KaaTai Consent Manager

KaaTai Consent Manager is a GDPR cookie consent plugin and Consent Management Platform (CMP) for WordPress — with a cookie banner, a built-in cookie scanner, a privacy policy generator and Google Consent Mode v2. Supports GDPR, ePrivacy, DSGVO, TDDDG and CCPA. The admin interface is available in English and German.

Deutsche Video-Anleitung (German walkthrough): https://www.youtube.com/watch?v=J4sL_DYakHs

Everything below works without an account

• Cookie banner with all layouts, colours and positions
• Google Consent Mode v2 — always on, no upgrade required
• Cookie scanner that finds the cookies on your site
• Auto-blocking of the trackers it finds, at the push of a button
• Privacy policy (DSE) generator — covers all 14 items required by GDPR Art. 13
• Local consent logging with record IDs (GDPR Art. 7(1))
• Content blocking for YouTube, Vimeo, Maps, Facebook, Instagram, Spotify
• 22 service presets

No registration, no cloud service, no licence key, and no data sent to us. A free account adds all 106 service presets, the Impressum generator, multi-page scanning and the dashboard — but nothing in the list above depends on it.

Cookie Consent Banner

• Customizable consent banner with 3 layouts: Bottom Bar, Centered Popup, Corner Box
• All design settings included: colors, overlay, border radius, spacing, box shadow
• Responsive design — works on desktop, tablet, and mobile
• WCAG 2.1 compliant: ARIA roles, focus trap, keyboard navigation, semantic HTML
• No jQuery dependency — lightweight vanilla JavaScript
• Cache-safe: works correctly with all popular caching plugins

Content Blocking

• Automatically blocks YouTube, Vimeo, Facebook, Instagram, and Spotify embeds until consent
• Blocks Google Maps and OpenStreetMap iframes
• Shows privacy-friendly placeholders with click-to-load buttons
• MutationObserver detects and blocks dynamically injected content
• Auto Script Blocker detects and blocks tracking scripts from third-party plugins (67 known services)

Consent Management

• Google Consent Mode v2 — always enabled, sends proper signals to GTM, GA4, and Google Ads
• Granular consent — visitors can accept/reject individual vendors, not just categories
• 5 cookie categories: Essential, Functional, Statistics, Marketing, Performance
• Consent choices persist across sessions and can be withdrawn at any time
• Consent logging with unique record IDs for GDPR Art. 7(1) compliance (36-month retention)
• Global Privacy Control (GPC) — automatically honors browser-level privacy signals

Legal Text Generator

• Impressum generator — all mandatory fields per German law (TMG/DDG)
• Privacy policy generator — covers all 14 items required by GDPR Art. 13
• Shortcodes: [kccm_impressum] and [kccm_datenschutz] for easy page integration
• Language-specific shortcodes for multilingual sites (WPML/Polylang): [kccm_datenschutz_en], [kccm_datenschutz_de], [kccm_impressum_en], [kccm_impressum_de] — or the lang=»en|de» attribute
• Data for responsible person (Verantwortlicher) stored locally — no external service needed

Vendor Registry

• Pre-configured presets for 22 common services with accurate cookie descriptions — all 106 with a free account
• Google Analytics, Meta Pixel, Microsoft Clarity, YouTube, Google Maps, and many more
• 1-click install from the service catalog
• Custom vendor support — add your own services with cookie details

Setup Wizard

• 4-step guided setup: General Settings, Responsible Person, Select Services, Banner Design
• Live banner preview during setup
• Works without an API key — no account required for basic features

Deep GDPR & DACH Expertise

The cookie database, legal-text templates, and compliance checks are built around the GDPR and the especially strict German rules (DSGVO, TDDDG, ePrivacy) — so you get compliance depth that also covers the rest of the EU. The plugin is fully translatable and locale-aware: the admin UI ships in English and German, legal texts can be rendered per language, and more localized presets are being added.

Integrations

KaaTai Consent Manager works with the most popular WordPress plugins and services:

• Analytics: Google Analytics, Google Tag Manager, Matomo, Piwik PRO, Microsoft Clarity, Plausible, Fathom
• Marketing: Meta Pixel (Facebook), Google Ads, Taboola, Outbrain, Awin, Tradedoubler
• Embeds: YouTube, Vimeo, Google Maps, OpenStreetMap, Facebook, Instagram, Spotify
• E-Commerce: WooCommerce (Checkout Banner mode, one-click setup)
• Chat & Support: Tidio, Crisp, Zendesk, Drift, LiveChat
• Security: Google reCAPTCHA, Cloudflare, hCaptcha
• Payments: PayPal, Klarna
• Other: HubSpot, Twitter/X Pixel, Snap Pixel, Gravatar, Site Kit by Google

Free — with or without an account

The plugin is free. There is no paid plan, no subscription, and no credit card.

