PrivacyTech CMP

PrivacyTech CMP is a fully featured, open-source consent management plugin for WordPress. It enables website owners to collect, record, and manage visitor consent in compliance with GDPR, CCPA, LGPD, and other privacy regulations.

Key Features:

• Cookie banner with 4 pre-built themes (minimal, modern, colorful, professional)
• Automatic cookie scanner with Cookiedatabase.org sync
• Google Consent Mode V2 integration
• Consent records with SHA-256 integrity proofs
• Compliance snapshots and PDF export (GDPR Art. 5(2) accountability)
• Consent statistics dashboard
• WooCommerce pixel guard (Facebook, Google Ads)
• Webhook API for CRM/DMP integration
• Mobile-optimized bottom sheet with swipe-to-close
• IAB TCF v2.2 (CMP ID 332)
• Multisite compatible

External services

This plugin may communicate with the following external services depending on which third-party scripts are detected on your site and which integrations you enable. The plugin does not load these services itself — it detects, manages and blocks/unblocks scripts already present on your site.

Cookiedatabase.org — Cookie metadata enrichment
– Purpose: Enriches detected cookies with names, descriptions, categories, and retention information.
– Data sent: Cookie names found during a site scan (no personal data, no visitor data).
– Activation: Disabled by default — must be explicitly enabled in Settings → General.
– Terms of Use: https://cookiedatabase.org/terms-of-use/
– Privacy Policy: https://cookiedatabase.org/en/privacy-policy/

Google (Consent Mode V2 / Analytics / Ads / Tag Manager) — Consent signal transmission
– Purpose: Sends consent state signals to Google tags already present on your site (gtag.js, GTM).
– Data sent: Consent boolean values (granted/denied) per purpose category. No visitor PII is sent by this plugin.
– Activation: Enabled by default if Google tags are detected; can be disabled in Settings → Google Consent Mode.
– Privacy Policy: https://policies.google.com/privacy
– Terms of Service: https://policies.google.com/terms

Facebook / Meta Pixel — Script blocking integration
– Purpose: This plugin detects Facebook Pixel scripts (connect.facebook.net) on your site and blocks them until the visitor grants marketing consent.
– Data sent: No data is sent by this plugin. When unblocked by visitor consent, the Facebook Pixel script may send data to Meta according to its own terms.
– Activation: Automatic when the pixel is detected on the site.
– Privacy Policy: https://www.facebook.com/privacy/policy/
– Terms of Service: https://www.facebook.com/legal/terms

Stripe — Script blocking integration
– Purpose: This plugin detects Stripe scripts (js.stripe.com) on your site and blocks them until the visitor grants functional consent.
– Data sent: No data is sent by this plugin. When unblocked, Stripe scripts may send data to Stripe according to their own terms.
– Activation: Automatic when Stripe is detected on the site.
– Privacy Policy: https://stripe.com/privacy
– Terms of Service: https://stripe.com/legal/ssa

Intercom — Script blocking integration
– Purpose: This plugin detects Intercom scripts (js.intercomcdn.com, widget.intercom.io) and blocks them until the visitor grants functional consent.
– Data sent: No data is sent by this plugin. When unblocked, Intercom scripts may send data to Intercom according to their own terms.
– Activation: Automatic when Intercom is detected on the site.
– Privacy Policy: https://www.intercom.com/legal/privacy
– Terms of Service: https://www.intercom.com/legal/terms-and-policies

YouTube — Media placeholder integration
– Purpose: Replaces YouTube iframe embeds with a consent placeholder until the visitor grants media consent.
– Data sent: No data is sent by this plugin. When unblocked, YouTube may send data to Google according to their own terms.
– Activation: Automatic when YouTube iframes are detected on the site.
– Privacy Policy: https://policies.google.com/privacy

PrivacyTech CMP Statistics (optional, opt-in) — Consent dashboard analytics
– Purpose: Tracks aggregate consent actions (accept, reject, customize, banner impression) per day and region to display charts in the admin dashboard.
– Data sent: Action type, region code, and date — no visitor PII, no UIDs, no IP addresses.
– Destination: Your own WordPress site (admin-ajax.php on the same server). No third-party server involved.
– Activation: Disabled by default. Must be explicitly enabled by the administrator in Settings → Advanced → “Activer les statistiques de consentement”.

Webhook endpoints (user-configured) — CRM / DMP integration
– Purpose: Sends consent events to external endpoints configured by the site administrator.
– Data sent: Pseudonymised consent events (UID, purposes, region, timestamp — no direct PII).
– Activation: Only active if the administrator adds at least one endpoint in Settings → Webhooks.