Title: KaaTai Consent Manager Author: kaatai Published: 17 Aprile 2026 Last modified: 25 Luglio 2026 --- Ricerca i plugin ![](https://ps.w.org/kaatai-consent-manager/assets/banner-772x250.png?rev=3668480) ![](https://ps.w.org/kaatai-consent-manager/assets/icon-256x256.png?rev=3668480) # KaaTai Consent Manager Di [kaatai](https://profiles.wordpress.org/kaatai/) [Scarica](https://downloads.wordpress.org/plugin/kaatai-consent-manager.3.41.8.zip) * [Dettagli](https://it.wordpress.org/plugins/kaatai-consent-manager/#description) * [Recensioni](https://it.wordpress.org/plugins/kaatai-consent-manager/#reviews) * [Installazione](https://it.wordpress.org/plugins/kaatai-consent-manager/#installation) * [Sviluppo](https://it.wordpress.org/plugins/kaatai-consent-manager/#developers) [Supporto](https://wordpress.org/support/plugin/kaatai-consent-manager/) ## Descrizione KaaTai Consent Manager is a **GDPR cookie consent plugin and Consent Management Platform (CMP)** for WordPress — with a cookie banner, a built-in **cookie scanner**, a **privacy policy generator** and **Google Consent Mode v2**. Supports GDPR, ePrivacy, DSGVO, TDDDG and CCPA. The admin interface is available in **English and German**. **Deutsche Video-Anleitung (German walkthrough):** https://www.youtube.com/watch? v=J4sL_DYakHs #### Everything below works without an account * Cookie banner with all layouts, colours and positions * **Google Consent Mode v2** — always on, no upgrade required * **Cookie scanner** that finds the cookies on your site * **Auto-blocking** of the trackers it finds, at the push of a button * **Privacy policy (DSE) generator** — covers all 14 items required by GDPR Art. 13 * Local consent logging with record IDs (GDPR Art. 7(1)) * Content blocking for YouTube, Vimeo, Maps, Facebook, Instagram, Spotify * 22 service presets **No registration, no cloud service, no licence key, and no data sent to us.** A free account adds all 106 service presets, the Impressum generator, multi-page scanning and the dashboard — but nothing in the list above depends on it. #### Cookie Consent Banner * Customizable consent banner with 3 layouts: Bottom Bar, Centered Popup, Corner Box * All design settings included: colors, overlay, border radius, spacing, box shadow * Responsive design — works on desktop, tablet, and mobile * WCAG 2.1 compliant: ARIA roles, focus trap, keyboard navigation, semantic HTML * No jQuery dependency — lightweight vanilla JavaScript * Cache-safe: works correctly with all popular caching plugins #### Content Blocking * Automatically blocks YouTube, Vimeo, Facebook, Instagram, and Spotify embeds until consent * Blocks Google Maps and OpenStreetMap iframes * Shows privacy-friendly placeholders with click-to-load buttons * MutationObserver detects and blocks dynamically injected content * Auto Script Blocker detects and blocks tracking scripts from third-party plugins( 67 known services) #### Consent Management * Google Consent Mode v2 — always enabled, sends proper signals to GTM, GA4, and Google Ads * Granular consent — visitors can accept/reject individual vendors, not just categories * 5 cookie categories: Essential, Functional, Statistics, Marketing, Performance * Consent choices persist across sessions and can be withdrawn at any time * Consent logging with unique record IDs for GDPR Art. 7(1) compliance (36-month retention) * Global Privacy Control (GPC) — automatically honors browser-level privacy signals #### Legal Text Generator * Impressum generator — all mandatory fields per German law (TMG/DDG) * Privacy policy generator — covers all 14 items required by GDPR Art. 13 * Shortcodes: [kccm_impressum] and [kccm_datenschutz] for easy page integration * Language-specific shortcodes for multilingual sites (WPML/Polylang): [kccm_datenschutz_en],[ kccm_datenschutz_de], [kccm_impressum_en], [kccm_impressum_de] — or the lang=” en|de” attribute * Data for responsible person (Verantwortlicher) stored locally — no external service needed #### Vendor Registry * Pre-configured presets for 22 common services with accurate cookie descriptions— all 106 with a free account * Google Analytics, Meta Pixel, Microsoft Clarity, YouTube, Google Maps, and many more * 1-click install from the service catalog * Custom vendor support — add your own services with cookie details #### Setup Wizard * 4-step guided setup: General Settings, Responsible Person, Select Services, Banner Design * Live banner preview during setup * Works without an API key — no account required for basic features #### Deep GDPR & DACH Expertise The cookie database, legal-text templates, and compliance checks are built around the GDPR and the especially strict German rules (DSGVO, TDDDG, ePrivacy) — so you get compliance depth that also covers the rest of the EU. The plugin is fully translatable and locale-aware: the admin UI ships in **English and German**, legal texts can be rendered per language, and more localized presets are being added. #### Integrations KaaTai Consent Manager works with the most popular WordPress plugins and services: * **Analytics:** Google Analytics, Google Tag Manager, Matomo, Piwik PRO, Microsoft Clarity, Plausible, Fathom * **Marketing:** Meta Pixel (Facebook), Google Ads, Taboola, Outbrain, Awin, Tradedoubler * **Embeds:** YouTube, Vimeo, Google Maps, OpenStreetMap, Facebook, Instagram, Spotify * **E-Commerce:** WooCommerce (Checkout Banner mode, one-click setup) * **Chat & Support:** Tidio, Crisp, Zendesk, Drift, LiveChat * **Security:** Google reCAPTCHA, Cloudflare, hCaptcha * **Payments:** PayPal, Klarna * **Other:** HubSpot, Twitter/X Pixel, Snap Pixel, Gravatar, Site Kit by Google #### Free — with or without an account The plugin is free. There is no paid plan, no subscription, and no credit card. What works without an account is listed at the top of this page. **A free account adds:** * All 106 service presets * Impressum generator * Auto script blocker * Cookie scanner across your most important pages (up to 20, from your navigation menus) * Deep scan with a compliance audit score * Legal texts in the dashboard: archive, version history, DE/EN sync * Central consent logging * Analytics dashboard (consent trends, geo data) * Conversion impact calculator * White-label (remove branding) * Banner logo upload * WooCommerce presets * Cloud backup of your consent logs The SaaS integration stays entirely optional — the plugin works fully standalone. Registration at [consent-management.kaatai.de](https://consent-management.kaatai.de/register) is free and needs no payment details. Fair use per account: up to 3 domains, 100,000 consents per month, 5 scans per domain and day. #### Useful Links * [Plugin Homepage](https://consent-management.kaatai.de) * [Documentation](https://consent-management.kaatai.de/docs) * [Support](https://wordpress.org/support/plugin/kaatai-consent-manager/) * [GitHub](https://github.com/kahramanatalay/consent-by-kaatai) * [Translate KaaTai Consent Manager](https://translate.wordpress.org/projects/wp-plugins/kaatai-consent-manager) #### About KaaTai KaaTai Consent Manager is developed by **KaaTai** in Germany. We believe that GDPR compliance should be simple, affordable, and accessible to every website owner — not just enterprises with legal departments. Our goal is to be the best cookie consent solution for the German-speaking market. ### External Services #### Third-party service references (detection patterns, NOT dependencies) This plugin is a **Consent Management Tool**. Its purpose is to detect, categorize, and block third-party tracking scripts until the visitor gives consent. The plugin contains a database of known tracking services with their hostnames and script patterns. These references are **identification patterns only**. The plugin does **not** load, connect to, or transmit any data to these services. It uses the patterns to recognize scripts already present on your site and block them until consent is granted. The following services are referenced as detection patterns: * **Google Analytics** — detected and blocked until “statistics” consent. [Privacy Policy](https://policies.google.com/privacy), [Terms](https://policies.google.com/terms) * **Google Tag Manager** — detected and blocked until “marketing” consent. [Privacy Policy](https://policies.google.com/privacy), [Terms](https://policies.google.com/terms) * **Meta Pixel (Facebook)** — detected and blocked until “marketing” consent. [Privacy Policy](https://www.facebook.com/privacy/policy/), [Terms](https://www.facebook.com/legal/terms) * **Cloudflare** — detected and categorized as “essential”. [Privacy Policy](https://www.cloudflare.com/privacypolicy/), [Terms](https://www.cloudflare.com/website-terms/) * **Google reCAPTCHA** — detected and categorized as “functional”. [Privacy Policy](https://policies.google.com/privacy), [Terms](https://policies.google.com/terms) * **Piwik PRO / Matomo** — detected and blocked until “statistics” consent. [Privacy Policy](https://piwik.pro/privacy-policy/) * **Microsoft Clarity** — detected and blocked until “statistics” consent. [Privacy Policy](https://privacy.microsoft.com/privacystatement), [Terms](https://www.microsoft.com/licensing/terms) No data is sent to any of these services by this plugin. #### KaaTai Consent Manager SaaS (optional, requires API key) This plugin optionally connects to servers operated by **KaaTai** (`consent-management. kaatai.de`). These connections are **only made when the site administrator has entered an API key**. Without an API key, no external connections occur. **Service:** KaaTai Consent Manager SaaS **Service URL:** [https://consent-management.kaatai.de](https://consent-management.kaatai.de)** What it does:** License validation, consent analytics, cookie scanner, service library, legal text generation. **What data is sent:** API key, domain, consent configuration, anonymized consent events (no PII), scan results. **Privacy Policy:** [https://consent-management.kaatai.de/datenschutz](https://consent-management.kaatai.de/datenschutz)** Terms of Service:** [https://consent-management.kaatai.de/agb](https://consent-management.kaatai.de/agb) #### Data transmitted when an API key is configured 1. **License Validation** (`/api/license/validate`) — API key sent to verify license status and features. Cached for 24 hours. 2. **Config Sync** (`/api/consent/config`) — Consent configuration sent when settings are saved. No personal visitor data. 3. **Consent Events** (`/api/consent/event`) — Anonymized consent events via sendBeacon(). Contains: action, categories, hashed session ID, policy hash. No PII. 4. **Legal Texts** (`/api/legal/impressum`, `/api/legal/privacy-policy`) — Legal text content fetched from SaaS. Cached for 24 hours. 