Title: CookieStart – CMP Banner & Cookie Consent Author: cookiestart Published: Dawout 21, 2026 Last modified: Dawout 21, 2026 --- Search plugins ![](https://s.w.org/plugins/geopattern-icon/cookiestart.svg) # CookieStart – CMP Banner & Cookie Consent By [cookiestart](https://profiles.wordpress.org/cookiestart/) [Download](https://downloads.wordpress.org/plugin/cookiestart.1.1.3.zip) * [Details](https://hat.wordpress.org/plugins/cookiestart/#description) * [Reviews](https://hat.wordpress.org/plugins/cookiestart/#reviews) * [Installation](https://hat.wordpress.org/plugins/cookiestart/#installation) * [Development](https://hat.wordpress.org/plugins/cookiestart/#developers) [Support](https://wordpress.org/support/plugin/cookiestart/) ## Description CookieStart is a consent management platform for WordPress websites and WooCommerce stores. The plugin connects your website to the CookieStart service and provides access to CMP configuration directly from the WordPress administration panel. It can display the CookieStart consent banner, detect scripts and cookies, classify them into consent categories, scan website URLs, review consent history, and control script behavior before consent is granted. Main features: * Cookie consent banner provided by the CookieStart platform. * CookieStart account registration directly from WordPress. * Connection of an existing CookieStart account using an API key and domain ID. * Website status dashboard with integration status and scan information. * Website compliance score and audit summary. * Manual and automatic website scans. * Scan progress, scanned URL list, errors, and scan history. * Detection and classification of scripts used by the website. * Detection and classification of cookies. * Manual category overrides for scripts and cookies. * Consent categories: necessary, preferences, statistics, and marketing. * Consent records and consent change history. * Automatic processing and transformation of supported scripts. * Optional automatic blocking of scripts before consent. * Optional blocking of unknown scripts. * Script allowlist and blocklist rules. * Default category for unrecognized scripts. * Optional grouping of first-party scripts. * Google Consent Mode v2 support. * Local preview of scripts detected in WordPress output. * Runtime configuration cache management. * Debug mode and integration logs. * Usage statistics and scan limits available in the dashboard. * Support for WordPress and WooCommerce websites. An active CookieStart account and a website configuration in the CookieStart platform are required. You can create or connect an account from the plugin administration panel. The plugin requires PHP 8.1 or newer. Important: Installing and configuring this plugin does not by itself guarantee compliance with GDPR, ePrivacy, or any other law. The website owner is responsible for the correct configuration of the service, classification of cookies and scripts, legal notices, and compliance with applicable laws. Learn more: https://cookiestart.pl/ CookieStart panel: https://panel.cookiestart.pl/ Privacy policy: https://cookiestart.pl/polityka-prywatnosci/ ### External services This plugin connects to external CookieStart services that are required for account management, website configuration, scanning, consent management, and delivery of the consent banner. On a fresh installation, CookieStart processing is enabled. The frontend SDK is not loaded and the plugin does not send frontend visitor requests to CookieStart until an administrator connects a domain and configures its CookieStart credentials. The plugin does not contact Google, Facebook, Google Maps, or other third-party providers whose scripts it can recognize. References to those providers are local detection and classification patterns for scripts already present on the website. The plugin does not use administrator or visitor data for its own analytics or advertising and does not independently track administrators or visitors. The plugin may connect to the following services: * `https://identity.cookiestart.pl` – account registration, login, authentication, and token renewal. * `https://parameter.cookiestart.pl` – website configuration, runtime settings, script and cookie classification, statistics, integration status, and related CMP configuration. * `https://crawler.cookiestart.pl` – website scans, scan status, scanned URLs, and scan results. * `https://consent.cookiestart.pl` – consent records and consent history. * `https://cdn.cookiestart.pl` – delivery of the CookieStart consent runtime SDK used on the website frontend. Depending on the action performed and the enabled features, the following data may be transmitted: * CookieStart account email address and password when the administrator registers or logs in through the plugin. * The administrator’s IP address during account registration. * Authentication tokens and the CookieStart user identifier. * Website URL, domain name, allowed domain, CookieStart domain identifier, and