The cookie consent plugin for WordPress that keeps your visitors' data on your own site.
Consentfold shows a cookie banner, holds back trackers and embeds until the visitor agrees, tells Google about the choice with Consent Mode v2, and keeps a consent log you can show as proof. No vendor account, no pageview limits, no visitor data sent to a third party.
Illustration: a cookie banner with Necessary, Functional, Statistics and Marketing categories and the buttons Accept all, Reject all and Save preferences.
yourshop.example
We value your privacy
We use cookies to run this site and, with your permission, to measure usage and show relevant content. You can accept all, reject all, or choose which categories to allow.
Necessary· always on
Functional
Statistics
Marketing
Accept allReject allSave preferences
HELD BACK UNTIL CONSENT
gtag.jsstatistics
youtube.com/embedmarketing
connect.facebook.netmarketing
CONSENT MODE V2
analytics_storage deniedgranted
ad_storage denied
WORKS WITH
Google Consent Mode v2Google Tag ManagerGoogle AnalyticsSite Kit by GoogleWordPressWP Consent APIGTM4WPWPMLPolylangTranslatePressWP Super CacheCache EnablerAutoptimizeWordfenceMaxMind GeoLite2 (Pro)
Google Consent Mode v2Google Tag ManagerGoogle AnalyticsSite Kit by GoogleWordPressWP Consent APIGTM4WPWPMLPolylangTranslatePressWP Super CacheCache EnablerAutoptimizeWordfenceMaxMind GeoLite2 (Pro)
Free is complete
The free plugin is a full consent solution on its own.
Nothing metered
No pageview limits, no scan credits, no vendor account.
Cache-safe by design
Identical output for every visitor, so cached pages stay correct. Tested end to end behind WP Super Cache, Cache Enabler and Autoptimize.
Light
The banner is under 15 KB of JavaScript and 4 KB of CSS, gzipped. No jQuery.
Accessible
Keyboard operable, announced to screen readers, tested with axe-core for WCAG 2.2 AA.
The problem
Most banners ask. Few actually wait.
01
You must get consent first, and be able to prove it.
Analytics, ads and embeds have to wait for a yes. Banners that only look right still let trackers fire before consent. Consentfold actually blocks them, and logs each decision on your site.
02
Many consent tools meter you or move your visitors' data.
Per-pageview pricing, a required cloud account, third-party scripts on every page. Consentfold runs entirely on your WordPress install.
03
Page caching breaks many banners.
Consentfold's output is identical for every visitor, so a cached page is correct for everyone, with no per-visitor markup and no special rules.
What runs before the visitor decidesPAGE LOAD → DECISION
A BANNER THAT ONLY LOOKS RIGHT
Banner shows
Analytics tag
Ad pixel
YouTube embed
Trackers fire at load. The banner is decoration.
CONSENTFOLD
Banner shows
Consent Mode defaults
Analytics tagHELD
Ad pixelHELD
YouTube embedCLICK TO LOAD
Nothing runs until the matching category is allowed. Each decision gets a Consent ID.
How it works
Three steps. A few minutes.
No account to create, no code to paste, no script to load from anyone else.
1STEP ONE
Install from WordPress.org
Search for Consentfold under Plugins › Add New and activate it. The free plugin is complete on its own; nothing to sign up for. If a licensing prompt appears, you can skip it.
2STEP TWO
Run the setup wizard
Who sees a banner, the design, Consent Mode, the policy page and a first scan of your site. Switching from CookieYes or Complianz? Import your settings instead.
DONE
Your banner is real
Trackers and embeds wait for consent, Google gets the signal, and every decision is logged on your site. The Health panel lists anything left to fix, with a link to each.
Feature highlights
Everything a consent banner should do, built in.
All of this is in the free plugin. The examples in the panels are illustrations, not screenshots.
Real blocking, not just a banner
Scripts, embeds and iframes are held back until the visitor agrees to the matching category. Click-to-load placeholders let visitors load a video or map when they choose. A database of 174 known services sorts itself into categories; custom rules cover the rest.
SERVICECATEGORYSTATE
Google Analyticsstatisticsheld
YouTube embedmarketingplaceholder
Meta Pixelmarketingheld
Google Mapsmarketingplaceholder
Vimeo embedmarketingplaceholder
Stripe checkoutnecessaryruns
+ 168 more known services+ custom rules
The right rule for your audience
Choose the rule your site follows: opt-in, opt-out or no banner at all. Global Privacy Control is honoured under opt-out. Pro can pick the rule per visitor from their region.
EU / EEAopt-in
Brazilopt-in
United Statesopt-out · GPC
No bannerno consent flow
Consent Mode v2, with a built-in checker
Defaults go out before any Google tag runs and update when the visitor decides. gtag.js and Tag Manager, with a ready-made GTM recipe. WP Consent API, Site Kit and GTM4WP recognised.
// before any tag
ad_storage: denied
analytics_storage: denied
// visitor allows Statistics
analytics_storage: granted
✓ checker: defaults sent first
A consent log, on your own site
One record per decision. Look it up by Consent ID, delete it, or let automatic cleanup remove it after your retention period (365 days by default). Works with WordPress's personal data export and erase tools.
