=== CookieYes – Cookie Banner, Cookie Consent & Cookie Notice for GDPR/CCPA ===
Contributors: webtoffee, cookieyesdev
Donate link: https://www.cookieyes.com/
Tags: cookie consent, cookie banner, cookie notice, gdpr, ccpa
Requires at least: 5.0.0
Tested up to: 7.1
Requires PHP: 5.6
Stable tag: 3.5.9
License: GPLv3
License URI: http://www.gnu.org/licenses/gpl-3.0.html

Google-certified CMP: cookie banner, cookie notice and cookie consent for GDPR/CCPA compliance, with cookie blocker, cookie scanner and consent log.

== Description ==

CookieYes is a Google-certified CMP (consent management platform) for WordPress. Add a cookie banner or cookie notice and block cookies until visitors agree, all from one cookie plugin. Connect the free CookieYes web app to scan your site, keep a consent log and generate your cookie policy. It runs on over 1 million WordPress sites, holds a 4.8-star rating from 3,200+ reviews, and offers banners in 40+ languages on paid plans.

CookieYes helps you work toward compliance with GDPR, UK GDPR and the ePrivacy Directive, DSGVO and TDDDG (formerly TTDSG) in Germany, RGPD in France and Spain, CNIL guidelines in France, AVG in the Netherlands, PECR in the UK, CCPA/CPRA and other US state laws (VCDPA, CPA, CTDPA, UCPA), LGPD (Brazil), PIPEDA and Law 25 (Canada and Quebec), POPIA (South Africa), nFADP (Switzerland), the Australian Privacy Act, PDPA (Singapore and Thailand) and PDPL (Saudi Arabia).

https://www.youtube.com/watch?v=qw2iYti4aZ8

== Why site owners choose CookieYes ==

- **Working banner on activation:** a consent banner appears as soon as you activate the plugin, with no configuration needed.
- **No load on your database:** cookie scanning, consent logs and processing run in the CookieYes cloud, so your WordPress database stays lean and your pages stay fast.
- **Google-certified CMP:** Google requires publishers serving personalised AdSense, Ad Manager or AdMob ads to visitors in the EEA, UK and Switzerland to use a Google-certified CMP that integrates with the IAB TCF. CookieYes is Google-certified, with IAB TCF v2.4 on Pro and Ultimate plans.
- **Free cookie consent:** the plugin is free and works without an account: banner, cookie blocking and cookie manager. Connect to the CookieYes web app on its free plan for the cookie scanner, consent logs, Google Consent Mode v2 and policy generators.

== How CookieYes works ==

1. **Install and activate.** A cookie consent banner appears on your site straight away, with no account needed.
2. **Scan your site.** Connect the plugin to the CookieYes web app on its free plan, and the cookie scanner finds the cookies your site sets.
3. **Review cookie categories.** Cookies are grouped into categories such as necessary, functional, analytics and advertising, which you can edit in the cookie manager.
4. **Choose your consent model.** Use an opt-in banner for GDPR-style laws or an opt-out banner for US state laws. To show both, each by region, use geo-targeting on Pro and Ultimate plans.
5. **Block cookies.** Non-essential cookies stay blocked until a visitor agrees. With a web app connection, their choice is also passed to Google Consent Mode v2.
6. **Record and document.** With a web app connection, each choice is saved in the consent log and your Cookie Policy and Privacy Policy are generated from your scan results.

== Features ==

CookieYes works at three levels:

- **Free plugin, no account needed:** cookie banner, automatic cookie blocking for the cookies you add, cookie manager, banner design and a banner in one language of your choice.
- **Free CookieYes web app, free account needed:** cookie scanner, consent log, Google Consent Mode v2, Microsoft UET Consent Mode, policy generators and dashboard insights.
- **Paid web app plans (Basic, Pro, Ultimate):** geo-targeting, IAB TCF, multiple banner languages, higher limits and more, as listed under Premium Features.

When you connect the plugin to the web app, your banner is then served and managed from the web app, and the features available follow your web app plan.

