PMS Cookie Banner Lite

Help visitors choose which optional technologies your site may use. Set up a clear cookie banner and preference center, then configure the services you want to manage.

Features

• Accept, reject, customize and withdraw optional consent.

• Consent-based loading for configured scripts and supported embeds.

• Google Consent Mode v2: Basic or Advanced mode, setup steps and an on-site check.

• Microsoft UET (Bing Ads) and Clarity consent signals follow each visitor’s choice.

• Visitors choose again after 6, 12 or 13 months, or when you click “Ask visitors again”.

• Global Privacy Control and separate sale/sharing privacy choices.

• Cookie inventory with HTML and browser runtime scanning.

• Consent logs, privacy requests and dashboard statistics.

• Floating preferences button with a layer (z-index) setting, so it never covers your site menu.

• Configuration-specific text to copy into your privacy policy.

• English, Polish, French, German, Spanish and Swedish interfaces.

• Optional: banner texts follow the language of the page on multilingual sites.

Why PMS Cookie Banner Lite?

The included local features are free and do not expire. No PMS account or paid licence is required. Settings and visitor records remain under your control in WordPress.

Need more tools?

PMS Cookie Banner Pro adds banner layouts, custom colors and typography, a local Media Library logo, custom preferences-button icons and placement, and higher-capacity, path-aware classification.

The paid implementation is not included in Lite. Pro replaces Lite in the same plugin folder; do not install both together. See features and plans.

Privacy

org and contains no external updater or licence manager. Public PMS branding is optional and off by default.

PMS classification is also off by default and requires a saved administrator opt-in. com/licenses/v1/classification/register and /v1/classification/classify contains at most 50 cookie names and 50 resource origins or normalized resource paths, with an installation ID and pseudonymous credential. PMS receives the server IP and technical headers.

Cookie values, page content, URL queries and visitor consent records are not intentionally sent; names and paths can still reveal website or personal information.

If the PMS operator enables AI assistance, unfamiliar names and resource origins, and for Pro also WordPress plugin or theme folder names (not full paths), may be sent to OpenAI. Unknown cookies are researched in the background; results arrive with the next automatic retry. No OpenAI key is required in the plugin.

Disabling classification stops new requests and retries while preserving the local inventory.

PMS privacy policy and service terms.

OpenAI privacy policy and service terms.

Before using it on a live site

This is a technical consent tool, not legal certification. Scanning and consent signals do not prove that every tracker is blocked. Verify your actual integrations, including third-party and server-side behavior, and adapt your privacy policy to the whole website.

Visitor tags are supplied by the site administrator, not installed automatically by this plugin.

Technical Details

• Managed scripts use WordPress’s native template enhancement lifecycle, without a separate response buffer.

• A one-time WP-Cron HTML baseline runs in bounded batches. It covers the home page, regular pages, shop and supported landing pages, excluding individual posts/products, archives and technical templates.

• The administrator’s runtime scan executes page JavaScript. Keep its tab open and finish the representative queue; closing or reloading it interrupts the run.

• Accepted signed classifications are imported automatically after a completed scan, including AI-assisted results. Unresolved identities/categories remain private. Unknown retention periods or provider privacy URLs remain marked unknown. Importing a result does not create blanket domain-blocking rules.

• Policy review metadata stays in WordPress. Relevant configuration, inventory and linked local policy changes require a new review; external policy changes need manual checking. Missing or unpublished local pages cannot be marked reviewed.

• Decision logs are eligible for deletion after 180 days or the consent period, whichever is longer. Privacy requests use the saved 730–3650-day setting, with a minimum of 24 calendar months. Cleanup depends on WordPress scheduling. Consent expiry does not physically erase localStorage; separate privacy restrictions have no automatic browser expiry.

• Scan and policy notices stay on Cookie Banner screens. Appearance fields and browser observations are validated before storage or extension callbacks.

• The preferences button uses the inline “cookie” icon from Lucide (https://lucide.dev), ISC License, Copyright (c) Lucide Contributors. No external request or library is loaded.