WordPress Cookie Consent

Cookie consent,
done with precision.

GDPR-ready consent banners, strict script blocking, Google Consent Mode v2, an on-site cookie scanner, and full consent logs — all running on your server. No external dashboard required.

Free on WordPress.org No external SaaS GDPR & CCPA ready
yourdomain.com
Setup Score
78/100
Strict blocking enabled
Google Consent Mode v2 active
Run cookie scan
Compliance support for
GDPR
CCPA
ePrivacy
Google Consent Mode v2
Everything you need

Built for serious
privacy compliance.

A complete toolkit — not just a banner. CookieRay gives you the infrastructure to manage cookie consent properly across every layer of your WordPress site.

Consent Banner
Card and bar layouts with 9 placement positions. Live preview in the admin. Visitors can Accept All, Decline All, or open a Preferences modal by category.
Customizable
Script Blocking
Strict mode delays known trackers — GA4, Meta Pixel, Hotjar, HubSpot, TikTok, and more — until the visitor's consent categories cover them.
Strict Mode
Google Consent Mode v2
Outputs consent signals in the visitor's browser so your Google tags (GA4, Ads, GTM) adjust behaviour based on what was consented — without sending data externally.
GCM v2
Cookie Scanner
Run an admin-triggered scan that crawls your site's public URLs and sitemap (up to 50 pages), surfaces cookies, and merges them into your inventory for categorization.
On-site only
Consent Logs
Full audit trail with hashed visitor fingerprints, granted categories, page URL, banner version, and timestamp. Searchable, filterable, and exportable as CSV or PDF receipts.
CSV + PDF Export
Setup Dashboard
A weighted checklist score that guides you through setup — blocking mode, categorized cookies, policy link, scan recency, GCM status, and more. Treat it as your compliance compass.
Guided Setup
Privacy by design

Your data stays
on your server.

CookieRay does not send usage data, telemetry, or visitor payloads to any external server we operate. Consent logs and cookie inventories stay in your WordPress database — not ours.

Start for free →
No external SaaS dashboard
Everything runs in your WordPress environment. No account creation, no cloud dependency, no recurring data egress.
No raw IP storage
Visitor fingerprints are derived from combined signals. Raw IP octets never persist verbatim in consent logs.
Same-site scanner only
The cookie scanner exclusively fetches your own site's public URLs via WordPress's HTTP API. No data leaves your domain.
Setup in minutes

Up and running
in three steps.

Install CookieRay, configure your consent settings, and you're protecting visitor privacy without touching a line of code.

Install the plugin

Search "CookieRay" in your WordPress plugin directory or upload the .zip file. Activate it and you'll land on the setup dashboard automatically.

Configure your banner

Design your consent banner with the live preview editor. Choose layout, colours, text, and button labels. Enable strict script blocking and Google Consent Mode v2 in Settings.

Scan & stay compliant

Run the cookie scanner to populate your inventory. Categorize discovered cookies, review the Dashboard score, and export consent logs whenever you need them.

Pricing

Simple, honest
pricing.

Start free with everything you need for most sites. Upgrade to Pro for multi-site management, priority support, and advanced features built for agencies.

Free
$0
Forever free on WordPress.org
  • Cookie consent banner (card & bar)
  • Strict script blocking
  • Google Consent Mode v2
  • Cookie scanner & inventory
  • Consent logs (CSV export)
  • Priority support
  • Multi-site license
Install Free on WP.org →
Documentation

Quick start
in seconds.

Everything you need to get CookieRay running is built into the plugin's Setup Dashboard. No reading required — but it's all here if you want it.

Quick install via WP-CLI
# Install and activate CookieRay
wp plugin install cookieray --activate

# Verify activation
wp plugin list --status=active

# Configure strict blocking via WP options
wp option update cookieray_settings \
  '{
    "blocking_mode": "strict",
    "gcm_enabled": true,
    "consent_expiry_days": 365
  }'

# Trigger a cookie scan
wp cookieray scan --url=https://yourdomain.com
Frequently asked

Common
questions.

No. CookieRay does not send usage data, telemetry, or visitor payloads to any server we operate. Consent logs, cookie inventories, and scanner results all stay in your WordPress database.
Strict mode delays known tracking patterns for services like Google Analytics, Meta Pixel, Hotjar, HubSpot, TikTok Pixel, and many others. Custom or less common scripts may need to be configured manually. Log Only mode records consent without enforcing blocking if you need maximum compatibility first.
CookieRay provides the technical infrastructure for consent management. Legal compliance depends on your site setup, third-party tools, regions served, and how you configure the plugin. The Dashboard score is guidance — not a statutory compliance certification. Always review your specific legal obligations or consult a qualified advisor.
The consent banner initializes from frontend scripts after page load and is designed to coexist with WP Super Cache, W3 Total Cache, WP Rocket, LiteSpeed Cache, SG Optimizer, and other common caching plugins. Verify behavior in your specific stack, particularly if you aggressively cache HTML or inline scripts.
Each consent event records: a hashed visitor fingerprint (no raw IP), consent status, granted categories, the page URL where consent was given, banner version, and timestamp. Raw IP addresses and verbatim user-agent strings are never stored. You can configure a retention window and export records as CSV or individual PDF receipts.
Get started today

Cookie consent
that actually works.

Install the free version from WordPress.org in minutes, or go Pro for priority support and advanced features.