= Free plugin: works without an account =

- **Cookie Consent Banner:** A banner appears on activation, with Accept All, Reject All and Customize buttons. Choose a GDPR opt-in template or a US State Laws opt-out template.
- **Automatic Cookie Blocking:** Add cookies in the cookie manager with their script URL patterns, and the built-in cookie blocker holds back the matching scripts and embeds until visitors give explicit consent.
- **Blocked Content Placeholder:** Show a placeholder over blocked YouTube videos until the visitor consents.
- **Preference Center:** Let visitors accept cookies, reject them or manage cookies by category, with a cookie list for each category.
- **Revisit Consent Button:** A floating button lets visitors change their choices at any time.
- **CCPA/CPRA Opt-Out:** Add a "Do Not Sell or Share My Personal Information" link for California residents, with an opt-out confirmation on the US State Laws banner.
- **Banner Design:** Choose a bar or box layout and a light, dark or custom colour scheme, edit every word of the cookie notice or cookie message, including button labels, and add a Read More link to your cookie or privacy policy and an optional close (X) button.
- **Banner Language:** Your banner shows in one language of your choice. Adding more languages needs a paid plan.
- **Cookie Manager:** Add, edit or delete cookies, rename or describe cookie categories, and edit cookie list content in your preferred language.
- **Consent Settings:** Set how long consent lasts, and optionally reload the page after a visitor makes a consent choice.
- **Accessibility:** The banner meets WCAG 2.1 AA.

= Free CookieYes web app: needs a free account =

- **Cookie Scanner:** Scan your site and the cookies it finds are added to your cookie list automatically, so automatic cookie blocking covers them without manual setup. You can also see your scan history. The free plan includes 5 scans a month of up to 100 pages each.
- **AI Cookie Classification:** Unknown cookies found in scans are classified automatically, keeping your cookie list, banner and Cookie Policy accurate.
- **Consent Logging:** Record visitor consent for consent management audits, export it as CSV and download proof of consent.
- **Google Consent Mode v2:** Pass consent signals to Google Analytics 4, Google Ads and Google Tag Manager, in Basic or Advanced Consent Mode, with region-specific default consent states, wait for update, URL passthrough and ads data redaction.
- **Google Privacy Policy Link:** Add Google's privacy policy link to your banner if you use Google services such as AdSense, Firebase or Analytics.
- **Microsoft UET Consent Mode:** Make Microsoft Advertising tags follow visitor consent.
- **Cookie Policy and Privacy Policy Generators:** Create both policies from your own scan results. Pages update automatically when your cookies change.
- **Dashboard Insights:** See consent trends and pageviews for the last 7 days inside WordPress.
- **Central Management:** Manage scans, policies and settings for your sites in one place.
- **EU Data Storage:** Consent data is stored in EU-based data centres under a Data Processing Agreement.
- **Two-Factor Authentication (2FA):** Add an extra layer of security to your CookieYes account.

= Privacy Laws =

- **Europe:** GDPR, ePrivacy Directive, DSGVO and TDDDG (Germany), RGPD (France, Spain), CNIL guidelines (France), AVG (Netherlands), nFADP (Switzerland).
- **United Kingdom:** UK GDPR and PECR.
- **United States:** CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah).
- **Americas:** LGPD (Brazil), PIPEDA (Canada), Law 25 (Quebec).
- **Africa, Middle East and Asia-Pacific:** POPIA (South Africa), PDPL (Saudi Arabia), PDPA (Singapore and Thailand), Privacy Act (Australia).

= Integrations =

These work without an account unless marked.

- **WordPress and page builders:** WooCommerce, Elementor, Divi, Gutenberg, Contact Form 7 and WPForms.
- **Multilingual plugins:** WPML, Polylang and TranslatePress, for banners in more than one language on paid plans.
- **WP Consent API:** shares consent states with other compatible plugins through the [WP Consent API](https://wordpress.org/plugins/wp-consent-api).
- **Google and Microsoft Advertising:** passes consent to Google Tag Manager, Google Analytics 4 and Google Ads through Google Consent Mode v2, and to Microsoft Advertising through UET Consent Mode, with a free web app connection.
- **Other tags:** passes consent to Microsoft Clarity and Meta Pixel, with a web app connection.
- **Performance:** compatible with major caching plugins and optimised for PHP 8.