Consent ID7b1e5c3a-9d42-4f0e
Recorded2026-10-21 05:32
Choicecustom
Allowedfunctional, statistics
IP / user agentnot stored
Know what your site really sets
The scanner finds the cookies and scripts your site actually uses and sorts them into categories. Run it as often as you like. A Health panel lists what still needs attention, with a link to fix each item.
Banner on the home page✓ ok
Consent Mode default✓ ok
Cookie policy pagewarning · fix
From CookieYes or Complianz in minutes
One-click importers read their saved settings (even if the plugin is switched off), show a preview, apply on your click, and can undo. The other plugin is never deactivated without being asked.
CookieYes→read→preview→applyundo
Complianz→read→preview→applyundo
New site? The setup wizard covers audience, design, Consent Mode, the policy page and a first scan in a few minutes.
Banner designer
Make the banner look like it belongs on your site.
Every look is built in a visual designer, with a live preview of unsaved changes that runs the same banner code your visitors get. It is all in the free plugin; Pro adds custom CSS, saved designs and preset packs.
We value your privacyChoose which cookies we may use. You can change this at any time.Accept allReject allPreferences
Layout and position
Bar at the top or bottom, optionally pushing the page up instead of covering it
Popup in any of nine spots
Side panel on the left or right, full height or docked to the top, middle or bottom
Popup and Side panel width from 280 to 960 px; distance from the edge from 0 to 200 px, except for the Bar and a full-height Side panel
Optionally dim the page behind a popup or panel
Colours and dark mode
Six ready-made palettes, each with a light and a dark version
Adjust background, text, border, button and button text, separately for light and dark
Follow the visitor's device, or stay always light or always dark
Contrast check against WCAG AA: text and button text at 4.5:1, the button against the banner at 3:1. Warnings never stop you saving
Type and shape
Your theme's font, the system font, serif, monospace or any Google font, downloaded once to your own site
Small, medium or large text; compact, normal or roomy spacing
Corner radius from square to 32 px
Filled, outline, soft or pill buttons; switch or checkbox toggles
Motion
Fade, slide or zoom in and out, or no animation
Fast, normal or slow
Optional smooth resizing between views and button hover and press
Visitors who ask their device for less motion get none
Buttons
Switch Accept all, Reject all and Preferences on or off
A close button that counts as rejecting
Equal button weight, so neither choice is nudged
A warning if you leave out Reject all or Accept all
Go further with Pro
Custom CSS for the banner, with live preview
Saved designs: keep your layout, colours, fonts, spacing, animation and CSS under a name, then apply, rename or delete it
Three preset packs (Editorial, Friendly, Modern) of four complete looks each, all passing the contrast check
Light and dark preview
Preview the banner as set, always light or always dark, whatever your saved colour mode
"Show again" replays the entrance animation
Nothing you choose in the preview is stored or logged
Google font finder
Search the whole Google Fonts list, or filter by sans serif, serif, display, handwriting or monospace
Every font shown in a live sample, with your own sample text
Tick the weights you need, from 100 Thin to 900 Black, as far as the family offers them
Only your admin page talks to Google while you browse; visitors get the font from your site
"Powered by Consentfold" credit
A small link at the foot of the banner, off unless you switch it on
Free plugin only: a licensed Pro site shows no credit and does not offer it
The preview shows it as soon as you switch it on
The free plugin, in full
A complete consent solution. No licence needed.
Design the banner your way
Bar, Popup and Side panel, with a live preview. See every option
Palettes in light and dark, all checked for WCAG AA contrast
Fonts, sizes, spacing, corner radius, animations; self-hosted Google Fonts
Optional "Powered by Consentfold" link, off by default
The right rule for your audience
Choose the rule for your site: opt-in (EU / EEA, Brazil), opt-out (United States) or no banner
Global Privacy Control honoured under opt-out
Pro adds region detection, to apply the right rule per visitor
Real blocking, not just a banner
Scripts, embeds and iframes wait for the matching category
Click-to-load placeholders; optional "Show preview" thumbnail for YouTube and Vimeo, only after a click
Database of 174 known services, sorted into categories
Custom rules for anything the database doesn't know
Works with the tools you already use
Google Consent Mode v2 for gtag.js and Google Tag Manager, with a GTM recipe and a built-in checker
WP Consent API integration
Recognises Site Kit and GTM4WP
Tested end to end with WP Super Cache, Cache Enabler, Autoptimize, Polylang, WooCommerce, Wordfence, GTM4WP and Site Kit
Proof of consent
Consent log: one record per decision, stored on your own site
View, look up by Consent ID, delete records
Automatic cleanup after your retention period (365 days by default)
Works with WordPress's personal data export and erase tools
No IP address or user agent stored
Know what your site sets
Scanner finds the cookies and scripts your site really uses and sorts them. Unlimited, manual
Service inventory that feeds your cookie policy table
Health panel and Overview showing what needs attention, with a link to fix each item
Policy pages and translations
Cookie-policy block that builds the cookie table automatically
Settings-link block so visitors can reopen their choices
Ships with translations in Hungarian, German, French, Dutch, Spanish, Italian and Polish (drafts, not yet reviewed by native speakers)
Works with WPML, Polylang and TranslatePress
Get started fast
Setup wizard: audience, design, Consent Mode, policy page and a first scan in a few minutes
One-click importers for CookieYes and Complianz, with preview and undo
Never deactivates the other plugin without being asked
For agencies
One licence for every client site.