public API key. * Plugin version, integration type, and website URL in an integration heartbeat sent approximately every six hours after the website has been connected. * Detected script patterns, script assignments, cookie rules, consent categories, and manual category overrides. * Website scan requests, scan identifiers, scan status, scanned URLs, and scan results. * Consent records and consent history requested by an authorized website administrator. * Standard technical request data processed by the service infrastructure, such as IP address, request headers, browser information, timestamps, and server logs. The frontend loads the CookieStart runtime SDK from `cdn.cookiestart.pl`. After CookieStart credentials are configured, the SDK receives the connected website identifier and public API key and retrieves the consent configuration required to display and operate the banner. These external services are provided by CookieStart and are required for the plugin’s core functionality. Service website: https://cookiestart.pl/ Privacy policy: https://cookiestart.pl/polityka-prywatnosci/ Terms of service: https://cookiestart.pl/regulamin/ ### Privacy The plugin stores CookieStart configuration and authentication tokens in the WordPress database. Account passwords are transmitted only when the administrator registers or logs in and are not stored by the plugin. Session renewal uses a rotating access and refresh token pair. The website administrator is responsible for: * Informing website visitors about the use of CookieStart. * Maintaining an accurate privacy policy and cookie policy. * Correctly classifying cookies and scripts. * Configuring consent categories and legal bases. * Reviewing the data processing terms applicable to the CookieStart service. * Testing the website after activation and after configuration changes. For details about processing performed by CookieStart, see: https://cookiestart. pl/polityka-prywatnosci/ ## Installation 1. Upload the plugin folder to `/wp-content/plugins/` or install the ZIP file through the WordPress Plugins screen. 2. Activate CookieStart through the Plugins screen in WordPress. 3. Open CookieStart in the WordPress administration menu. 4. Create a CookieStart account or connect an existing account. 5. Add or connect the current website. 6. Configure the consent banner, consent categories, script processing, and runtime settings. 7. Run a website scan and review the detected scripts and cookies. 8. Assign or verify the appropriate consent categories. 9. Test the consent banner and blocked scripts on the frontend. ## FAQ ### Do I need a CookieStart account? Yes. The plugin connects WordPress to the external CookieStart consent management service. ### Can I create an account from WordPress? Yes. The plugin includes an account registration and website onboarding flow. Registration data is sent to the CookieStart identity service after you submit the registration form. ### Can I connect an existing CookieStart account? Yes. You can connect an existing website configuration by entering the CookieStart API key and domain ID. ### Does the plugin work with WooCommerce? Yes. CookieStart can be used on WordPress websites and WooCommerce stores. ### Does the plugin block scripts before consent? The plugin can process the generated HTML, detect supported script elements, assign consent categories, and transform selected scripts so they can be activated after the relevant consent is granted. Automatic blocking and blocking of unknown scripts can be enabled in the settings. ### Can I exclude or completely block selected scripts? Yes. The plugin provides an allowlist and a blocklist based on one pattern per line. ### Does CookieStart scan my website? A website scan can be started from the WordPress administration panel. The scan is performed by the external CookieStart crawler service. Scan availability and limits depend on the connected CookieStart plan. ### Can I review detected scripts and cookies? Yes. Detected scripts and cookies are displayed in dedicated administration views. Their consent categories can be reviewed and changed. ### Can I review consent history? Yes. The plugin displays consent records and the history of consent changes retrieved from the CookieStart service. ### Does the plugin support Google Consent Mode v2? Yes. Google Consent Mode v2 can be enabled in the CookieStart runtime settings. ### Does installing CookieStart guarantee GDPR compliance? No. CookieStart provides consent management and auditing tools, but the website owner remains responsible for configuration, legal content, cookie classification, and compliance with applicable laws. ### Where can I review CookieStart’s privacy policy? https://cookiestart.pl/polityka-prywatnosci/ ## Reviews There are no reviews for this plugin. ## Contributors & Developers “CookieStart – CMP Banner & Cookie Consent” is open source software. The following people have contributed to this plugin. Contributors * [ cookiestart ](https://profiles.wordpress.org/cookiestart/) [Translate “CookieStart – CMP Banner & Cookie Consent” into your language.](https://translate.wordpress.org/projects/wp-plugins/cookiestart) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/cookiestart/), check out the [SVN repository](https://plugins.svn.wordpress.org/cookiestart/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/cookiestart/) by [RSS](https://plugins.trac.wordpress.org/log/cookiestart/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.1.3 * Separated and domain-scoped runtime settings and runtime configuration caches to prevent incompatible cached responses. #### 1.1.2 * Added direct links from the WordPress menu to the banner configuration and packages and plans for the connected domain. * Shortened and reordered the external CookieStart panel links in the WordPress menu. * Added a three-step onboarding guide while the first automatic website scan is running. #### 1.1.1 * Removed the duplicate plugin URI header so the author URI uniquely identifies the CookieStart website. #### 1.1.0 * Enabled CookieStart processing by default for new installations and when the setting is missing, while preserving existing disabled settings. #### 1.0.16 * Removed the WordPress plugin version query from the published domain `script. js` URL. The shared CMP IIFE keeps its own SDK version. #### 1.0.15 * Switched frontend CMP loading to the domain-specific published `script.js` (Path B). * Removed the plugin-side live `CookieStart.init` bootstrap; initialization now comes from the published domain artifact. * Kept existing plugin releases on the legacy Path A integration for backward compatibility. #### 1.0.14 * Removed direct inline scripts from the administration panel. * Removed an unused output-buffer hook that could leave a buffer open. * Clarified when CookieStart services receive data and that third-party script providers are not contacted by the plugin. * Excluded bundled translation catalogs from the WordPress.org release package. #### 1.0.13 * Fixed deterministic SDK loading and initialization order. * Stopped the runtime adapter from replacing the CookieStart SDK global. * Encrypted stored access and refresh tokens with authenticated AES-256-GCM. * Removed personal data and API payloads from diagnostic logs. * Hardened API message rendering in the WordPress administration panel. * Scheduled integration heartbeat only after a domain is connected. * Prevented agreement-type requests before plugin configuration. * Improved output-buffer ownership and uninstall cleanup. * Updated the public plugin name to CookieStart – CMP Banner & Cookie Consent. #### 1.0.12 * Disabled frontend SDK loading until the plugin is explicitly enabled and fully configured. * Removed the insecure encryption-key fallback and added authenticated AES-256- GCM storage with legacy-data migration. * Added complete English source strings and a Polish translation catalog. * Improved banner language selection using the current WordPress locale. * Reworded audit results as a technical CMP assessment and added a clear legal- compliance disclaimer. * Improved account connection messages and clarified that passwords are used only for the current request. #### 1.0.11 * Removed persistent storage of the CookieStart account password. * Added session renewal through the rotating Identity refresh-token endpoint. * Added one-time external login codes so authentication tokens are no longer placed in panel URLs. * Added cleanup of passwords stored by earlier plugin versions. #### 1.0.10 * Added CookieStart account registration and login from WordPress. * Added automatic website creation and connection flow. * Added website scanning, scan progress, scan limits, and scan result views. * Added compliance dashboard and audit summary. * Added script and cookie category management. * Added consent records and consent history views. * Added runtime settings, script allowlist and blocklist, debug mode, and integration heartbeat. * Added Google Consent Mode v2 support. * Improved automatic script detection, transformation, and blocking. * Improved WordPress.org validation compatibility. ## Meta * Version **1.1.3** * Last updated **15 è ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.0.4** * PHP version ** 8.1 or higher ** * Language * [English (US)](https://wordpress.org/plugins/cookiestart/) * Tags * [CMP](https://hat.wordpress.org/plugins/tags/cmp/)[consent mode](https://hat.wordpress.org/plugins/tags/consent-mode/) [cookie consent](https://hat.wordpress.org/plugins/tags/cookie-consent/)[cookies](https://hat.wordpress.org/plugins/tags/cookies/) [GDPR](https://hat.wordpress.org/plugins/tags/gdpr/) * [Advanced View](https://hat.wordpress.org/plugins/cookiestart/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/cookiestart/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/cookiestart/reviews/) ## Contributors * [ cookiestart ](https://profiles.wordpress.org/cookiestart/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/cookiestart/)