= AI and Agent Tools =

- **CookieYes MCP Server:** Connect AI assistants to your CookieYes account through the Model Context Protocol. Check banner status, run cookie scans, review your setup and update banner settings in plain language. Works with Claude, ChatGPT, Codex, Cursor, Claude Code and GitHub Copilot CLI. Needs a free CookieYes account.

== GDPR Compliance and Privacy Compliance ==

CookieYes is a GDPR plugin for cookie consent. It supports GDPR compliance by blocking non-essential cookies before consent, letting visitors withdraw consent at any time and, with a web app connection, keeping a consent log, as the GDPR (DSGVO in Germany, RGPD in France and Spain) and the ePrivacy Directive require.

For privacy compliance beyond the EU, the same GDPR plugin covers the CCPA/CPRA opt-out, US state privacy laws, LGPD in Brazil, PIPEDA and Law 25 in Canada, POPIA in South Africa and nFADP in Switzerland.

Cookie compliance also depends on keeping your setup current. Your cookie banner runs in the cookie compliance plugin, and a free CookieYes web app connection adds the cookie scanner, consent records and Cookie Policy to the same setup, so your privacy compliance setup stays consistent as your site changes.

Please note: installing CookieYes does not on its own make your site compliant. Compliance depends on the cookies your site uses and how you configure the plugin, so review your setup and take legal advice where needed.

== Who CookieYes is for ==

- **Small businesses and site owners:** a free plugin with a working banner on activation, a free web app plan, and cookie compliance without coding.
- **Marketers:** Google Consent Mode v2 and Microsoft UET Consent Mode with a free web app connection, so analytics and ad measurement follow visitor choices.
- **Developers:** WP Consent API integration, agent-readable setup files, PHP 8 support and compatibility with major caching plugins, plus the CookieYes MCP server with a CookieYes account.
- **Agencies:** manage client sites from the CookieYes web app with multi-user roles, and join the CookieYes partner program.
- **Large sites and enterprises:** geo-targeting, IAB TCF v2.4 and scheduled scans on Pro and Ultimate plans, plus scans of up to 8,000 pages and scanning behind login on Ultimate.

== Set Up Your Cookie Banner With an AI Coding Assistant ==

CookieYes ships an AGENTS.md file, and a CLAUDE.md, in the plugin root. It gives AI coding assistants an agent-readable setup flow, the regulation coverage map, and a post-install verification checklist, so an assistant can install and configure the cookie banner without being walked through each step. Point your assistant at the plugin directory and ask it to set up CookieYes. It works with Claude Code, Cursor, GitHub Copilot, ChatGPT, Gemini CLI, OpenAI Codex and any tool that follows the AGENTS.md convention.

== Premium Features ==

These need a paid plan (Basic, Pro or Ultimate) in the CookieYes web app. The plan for each feature is shown next to it. [Compare plans](https://www.cookieyes.com/pricing/?utm_source=wordpress&utm_medium=plugin&utm_campaign=wordpress_page&utm_content=l_1&ref=WPCY)

= Advanced Consent Management =

- **Geo-Targeting:** Show the right banner for each visitor's region, such as a GDPR banner in the EU and a CCPA banner in California, on Pro and Ultimate plans.
- **IAB TCF v2.4:** Full support for the Transparency and Consent Framework for publishers and advertisers, on Pro and Ultimate plans.
- **Google Additional Consent Mode:** Manage consent for Google Ad Tech Providers outside the IAB Global Vendor List, on Pro and Ultimate plans.
- **Global Privacy Control (GPC):** Respect GPC signals from visitors' browsers automatically, on Pro and Ultimate plans.

= Enhanced Banner Customization =

- **Cookie Popup Layout:** Show the banner as a cookie popup, on Pro and Ultimate plans.
- **Custom CSS:** Add your own CSS, on all paid plans.
- **Custom Logo:** Add your brand's logo, on the Ultimate plan.
- **Page-Specific Controls:** Hide the banner on chosen pages, such as login or checkout, on Pro and Ultimate plans.
- **Remove Branding:** Remove "Powered by CookieYes" from the banner, on the Ultimate plan.
- **More Banner Languages:** Add more languages, with auto-translation into 40+ languages, and show each visitor the banner in their browser language, on all paid plans.

