cookiebot
Last commit date
addons
6 years ago
assets
7 years ago
css
6 years ago
documentation
7 years ago
js
6 years ago
langs
8 years ago
widgets
7 years ago
CookiebotAPI.md
7 years ago
LICENSE.txt
8 years ago
README.md
7 years ago
cookiebot-logo.png
8 years ago
cookiebot.php
6 years ago
phpunit.xml
7 years ago
readme.txt
6 years ago
readme.txt
365 lines
| 1 | # Cookiebot | GDPR/CCPA Compliant Cookie Consent and Control # |
| 2 | * Contributors: cookiebot,phpgeekdk,aytac |
| 3 | * Tags: cookie, compliance, eu, gdpr, europe, cookie consent, consent, ccpa |
| 4 | * Requires at least: 4.4 |
| 5 | * Tested up to: 5.3.2 |
| 6 | * Stable tag: 3.6.0 |
| 7 | * Requires PHP: 5.6 |
| 8 | * License: GPLv2 or later |
| 9 | |
| 10 | Cookiebot is a cloud-driven solution that automatically controls cookies and trackers, enabling full GDPR/ePrivacy and CCPA compliance for websites. |
| 11 | |
| 12 | ## Description ## |
| 13 | |
| 14 | ### Trustworthy and simple cookie consent solution for GDPR/ePR and CCPA compliance ### |
| 15 | |
| 16 | Cookiebot is a cloud-driven solution that automatically controls cookies and trackers, enabling full GDPR/ePR and CCPA compliance and offering: |
| 17 | |
| 18 | * A highly customizable consent banner to handle consents and give the user the possibility to opt in and out of cookie categories, as required by the GDPR/ePR, CCPA and similar legislations around the world. |
| 19 | * An automatically generated and updated cookie policy and cookie declaration, with purpose descriptions and categorization of your cookies (Necessary, Statistic, Preferences, Marketing). |
| 20 | * A Do Not Sell My Personal Information link on the cookie declaration for end-users to opt out of having their data sold to third parties, as required by the CCPA – including the special opt-in banner for sites that have visitors under the age of 16, also in accordance with CCPA. |
| 21 | * Monthly website scans, detecting all first- and third-party cookies and similar tracking on your site (e.g. HTML5 Local Storage, Flash Local Shared Object, Silverlight Isolated Storage, IndexedDB, ultrasound beacons, pixel tags etc.) as well as their provenance, duration and where the data is sent to. |
| 22 | * The unique Cookiebot feature of automatic cookie blocking. All cookies and tracking are automatically held back right from the moment the user lands on the website and until the proper consent has been obtained, enabling compliance with the GDPR and the ePrivacy Directive. |
| 23 | * An easy way to allow the user to change or withdraw their consent. |
| 24 | * Supports 45 languages in consent banner and cookie declaration. |
| 25 | * Secure storage of user consents in our cloud-driven environment. The user consents are downloadable and can be used as proof that the consent was given. |
| 26 | * Execution of cookie-setting scripts without a page reload, if the user gives consent. |
| 27 | |
| 28 | Please read our FAQ at the bottom of the page for more information. |
| 29 | |
| 30 | https://youtube.com/watch?v=t1LJ6i1i9gA |
| 31 | |
| 32 | ### Will my website become compliant once I install Cookiebot? ### |
| 33 | |
| 34 | If you use our plugin version 3.0 or later and choose the automatic implementation, Cookiebot enables full compliance with the ‘prior consent’ requirement of the GDPR, the ePrivacy Directive (ePR) and similar legal instruments for protection of user data around the world. |
| 35 | |
| 36 | Cookiebot also enables compliance with the CCPA through the implementation of the Do Not Sell My Personal Information link on a website’s cookie declaration, as well as the opt-in banner required if your website targets visitors under the age of 16. |
| 37 | |
| 38 | The default consent banner has the strictest settings possible and is suitable for obtaining consent under both GDPR and the ePR. Make sure to adapt the consent banner content to fit your website. You should also check out [our GDPR checklist if you have users from the European Union](https://support.cookiebot.com/hc/en-us/sections/360000917513-Ready-for-25-May-2018-GDPR-enforcement-date-A-Cookiebot-checklist-). If you are using server-side cookies, please check the [“Server side usage” guide](https://www.cookiebot.com/en/developer/). |
