CJakCiasteczko
CJakCiasteczko is a lightweight (~8 KB gzipped) Consent Management Platform (CMP). This plugin connects your WordPress site with an account on cjakciasteczko.pl. The banner’s look, copy and behaviour are configured in the cjakciasteczko.pl dashboard; the plugin simply injects the script that loads it on every public page of your site, scoped to your domain via the install key you paste in.
What the plugin does
- Enqueues a small inline configuration script and an asynchronous external consent script (
cjakciasteczko.js) into the<head>of every public page. - The inline configuration sets the Google Consent Mode v2 defaults to “denied” with
wait_for_update, so analytics/ads tags wait for the visitor’s decision before firing. - After the visitor interacts with the banner, the external script calls
gtag('consent', 'update', ...)to grant or deny each consent category.
What the plugin does NOT do
- It does not configure the banner appearance or copy — you do that in the cjakciasteczko.pl dashboard.
- It does not send any visitor data to cjakciasteczko.pl from PHP. The only PHP-to-API call happens once, when you save your install key in Settings -> CJakCiasteczko, in order to verify the key and resolve your domain. All visitor-side consent traffic happens in the visitor’s browser, between the visitor and the cjakciasteczko.pl service, not via your server.
Requirements
- A free or paid account at cjakciasteczko.pl (the service this plugin connects to). The plugin is useless without it.
External services
This plugin relies on the cjakciasteczko.pl service to provide its core functionality (the consent banner UI, the GDPR audit log, and the Google Consent Mode integration). The service is provided by aveneo, ul. Dmowskiego 124, 60-124 Poznan, Poland (NIP 7792268011).
The plugin contacts cjakciasteczko.pl in the following situations:
-
When you save your install key in Settings -> CJakCiasteczko, the plugin POSTs the install key to
https://cjakciasteczko.pl/api/v1/install/verifyto validate it and to discover the matching domain name. This call is made only once per save, only from your server, and only contains the install key you entered. The response contains the domain name associated with that key. -
When a visitor loads any page of your site, the plugin injects an asynchronous
<script>tag pointing tohttps://cjakciasteczko.pl/v1/cjakciasteczko.js. The visitor’s browser then loads that script directly from cjakciasteczko.pl. The script communicates with cjakciasteczko.pl to fetch the banner configuration for your domain and, after the visitor makes a consent decision, to persist that decision in the audit log. The plugin itself does not see this traffic — it happens entirely between the visitor’s browser and cjakciasteczko.pl.
The cjakciasteczko.pl service is required for the plugin to provide any visible functionality. Without a valid install key the plugin does nothing.
- Service Terms of Service: https://cjakciasteczko.pl/en/legal/terms
- Service Privacy Policy: https://cjakciasteczko.pl/en/legal/privacy
- Service provider website: https://cjakciasteczko.pl
Privacy
The plugin stores three values in your WordPress wp_options table: the install key you pasted, the hostname resolved by the verify call, and the timestamp of the last successful verification. All three are removed when the plugin is uninstalled (see uninstall.php).
The plugin does not set any cookies on your site. The consent banner script loaded from cjakciasteczko.pl handles its own cookie/local-storage usage as documented in the service’s Privacy Policy linked above.