= Extended Cookie Management =

- **Higher Pageview Limits:** Go from 5,000 pageviews a month on the free plan to 100,000 on Basic, 300,000 on Pro or unlimited on Ultimate.
- **Larger Scans:** Run unlimited scans of up to 600 pages on Basic, 4,000 on Pro or 8,000 on Ultimate.
- **Scheduled Scans:** Rescan automatically every month on Pro or every week on Ultimate to keep your cookie list current.
- **Scan Behind Login:** Find cookies on login-only pages, on the Ultimate plan.

= Subdomain and Multi-User Support =

- **Subdomain Consent Sharing:** Share consent across your subdomains, on Pro and Ultimate plans.
- **Multi-User Management:** Set roles and permissions in the web app, on all paid plans.

== Support ==

Get free support on the [WordPress.org support forum](https://wordpress.org/support/plugin/cookie-law-info/). Search existing threads or open a new one with your site URL, WordPress version and a short description of the issue. Paid plans get support from the CookieYes support team.

== Resources ==

- [Setup guide](https://www.cookieyes.com/documentation/install-cookieyes-wordpress-plugin/?utm_source=wordpress&utm_medium=plugin&utm_campaign=wordpress_page&utm_content=l_1&ref=WPCY)
- [Plugin FAQ](https://www.cookieyes.com/documentation/wordpress-plugin-faq/?utm_source=wordpress&utm_medium=plugin&utm_campaign=wordpress_page&utm_content=l_1&ref=WPCY)
- [Knowledge base](https://www.cookieyes.com/knowledge-base/?utm_source=wordpress&utm_medium=plugin&utm_campaign=wordpress_page&utm_content=l_1&ref=WPCY)
- [GDPR cookie consent guide](https://cookieyes.com/blog/gdpr-cookie-consent/?utm_source=wordpress&utm_medium=plugin&utm_campaign=wordpress_page&utm_content=l_1&ref=WPCY)
- [Cookie law guide](https://cookieyes.com/blog/cookie-law/?utm_source=wordpress&utm_medium=plugin&utm_campaign=wordpress_page&utm_content=l_1&ref=WPCY)
- [Cookie banner guide](https://www.cookieyes.com/blog/cookie-banner/?utm_source=wordpress&utm_medium=plugin&utm_campaign=wordpress_page&utm_content=l_1&ref=WPCY)
- [Translate CookieYes](https://translate.wordpress.org/projects/wp-plugins/cookie-law-info)
- [Privacy Policy](https://www.cookieyes.com/privacy-policy) and [Data Processing Agreement](https://www.cookieyes.com/dpa)

== Data and Privacy ==

When you connect it to the CookieYes web app, this plugin connects your site to app.cookieyes.com to run cookie scans, sync settings with your CookieYes account, and show scan results and consent data in your dashboard. It connects to feedback.cookieyes.com only to collect feedback when the plugin is deactivated. See our [Privacy Policy](https://www.cookieyes.com/privacy-policy/) and [Terms & Conditions](https://www.cookieyes.com/terms-and-conditions/) for details.

The plugin sets one cookie, "cookieyes-consent", to remember each visitor's consent choices on later visits. It does not collect or store any personal information about your visitors.

== Frequently Asked Questions ==

= Which privacy laws does CookieYes support? =

CookieYes helps you work toward compliance with GDPR, UK GDPR, the ePrivacy Directive, DSGVO, TDDDG, RGPD, CNIL guidelines, AVG, PECR, CCPA/CPRA, VCDPA, CPA, CTDPA, UCPA, LGPD, PIPEDA, Law 25, POPIA, nFADP, the Australian Privacy Act, PDPA (Singapore and Thailand) and PDPL (Saudi Arabia). Choose an opt-in banner for GDPR-style laws or an opt-out banner for US state laws.