| 39 | |
| 40 | However, being a customizable plugin, true compliance always depends on the website owner choosing a type of banner, wording and settings that are compliant with the local legislation and fits the specific website and company (data controller). |
| 41 | |
| 42 | **If you choose the manual implementation…** |
| 43 | |
| 44 | Then please make sure of the following: |
| 45 | |
| 46 | If you are using plugins that set cookies which require consent (which most do), you have to: |
| 47 | |
| 48 | * Ask the plugin developers if they are planning on becoming GDPR/CCPA compliant, or if they would like to integrate with Cookiebot. |
| 49 | * [Check out our Github repository](https://github.com/CybotAS/CookiebotAddons), where we are developing integrations for Cookiebot, until the plugin developers choose to do this themselves, [or if WP Core enables such functionality](https://core.trac.wordpress.org/ticket/44043). |
| 50 | |
| 51 | Once Cookiebot is installed and we’ve scanned your site, you can check the [cookie report](https://manage.cookiebot.com/goto/reports) to identify all cookies being set on your website. If the cookies are coming from content that you have inserted manually, you can mark up that content [as described in our manual implementation guide step 4](https://cookiebot.com/goto/manual-implementation). |
| 52 | |
| 53 | Embedded videos and iframes which set cookies can be marked up as explained in our [Iframe cookie consent with YouTube example](https://support.cookiebot.com/hc/en-us/articles/360003790854-Iframe-cookie-consent-with-YouTube-example). |
| 54 | |
| 55 | |
| 56 | ### Cookiebot Addons #### |
| 57 | Add-ons are produced by an open-source community of developers. This is done to help make it easier for Wordpress users to implement ‘prior consent’ for cookies and trackers set by plugins that do not offer this as a built-in functionality. |
| 58 | |
| 59 | The add-ons are currently the best alternative to a Wordpress Core framework that can signal the user’s consent state to other plugins (if and when this will be implemented is unknown) and to those plugins who do not yet offer native support for Cookiebot built into the plugin itself. |
| 60 | |
| 61 | We do not assume any responsibility for the use of these add-ons. If one of the plugins that the add-ons hook into makes a ‘breaking change’, there may be a period of time where the add-on will not work properly until it has been updated to accommodate the changes in the plugin. |
| 62 | |
| 63 | If your favourite plugin isn't supported you're welcome to contribute or request on our [Github development page](https://github.com/CybotAS/CookiebotAddons). |
| 64 | |
| 65 | |
| 66 | ## Installation ## |
| 67 | First, install the plugin on your WordPress site. |
| 68 | |
| 69 | Then, go to Settings -> Cookiebot and add your Cookiebot ID. |
| 70 | |
| 71 | If you haven't created one yet - or if you're not sure how to find it - follow the instructions on the page. |
| 72 | |
| 73 | Once your Cookiebot ID is added, the consent dialog will be displayed to the visitors of your site. |
| 74 | |
| 75 | [For more help, visit our support section, that contains various articles on how to set up Cookiebot properly](https://support.cookiebot.com/). |
| 76 | |
| 77 | **Installation video:** |
| 78 | |
| 79 | https://www.youtube.com/watch?v=t1LJ6i1i9gA |
| 80 | |
| 81 | **Implementing the cookie declaration:** |
| 82 | |
| 83 | https://youtu.be/OCXz2bt4H_w |
| 84 | |
| 85 | **Implementing prior consent:** |
| 86 | |
| 87 | Below is a video tutorial on how to manually implement prior consent i.e. holding back all cookies and trackers (other than those strictly necessary for the website to function) until the user has given a consent. The manual implementation guide (found in step 11 of the video) can be [found here](https://cookiebot.com/goto/manual-implementation). |
