Lobbit Cookie Consent

Lobbit Cookie Consent is a cookie banner with a consent log, built around the GDPR and the guidelines of the Italian data protection authority (Garante) of 10 June 2021. Everything is stored on your own site: there is no account to open and no external dashboard.

Banner

• Small banner with “Accept all” and “Reject” buttons of equal weight, and “Customize” to choose by category.
• No cookie wall: the site stays usable before and after the choice.
• The choice is stored together with the version of the policy; when the version changes, the banner asks again.
• The preferences can always be reopened: floating icon or link in the footer, plus the [custcc_preferences] shortcode.
• Texts, colours and position are set from the settings.

Consent log

• Every choice is recorded with date, categories, policy version and a consent ID.
• Search, filters, CSV export and automatic deletion after the retention period.
• The IP address is truncated by default.

Integrations

• Google Analytics 4 with Consent Mode v2: in basic mode (default) nothing is downloaded from Google before consent; advanced mode is optional.
• Google Tag Manager, loaded after the first consent, with the consent state and a custcc_consent_update event at every choice.
• Meta Pixel, loaded only after consent to marketing.
• Custom scripts by category, inert in the page until consent.
• The data-custcc-category attribute keeps any other script blocked until consent.

Cookie scan and Cookie Policy

• Catalog of the most common cookies (WordPress, WooCommerce, Elementor, WPML, Polylang, Wordfence, Google Analytics, Google Ads, Meta Pixel, YouTube, Vimeo, reCAPTCHA, Cloudflare and Turnstile, Hotjar, Clarity, LinkedIn, TikTok) with provider, purpose, duration and category.
• Scan from three sources: active plugins and connected services, Set-Cookie headers of a sample of pages of your own site, names of the cookies in the browser of the administrator.
• Table of the cookies, to classify or correct by hand.
• Cookie Policy page generated from the list of cookies and the data of the controller, through a block or the [custcc_cookie_policy] shortcode. It follows the list by itself.
• A new optional cookie, a new company or a change of category make the plugin propose a new policy version, published only after you confirm.

Privacy Policy

• Five steps of questions about what the site does, the data it uses, retention, recipients and special cases.
• Privacy Policy page generated from the answers, through a block or the [custcc_privacy_policy] shortcode.
• The two policies and the banner link to each other.

Export and import

• The configuration in a JSON file: settings, controller, list of the cookies, Privacy Policy answers. A backup, or a starting point for another site.
• Before an import you see what would change, part by part, and choose what to write.

Accessibility

• Banner, preferences panel and generated pages checked against WCAG 2.2 AA.
• The banner is the first keyboard stop, Escape never decides for the visitor, the focus goes back where it was when the panel closes.
• A warning in the settings when the chosen colours are hard to read.

The interface and the generated texts are ready for translation; translations are delivered through translate.wordpress.org.

Please note

The plugin gives you the tools and proposes prudent texts, but it is not legal advice and using it does not by itself make a site compliant. You remain responsible for the content of your policies; for health data, minors, profiling and other delicate cases, ask a lawyer.

External services

The plugin does not contact any external service on its own. The services below are used only if the administrator connects them in the Integrations tab, and only after the visitor has given consent to the matching category (with one exception, described under Google).

Google Analytics 4 and Google Tag Manager (Google Ireland Limited / Google LLC)

Used to measure visits (Analytics) or to load the tags of your container (Tag Manager), when you enter a measurement ID or a container ID. The script is loaded from www.googletagmanager.com after the visitor consents; from that moment the browser of the visitor sends to Google the IP address, the address of the page, the identifiers stored in the Google cookies and the consent state. If you turn on the advanced Consent Mode, the Google library is loaded on every page before the choice, with all storage denied, and sends cookieless signals to Google.

• Google Terms of Service
• Google Privacy Policy

Meta Pixel (Meta Platforms Ireland Limited)

Used to measure and build audiences for advertising, when you enter a Pixel ID. The script is loaded from connect.facebook.net only after the visitor consents to marketing; from that moment the browser of the visitor sends to Meta the IP address, the address of the page, the Pixel ID and the identifiers stored in the Meta cookies.

• Meta Terms of Service
• Meta Privacy Policy

The cookie scan only requests pages of your own site.