
aGo Legal gives WordPress sites building blocks for data protection: a configurable cookie consent banner, auto-generated privacy and cookie policies, a consent log and a registry of processing activities.
Features
- Cookie consent banner with Accept / Reject (bar, modal or floating styles) and four categories (necessary, analytics, marketing, functional).
- Auto-generated Privacy Policy based on company and DPO data and the law of your jurisdiction (GDPR, Chilean Law 21.719, LGPD or global).
- Auto-generated Cookie Policy with the cookies present on your site (populated by the built-in scanner).
- Consent log: every Accept/Reject is timestamped and stored locally. Each row carries a SHA-256 hash of the canonical record. Export the full log to CSV or to a self-contained HTML audit report.
- Cookie scanner: visits your home URL and lists the cookies that get set, classifying them heuristically (necessary / analytics / marketing / functional) so the policy table reflects them.
- RAT (Registry of Processing Activities, GDPR art. 30 / Chilean Law 21.719 art. 17): add, edit and delete activities, export them to CSV. Three common activities are seeded on activation as a starting point.
- DPO (Data Protection Officer) name, email and phone propagate into the generated policies.
- Shortcodes:
[agolegal_privacy_policy],[agolegal_cookie_policy]. - No remote calls. Everything is stored in your own database.
External services
This plugin does not connect to any external service.
Disclaimer
This plugin provides tools to help you implement data protection measures. It does not constitute legal advice and does not guarantee compliance with any law. As the site owner you are the data controller responsible for compliance. Consult a qualified professional.
Scope and limits
- The consent log covers the cookie banner. Consent given in forms, checkouts or signups is recorded by aGo Legal Pro, not by the free version.
- The source list is informative. The free version detects and lists where this site keeps personal data; handling access and erasure requests over those sources is part of the Pro edition.
- Detection does not reach database backups, staging copies, email inboxes or external services, and it cannot see plugins that keep data without registering with the WordPress privacy tools.
- The generated policies are drafts built from what you enter. Review them, and have a lawyer review them before publishing.
The site owner is the data controller. This plugin is a tool for the controller’s work, not a substitute for it.
Screenshots

Settings: company and DPO details, compliance framework, cookie banner and categories.

Consent log with SHA-256 hashes and CSV / HTML audit-report export.

Registry of Processing Activities (RAT) with add/edit/delete and CSV export.