| 88 | Please note that you can make use of our automatic cookie blocking functionality instead of manually having to mark up the cookie-setting scripts. To do so, update the plugin (version 3.0.0 or higher) and choose automatic cookie control in your Admin panel. |
| 89 | |
| 90 | https://youtu.be/MeHycvV2QCQ |
| 91 | |
| 92 | ## Frequently Asked Questions ## |
| 93 | |
| 94 | ### Is Cookiebot free? ### |
| 95 | Cookiebot is a freemium plugin, much like [Jetpack](https://wordpress.org/plugins/jetpack/) and [Monsterinsights](https://wordpress.org/plugins/google-analytics-for-wordpress/). |
| 96 | |
| 97 | Whether the free plan can suffice or you need a premium plan, depends on two things: |
| 98 | |
| 99 | **1. The size of your website, i.e. the number of subpages on your website.** |
| 100 | In other words, you cannot choose whether you want a free plan or a premium plan, as this is determined by the amount of subpages on your website. You can [get a quote](https://www.cookiebot.com/goto/quote-input/) to see what plan you need for your website. |
| 101 | |
| 102 | **2. Your necessities, as the free plan does not include all features available in the premium plans.** The free plan does not include customization of banner and cookies declaration, multiple languages, e-mail reports, data-export, geo location, bulk consent, consent statistics, internal domain alias for development, test and staging. |
| 103 | |
| 104 | If more than 100 subpages are found during the initial website scan, you will be given a free one-month trial of Cookiebot with full functionality. |
| 105 | |
| 106 | See all details of [Cookiebot plans and pricing](https://www.cookiebot.com/goto/pricing/). |
| 107 | |
| 108 | ### What does Cookiebot count as pages? |
| 109 | Your pricing plan is dependent on the number of subpages we have detected on your website. |
| 110 | |
| 111 | Some users mistakenly think that Cookiebot counts their **image files** as subpages, thus setting the users on a higher subscription plan. |
| 112 | |
| 113 | Cookiebot does **not count image files as subpages**. Depending on your theme, Wordpress may automatically create real pages for content placed in your media library, called Attachment pages. Because these pages can contain online trackers, Cookiebot includes them in your page count. |
| 114 | |
| 115 | To disable the Attachment page feature in Wordpress, please see the following guides: |
| 116 | |
| 117 | https://themeskills.com/disable-media-attachment-pages-wordpress/ |
| 118 | https://www.wpexplorer.com/disable-image-page/ |
| 119 | |
| 120 | ### Cookie declaration ### |
| 121 | The Cookiebot solution also includes an automatically updated cookie declaration about the cookies in use on your site. |
| 122 | |
| 123 | By implementing it, you ensure that your cookie declaration is specific and accurate at all times, as required by the GDPR. Also, the declaration automatically provides the mandatory options for the user to change or withdraw consent. |
| 124 | |
| 125 | For CCPA compliance, businesses will be able to display the CCPA required **Do Not Sell My Personal Information** link on their cookie declaration. |
| 126 | |
| 127 | To display your cookie declaration, create a new page on your website - and add the shortcode that the plugin provides to the page: [cookie_declaration]. Alternatively, you can incorporate it into e.g. your existing Privacy Policy. |
| 128 | |
| 129 | By default, the cookie declaration is displayed in the chosen Cookiebot language. You are able to override this setting with a "lang" attribute in the shortcode. Eg.: [cookie_declaration lang="de"] for a German version. Remember to add all used languages in the [Cookiebot Manager](https://manage.cookiebot.com). |
| 130 | |
| 131 | https://youtu.be/OCXz2bt4H_w |
| 132 | |
| 133 | ### Cookie-checker: What cookies are in use on my site? ### |
