Turbo Cookie – GDPR Cookie Consent

Turbo Cookie is a lightweight, privacy-first cookie consent plugin for WordPress. It helps you comply with GDPR, CCPA, and other privacy regulations by showing a customizable cookie consent banner, blocking non-essential scripts until visitors give consent, and logging consent records locally in your WordPress database.

Built by Turbo Addons — the same team behind popular WordPress tools used by thousands of sites.

Cookie Consent Banner

• Customizable position: bottom bar, top bar, floating (bottom-left/right), or center modal
• Layout styles: bar, box, or cloud
• Smooth animations: slide, fade, or none
• Full color customization for background, text, and buttons
• Custom banner message and title
• Cookie policy page link
• Show/hide decline button

Preferences Modal

• Four consent categories: Essential, Functional, Analytics, Marketing
• Toggle switches for each category
• Essential cookies always active (cannot be disabled)
• Editable category names and descriptions
• Accessible — ARIA roles, keyboard navigation, focus trap

Script Blocking

• Automatically detects and blocks known tracking scripts until consent is given
• Blocks Google Analytics, Tag Manager, Facebook Pixel, and 40+ services
• Blocks iframes (YouTube, Vimeo, Google Maps) until consent
• Scripts activate instantly after visitor consents
• Works with both inline scripts and enqueued WordPress scripts
• No manual script tagging required for common services
• Extend via the turbo_cookie_script_patterns filter

Google Consent Mode v2

• Outputs consent default signals before any Google tags load
• Updates consent signals when visitors make their choice
• Supports all GCM v2 parameters: ad_storage, ad_user_data, ad_personalization, analytics_storage, functionality_storage, personalization_storage, security_storage
• Extend category-to-signal mapping via turbo_cookie_gcm_mapping filter

Consent Logging

• Stores consent records in your WordPress database — no data sent externally
• Logs session ID, action, categories, masked IP, and timestamp
• IP addresses masked for privacy (last octet zeroed for IPv4; first 48 bits kept for IPv6)
• Filterable log viewer in admin with date range and action filters
• CSV export for compliance documentation
• Configurable retention period with automatic cleanup
• Bulk delete and clear all options

Admin Dashboard

• At-a-glance consent statistics: accepted, declined, partial, acceptance rate (30-day window)
• Feature status overview
• Quick action links to all settings pages
• Privacy notice reminding site owners of their legal obligations

Onboarding Wizard

• 3-step setup wizard runs on first activation
• Choose banner position, enable features, set cookie policy URL
• Ready in under 2 minutes

Developer Friendly

• WordPress coding standards throughout
• Shortcode: [turbo_cookie_preferences] — lets visitors re-open preferences modal
• JavaScript API: window.TurboCookie.openPreferences()
• Filterable script blocking patterns: turbo_cookie_script_patterns
• Filterable GCM mapping: turbo_cookie_gcm_mapping
• REST API endpoint for consent logging: POST /wp-json/turbo-cookie/v1/consent

Privacy

Turbo Cookie does not send any visitor or site data to external servers. All consent records are stored in your own WordPress database. IP addresses are masked before storage. No telemetry. No tracking. No account required.

Legal Notice

Turbo Cookie provides technical tools for cookie consent management. Whether your site meets applicable privacy laws depends on your specific site, policies, and data practices. For legal advice about your compliance obligations, consult a qualified legal professional.

External Services

Turbo Cookie stores all consent logs, settings, and cookie state in your own WordPress database. No visitor data, site data, or analytics are sent to any external server by this plugin.

The one exception is optional geo targeting: if you enable it, the visitor’s IP is used to detect their country so the banner can be shown only where required. Detection first checks the Cloudflare CF-IPCountry header and other CDN headers (no external call). Only when no such header is present does it make a single lookup to the free ip-api.com API; the result is cached locally for 24 hours. Disable geo targeting to keep the plugin fully offline.