Consentaro – Cookie Consent & Google Consent Mode for WooCommerce

Consentaro helps your site ask visitors for a clear cookie choice, remember that choice, and tell Google what is allowed — without a heavy cookie suite.

Who it is for

• Store owners using WooCommerce and Google tags
• Sites that need Google Consent Mode v2 without complexity
• Anyone who wants a small, fast consent banner

What it does

• Shows a friendly Accept / Deny / Customize banner when needed
• Sets Google Consent Mode v2 defaults (denied until the visitor chooses)
• Loads Google Tag Manager only after a choice (or when a banner is not required)
• Automatically holds known third-party trackers (Analytics, Meta Pixel, TikTok Pixel, and more) inert until the matching consent category is granted, with a review screen to override any script’s category
• Design settings now include live preview (desktop/mobile), border-radius, button layout, font size, and one-click preset themes
• A new Insights tab shows anonymous daily Accept/Deny/Customize counts — no visitor data, IP addresses, or individual records are ever stored
• Keyboard-accessible consent banner — focus management, focus trap, and Escape support in the Customize dialog
• Fully translation-ready admin interface (188+ strings) and frontend banner
• Optional Consent Log — off by default, keeps an anonymized proof-of-consent record (no IP addresses or personal identifiers) for sites that need it for compliance audits
• Compatible with WPML and Polylang — set a per-language version of your banner text from Languages → String Translations
• Optionally focuses the banner on EU/EEA-style visitors (geo helper)
• Gates WooCommerce dataLayer events (view item, add to cart, purchase) by consent
• Plays nicely with popular page caches (WP Rocket, LiteSpeed, W3 Total Cache)
• Includes a plain-English Guide tab in wp-admin

What it does not do

• It is not legal advice
• It does not replace a full privacy policy or lawyer review for your region

Open Consentaro → Guide after activation for a non-technical walkthrough.

Translations

Consentaro is translation-ready (text domain: consentaro). If this plugin is hosted on WordPress.org, you can contribute a translation at translate.wordpress.org — no local setup needed.

For local development, a starter languages/consentaro.pot is included. Regenerate it after changing any translatable string with WP-CLI:

wp i18n make-pot . languages/consentaro.pot --exclude=assets/src,node_modules,vendor<h3>Credits</h3>

Consentaro is developed and maintained by itsmanzur. All code, design, and assets in this plugin are original work created specifically for Consentaro.

Source code: https://github.com/itsmanzur/consentaro

External services

This plugin can connect to the following third-party services. Both are optional and only activate based on your own configuration; they are not used to track visitors on Consentaro’s behalf.

Google Tag Manager (Google LLC)
If you enter your own Google Tag Manager (GTM) container ID in the plugin settings, Consentaro loads the standard GTM container script from Google’s servers (googletagmanager.com) so that your GTM tags can run. The script is only loaded in the visitor’s browser after a consent decision has been recorded (or immediately, with Google Consent Mode v2 default/denied state, if you have not required a banner), consistent with Google Consent Mode v2. No data is sent to Consentaro or to us; any data transmitted to Google is governed by your own GTM/Google Analytics configuration and Google’s terms.
This service is provided by Google LLC: Terms of Service, Privacy Policy.

ip-api.com (geolocation, optional)
If geo-targeting is enabled in the plugin settings and the visitor’s country cannot be determined from your hosting provider (e.g. a Cloudflare header) or server-level GeoIP data, Consentaro sends the visitor’s IP address, server-side, to ip-api.com to determine their country. This is only used to decide whether the consent banner should be displayed (e.g. to EU/EEA/UK/CH visitors) and is not stored beyond a short server-side cache. No personal data is sent other than the IP address already present in the request.
This service is provided by ip-api.com: Terms of Service, Privacy Policy.