SureCookie – Cookie Consent Banner, Cookie Scanner & Script Blocking

SureCookie is a WordPress cookie consent plugin that helps you scan cookies, display a customizable cookie banner, block non-essential scripts before consent, and store consent logs inside your WordPress database.

It is built for site owners, E-commerce stores, agencies, bloggers, and WordPress professionals who want more than a basic cookie notice. SureCookie helps you understand what cookies and third-party services are running on your site, lets visitors manage their choices, and gives you a practical consent workflow without visitor-based pricing.

Try the live demo of SureCookie.

Not Just a Cookie Banner

A cookie notice can tell visitors that your site uses cookies, but that alone does not manage consent properly. If analytics scripts, marketing pixels, video embeds, maps, or tag manager scripts run before visitors choose, the banner is only cosmetic.

SureCookie is built to connect the banner with the rest of the consent workflow. It helps you scan your WordPress site, review detected cookies, block non-essential scripts before consent, store consent logs locally, and keep your cookie policy easier to maintain.

How SureCookie Works

SureCookie follows a simple WordPress cookie consent workflow:

1. Scan selected pages with the real browser cookie scanner.
2. Review detected cookies, scripts, resources, and third-party domains.
3. Organize cookies into consent categories such as Essential, Functional, Analytics, and Marketing.
4. Enable script blocking so non-essential scripts wait for consent.
5. Show the cookie consent banner and preference modal to visitors.
6. Store consent logs locally in WordPress for review and export.
7. Generate or connect a cookie policy page that reflects your cookie setup.

This makes SureCookie more than a WordPress cookie banner. It works as a practical consent management plugin for cookie scanning, cookie blocking, consent records, and policy support.

Why SureCookie?

Many cookie banner plugins focus only on the visitor-facing notice. SureCookie focuses on what happens before and after that notice: cookie detection, script blocking, consent management, local consent logs, and policy support.

It covers the full cookie consent workflow:

• Scan selected pages to detect cookies, scripts, and third-party services
• Review cookies by category, with scan history, before publishing them to visitors
• Block scripts, iframes, embeds, and objects before consent
• Show a customizable cookie banner and preference modal
• Let visitors accept all, decline, or choose specific categories
• Support GDPR and CCPA cookie consent workflows
• Store consent logs locally in WordPress
• Generate a cookie policy page with dynamic cookie tables
• Re-request consent when your policy or setup changes
• Support Google Consent Mode and WP Consent API
• Run without visitor-based limits

Free Features Included

The WordPress.org version of SureCookie includes the core consent workflow:

• Cookie consent banner: Show a clean banner or notice for visitors.
• Preference modal: Let visitors review and manage cookie categories.
• Accept, Accept All, Decline, and Preferences buttons: Control the button text and order.
• Real browser cookie scanner: Scan selected pages using a browser-based scanning service.
• Cookie categories: Use Essential, Functional, Analytics, Marketing, and Uncategorized categories.
• Custom cookies: Add and manage cookies manually when needed.
• Script blocking: Block non-essential scripts before consent is given.
• Resource blocking: Manage scripts, iframes, embeds, and objects found during scans.
• Consent logs: Store visitor choices inside your WordPress database.
• Consent log filters: Search and filter logs by action, country, IP, and session ID.
• Consent PDF export: Export individual consent records for documentation.
• Consent retention settings: Control how long consent logs are kept.
• Monthly automatic scanning: Schedule recurring scans on the free plan.
• Scan history and change detection: See what changed between scans, including newly detected cookies and domains.
• Rule-based category suggestions: Get suggested categories for newly detected cookies.
• Cookie policy page: Generate a page with dynamic cookie tables.
• Re-consent controls: Add a Cookie Preferences link through a shortcode or menu item.
• Re-request consent: Ask all visitors to review choices again when needed.
• Google Consent Mode support: Send consent states to supported Google services.
• WP Consent API support: Share consent state with compatible WordPress plugins.
• Multilingual support: Work with WPML and Polylang for banner and admin text.
• RTL support: Display frontend cookie policy content correctly for RTL languages.
• MCP and WordPress Abilities support: Enable AI assistant access to SureCookie management actions when supported.
• No visitor-based limits: SureCookie does not charge by traffic or monthly visitors.

Free vs Pro Clarity

This WordPress.org listing focuses on the free SureCookie plugin. The free plugin includes the core banner, scanner, blocking, consent logs, cookie policy page, monthly automatic scanning, Google Consent Mode, WP Consent API, and multilingual support.

Some advanced workflows are reserved for SureCookie Pro, such as weekly automatic scans, email scan digests, auto-apply behavior, compliance guard workflows, regional targeting, and consent forwarding. This keeps the free feature list clear and avoids confusion for WordPress.org users.