| 134 | If you are in doubt about what cookies are in use on our site, you can start by trying our free compliance test: |
| 135 | |
| 136 | **[Test my site](https://www.cookiebot.com/)** |
| 137 | |
| 138 | The test scans up to five pages of your website and sends you a complete report of the cookies and online tracking on these pages, including information on their provenance, purpose and whether or not they are compliant with EU-legislation. |
| 139 | |
| 140 | If you want a complete overview of the cookies and online tracking going on on all of your website, sign up to the Cookiebot solution. |
| 141 | |
| 142 | ### What is the GDPR and the ePrivacy Directive? ### |
| 143 | The GDPR is the General Data Protection Regulation, an EU-law enforced since May 2018, that protects EU citizens’ personal data globally and affects all organizations and websites that handle such data. If you have a website with users from the EU, and if your websites uses cookies (it probably does), then you need to make your use of cookies and tracking compliant with the GDPR. |
| 144 | |
| 145 | See the [EU homepage of the GDPR](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32016R0679) for more information, and their infographic for businesses: [Data Protection: Better rules for small businesses](http://ec.europa.eu/justice/smedataprotect/index_en.htm) |
| 146 | |
| 147 | The ePrivacy Directive is another legal instrument of the EU that specifically aims to protect EU citizens’ online data such as data from online communication. It is in the process of becoming an actual Regulation such as the GDPR, which will probably happen in 2020. |
| 148 | |
| 149 | ### What is the CCPA? ### |
| 150 | The California Consumer Privacy Act (CCPA) is a state-wide law that regulates how businesses all over the world are allowed to handle the personal information of California residents. |
| 151 | |
| 152 | You are liable for CCPA compliance if your business: |
| 153 | |
| 154 | * Sells the personal information of more than 50,000 California residents per year, |
| 155 | * Has an annual gross revenue exceeding $25 million, |
| 156 | * Derives more than 50 percent of its annual revenue from the selling of personal information of California residents. |
| 157 | |
| 158 | Cookies and other tracking technologies are classified as unique identifiers that form part of the CCPA’s definition of personal information. |
| 159 | |
| 160 | If your business has a website, you must know and disclose to consumers, at or before the point of collection, the data you collect and which third parties you share it with. This can be done through the Cookiebot cookie declaration that also features the required Do Not Sell My Personal Information link, so end-users can opt out of having their data sold. |
| 161 | |
| 162 | If your website is visited by consumers under the age of 16, you are required by the CCPA to first obtain their opt-in. This can be done through Cookiebot’s CCPA opt-in banner. |
| 163 | |
| 164 | Visit [Cookiebot](https://www.cookiebot.com/en/what-is-ccpa/) to read more about the CCPA, how to achieve CCPA compliance, and what the CCPA says about your website’s use of cookies. |
| 165 | |
| 166 | ### How do I make other plugins support Cookiebot? ### |
| 167 | If your favourite plugin doesn't support Cookiebot you are always welcome to ask the author to add support for Cookiebot. |
| 168 | |
| 169 | Send an e-mail to the author of the plugin you want to support Cookiebot. Ask for adding support for Cookiebot. Cookiebot provides a helper function to check if there is an active, working version of Cookiebot on the website. |
| 170 | |
| 171 | The easiest way for a developer to implement Cookiebot support is following to add a check for Cookiebot where <script> tags are outputted to the visitor. This can be done following way |
| 172 | |
| 173 | $scriptTag = '<script>'; |
| 174 | if(function_exists('cookiebot_active') && cookiebot_active()) { |