= What is GDPR cookie consent? =

The GDPR is the EU's data protection law, known as DSGVO in German, RGPD in French and Spanish, and AVG in Dutch. Together with the ePrivacy Directive, it requires websites to get consent before setting non-essential cookies such as analytics and advertising cookies. CookieYes blocks those cookies until a visitor accepts and, with a web app connection, records each choice in a consent log.

= What is the EU cookie law? =

The EU cookie law is the common name for the cookie rule in the ePrivacy Directive. It requires websites to get consent before storing or reading non-essential cookies on a visitor's device, and the GDPR sets the standard that this consent must meet. CookieYes blocks non-essential cookies until a visitor agrees and lets visitors accept or reject cookies by category.

= What are UK GDPR and PECR? =

UK GDPR is the UK's version of the GDPR. PECR is the UK law that covers cookies and similar technologies, and it requires consent for non-essential cookies. CookieYes applies the same opt-in banner and cookie blocking to UK visitors.

= What is the TDDDG (formerly TTDSG) in Germany? =

The TDDDG is Germany's cookie law. It was called the TTDSG until May 2024, and Section 25 requires consent before storing or reading information on a visitor's device unless it is strictly necessary. CookieYes blocks non-essential cookies until consent, alongside DSGVO requirements.

= What does the CNIL expect from cookie banners in France? =

The CNIL is France's data protection authority. Its guidelines say refusing cookies should be as easy as accepting them. CookieYes banners can show a Reject All button as well as Accept All, and visitors can change their choice at any time with the revisit consent button.

= What are CCPA/CPRA and other US state privacy laws? =

The CCPA, expanded by the CPRA, gives California residents the right to opt out of the sale or sharing of their personal information. Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA) and Utah (UCPA) have similar laws. CookieYes offers an opt-out banner with a "Do Not Sell or Share My Personal Information" link, and Pro and Ultimate plans honour Global Privacy Control signals.

= What is LGPD in Brazil? =

The LGPD is Brazil's general data protection law, modelled closely on the GDPR. It requires a legal basis, such as consent, for processing personal data. CookieYes lets Brazilian visitors accept or reject cookies by category and, with a web app connection, keeps a record of their consent.

= What are PIPEDA and Quebec Law 25? =

PIPEDA is Canada's federal privacy law for private organisations. Quebec's Law 25 adds stricter consent rules, including for tracking technologies. With a web app connection, CookieYes helps you collect and record consent from Canadian visitors and explain your cookies in a cookie policy.

= Does CookieYes cover POPIA, the Australian Privacy Act, PDPA, PDPL and nFADP? =

Yes. CookieYes helps you work toward compliance with POPIA (South Africa), the Privacy Act 1988 (Australia), PDPA (Singapore and Thailand), PDPL (Saudi Arabia) and the revised Swiss Federal Act on Data Protection (nFADP). Geo-targeting on Pro and Ultimate plans shows each visitor the banner that fits their region.

= Do I need a cookie consent banner on my website? =

If your site has visitors from the EU, UK, Brazil, Canada or US states with privacy laws, and it sets non-essential cookies through analytics, advertising or embedded content, you are likely required to inform visitors and obtain or facilitate consent. Most WordPress sites set such cookies through their theme, plugins or analytics. Check your specific obligations with a legal professional.

= What is a consent management platform (CMP)? =

A CMP collects, manages and stores visitor consent for cookies and tracking. CookieYes is a Google-certified CMP for WordPress that pairs the cookie banner in the plugin with cookie scanning, consent records and policy pages in the free CookieYes web app.

= What is the difference between opt-in and opt-out consent? =

Opt-in means non-essential cookies stay off until a visitor agrees, which is the model under GDPR, UK GDPR and LGPD. Opt-out means cookies can run until a visitor objects, which is the model under CCPA/CPRA and most US state laws. CookieYes supports both.

= Which cookies need consent? =

Strictly necessary cookies, such as those that keep a shopping cart or login working, generally do not need consent. Analytics, advertising and most functional cookies do under opt-in laws. CookieYes groups your cookies into categories so visitors can accept cookies or reject them by category.

= What is a cookie notice, cookie message or cookie popup? =

They are different names for the same thing: the message that tells visitors your site uses cookies and lets them accept cookies, reject them or manage cookies by category. CookieYes shows it as a bar or box on any plan, or as a cookie popup on Pro and Ultimate plans.

