitable hook that allows CMPs to signal whether the user has consented to Meta Pixel.

The _fbp cookie should only be created after consent has been granted. The same applies to CAPI requests, as these may also require prior user consent.

Thank you!