Learn more about SureCookie Pro

Real Browser Cookie Scanner

SureCookie uses a browser-based scanning service at https://library.surecookie.com/ to inspect selected pages.

Instead of only reading static HTML, the scanner loads your pages in a real browser environment. This helps detect cookies and resources that appear after page load, through tag managers, or through third-party scripts.

The scanner can help identify:

• Cookies added by analytics tools
• Marketing and advertising cookies
• Functional and preference cookies
• WooCommerce and WordPress session cookies
• Third-party domains and resources
• Tag manager loaded scripts
• Dynamically injected scripts and cookies

SureCookie keeps scanning separate from visitor traffic, so your cookie banner and consent logs are not affected by how many people visit your site.

Monthly Automatic Scanning

SureCookie includes a free automatic scanning base.

When enabled, it can run scheduled monthly scans through WP-Cron. The scan uses the same scanner engine, respects the configured scan scope, and records the latest scan history.

The scan history can show:

• Newly detected cookies
• Removed cookies
• Recategorized cookies
• Newly detected third-party domains
• Whether the scan was manual or automatic
• The last scan date and cookie count

Weekly automatic scans, email digests, auto-apply, and compliance guard behavior are extension points for the Pro version. They are not described here as free features.

Script Blocking Before Consent

SureCookie can block non-essential scripts before the visitor gives consent.

When blocking is enabled, SureCookie processes the frontend HTML and converts matching resources so they do not execute until the relevant cookie category is allowed. It can handle scripts as well as embedded content such as iframes, embeds, and objects.

This matters because a banner alone does not stop tracking. SureCookie is designed to connect consent choices with technical enforcement.

The script blocker also includes safeguards so it skips admin pages, REST requests, AJAX requests, feeds, JSON responses, XML responses, and scanner bypass requests.

Customizable Banner and Preferences

SureCookie gives you control over the visitor-facing consent experience.

You can customize:

• Banner message and description
• Rich text banner content
• Accept, Accept All, Decline, and Preferences button labels
• Button order
• Banner position and width
• Banner logo
• Banner animation
• Background overlay
• Preference modal heading and description
• Cookie category labels and descriptions
• Custom CSS

Visitors can accept all cookies, decline non-essential cookies, or open the preferences modal and choose specific categories.

Consent Logs Stored Locally

SureCookie stores consent records inside your WordPress database.

This is different from many SaaS consent management platforms where consent records live on an external platform. With SureCookie, your consent logs stay on your WordPress site and can be reviewed from the admin area.

Consent logs can include:

• User session ID
• Consent action, such as accepted, declined, or partially accepted
• Cookie category preferences
• Masked IP address
• Timestamp
• Country

Admins can view, search, filter, delete, and export logs from WordPress. SureCookie also includes retention settings so you can control how long logs are kept.

Cookie Policy Page and Cookie Policy Generator

SureCookie includes a cookie policy generator that can create a Cookie Policy page for your website.

The generated page uses native WordPress blocks and includes a dynamic shortcode that displays cookie tables grouped by category and provider. The cookie policy content can include:

• Cookie categories
• Cookie names
• Purpose or description
• Duration
• Domain
• Last updated timestamp
• A table of contents when multiple categories are available

You can edit the generated policy page in the WordPress editor and keep the dynamic cookie table connected to your scanned and manually added cookies.

Re-Consent and Re-Request Consent

Visitors should be able to change their choices later.

SureCookie includes a re-consent shortcode:

You can use it to add a Cookie Preferences button on your site. SureCookie can also add a virtual Cookie Preferences item to a selected WordPress navigation menu.

Admins can also re-request consent from all visitors. This is useful after updating your cookie policy, adding new tracking tools, changing categories, or making a major consent workflow change.

Google Consent Mode

SureCookie includes Google Consent Mode support.

When enabled, SureCookie can send consent states for supported Google services and update consent when visitors change their preferences. It maps SureCookie categories to Google consent signals and can detect Google services from enqueued scripts or the page HTML.

SureCookie also avoids showing ineffective block toggles for Google resources that are managed by Google Consent Mode.

WP Consent API

SureCookie supports WP Consent API.

It reads the SureCookie consent cookie and syncs the visitor’s consent state so compatible WordPress plugins can check consent using the standardized WordPress consent API flow.

Default category mapping includes:

• Essential to functional
• Functional to preferences
• Analytics to statistics
• Marketing to marketing

Developers can customize mappings through filters.

Multilingual and RTL Support

SureCookie includes multilingual compatibility for WPML and Polylang.

It can register and translate banner text, button labels, preference modal text, category labels, and related frontend strings. It also includes RTL support for cookie policy layouts.