What works without an account is listed at the top of this page. A free account adds:

• All 106 service presets
• Impressum generator
• Auto script blocker
• Cookie scanner across your most important pages (up to 20, from your navigation menus)
• Deep scan with a compliance audit score
• Legal texts in the dashboard: archive, version history, DE/EN sync
• Central consent logging
• Analytics dashboard (consent trends, geo data)
• Conversion impact calculator
• White-label (remove branding)
• Banner logo upload
• WooCommerce presets
• Cloud backup of your consent logs

The SaaS integration stays entirely optional — the plugin works fully standalone.

Registration at consent-management.kaatai.de is free and needs no payment details.

Fair use per account: up to 3 domains, 100,000 consents per month, 5 scans per domain and day.

Useful Links

• Plugin Homepage
• Documentation
• Support
• GitHub
• Translate KaaTai Consent Manager

About KaaTai

KaaTai Consent Manager is developed by KaaTai in Germany. We believe that GDPR compliance should be simple, affordable, and accessible to every website owner — not just enterprises with legal departments. Our goal is to be the best cookie consent solution for the German-speaking market.

External Services

Third-party service references (detection patterns, NOT dependencies)

This plugin is a Consent Management Tool. Its purpose is to detect, categorize, and block third-party tracking scripts until the visitor gives consent. The plugin contains a database of known tracking services with their hostnames and script patterns.

These references are identification patterns only. The plugin does not load, connect to, or transmit any data to these services. It uses the patterns to recognize scripts already present on your site and block them until consent is granted.

The following services are referenced as detection patterns:

• Google Analytics — detected and blocked until «statistics» consent. Privacy Policy, Terms
• Google Tag Manager — detected and blocked until «marketing» consent. Privacy Policy, Terms
• Meta Pixel (Facebook) — detected and blocked until «marketing» consent. Privacy Policy, Terms
• Cloudflare — detected and categorized as «essential». Privacy Policy, Terms
• Google reCAPTCHA — detected and categorized as «functional». Privacy Policy, Terms
• Piwik PRO / Matomo — detected and blocked until «statistics» consent. Privacy Policy
• Microsoft Clarity — detected and blocked until «statistics» consent. Privacy Policy, Terms

No data is sent to any of these services by this plugin.

KaaTai Consent Manager SaaS (optional, requires API key)

This plugin optionally connects to servers operated by KaaTai (consent-management.kaatai.de). These connections are only made when the site administrator has entered an API key. Without an API key, no external connections occur.

Service: KaaTai Consent Manager SaaS Service URL: https://consent-management.kaatai.de What it does: License validation, consent analytics, cookie scanner, service library, legal text generation. What data is sent: API key, domain, consent configuration, anonymized consent events (no PII), scan results. Privacy Policy: https://consent-management.kaatai.de/datenschutz Terms of Service: https://consent-management.kaatai.de/agb

Data transmitted when an API key is configured

1. License Validation (/api/license/validate) — API key sent to verify license status and features. Cached for 24 hours.
2. Config Sync (/api/consent/config) — Consent configuration sent when settings are saved. No personal visitor data.
3. Consent Events (/api/consent/event) — Anonymized consent events via sendBeacon(). Contains: action, categories, hashed session ID, policy hash. No PII.
4. Legal Texts (/api/legal/impressum, /api/legal/privacy-policy) — Legal text content fetched from SaaS. Cached for 24 hours.
5. Newsletter (/api/newsletter/subscribe-by-key) — Only when administrator clicks «Subscribe».
6. Scanner (/api/scan/results) — Scan results synced to SaaS dashboard.
7. Cookie Definitions (/api/cookies/definitions) — Cookie descriptions fetched for Service Library.

Data stored on the external server

• License/API key association and plan details
• Aggregated consent statistics (no personal data)
• Consent configuration snapshots
• Scan results (URLs and detected services)

User consent

The site administrator gives explicit consent by entering and saving an API key. The API key can be removed at any time to stop all external communication.