[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2CTeyKO8SIsfCc7VpZMqbPa182G2NR701LME_-164kQ":3},{"slug":4,"display_name":4,"profile_url":5,"plugin_count":6,"total_installs":7,"avg_security_score":8,"avg_patch_time_days":9,"trust_score":10,"computed_at":11,"plugins":12},"gdimitrov","https:\u002F\u002Fprofiles.wordpress.org\u002Fgdimitrov\u002F",1,0,100,30,94,"2026-08-29T17:05:48.725Z",[13],{"slug":14,"name":15,"version":16,"author":4,"author_profile":5,"description":17,"short_description":18,"active_installs":7,"downloaded":19,"rating":7,"num_ratings":7,"last_updated":20,"tested_up_to":21,"requires_at_least":22,"requires_php":23,"tags":24,"homepage":30,"download_link":31,"security_score":8,"vuln_count":7,"unpatched_count":7,"last_vuln_date":32,"fetched_at":33},"cookiekita-gdpr-consent-cookie-banner","CookieKita — GDPR Consent & Cookie Banner","1.0.14","\u003Cp>\u003Cstrong>CookieKita\u003C\u002Fstrong> is the WordPress companion plugin to \u003Ca href=\"https:\u002F\u002Fcookiekita.com\" rel=\"nofollow ugc\">cookiekita.com\u003C\u002Fa>, a GDPR\u002FePrivacy consent management platform. It does the on-site work — blocking trackers before consent, installing your tags consent-aware, and executing data requests — while the dashboard handles the consent log, cookie scanner and compliance reporting.\u003C\u002Fp>\n\u003Ch4>What it does\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>🍪 \u003Cstrong>Cookie consent banner\u003C\u002Fstrong> — auto-injects the CookieKita banner, localized to the WordPress site language.\u003C\u002Fli>\n\u003Cli>🛡 \u003Cstrong>Real tracker blocking\u003C\u002Fstrong> — holds back Google Analytics, Google Tag Manager, Meta Pixel, Hotjar, Clarity, LinkedIn, TikTok and 30+ other services until the visitor consents. A banner that only \u003Cem>shows\u003C\u002Fem> without blocking is not compliant — CookieKita actually blocks.\u003C\u002Fli>\n\u003Cli>🔌 \u003Cstrong>Integrations directory\u003C\u002Fstrong> — a catalogue of 37 recognised services, each auto-blocked and mapped to the right consent category.\u003C\u002Fli>\n\u003Cli>⚡ \u003Cstrong>Consent-aware tag installer\u003C\u002Fstrong> — paste your GA4 \u002F Meta Pixel \u002F GTM (and many more) ID and CookieKita installs the official tag for you as a \u003Cem>blocked\u003C\u002Fem> script that only fires after the matching consent. You become the bridge, not just the blocker.\u003C\u002Fli>\n\u003Cli>🛒 \u003Cstrong>WooCommerce eCommerce tracking\u003C\u002Fstrong> — automatically sends \u003Ccode>view_item\u003C\u002Fcode>, \u003Ccode>add_to_cart\u003C\u002Fcode>, \u003Ccode>begin_checkout\u003C\u002Fcode> and \u003Ccode>purchase\u003C\u002Fcode> to GA4 \u002F Google Tag Manager, your ad pixels (Meta, TikTok, Pinterest, Snap, Reddit) and — with a conversion label — Google Ads conversions. Analytics events fire on analytics consent; ad events and Google Ads conversions on marketing consent — fully consent-gated.\u003C\u002Fli>\n\u003Cli>🟢 \u003Cstrong>Google Consent Mode v2 & Microsoft UET Consent Mode\u003C\u002Fstrong> — consent signals are forwarded automatically.\u003C\u002Fli>\n\u003Cli>🌐 \u003Cstrong>GPC \u002F DNT signals\u003C\u002Fstrong> — honours Global Privacy Control and Do Not Track.\u003C\u002Fli>\n\u003Cli>📊 \u003Cstrong>Cookie declaration shortcode\u003C\u002Fstrong> — \u003Ccode>[cookiekita_cookies]\u003C\u002Fcode> renders a live table of the cookies discovered by the CookieKita scanner.