| 175 | $scriptTag = '<script'.cookiebot_assist('statistics').'>'; |
| 176 | } |
| 177 | |
| 178 | The developer of the plugin can see more details on [our Github repository](https://github.com/CybotAS/CookiebotAddons) |
| 179 | |
| 180 | ### Can I use Cookiebot with GTM? ### |
| 181 | Cookiebot works with GTM, however you need to enable the "Hide Cookie Popup" option on the Cookiebot plugin settings page. |
| 182 | |
| 183 | [Please see our article on how to deploy Cookiebot with GTM](https://support.cookiebot.com/hc/en-us/articles/360003793854-Google-Tag-Manager-deployment). |
| 184 | |
| 185 | ### Does Cookiebot integrate with WP Consent API? ### |
| 186 | Cookiebot is fully integrated with the WP Consent API. When your visitors give consent using Cookiebot, the consent will automatically be sent to the [WP Consent API](https://wordpress.org/plugins/wp-consent-api/). |
| 187 | |
| 188 | You are able to define the mapping between Cookiebot and the WP Consent API in the administration interface (Cookiebot WP plugin). |
| 189 | |
| 190 | |
| 191 | ## Changelog ## |
| 192 | |
| 193 | ### 3.6.0 - 2020-02-18 ### |
| 194 | * Adding Debugging submenu |
| 195 | * Update GADWP addon to support newest version of plugin |
| 196 | |
| 197 | ### 3.5.0 - 2020-02-10 ### |
| 198 | * Adding integration with WP Consent API |
| 199 | |
| 200 | ### 3.4.2 - 2020-02-06 ### |
| 201 | * Fix for DIVI editor |
| 202 | |
| 203 | ### 3.4.1 - 2020-01-28 ### |
| 204 | * Removing manual fixes for Cookiebot when in auto |
| 205 | * Adjustments and updates to addons |
| 206 | |
| 207 | ### 3.4.0 - 2019-12-13 ### |
| 208 | * Removing Cookiebot when in auto mode and the user is logged in and has a edit themes capability |
| 209 | * Adding filter for regexp for fixing embedded media |
| 210 | |
| 211 | ### 3.3.0 - 2019-11-09 ### |
| 212 | * Fix for conflict with WPBakery Page Builder when Cookie blocking is in auto mode |
| 213 | * Fix for Elementor Extras causing JS errors in frontend when Cookie blocking is in auto mode |
| 214 | * Removing prepending of composer autoloader - causing conflicts with other plugins. |
| 215 | |
| 216 | ### 3.2.0 - 2019-10-29 ### |
| 217 | * Adding fix for conflict with Elementor Page Builder when Cookie blocking is in auto mode |
| 218 | * Adding fix for conflict with Divi Builder when Cookie blocking is in auto mode (still need to disable Cookiebot on admin pages to work properly). |
| 219 | * Minor adjustments to code style and unit tests |
| 220 | |
| 221 | ### 3.1.0 - 2019-09-24 ### |
| 222 | * Change option to hide cookie banner in WP Admin to instead disabling Cookiebot |
| 223 | * Set option to disable Cookiebot banner as default for new installs |
| 224 | |
| 225 | ### 3.0.1 - 2019-09-17 ### |
| 226 | * Clean up setting page |
| 227 | * Fixing failing addons after plugin updates |
| 228 | |
| 229 | ### 3.0.0 - 2019-09-10 ### |
| 230 | * Adding support for auto cookie blocking mode |
| 231 | |
| 232 | ### 2.5.0 - 2019-06-12 ### |
| 233 | * Add support for custom regex for embed autocorrect |
| 234 | * Adding Cookie Declaration widget |
| 235 | * Remove support for PHP 5.4 |
| 236 | |
| 237 | ### 2.4.4 - 2019-05-22 ### |
| 238 | * Minor bugfixes in Embed Autocorrect addon |
| 239 | |
| 240 | ### 2.4.3 - 2019-05-16 ### |
| 241 | * Fix bug in Embed Autocorrect addon. |
| 242 | |
| 243 | ### 2.4.2 - 2019-05-15 ### |
| 244 | * Adding addthis addon |
| 245 | * Disable default autoupgrade |
| 246 | * Minor fixes |
| 247 | |
| 248 | ### 2.4.1 - 2019-03-19 ### |
| 249 | * Fix jetpack related warning |
| 250 | |
| 251 | ### 2.4.0 - 2019-03-19 ### |
| 252 | * Fixed bug resulting in some tags where not tagged |
| 253 | * Change Piwik addon to use output buffering |
| 254 | * Clean up redundant code in addons |
| 255 | |
| 256 | ### 2.3.0 - 2019-03-13 ### |
| 257 | * Added GADWP addon |
| 258 | * Changes in file structure of plugin |
| 259 | |
| 260 | ### 2.2.2 - 2019-02-12 ### |
| 261 | * Fix warning non-static call to get_cbid |
| 262 | |
| 263 | ### 2.2.1 - 2019-02-12 ### |