= How do I add a cookie banner to WordPress? =

Go to Plugins, then Add New Plugin, search for "CookieYes" and click Install Now, then Activate. A cookie consent banner appears on your site straight away. You can then customise it and, with a free web app connection, run a cookie scan and generate a Cookie Policy page. No coding is needed.

= Is CookieYes free? =

Yes. CookieYes is a free cookie consent plugin. Without an account, it shows your banner, blocks the cookies you add in the cookie manager and lets you manage cookies and categories. Connecting to the CookieYes web app on its free plan adds the cookie scanner, consent logs, Google Consent Mode v2 and the policy generators. Paid plans add more banner languages, higher pageview and scan limits and custom CSS, and Pro and Ultimate add geo-targeting and IAB TCF. [Compare plans](https://www.cookieyes.com/pricing/?utm_source=wordpress&utm_medium=plugin&utm_campaign=wordpress_page&utm_content=l_1&ref=WPCY).

= Will a cookie banner slow down my website? =

CookieYes is built not to. Scanning, consent logging and processing run in the CookieYes cloud rather than in your WordPress database, and the banner script adds no database queries on page load. It is compatible with major caching plugins.

= Does the plugin block cookies before consent? =

Yes. Non-essential cookies are blocked until a visitor consents, while strictly necessary cookies stay on so your site keeps working. Without the web app, blocking covers the cookies you add in the cookie manager with their script URL patterns. With a web app connection, the cookie scanner adds the cookies it finds to your cookie list, so they are blocked automatically. If another plugin sets cookies outside CookieYes, we cannot control that, and forcing every cookie to block could break your site.

= Does CookieYes support Google Consent Mode v2? =

Yes, once your site is connected to the CookieYes web app, including on the free plan. Consent Mode v2 passes each visitor's consent choices to Google Analytics 4, Google Ads and Google Tag Manager, in Basic or Advanced mode. Since March 2024, Google has required it for relevant Google Ads and Analytics uses with visitors in the EEA. CookieYes also supports Microsoft UET Consent Mode.

= Does CookieYes work with WooCommerce, Elementor and page builders? =

Yes. It works with WooCommerce, Elementor, Divi, Gutenberg, Contact Form 7 and WPForms, integrates with the WP Consent API and, with a free web app connection, passes consent to Google Tag Manager, Google Analytics 4, Google Ads and Microsoft Advertising. With a web app connection, it also passes consent to Microsoft Clarity and Meta Pixel.

= How does the cookie scanner work? =

The scanner crawls your site, finds the cookies it sets and sorts them into categories such as necessary, analytics, advertising and functional. Scanning needs a connection to the CookieYes web app, which has a free plan, and unknown cookies found in scans are classified automatically with AI. The free plan includes 5 scans a month of up to 100 pages each. Pro and Ultimate add scheduled scans, and Ultimate adds scanning behind login.

= Can I customise the cookie banner? =

Yes, without an account. Choose a bar or box layout and a light, dark or custom colour scheme, edit all banner text and button labels, and turn the Reject All and Customize buttons on or off. Paid plans add custom CSS, Pro and Ultimate add the Cookie Popup layout, and Ultimate adds your logo and removes CookieYes branding.

= Can I export consent records for audits? =

Yes, with a CookieYes web app connection, including on the free plan. The consent log records each visitor's consent and cookie preferences, and you can export it as CSV or download proof of consent for an individual visitor.

= Can the plugin generate a cookie policy? =

Yes, once your site is connected to the CookieYes web app, including on the free plan. The generators create Cookie Policy and Privacy Policy pages from your own scan results, so the policy lists the cookies your site actually sets, and the pages update as your cookies change.

= Does CookieYes support multilingual websites? =

Yes, on paid plans. Without a paid plan, your banner shows in one language of your choice. Paid plans let you add more languages, with auto-translation into 40+ languages, and show each visitor the banner in their browser language. On paid plans, CookieYes also works with WPML, Polylang and TranslatePress.