\u003C\u002Fli>\n\u003Cli>📨 \u003Cstrong>DSAR form shortcode\u003C\u002Fstrong> — \u003Ccode>[cookiekita_dsar]\u003C\u002Fcode> adds a GDPR data-subject-request form to any page.\u003C\u002Fli>\n\u003Cli>🤖 \u003Cstrong>Auto-execute DSAR\u003C\u002Fstrong> (opt-in) — verified deletion\u002Fexport requests are executed via the WordPress Personal Data API and WooCommerce privacy hooks, with an audit log.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>A free or paid account at \u003Ca href=\"https:\u002F\u002Fcookiekita.com\" rel=\"nofollow ugc\">cookiekita.com\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Your Site Key (32 hex characters) from the CookieKita dashboard. If you download the plugin from your dashboard, the key is pre-configured for you.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin connects to the \u003Cstrong>CookieKita\u003C\u002Fstrong> service (\u003Ca href=\"https:\u002F\u002Fcookiekita.com\" rel=\"nofollow ugc\">cookiekita.com\u003C\u002Fa>) — it is a companion plugin for that platform and requires a CookieKita account to function. The connection is used for the features below.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>1. Banner script & configuration\u003C\u002Fstrong> — On every front-end page the plugin loads the consent banner script from \u003Ccode>https:\u002F\u002Fcookiekita.com\u002Fbanner.js\u003C\u002Fcode> and fetches your banner configuration and cookie list from \u003Ccode>https:\u002F\u002Fcookiekita.com\u002Ffunctions\u002Fv1\u002F\u003C\u002Fcode>. Your public Site Key is sent so the correct configuration is returned. No personal data is sent for this.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>2. Connection \u002F heartbeat\u003C\u002Fstrong> — When you save your Site Key (and roughly once a day afterwards) the plugin sends your site URL, plugin version, WordPress version and PHP version to \u003Ccode>https:\u002F\u002Fcookiekita.com\u002Ffunctions\u002Fv1\u002Fverify-wp-site\u003C\u002Fcode> so the dashboard can show connection status and register the DSAR webhook. It also checks whether the site was disconnected from the dashboard.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>3. DSAR webhook\u003C\u002Fstrong> — When auto-execute DSAR is enabled, CookieKita sends signed data-subject requests (containing the requester’s email) to the plugin so they can be fulfilled on your site.\u003C\u002Fp>\n\u003Cp>By using this plugin you agree to the CookieKita Terms of Service (https:\u002F\u002Fcookiekita.com\u002Fterms) and Privacy Policy (https:\u002F\u002Fcookiekita.com\u002Fprivacy).\u003C\u002Fp>\n\u003Ch4>Optional third-party tags (only loaded if you enable them)\u003C\u002Fh4>\n\u003Cp>CookieKita does not load any of the third-party services below by default. The consent-aware tag installer loads a provider’s official script \u003Cstrong>only when you, the site administrator, enter that provider’s ID \u002F enable it\u003C\u002Fstrong>, and even then the script is held back until the visitor gives the matching consent (analytics or marketing). When a tag fires, the visitor’s browser loads the provider’s script directly and that provider receives standard analytics\u002Fadvertising data (e.g. page views, events, IP address, cookie\u002Fdevice identifiers) — what is sent and when is determined by that provider. Review each provider’s terms and privacy policy before enabling it:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Google (Tag Manager, gtag, GA4) — googletagmanager.com — terms: https:\u002F\u002Fpolicies.google.com\u002Fterms — privacy: https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003C\u002Fli>\n\u003Cli>Meta Pixel (Facebook) — connect.facebook.net — terms: https:\u002F\u002Fwww.facebook.com\u002Flegal\u002Fterms\u002F — privacy: https:\u002F\u002Fwww.facebook.com\u002Fprivacy\u002Fpolicy\u002F\u003C\u002Fli>\n\u003Cli>Microsoft Clarity \u002F UET — clarity.ms — terms: https:\u002F\u002Fwww.microsoft.com\u002Flegal\u002Fterms-of-use — privacy: https:\u002F\u002Fprivacy.microsoft.com\u002Fprivacystatement\u003C\u002Fli>\n\u003Cli>TikTok — analytics.tiktok.com — terms: https:\u002F\u002Fwww.tiktok.com\u002Flegal\u002Fterms-of-service — privacy: https:\u002F\u002Fwww.tiktok.com\u002Flegal\u002Fprivacy-policy\u003C\u002Fli>\n\u003Cli>LinkedIn Insight — snap.licdn.com — terms: https:\u002F\u002Fwww.linkedin.com\u002Flegal\u002Fuser-agreement — privacy: https:\u002F\u002Fwww.linkedin.com\u002Flegal\u002Fprivacy-policy\u003C\u002Fli>\n\u003Cli>X (Twitter) Ads — static.ads-twitter.com — terms: https:\u002F\u002Flegal.twitter.com\u002Fads-terms.html — privacy: https:\u002F\u002Ftwitter.com\u002Fen\u002Fprivacy\u003C\u002Fli>\n\u003Cli>Pinterest Tag — s.pinimg.com — terms: https:\u002F\u002Fpolicy.pinterest.com\u002Fterms-of-service — privacy: https:\u002F\u002Fpolicy.pinterest.com\u002Fprivacy-policy\u003C\u002Fli>\n\u003Cli>Snap Pixel — sc-static.net — terms: https:\u002F\u002Fsnap.com\u002Fterms — privacy: https:\u002F\u002Fsnap.com\u002Fprivacy\u002Fprivacy-policy\u003C\u002Fli>\n\u003Cli>Reddit Pixel — redditstatic.com — terms: https:\u002F\u002Fwww.redditinc.com\u002Fpolicies\u002Fuser-agreement — privacy: https:\u002F\u002Fwww.reddit.com\u002Fpolicies\u002Fprivacy-policy\u003C\u002Fli>\n\u003Cli>Amazon Ads — c.amazon-adsystem.com — terms: https:\u002F\u002Fwww.amazon.com\u002Fgp\u002Fhelp\u002Fcustomer\u002Fdisplay.html?nodeId=508088 — privacy: https:\u002F\u002Fwww.amazon.com\u002Fgp\u002Fhelp\u002Fcustomer\u002Fdisplay.html?nodeId=468496\u003C\u002Fli>\n\u003Cli>Criteo — static.criteo.net — terms: https:\u002F\u002Fwww.criteo.com\u002Fterms-and-conditions\u002F — privacy: https:\u002F\u002Fwww.criteo.com\u002Fprivacy\u002F\u003C\u002Fli>\n\u003Cli>Outbrain — amplify.outbrain.com — terms: https:\u002F\u002Fwww.outbrain.com\u002Fonyx\u002Fterm-of-use\u002F — privacy: https:\u002F\u002Fwww.outbrain.com\u002Fprivacy\u002F\u003C\u002Fli>\n\u003Cli>Taboola — cdn.taboola.com — terms: https:\u002F\u002Fpolicies.taboola.com\u002Fterms-of-service\u002F — privacy: https:\u002F\u002Fpolicies.taboola.com\u002Fprivacy-policy\u002F\u003C\u002Fli>\n\u003Cli>Hotjar — static.hotjar.com — terms: https:\u002F\u002Fwww.hotjar.com\u002Flegal\u002Fpolicies\u002Fterms-of-service\u002F — privacy: https:\u002F\u002Fwww.hotjar.com\u002Flegal\u002Fpolicies\u002Fprivacy\u002F\u003C\u002Fli>\n\u003Cli>Segment (Twilio) — cdn.segment.com — terms: https:\u002F\u002Fwww.twilio.com\u002Fen-us\u002Flegal\u002Ftos — privacy: https:\u002F\u002Fwww.twilio.com\u002Fen-us\u002Flegal\u002Fprivacy\u003C\u002Fli>\n\u003Cli>Heap — cdn.heapanalytics.com — terms: https:\u002F\u002Fwww.heap.io\u002Fterms — privacy: https:\u002F\u002Fwww.heap.io\u002Fprivacy\u003C\u002Fli>\n\u003Cli>Amplitude — cdn.amplitude.com — terms: https:\u002F\u002Famplitude.com\u002Fterms — privacy: https:\u002F\u002Famplitude.com\u002Fprivacy\u003C\u002Fli>\n\u003Cli>Mixpanel — cdn.mxpnl.com — terms: https:\u002F\u002Fmixpanel.com\u002Flegal\u002Fterms-of-use\u002F — privacy: https:\u002F\u002Fmixpanel.com\u002Flegal\u002Fprivacy-policy\u002F\u003C\u002Fli>\n\u003Cli>FullStory — fullstory.com — terms: https:\u002F\u002Fwww.fullstory.com\u002Flegal\u002Fterms-and-conditions\u002F — privacy: https:\u002F\u002Fwww.fullstory.com\u002Flegal\u002Fprivacy-policy\u002F\u003C\u002Fli>\n\u003Cli>Crazy Egg — script.crazyegg.com — terms: https:\u002F\u002Fwww.crazyegg.com\u002Fterms — privacy: https:\u002F\u002Fwww.crazyegg.com\u002Fprivacy\u003C\u002Fli>\n\u003Cli>Mouseflow — cdn.mouseflow.com — terms: https:\u002F\u002Fmouseflow.com\u002Flegal\u002Fterms\u002F — privacy: https:\u002F\u002Fmouseflow.com\u002Flegal\u002Fprivacy-policy\u002F\u003C\u002Fli>\n\u003Cli>Inspectlet — cdn.inspectlet.com — terms: https:\u002F\u002Fwww.inspectlet.com\u002Fterms-of-service — privacy: https:\u002F\u002Fwww.inspectlet.com\u002Fterms-of-service\u003C\u002Fli>\n\u003Cli>Plausible Analytics — plausible.io — terms: https:\u002F\u002Fplausible.io\u002Fterms — privacy: https:\u002F\u002Fplausible.io\u002Fprivacy\u003C\u002Fli>\n\u003Cli>PostHog — posthog.com — terms: https:\u002F\u002Fposthog.com\u002Fterms — privacy: https:\u002F\u002Fposthog.com\u002Fprivacy\u003C\u002Fli>\n\u003Cli>Simple Analytics — simpleanalyticscdn.com — terms: https:\u002F\u002Fwww.simpleanalytics.com\u002Fterms — privacy: https:\u002F\u002Fwww.simpleanalytics.com\u002Fprivacy-policy\u003C\u002Fli>\n\u003Cli>HubSpot — js.hs-scripts.com — terms: https:\u002F\u002Flegal.hubspot.com\u002Fterms-of-service — privacy: https:\u002F\u002Flegal.hubspot.com\u002Fprivacy-policy\u003C\u002Fli>\n\u003Cli>Intercom — widget.intercom.io — terms: https:\u002F\u002Fwww.intercom.com\u002Flegal\u002Fterms-and-policies — privacy: https:\u002F\u002Fwww.intercom.com\u002Flegal\u002Fprivacy\u003C\u002Fli>\n\u003Cli>Drift — js.driftt.com — terms: https:\u002F\u002Fwww.drift.com\u002Fterms-of-service\u002F — privacy: https:\u002F\u002Fwww.drift.com\u002Fprivacy-policy\u002F\u003C\u002Fli>\n\u003Cli>Crisp — client.crisp.chat — terms: https:\u002F\u002Fcrisp.chat\u002Fen\u002Fterms\u002F — privacy: https:\u002F\u002Fcrisp.chat\u002Fen\u002Fprivacy\u002F\u003C\u002Fli>\n\u003Cli>Tawk.to — embed.tawk.to — terms: https:\u002F\u002Fwww.tawk.to\u002Fterms-of-service\u002F — privacy: https:\u002F\u002Fwww.tawk.to\u002Fprivacy-policy\u002F\u003C\u002Fli>\n\u003Cli>LiveChat — cdn.livechatinc.com — terms: https:\u002F\u002Fwww.livechat.com\u002Flegal\u002Fterms\u002F — privacy: https:\u002F\u002Fwww.livechat.com\u002Flegal\u002Fprivacy-policy\u002F\u003C\u002Fli>\n\u003Cli>Zendesk — static.zdassets.com — terms: https:\u002F\u002Fwww.zendesk.com\u002Fcompany\u002Fagreements-and-terms\u002Fmaster-subscription-agreement\u002F — privacy: https:\u002F\u002Fwww.zendesk.com\u002Fcompany\u002Fagreements-and-terms\u002Fprivacy-notice\u002F\u003C\u002Fli>\n\u003C\u002Ful>\n","GDPR cookie consent banner with real tracker blocking, Google Consent Mode v2, consent-aware tag installer, DSAR handling and WooCommerce tracking.",125,"2026-07-18T18:17:00.000Z","7.0.2","5.8","7.4",[25,26,27,28,29],"consent-mode","cookie-banner","cookie-consent","dsar","gdpr","https:\u002F\u002Fcookiekita.com\u002Fwordpress-plugin","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcookiekita-gdpr-consent-cookie-banner.1.0.14.zip",null,"2026-07-22T17:31:50.256Z"]