Turbo Cookie – GDPR Cookie Consent

Turbo Cookie is a lightweight, privacy-first cookie consent plugin for WordPress. It helps you comply with GDPR, CCPA, and other privacy regulations by showing a customizable cookie consent banner, blocking non-essential scripts until visitors give consent, and logging consent records locally in your WordPress database.

Built by Turbo Addons — the same team behind popular WordPress tools used by thousands of sites.

Cookie Consent Banner

• Customizable position: bottom bar, top bar, floating (bottom-left/right), or center modal
• Layout styles: bar, box, or cloud
• Smooth animations: slide, fade, or none
• Full color customization for background, text, and buttons
• Custom banner message and title
• Cookie policy page link
• Show/hide decline button

Preferences Modal

• Four consent categories: Essential, Functional, Analytics, Marketing
• Toggle switches for each category
• Essential cookies always active (cannot be disabled)
• Editable category names and descriptions
• Accessible — ARIA roles, keyboard navigation, focus trap

Script Blocking

• Automatically detects and blocks known tracking scripts until consent is given
• Blocks Google Analytics, Tag Manager, Facebook Pixel, and 40+ services
• Blocks iframes (YouTube, Vimeo, Google Maps) until consent
• Scripts activate instantly after visitor consents
• Works with both inline scripts and enqueued WordPress scripts
• No manual script tagging required for common services
• Extend via the turbo_cookie_script_patterns filter

Google Consent Mode v2

• Outputs consent default signals before any Google tags load
• Updates consent signals when visitors make their choice
• Supports all GCM v2 parameters: ad_storage, ad_user_data, ad_personalization, analytics_storage, functionality_storage, personalization_storage, security_storage
• Extend category-to-signal mapping via turbo_cookie_gcm_mapping filter

Consent Logging

• Stores consent records in your WordPress database — no data sent externally
• Logs session ID, action, categories, masked IP, and timestamp
• IP addresses masked for privacy (last octet zeroed for IPv4; first 48 bits kept for IPv6)
• Filterable log viewer in admin with date range and action filters
• CSV export for compliance documentation
• Configurable retention period with automatic cleanup
• Bulk delete and clear all options

Admin Dashboard

• At-a-glance consent statistics: accepted, declined, partial, acceptance rate (30-day window)
• Feature status overview
• Quick action links to all settings pages
• Privacy notice reminding site owners of their legal obligations

Onboarding Wizard

• 3-step setup wizard runs on first activation
• Choose banner position, enable features, set cookie policy URL
• Ready in under 2 minutes

Developer Friendly

• WordPress coding standards throughout
• Shortcode: [turbo_cookie_preferences] — lets visitors re-open preferences modal
• JavaScript API: window.TurboCookie.openPreferences()
• Filterable script blocking patterns: turbo_cookie_script_patterns
• Filterable GCM mapping: turbo_cookie_gcm_mapping
• REST API endpoint for consent logging: POST /wp-json/turbo-cookie/v1/consent

Privacy

Turbo Cookie does not send any visitor or site data to external servers. All consent records are stored in your own WordPress database. IP addresses are masked before storage. No telemetry. No tracking. No account required.

Legal Notice

Turbo Cookie provides technical tools for cookie consent management. Whether your site meets applicable privacy laws depends on your specific site, policies, and data practices. For legal advice about your compliance obligations, consult a qualified legal professional.

External Services

Turbo Cookie does not make any server-to-server calls and does not send your site data to any external server. Consent records, settings, and cookie state are stored entirely in your own WordPress database and browser cookies.

The plugin interacts with third-party services in the following two ways only:

Google Consent Mode v2 (optional, on by default)

When enabled, Turbo Cookie outputs Google Consent Mode v2 signals in the visitor’s browser. These signals communicate the visitor’s consent state to Google services that you have added to your site (for example Google Analytics 4, Google Ads, or Google Tag Manager). The plugin does not load Google services itself — it only declares and later updates the consent state for the Google tags you have configured.

What data is sent and when: the visitor’s consent choices (granted or denied for each consent category) are sent to Google’s services in the browser when the visitor interacts with the banner, and only for the Google tags present on the page.

This service is provided by Google LLC: privacy policy (https://policies.google.com/privacy) and terms of service (https://policies.google.com/terms).

Script Blocking (optional, on by default)

The script blocker recognizes and temporarily blocks scripts, iframes, and embeds from well-known third-party services until the visitor consents. Recognition is performed locally on your WordPress server by matching service domain names in the page output — no data is sent to those services by the plugin. Once the visitor consents, the blocked content is loaded in their browser by the original third-party service.

Blocked services include (but are not limited to): Google Analytics, Google Tag Manager, Google Maps, Facebook/Meta SDK and Pixel, and 40+ others.

No visitor or site data is transmitted by Turbo Cookie to any of these services. Data is only exchanged between the visitor’s browser and the third-party service after the visitor consents and the original script or embed is restored. Because the plugin never contacts these services directly, their data practices apply only after the visitor consents. These services are operated by their respective providers, whose terms and privacy policies apply — for example: Google (privacy policy https://policies.google.com/privacy, terms of service https://policies.google.com/terms) and Meta/Facebook (privacy policy https://www.facebook.com/privacy/policy, terms of service https://www.facebook.com/legal/terms).