= Can I manage CookieYes with an AI assistant? =

Yes. AI coding assistants can read the plugin's AGENTS.md and CLAUDE.md files to install, configure and verify the banner. With a CookieYes account, the CookieYes MCP server also lets assistants check banner status, run scans and update banner settings in plain language.

= Can I show different banners for EU and US visitors? =

Yes, on Pro and Ultimate plans. Geo-targeting detects each visitor's region and shows the matching banner, for example an opt-in GDPR banner in the EU and an opt-out CCPA banner in California.

= Does CookieYes support Google Tag Manager? =

Yes. With a CookieYes web app connection, including on the free plan, CookieYes passes consent signals to Google Tag Manager through Google Consent Mode v2, so tags fire according to each visitor's choices.

= Does CookieYes support IAB TCF? =

Yes. Pro and Ultimate plans support IAB TCF v2.4, the Transparency and Consent Framework used by publishers and advertisers, along with Google's Additional Consent Mode for ad tech providers outside the IAB Global Vendor List.

= Does CookieYes support Global Privacy Control (GPC)? =

Yes, on Pro and Ultimate plans. CookieYes can respect the GPC signal from a visitor's browser automatically and treat it as an opt-out request under laws such as the CCPA/CPRA.

= Can visitors change or withdraw their consent? =

Yes. The revisit consent button stays on every page, so visitors can reopen their preferences to manage cookies, or change or withdraw consent, at any time. With a web app connection, each change is recorded in the consent log.

= Where is consent data stored? =

With a web app connection, consent logs are stored in EU-based data centres under a Data Processing Agreement. The plugin itself sets a single cookie, "cookieyes-consent", to remember each visitor's choices in their browser.

= Is the cookie banner accessible? =

Yes. The CookieYes banner meets WCAG 2.1 AA, and keyboard focus for the revisit consent button was improved in version 3.5.8.

= Do I need to connect to the CookieYes web app? =

Not to show a banner. Without an account, the plugin shows your cookie banner, blocks the cookies you add in the cookie manager, and lets you manage cookies and customise the banner. Cookie scanning, consent logs, Google Consent Mode v2, the policy generators and central management need a connection to the CookieYes web app, which has a free plan. Premium features also need a connection.

= Is CookieYes suitable for large websites, multisite or agencies? =

Yes. Subdomain consent sharing, multi-user roles, scheduled scans and scanning behind login suit agencies and large sites. Agencies can also join the CookieYes partner program.

= Does CookieYes guarantee GDPR compliance? =

No plugin can guarantee GDPR compliance or privacy compliance. CookieYes gives you the tools to meet cookie consent requirements under major privacy laws, but you need to check how your site uses cookies and configure the plugin correctly. For legal advice, consult a lawyer.

= Where can I get support if the banner does not appear? =

Post on the [WordPress.org support forum](https://wordpress.org/support/plugin/cookie-law-info/) with your site URL, WordPress version, the browser where the issue happens and a short description. Free plugin users are supported on the forum, and paid plans get support from the CookieYes support team.

== Installation ==

= Automatic installation =

- Go to **Plugins** in your WordPress dashboard and select **Add New Plugin**.
- Search for "CookieYes" and click **Install Now**.
- Click **Activate**.

= Manual installation =

- Download the CookieYes plugin zip file from this page.
- Go to **Plugins** in your WordPress dashboard and select **Add New Plugin**.
- Click **Upload Plugin**, choose the zip file and click **Install Now**, then **Activate Plugin**.

You can also extract the zip and upload the folder to **/wp-content/plugins/** over FTP, then activate the plugin from your dashboard.

= Connect to the CookieYes web app (optional) =

The plugin installs, shows a banner and blocks the cookies you add in the cookie manager without the web app. Cookie scanning, consent logs, Google Consent Mode v2 and the policy generators need a connection, which is available on a free plan. To connect:

- After activating, click **CookieYes** in your dashboard menu.
- Click **Connect to a new account** and choose a plan, or click **Connect to an existing account** to log in.

= Plugin updates =

Update notifications appear on your Plugins page, and you can update directly from your dashboard. Keep the plugin updated for new features and security fixes.

