About this plugin
Cookie Rocket is a WordPress cookie consent banner that blocks Google Analytics, Meta Pixel, Hotjar and other third-party tracking scripts until the visitor consents, with Google Consent Mode v2, a cookie scanner and a consent log included in the free version. It is for any site that has to comply with GDPR, CCPA / CPRA, LGPD (Brazil) or LFPDPPP (Mexico), each with its own banner wording and consent rules, selectable per site.
It is a fully self-hosted alternative to cloud cookie-consent services: no account, no monthly SaaS fee, and your visitors’ browsers never call an outside server. Real script blocking, Google Consent Mode v2 and on-demand cookie scanning are free here — features that comparable consent tools typically gate behind a paid plan or a remote service.
- Automatic script blocking: common third-party trackers (Google Analytics, Meta Pixel, Hotjar, Microsoft Clarity, LinkedIn, TikTok and more) are blocked until consent, with Google Consent Mode v2 built in.
- Built-in cookie scanner: detect on demand which known tracking services are present on your site and the cookies they set.
- Automatic cookie policy / cookie declaration: a single shortcode (or one-click page) publishes a table of every cookie your site uses — provider, purpose and duration — grouped by category and updated from your scans.
- Consent audit log with an admin viewer: every consent decision is recorded and browsable for compliance.
- Editable cookie categories: rename, re-describe and reorder the categories shown on the banner.
- Unified Cookie Banner editor: layout, content (text and labels) and colors, all in one place.
- Zero external scripts and zero CDN dependencies — everything is served from your own site.
- Framework selector: GDPR, CCPA / CPRA, LGPD (Brazil) and LFPDPPP (Mexico), each with its own banner wording and consent behavior.
- 100% local — no consent data is sent to third-party servers.
- WooCommerce aware: respects shop pages and checkout.
- Fully customizable colors, fonts sizes, copy and banner position.
- WCAG 2.1 AA accessible: keyboard navigation, focus states, ARIA labels.
- Multisite compatible.
- Five banner layouts: bottom bar, top bar, floating card, modal and drawer.
Shortcodes
- [cookie-rocket-preferences] — renders a button that re-opens the cookie preferences modal.
- [cookie-rocket-withdraw] — renders a link that withdraws consent and clears stored preferences.
- [cookie_rocket_policy] — renders the automatic cookie declaration table (provider, purpose and duration per cookie, grouped by category).
External services
This plugin connects to one outside service, and only from your admin, never from your visitors’ browsers:
- Deactivation feedback (Templates Rocket). When you deactivate the plugin you are offered a short, optional form asking why. Only if you choose a reason and press “Submit & deactivate” does the plugin send it to https://templatesrocket.com/cr-feedback/: the reason, the text you typed (if any), and the Cookie Rocket, WordPress and PHP versions and the site language. No site address, no visitor data and no consent records are sent. Pressing “Skip & deactivate” sends nothing. Provided by Templates Rocket: terms of service, privacy policy.
Cookie Rocket Pro
Cookie Rocket Pro is a commercial extension built on top of the free plugin. It adds:
- A catalog of 76 recognized services covering 340 cookies. Every cookie comes with its purpose and duration already written, so the cookie declaration table fills itself in from a scan. The free version recognizes 34 services; anything else is described by hand under Your own services.
- Rules per region. Each visitor gets the law of their country, also behind page caching: GDPR in Europe, CCPA / CPRA in the United States, LFPDPPP in Mexico and LGPD in Brazil, each with its own consent model, Reject button, consent duration and banner text. Global Privacy Control is honored.
- Google Consent Mode advanced and Google Tag Manager. Google Ads and GA4 keep modeling conversions while consent is denied, and the Tag Manager container is added with consent already wired.
- A tamper-evident consent ledger. Every record is sealed and chained to the previous one, with CSV export and a one-click evidence report.
- A deeper scan, every month. The crawl goes beyond the key pages, and a monthly re-scan emails you when a new tracker appears.
- Premium styles and finishes. Glass, Branded, Frosted and Frosted Dark styles, a blurred backdrop, border color and thickness, shadow intensity, button text size and weight, spacing, and a reopen button made your way (text, icon or both, icon, side, distance, colors, shape, size and shadow).
- Latin America pack. A generated privacy notice for Mexico and Brazil and a self-hosted ARCO / DSAR rights request channel.
com. The free version published here is fully functional and does not require the Pro plugin to work.