Orbo – Cookie Consent & Compliance Banner (GDPR, CCPA, PIPEDA)

Orbo shows a customizable cookie consent banner and stops tracking scripts from running until your visitor agrees — so your WordPress site can comply with GDPR, CCPA/CPRA, PIPEDA, and Québec Law 25.

Most cookie banners just sit on top of the page while Google Analytics, Meta Pixel, and other trackers fire anyway. That isn’t valid consent — the trackers must be blocked before the visitor agrees. Orbo blocks them in two layers:

• Server-side blocking rewrites each page’s finished HTML before it leaves your server, so even tracking scripts pasted directly into your theme or page builder never reach the browser without consent.
• Client-side blocking catches trackers injected later by other plugins, chat widgets, and tag managers.

Everything you need to get compliant

• Free automatic cookie scanner — Orbo crawls your site, finds the cookies and tracking scripts actually in use, and categorizes them against a signature database. No manual cookie spreadsheets.
• A banner that matches your brand — colors, logo, text, and position are managed in the Orbo dashboard and update on your site without touching code.
• Auto-generated cookie policy page — built from your latest scan and kept current, embedded anywhere with the [orbo_cookie_policy] shortcode.
• Consent logs you can show a regulator — every accept/reject is recorded with a timestamp and the privacy regime that applied (GDPR, CCPA, or PIPEDA), so you can prove consent if you’re ever asked.
• Visitors can change their mind — reopen the preferences panel anywhere with the [orbo_cookie_preferences] shortcode.
• Opt-in everywhere — Orbo applies the strictest (opt-in) behavior in every jurisdiction, so you’re covered wherever your visitors browse from.

Fast, light, and compatible

• One small async script — no jQuery, no render-blocking payloads.
• Automatically excluded from JS delay/defer in WP Rocket, LiteSpeed Cache, Autoptimize, and Cloudflare Rocket Loader, so consent and blocking always run first, even on aggressively optimized sites.
• Safe with WooCommerce, Elementor, and other page builders — your own first-party scripts and WordPress core assets are never blocked.

Who it’s for

Orbo is built for small-business site owners — and the freelancers and agencies who look after their sites — in Canada, the United States, and anywhere GDPR-level consent applies. If you run analytics, ads, or a chat widget and your visitors are in a jurisdiction with a privacy law, you need consent that actually holds up. Orbo makes that a five-minute job instead of a legal project.

How it works

1. Install the plugin and create a free Orbo account.
2. Orbo scans your site and builds your banner, cookie categories, and policy page automatically.
3. Paste your Site Key into the plugin settings — the banner goes live and consent logging starts immediately.

An Orbo account is required. This plugin is a thin connector — all configuration (banner design, cookie categories, blocking rules) lives in the Orbo dashboard, and the banner, cookie scanning, and consent-record functionality is provided by the Orbo service. A free plan is available and works for small sites; no credit card is required to start.

Orbo helps you run a compliant consent flow, but no software makes compliance automatic on its own — this plugin is not legal advice. If you are unsure what your site requires, talk to a privacy professional.

Docs & support

• WordPress plugin guide — setup, shortcodes, and troubleshooting.
• FAQ — quick answers about compliance, scanning, and plans.
• Contact us — we’re happy to help with anything else.
• Learn more about Orbo at getorbo.com.

External services

This plugin relies on the Orbo platform (operated by Orbo, https://getorbo.com) to function. No external requests are made until you save a Site Key on the settings page (Settings → Orbo Cookie Consent) — with no Site Key configured, the plugin contacts no external servers.

Once a Site Key is saved, the plugin communicates with these Orbo endpoints:

• cdn.getorbo.com — the consent banner script (consent.js) is loaded in visitors’ browsers on every page. Through it, visitors’ consent choices are sent to Orbo together with the Site Key so that consent can be recorded and proven, as described in the Orbo privacy policy.
• config.getorbo.com — your server fetches this site’s script-blocking rules and banner configuration (the request contains the Site Key), cached locally for one hour.
• dashboard.getorbo.com — a connection heartbeat (weekly, at most once daily while you use wp-admin, and when you save the key or click “Test Connection”) sends the Site Key and this site’s address so Orbo can verify the key belongs to this domain, and the [orbo_cookie_policy] shortcode fetches your generated cookie policy (the request contains the Site Key), cached locally for one hour.

Orbo terms of service: https://getorbo.com/terms-of-service/ Orbo privacy policy: https://getorbo.com/privacy-policy/ Orbo data processing agreement: https://getorbo.com/data-processing-agreement/