CookieBoss – Cookie Consent & GDPR Compliance

CookieBoss is a lightweight, fast cookie consent management platform built for GDPR and ePrivacy compliance. This plugin connects your WordPress site to your CookieBoss account and automatically displays a customizable consent banner.

Get compliant in 2 minutes — for free:

• Compliant out of the box — GDPR & ePrivacy consent banner with automatic script blocking and Google Consent Mode v2, no configuration required
• Works with WooCommerce and caching plugins — no per-page setup, no conflicts
• Free tier — 1 domain, all core features, no credit card required

Why CookieBoss?

• Lightweight — under 25KB gzipped, no impact on Core Web Vitals
• Automatic cookie scanning — detects cookies and categorizes them from a database of 5,000+ known cookies
• Google Consent Mode v2 — built-in, zero configuration needed
• Automatic script blocking — blocks Google Analytics, Facebook Pixel, Hotjar, and 20+ other tracking scripts until consent
• 32 languages for the consent banner via CookieBoss CDN
• Customizable banner — bottom bar, modal, or preference center layouts
• Dark mode support with automatic detection
• Free tier — 1 domain, all core features, no credit card required

Features:

• One-click consent banner installation
• Automatic script blocking for known tracking plugins (GA, GTM, Facebook, Hotjar, etc.)
• Google Consent Mode v2 with URL passthrough and ads data redaction
• Cookie inventory management
• Per-category consent (necessary, analytics, marketing, functional)
• Google Tag Manager integration
• Cross-domain consent sharing
• A/B testing for banner optimization
• Admin preview mode — browse without the banner while logged in
• Compliance reports and AI-powered audit
• REST API for headless and custom integrations

How it works:

1. Create a free account at cookieboss.io
2. Add your domain and configure your banner
3. Install this plugin and enter your Site ID
4. Your consent banner is live — scripts are blocked until consent

The banner is managed and customized in the CookieBoss dashboard — this plugin handles script injection, blocking, and Google Consent Mode integration on your WordPress site.

Automatic Script Blocking:

When blocking mode is enabled, the plugin automatically rewrites script tags for known tracking services so they don’t execute until consent is given:

• Analytics: Google Analytics, Google Tag Manager, Hotjar, Matomo, MonsterInsights, ExactMetrics, Site Kit
• Marketing: Facebook Pixel, Pinterest Tag, TikTok Pixel, LinkedIn Insight, Google Ads, Twitter/X UWT
• Functional: HubSpot, Intercom, Drift, Crisp, LiveChat

Scripts are identified by both their registered WordPress handle and their source URL, so both plugin-injected and manually added scripts are caught.

See the « External services » section below for the CookieBoss endpoints this plugin contacts.

External services

This plugin connects your site to the CookieBoss service (cookieboss.io), operated by Transformination OÜ. It contacts these CookieBoss endpoints:

• cdn.cookieboss.io — serves your consent banner script (loaded on every page; your Site ID is part of the script URL). Also contacted from your server to verify your Site ID when you click Verify in the settings.
• a.cookieboss.io — sends anonymous consent analytics (country and consent choice) when a visitor interacts with the banner.
• api.cookieboss.io — OAuth authentication calls (token exchange, token metadata, token revocation) when you connect or disconnect the plugin, and consent-analytics API calls for the admin dashboard widget (your Site ID and API key are sent to retrieve aggregate consent statistics).
• app.cookieboss.io — the CookieBoss sign-in and authorization page, opened in a browser popup when you use the one-click « Connect to CookieBoss » flow.

No personal data is sent to these services — only consent choices (accept/reject/custom) and anonymous analytics (country, consent rate).

The plugin also contains lists of well-known third-party domains (for example googletagmanager.com, connect.facebook.net, maps.googleapis.com). These are detection signatures used to recognize tracking scripts already present on your site so they can be held back until consent — the plugin never contacts these domains itself.

Use of the CookieBoss service is subject to its terms and privacy policy:

• Terms of Service: https://cookieboss.io/terms
• Privacy Policy: https://cookieboss.io/privacy