MCP and WordPress Abilities

SureCookie includes MCP and WordPress Abilities integration for supported setups.

When enabled, AI assistants and compatible tools can use structured SureCookie abilities to manage settings, cookie categories, consent logs, cookie management, and site scanner actions. Scanner start actions still require care because they contact an external scanning service.

No Visitor-Based Limits

SureCookie does not charge based on monthly traffic, pageviews, or visitor count.

The cookie banner, consent choices, and consent logs are not priced by how many visitors see the banner.

Who Should Use SureCookie?

SureCookie is a good fit for:

• WordPress site owners who need a cookie consent banner
• E-commerce stores using analytics, ads, pixels, embeds, or marketing tools
• Agencies managing WordPress cookie consent for client sites
• Bloggers and publishers using third-party scripts or content embeds
• Course, membership, and community sites that use analytics or conversion tracking
• Businesses using tag managers, analytics platforms, marketing pixels, heatmaps, video embeds, maps, forms, or similar third-party services
• Developers who want a WordPress-native consent workflow with hooks and APIs
• Teams that want consent logs stored inside WordPress instead of a third-party consent platform

Works Well For Common WordPress Setups

SureCookie is designed for everyday WordPress sites that need a cookie consent banner and practical script control. It can help with:

• E-commerce stores that use analytics, checkout tracking, or marketing pixels
• Agency-managed sites that need repeatable consent settings
• Publisher sites that use ads, embeds, and analytics tools
• Lead generation sites that use forms, CRM scripts, and conversion tracking
• Sites that need a cookie policy page with dynamic cookie tables
• Sites that want local consent logs for internal records

Important Legal Note

SureCookie provides technical tools for cookie scanning, script blocking, consent collection, consent logging, and cookie policy management.

No WordPress plugin can guarantee legal compliance on its own. Privacy and cookie requirements depend on your website, visitors, region, policies, data processing practices, and legal obligations. For legal advice, consult a qualified legal professional.

External Services

SureCookie uses external services for cookie scanning, site verification, and geolocation.

Cookie Scanning

SureCookie connects to https://library.surecookie.com/ to provide real browser-based cookie scanning and smart categorization.

When you run a scan, SureCookie sends the selected page URLs to the scanning service. A browser-based scanner visits those pages and detects cookies, scripts, resources, and third-party domains.

Scanner Registration and Authentication

Before the first scan, SureCookie performs a one-time registration handshake with library.surecookie.com/api/register.

The request sends:

• Site URL
• WordPress admin email
• SureCookie version
• A temporary installation nonce (one-time, random)

The scanning service verifies the site through a temporary REST endpoint, then returns site-specific credentials and a verification token. These credentials are stored locally in a non-autoloaded WordPress option and are used for authenticated scan requests.

Consent IP Logs and Region Detection

For consent logging and country detection, visitor IP addresses may be processed through MaxMind-backed region detection through SureCookie’s service. This helps SureCookie record the country in the consent log.

IP addresses are masked before being stored in your WordPress database.

MaxMind attribution: https://www.maxmind.com

Service URLs

• SureCookie scanning and geolocation service: https://library.surecookie.com/
• SureCookie privacy policy: https://surecookie.com/privacy-policy/
• MaxMind: https://www.maxmind.com

Data Stored Locally

SureCookie stores plugin settings and consent data in your WordPress database.

This can include:

• Banner and preference modal settings
• Cookie categories
• Custom cookies
• Scanned cookies
• Scanned resources
• Scan history
• Consent logs
• Cookie policy page ID
• Automatic scan settings
• Scanner credentials

Consent logs and scan results can be viewed, exported, or deleted from the WordPress admin.

Privacy and Data Processing

SureCookie processes data through its API service at library.surecookie.com for cookie scanning, scanner authentication, and region-aware consent logging. Here is what happens and why.

What We Send to SureCookie Services

During the one-time scanner registration and site verification flow, SureCookie sends the site URL, the WordPress administrator email, the SureCookie version, and a temporary installation nonce. The scanning service uses these to verify your site and issue credentials, then returns a verification token that SureCookie exposes at a temporary REST endpoint for domain verification.

After registration, scan requests use site-specific credentials stored locally in WordPress and do not resend the admin email.

When a scan runs, SureCookie sends selected page URLs to the scanning service so a real browser can detect cookies, scripts, resources, and third-party domains.

What Is Processed and Why

• Cookie scanning: Selected page URLs are scanned in a real browser environment to detect cookies, scripts, resources, and third-party domains.
• Cookie categorization: Detected cookie details, such as names, domains, and durations, are used to help categorize cookies.
• Region detection: Visitor IP addresses may be processed through MaxMind-backed region detection …