About this plugin
Orbo shows a customizable cookie consent banner and stops tracking scripts
from running until your visitor agrees — so your WordPress site can comply
with GDPR, CCPA/CPRA, PIPEDA, and Québec Law 25.
Most cookie banners just sit on top of the page while Google Analytics, Meta
Pixel, and other trackers fire anyway. That isn’t valid consent — the
trackers must be blocked before the visitor agrees. Orbo blocks them in
two layers:
- Server-side blocking rewrites each page’s finished HTML before it
leaves your server, so even tracking scripts pasted directly into your
theme or page builder never reach the browser without consent.
- Client-side blocking catches trackers injected later by other
plugins, chat widgets, and tag managers.
Everything you need to get compliant
- Free automatic cookie scanner — Orbo crawls your site, finds the
cookies and tracking scripts actually in use, and categorizes them
against a signature database. No manual cookie spreadsheets.
- A banner that matches your brand — colors, logo, text, and position
are managed in the Orbo dashboard and update on your site without
touching code.
- Auto-generated cookie policy page — built from your latest scan and
kept current, embedded anywhere with the [orbo_cookie_policy] shortcode.
- Consent logs you can show a regulator — every accept/reject is
recorded with a timestamp and the privacy regime that applied (GDPR,
CCPA, or PIPEDA), so you can prove consent if you’re ever asked.
- Visitors can change their mind — reopen the preferences panel
anywhere with the [orbo_cookie_preferences] shortcode.
- Opt-in everywhere — Orbo applies the strictest (opt-in) behavior in
every jurisdiction, so you’re covered wherever your visitors browse from.
Fast, light, and compatible
- One small async script — no jQuery, no render-blocking payloads.
- Automatically excluded from JS delay/defer in WP Rocket, LiteSpeed
Cache, Autoptimize, and Cloudflare Rocket Loader, so consent and
blocking always run first, even on aggressively optimized sites.
- Safe with WooCommerce, Elementor, and other page builders — your own
first-party scripts and WordPress core assets are never blocked.
Who it’s for
Orbo is built for small-business site owners — and the freelancers and
agencies who look after their sites — in Canada, the United States, and
anywhere GDPR-level consent applies. If you run analytics, ads, or a chat
widget and your visitors are in a jurisdiction with a privacy law, you need
consent that actually holds up. Orbo makes that a five-minute job instead
of a legal project.
How it works
- Install the plugin and create a free Orbo account.
- Orbo scans your site and builds your banner, cookie categories, and
policy page automatically.
- Paste your Site Key into the plugin settings — the banner goes live and
consent logging starts immediately.
An Orbo account is required. This plugin is a thin connector — all
configuration (banner design, cookie categories, blocking rules) lives in
the Orbo dashboard, and the banner, cookie scanning, and consent-record
functionality is provided by the Orbo service. A free plan is available
and works for small sites; no credit card is required to start.
Orbo helps you run a compliant consent flow, but no software makes
compliance automatic on its own — this plugin is not legal advice. If you
are unsure what your site requires, talk to a privacy professional.
Docs & support
- WordPress plugin guide — setup,
shortcodes, and troubleshooting.
- FAQ — quick answers about compliance,
scanning, and plans.
- Contact us — we’re happy to help with
anything else.
- Learn more about Orbo at getorbo.com.
External services
This plugin relies on the Orbo platform (operated by Orbo,
com) to function. No external requests are made until you
save a Site Key on the settings page (Settings → Orbo Cookie Consent) — with no
Site Key configured, the plugin contacts no external servers.
Once a Site Key is saved, the plugin communicates with these Orbo endpoints:
- cdn.getorbo.com — the consent banner script (consent.js) is loaded in
visitors’ browsers on every page. Through it, visitors’ consent choices
are sent to Orbo together with the Site Key so that consent can be
recorded and proven, as described in the Orbo privacy policy.
- config.getorbo.com — your server fetches this site’s script-blocking
rules and banner configuration (the request contains the Site Key),
cached locally for one hour.
- dashboard.getorbo.com — a connection heartbeat (weekly, at most once
daily while you use wp-admin, and when you save the key or click “Test
Connection”) sends the Site Key and this site’s address so Orbo can
verify the key belongs to this domain, and the [orbo_cookie_policy] shortcode
fetches your generated cookie policy (the request contains the Site Key),
cached locally for one hour.
com/terms-of-service/
com/privacy-policy/
com/data-processing-agreement/