== Screenshots ==

1. Cookie banner on the user end
2. Cookie preference center
3. CookieYes admin panel
4. Cookie banner settings
5. Manage cookies
6. Add new cookie
7. Banner language settings
8. Google Consent Mode v2 settings
9. Policy generators

== Changelog ==

= 3.5.9 - 2026-11-12 =

New: WP Go Maps: Google Maps is now blocked until the visitor consents, with a placeholder and a Cookie settings button in its place.
New: Video Player for YouTube: videos now wait for the visitor's consent to YouTube cookies and show a placeholder until then.
New: Vimeify (Vimeo Integration): videos now wait for the visitor's consent to Vimeo cookies and show a placeholder over the video preview.
New: WP Rocket: CookieYes scripts and the Google Consent Mode settings are now automatically excluded from Delay JS, Minify JS and Load JS deferred, so consent defaults load before Google tags.
New: Autoptimize: the banner and CookieYes scripts are now automatically kept out of Autoptimize's CSS and JavaScript optimisations, so the banner shows and works as expected.
New: NitroPack: CookieYes is now automatically left out of NitroPack's optimisations.
New: NitroPack: NitroPack's page cache is now cleared when you save banner, cookie or settings changes.
Improvement: On sites without a paid CookieYes plan, the plugin's support links now open the WordPress.org support forum.
Improvement: The support link in the deactivation pop-up now opens the WordPress.org support forum for all users.
Fix: Cleared the warnings reported by Plugin Check 2.2.0, the WordPress.org review tool.
Fix: On sites using the WP Consent API with an opt-in (GDPR) banner, other plugins could treat returning visitors, and visitors on sites that delay JavaScript, as having accepted every cookie category. They now receive the visitor's actual choice.
Security: On sites using the legacy settings, users below Administrator could add scripts to cookie categories. Managing category scripts is now limited to administrators.
Security: On sites using the legacy settings, fixed an issue that could let script blocking be bypassed.

= 3.5.8 =

[Compatibility] - Tested OK with WPML 5.0.
[Enhancement] - On sites not connected to the CookieYes web app, the Support links now open the WordPress.org support forum.
[Enhancement] - Improved keyboard focus for the revisit consent button.
[Fix] - Security fixes.

= 3.5.7 =

[Compatibility] - Updated to IAB TCF v2.4.
[Enhancement] - Readme update.

= 3.5.6 =

[Enhancement] - Added setup documentation for AI coding assistants.

= 3.5.5 =

[Compatibility] - Tested OK with WordPress version 7.1
[Fix] - Translation issue in the plugin.

= 3.5.4 =

[Enhancement] - Updated button colors in the banner themes.
[Fix] - Minor bugs and security fixes.

= 3.5.3 =

[Fix] - Restricted promotional banner visibility to admin users.

= 3.5.2 =

[Fix] - Mixed content warning on standalone banner after migrating site to HTTPS.

= 3.5.1 =

[Add] - Agency Program banner for standalone WordPress plugin users with GDPR Anniversary offer.
[Fix] - Alignment issue with the 'Connect to CookieYes web app' button on the plugins page.

= 3.5.0 =

[Enhancement] - Rebuilt the admin interface with React for a faster, more reliable experience.
[Fix] - Minor bugs and UI improvements.
[Fix] - Security improvements.
[Add] - "Become a Partner" menu in the header to join the Agency or Affiliate partner program.

= 3.4.2 =

[Compatibility] Updated WordPress compatibility to 7.0

= 3.4.1 =

[Add] - Opt-Out Confirmation in US State Laws banner
[Fix] - Minor bugs and security fixes.
[Compatibility] - Tested OK with WordPress version 7

= Earlier versions =
For the changelog of earlier versions, please refer to the [changelog.txt](https://github.com/cookieyeshq/cookie-law-info/blob/main/changelog.txt).

== Upgrade Notice ==

= 3.5.9 =

New: WP Go Maps, Video Player for YouTube and Vimeify wait for consent.
New: WP Rocket, Autoptimize and NitroPack support.
Improvement: Support links open WordPress.org.
Fix: Correct WP Consent API choices and Plugin Check warnings.
Security: Two legacy-settings fixes.
