Zest CMP

Zest CMP integrates the Zest consent toolkit into WordPress. It provides a beautiful, accessible consent banner with Shadow DOM isolation, intelligent script blocking, cookie/storage interception, and support for 12 languages out of the box.

Key features:

• Shadow DOM UI — banner, settings modal, and floating widget are fully encapsulated. Your site’s styles never leak in; Zest’s styles never leak out.
• Script blocking — four modes (safe, manual, strict, doomsday) with automatic detection of known trackers. Zest installs interceptors before any tracking script can fire.
• Cookie & storage interception — intercepts document.cookie, localStorage, and sessionStorage writes, queuing them until consent is granted.
• 12 languages — built-in translations for English, German, Spanish, French, Italian, Portuguese, Dutch, Polish, Ukrainian, Russian, Japanese, and Chinese. Auto-detects from the browser.
• Do Not Track / GPC — respects the browser privacy signal and auto-rejects non-essential cookies when DNT/GPC is enabled.
• Geo / jurisdiction gating — optional opt-in feature that shows a GDPR banner in the EU, a “Do Not Sell” link in the US, and nothing elsewhere. Uses the hosted zest-geo gateway or your own resolver.
• Button layouts — choose between row (default), split, or split-modern layouts.
• Hard consent wall — optional full-viewport overlay that blocks page interaction until the visitor decides.
• Backdrop blur — optional frosted-glass effect on the modal and wall overlay.
• Hidden categories — remove unused consent categories from the settings modal. Hidden categories are forced to rejected.
• Zero dependencies — vanilla JavaScript, no jQuery, no React, nothing.

External services

By default this plugin is fully self-contained and makes no network requests of its own.

If you enable Geo / jurisdiction gating in the settings, the visitor’s browser requests geo.cookiezest.com once to look up which privacy regulations apply in the visitor’s country, so the right consent banner is shown (full banner in the EU/EEA/UK, notice in regulated US states, nothing elsewhere). The lookup sends the visitor’s IP address to the gateway at the time of the request, and the gateway returns only regulation flags — it is not a tracking service and the IP is not logged or stored by it. See the gateway’s privacy notes and terms.

This service is provided by CookieZest (FreshJuice). It is optional and off by default; the plugin works fully without it.

Source code

Plugin source: https://github.com/freshjuice-dev/zest-wordpress
Zest JavaScript library (MIT license): https://github.com/freshjuice-dev/zest
Source for the bundled Zest v2.8.0: https://github.com/freshjuice-dev/zest/tree/v2.8.0

The dist/ directory includes readable JavaScript bundles and source maps with the original source for every minified bundle, plus the Zest MIT license. Zest’s UI CSS is generated by its JavaScript source in src/ui/styles.js.

To rebuild the library, check out the v2.8.0 tag in the Zest repository, run npm ci, then npm run build (Rollup). To copy the bundles into the plugin, set ZEST_REPO to that checkout and run ./scripts/build.sh from the plugin repository. The build rejects a library version that does not match the plugin’s bundled version. dist/VERSION records the bundled library version.