| 264 | * Adding support for WPForms |
| 265 | * Add plugin deactivation hook for addons |
| 266 | |
| 267 | ### 2.2.0 - 2019-02-11 ### |
| 268 | * Adding support for network wide settings on Multisite Wordpress setups. |
| 269 | |
| 270 | ### 2.1.5 - 2019-01-17 ### |
| 271 | * New addon: Custom Facebook Feed Pro |
| 272 | * Adding support for setting none, defer or async to Cookiebot script tags |
| 273 | |
| 274 | ### 2.1.3 - 2018-11-18 ### |
| 275 | * New addon: Popups by OptinMonster |
| 276 | * Added support for grouping addons for different versions of same plugin |
| 277 | |
| 278 | ### 2.1.2 - 2018-11-06 ### |
| 279 | * Auto correct addon added support for single quotes in iframe embeds |
| 280 | |
| 281 | ### 2.1.1 - 2018-11-02 ### |
| 282 | * Updated addons with new tests and better plugin integration |
| 283 | |
| 284 | ### 2.1.0 - 2018-10-05 ### |
| 285 | * Updated addons improved handling of tags |
| 286 | * Adding Basque as language option |
| 287 | * Remove .git files in addons |
| 288 | |
| 289 | ### 2.0.6 - 2018-09-26 ### |
| 290 | * Updated addons to support newest version of CAOS |
| 291 | * Minor bugfixes and text adjustments |
| 292 | |
| 293 | ### 2.0.5 - 2018-09-21 ### |
| 294 | * Added "Leave a review" admin notice |
| 295 | |
| 296 | ### 2.0.4 - 2018-09-18 ### |
| 297 | * Added [IAB Consent Framework](https://support.cookiebot.com/hc/en-us/articles/360007652694-Cookiebot-and-the-IAB-Consent-Framework) option |
| 298 | * Update Cookiebot Addons |
| 299 | * Minor bugfixes |
| 300 | |
| 301 | ### 2.0.3 - 2018-08-10 ### |
| 302 | * Removing informative message in admin_notice. Causing parse error for some users. |
| 303 | |
| 304 | ### 2.0.2 - 2018-08-01 ### |
| 305 | * Quickfix - disable Script Config. Made trouble for some users. |
| 306 | |
| 307 | ### 2.0.1 - 2018-08-01 ### |
| 308 | * Disable load of Addons if server runs PHP < 5.4. |
| 309 | * Fix placeholder in addons |
| 310 | |
| 311 | ### 2.0.0 - 2018-07-30 ### |
| 312 | * Merge Cookiebot and Cookiebot Addons plugins. Cookiebot plugin now bundled with addons making other plugins GDPR compliant. |
| 313 | |
| 314 | ### 1.6.2 - 2018-06-21 ### |
| 315 | * Fix check for WP Rocket. |
| 316 | |
| 317 | ### 1.6.1 - 2018-06-11 ### |
| 318 | * Fixing shortcode when using WP Rocket |
| 319 | |
| 320 | ### 1.6.0 - 2018-05-30 ### |
| 321 | * Support for removing cookie consent banner for tag manager users |
| 322 | * Support for multiple consent types in cookie_assist - eg. cookie_assist(['marketing','statistics']); |
| 323 | * Loading Cookiebot JS on admin pages too |
| 324 | * Adjusting help texts and adding links to demonstration videos. |
| 325 | |
| 326 | ### 1.5.1 - 2018-05-25 ### |
| 327 | * Adjusting readme.txt including new video |
| 328 | |
| 329 | ### 1.5.0 - 2018-05-22 ### |
| 330 | * Adding autoupdate for Cookiebot |
| 331 | |
| 332 | ### 1.4.2 - 2018-05-17 ### |
| 333 | * Fix undefined $lang bug in shortcode output |
| 334 | |
| 335 | ### 1.4.1 - 2018-05-11 ### |
| 336 | * Adjusting readme file |
| 337 | |
| 338 | ### 1.4.0 - 2018-05-10 ### |
| 339 | * Adding support for specifying language of cookie banner |
| 340 | * Adding optional "lang" attribute to [cookie_declaration] shortcode |
| 341 | |
| 342 | ### 1.3.0 - 2018-04-29 ### |
| 343 | * Bug fixed: Headers already sent when editing pages using shortcode |
| 344 | |
| 345 | ### 1.2.0 - 2018-03-28 ### |
| 346 | * Updating readme file with more details |
| 347 | * Adding cookiebot_active helper function |
| 348 | |
| 349 | ### 1.1.2 - 2018-02-27 ### |
| 350 | * Removing short array syntax to improve compatibility |
| 351 | |
| 352 | ### 1.1.1 - 2018-02-02 ### |
| 353 | * Adjusting readme.txt |
| 354 | |
| 355 | ### 1.1.0 - 2018-02-02 ### |
| 356 | * Adding data-culture to cookiebot script tags. |
| 357 | |
| 358 | ### 1.0.0 ### |
| 359 | * Initial release of the plugin. |
| 360 | |
| 361 | |
| 362 | ## Copyright and Trademarks ## |
| 363 | |
| 364 | Cookiebot is a registered trademark of Cybot A/S |
| 365 |