CookieBoss – Cookie Consent & GDPR Compliance

CookieBoss is a lightweight, fast cookie consent management platform built for GDPR and ePrivacy compliance. This plugin connects your WordPress site to your CookieBoss account and automatically displays a customizable consent banner.

Get compliant in 2 minutes — for free:

• Compliant out of the box — GDPR & ePrivacy consent banner with automatic script blocking and Google Consent Mode v2, no configuration required
• Works with WooCommerce and caching plugins — no per-page setup, no conflicts
• Free tier — 1 domain, all core features, no credit card required

Why CookieBoss?

• Lightweight — under 25KB gzipped, no impact on Core Web Vitals
• Automatic cookie scanning — detects cookies and categorizes them from a database of 5,000+ known cookies
• Google Consent Mode v2 — built-in, zero configuration needed
• Automatic script blocking — blocks Google Analytics, Facebook Pixel, Hotjar, and 20+ other tracking scripts until consent
• 32 languages for the consent banner via CookieBoss CDN
• Customizable banner — bottom bar, modal, or preference center layouts
• Dark mode support with automatic detection
• Free tier — 1 domain, all core features, no credit card required

Features:

• One-click consent banner installation
• Automatic script blocking for known tracking plugins (GA, GTM, Facebook, Hotjar, etc.)
• Google Consent Mode v2 with URL passthrough and ads data redaction
• Cookie inventory management
• Per-category consent (necessary, analytics, marketing, functional)
• Google Tag Manager integration
• Cross-domain consent sharing
• A/B testing for banner optimization
• Admin preview mode — browse without the banner while logged in
• Compliance reports and AI-powered audit
• REST API for headless and custom integrations

How it works:

1. Create a free account at cookieboss.io
2. Add your domain and configure your banner
3. Install this plugin and enter your Site ID
4. Your consent banner is live — scripts are blocked until consent

The banner is managed and customized in the CookieBoss dashboard — this plugin handles script injection, blocking, and Google Consent Mode integration on your WordPress site.

Automatic Script Blocking:

When blocking mode is enabled, the plugin automatically rewrites script tags for known tracking services so they don’t execute until consent is given:

• Analytics: Google Analytics, Google Tag Manager, Hotjar, Matomo, MonsterInsights, ExactMetrics, Site Kit
• Marketing: Facebook Pixel, Pinterest Tag, TikTok Pixel, LinkedIn Insight, Google Ads, Twitter/X UWT
• Functional: HubSpot, Intercom, Drift, Crisp, LiveChat

Scripts are identified by both their registered WordPress handle and their source URL, so both plugin-injected and manually added scripts are caught.

See the “External services” section below for the CookieBoss endpoints this plugin contacts.

External services

This plugin connects your site to the CookieBoss service (cookieboss.io), operated by Transformination OÜ. It contacts these CookieBoss endpoints:

• cdn.cookieboss.io — serves your consent banner script (loaded on every page; your Site ID is part of the script URL). Also contacted from your server to verify your Site ID when you click Verify in the settings.
• a.cookieboss.io — sends anonymous consent analytics (country and consent choice) when a visitor interacts with the banner.
• api.cookieboss.io — OAuth authentication calls (token exchange, token metadata, token revocation) when you connect or disconnect the plugin, and consent-analytics API calls for the admin dashboard widget (your Site ID and API key are sent to retrieve aggregate consent statistics).
• app.cookieboss.io — the CookieBoss sign-in and authorization page, opened in a browser popup when you use the one-click “Connect to CookieBoss” flow.

No personal data is sent to these services — only consent choices (accept/reject/custom) and anonymous analytics (country, consent rate).

The plugin also contains lists of well-known third-party domains (for example googletagmanager.com, connect.facebook.net, maps.googleapis.com). These are detection signatures used to recognize tracking scripts already present on your site so they can be held back until consent — the plugin never contacts these domains itself.

Use of the CookieBoss service is subject to its terms and privacy policy:

• Terms of Service: https://cookieboss.io/terms
• Privacy Policy: https://cookieboss.io/privacy