Pro Unlimited covers as many sites as you manage, with no pageview limits and no hosted account per client.
Unlimited sites, one price
$249 a year or $699 lifetime, for every site you manage.
Each client keeps their own log
The consent log stays in the client's WordPress database. Nothing goes to an outside consent service.
Free fits the smaller clients
The free plugin is complete, so a small site needs no licence at all.
Move clients off CookieYes or Complianz
Importers with a preview and undo, free on every site.
A setup that takes a few minutes
The setup wizard walks through each new site, the same way every time.
WP-CLI for scans and log upkeep
Run a scan, count log entries or prune old ones from the command line. CSV export of the log is in Pro.
A banner that works without a subscription or a hosted account.
Agencies and freelancers
A repeatable, quick setup for many WordPress sites.
Online shops on WooCommerce
Payments keep working and purchase tracking respects consent.
Sites switching from CookieYes or Complianz
Move your settings over in minutes, with a preview and undo.
Multilingual sites and EU, Brazil and US audiences
Banner text in your visitors' languages, and the rule that fits your audience.
Privacy
What we don't collect.
A consent tool should not be a tracker itself. Consentfold runs on your server, keeps the consent record where it belongs, with you, and sends no visitor data to us. It helps you meet your obligations without creating new ones.
No IP address stored in the consent log.
No user agent stored either.
No third-party scripts added to your visitors' pages by Consentfold.
No vendor account needed, and no usage tracking unless you opt in on the licensing prompt.
No pageview metering or scan credits.
No font calls to Google from your visitors: fonts are downloaded once to your site.
The one exception, stated plainly: if a visitor clicks "Show preview" on a blocked YouTube or Vimeo embed, the thumbnail is fetched from that service. Only after the click, and only that.
Is the free plugin really complete, or is it a trial?
It is complete. Free includes the banner and designer, real blocking of scripts and embeds, your choice of regional rule, Google Consent Mode v2, the consent log, the scanner, the policy blocks, translations and the importers. Nothing is metered and nothing expires. Pro adds extras: custom CSS, saved designs and preset packs, statistics, CSV export, automatic re-scans, region detection and WooCommerce support.
What happens if my Pro licence lapses?
The Pro features stop; everything in Free keeps working without a licence. Your banner stays up, blocking keeps blocking, and your consent log stays on your site. Pro is sold through Freemius with a 14-day free trial.
Does it work with my caching plugin or CDN?
It is built to. The banner is a static script and style, and the visitor's choice is read in the browser, so a cached page is the same for everyone. WP Super Cache, Cache Enabler and Autoptimize (including JavaScript minification) are covered by end-to-end tests; other caching plugins and CDNs are not tested yet. After changing the banner, clear your page cache once.
Where is the consent log stored, and what is in it?
In your own WordPress database. Each decision is one record: a random Consent ID, the categories accepted, how the visitor decided, the banner and policy versions, the region, the language and a coarse browser class. No IP address or user agent is stored. Records are removed automatically after the retention period you set (365 days by default), and the log works with WordPress's personal data export and erase tools.
Does Consentfold send any visitor data to you or to a third party?
No visitor data goes to us or to a third party. There is no vendor account, and Consentfold adds no third-party script to your visitors' pages. A Google font you pick is downloaded once to your site: your admin contacts Google while you use the font finder, and your server fetches the chosen font from Google once when you save the design. Visitors never contact Google for it. The one visitor-side exception: if a visitor clicks "Show preview" on a blocked YouTube or Vimeo embed, the thumbnail is fetched from that service. The licensing SDK (Freemius) shares nothing until you opt in on its connect screen, and you can skip it. After a skip, three things you do yourself still contact Freemius from your admin: opening Upgrade loads pricing from Freemius, starting a checkout or trial puts your name, email and site address in the checkout link, and the feedback form on deactivation sends an anonymous uninstall event. No visitor data goes to Freemius.
Can I move over from CookieYes or Complianz without starting again?
Yes. The importers read the other plugin's saved settings, even if it is already switched off, show you a preview, apply on your click, and can undo. Consentfold never deactivates the other plugin unless you ask it to.
Does using Consentfold make my site compliant?
It helps you meet the requirements: consent before trackers run, the rule you choose for your audience, a signal to Google, and a record you can show. What you must ask for and what your policy must say depend on your site and your jurisdiction, so Consentfold is not legal advice and we are not a law firm.
On the roadmap
Planned, not available yet. No dates, no promised order.
Policy generator with jurisdiction templates
A/B banner tests
Agency tools: many sites together, white-label, client-safe mode
Hosted status dashboard for agencies, if there is demand
