Guide
Getting started
Install, activate, and the common trackers are already blocked.
- Upload the plugin zip under Plugins → Add New → Upload, and activate it.
- Settings → Cookie Consent to choose the layout and point at your privacy policy.
- Add a link people can use to change their mind: put
[devix_cookie_settings]in a footer widget, or give any menu item, link or button the attributedata-cc-open.
That is the whole setup. Before anyone answers, nothing non-essential runs.
What is blocked out of the box
| Category | Recognised by handle or URL |
|---|---|
analytics |
Google Analytics, Tag Manager, Site Kit, Hotjar, Clarity, Matomo, Plausible, Segment, Mixpanel |
marketing |
Meta pixel, TikTok, LinkedIn Insight, Google Ads, X, HubSpot |
| embeds | YouTube, Vimeo, Dailymotion, Facebook, Instagram, TikTok (marketing); Google Maps (analytics) |
Add your own in Settings → Cookie Consent, one line per category:
analytics: my-stats-plugin, stats.example.com
marketing: partner-widget
A word containing a dot or a slash is matched against the script's URL; anything else is matched
against its WordPress handle. Find a handle by viewing source and looking at the id attribute:
<script id="google-analytics-js"> is the handle google-analytics.
When a tag still gets through
Some themes print snippets straight into header.php, which never become WordPress handles. Switch on
Scan the whole page: the plugin then passes over the finished HTML and rewrites anything pointing
at a host in your rules. It costs one pass over the page, so leave it off unless you need it.
Google Consent Mode v2
On by default. The defaults are printed before anything else on the page, denying every Google signal, and the update is sent the moment someone decides. Your Tag Manager container and Analytics tags then behave correctly for European visitors.
If you use Site Kit, leave its tags enqueued — the handles are recognised, and Consent Mode does the rest.
Checking it works
Open your site in a private window with the browser's network panel on:
- Before you answer the notice, there should be no request to
googletagmanager.com,connect.facebook.netoryoutube.com. - The tags are in the page, with
type="text/plain"and adata-ccattribute. - Accept, and those requests appear.
Changing your policy
Raise Policy version in the settings. Everyone is asked again, and until they answer nothing non-essential runs — including for visitors who agreed to the old wording.