5. **Newsletter** (`/api/newsletter/subscribe-by-key`) — Only when administrator clicks“ Subscribe”. 6. **Scanner** (`/api/scan/results`) — Scan results synced to SaaS dashboard. 7. **Cookie Definitions** (`/api/cookies/definitions`) — Cookie descriptions fetched for Service Library. #### Data stored on the external server * License/API key association and plan details * Aggregated consent statistics (no personal data) * Consent configuration snapshots * Scan results (URLs and detected services) #### User consent The site administrator gives explicit consent by entering and saving an API key. The API key can be removed at any time to stop all external communication. ## Screenshot [⌊Cookie consent banner -- equal-weight accept and reject buttons, with links to your imprint and privacy policy⌉⌊Cookie consent banner -- equal-weight accept and reject buttons, with links to your imprint and privacy policy⌉[ Cookie consent banner — equal-weight accept and reject buttons, with links to your imprint and privacy policy [⌊Granular consent -- visitors choose per category and per service⌉⌊Granular consent-- visitors choose per category and per service⌉[ Granular consent — visitors choose per category and per service [⌊Content blocking -- embedded videos and maps stay blocked until consent, with a click-to-load placeholder⌉⌊Content blocking -- embedded videos and maps stay blocked until consent, with a click-to-load placeholder⌉[ Content blocking — embedded videos and maps stay blocked until consent, with a click- to-load placeholder [⌊Setup wizard -- guided configuration in four steps⌉⌊Setup wizard -- guided configuration in four steps⌉[ Setup wizard — guided configuration in four steps [⌊Website scanner -- finds the tracking services on your site and suggests a category for each⌉⌊Website scanner -- finds the tracking services on your site and suggests a category for each⌉[ Website scanner — finds the tracking services on your site and suggests a category for each [⌊Service library -- ready-made presets with accurate cookie descriptions⌉⌊Service library -- ready-made presets with accurate cookie descriptions⌉[ Service library — ready-made presets with accurate cookie descriptions [⌊Banner designer -- layouts, colours and live preview⌉⌊Banner designer -- layouts, colours and live preview⌉[ Banner designer — layouts, colours and live preview [⌊Privacy -- responsible person and the data required by GDPR Art. 13⌉⌊Privacy -- responsible person and the data required by GDPR Art. 13⌉[ Privacy — responsible person and the data required by GDPR Art. 13 [⌊Settings -- language, consent logging and retention⌉⌊Settings -- language, consent logging and retention⌉[ Settings — language, consent logging and retention [⌊Consent records -- logged decisions with record IDs (GDPR Art. 7(1))⌉⌊Consent records -- logged decisions with record IDs (GDPR Art. 7(1))⌉[ Consent records — logged decisions with record IDs (GDPR Art. 7(1)) ## Installazione #### Automatic Installation 1. Go to **Plugins > Add New** in your WordPress admin 2. Search for “KaaTai Consent Manager” 3. Click **Install Now**, then **Activate** #### Manual Installation 1. Download the plugin ZIP file 2. Go to **Plugins > Add New > Upload Plugin** 3. Upload the ZIP file and click **Install Now** 4. Activate the plugin #### After Activation 1. The setup wizard starts automatically — follow the 4 steps 2. Configure your site name, language, and responsible person 3. Select which services (vendors) your site uses 4. Customize the banner design and preview it live 5. Done! The cookie banner appears on your frontend No API key needed. Enter a KaaTai API key on the **License** tab to unlock the full feature set — the account is free. ## FAQ ### What does it cost? No. The plugin works fully without an API key: cookie banner, local consent logging, 22 service presets, content blocking, Google Consent Mode v2, a local cookie scanner( single page), and a local privacy-policy (DSE) generator. A free account and its API key unlock all 106 service presets, the Impressum generator, automatic multi- page scanning, deep scan with a compliance audit score, analytics, and central consent logging. There is no paid plan — the account costs nothing and needs no payment details. ### Does this plugin connect to external services? Only if you enter an API key. Without an API key, **no external connections are made**. When an API key is configured, the plugin communicates with `consent-management. kaatai.de` for license validation, config sync, and consent event tracking. See the External Services section below for full details. ### Is this plugin GDPR/DSGVO compliant? Yes. The plugin is designed for GDPR, DSGVO, TDDDG, and ePrivacy compliance: * No cookies are set before consent is given * Consent choices are stored locally and can be withdrawn at any time * Consent logs are retained for 36 months per GDPR Art. 7(1) * Global Privacy Control (GPC) signals are automatically honored * All consent records include unique IDs for audit trails * Legal text generator covers all 14 items required by GDPR Art. 13 ### Does the plugin support Google Consent Mode v2? Yes. Google Consent Mode v2 is always enabled and sends proper consent/denial signals to Google Tag Manager, GA4, and Google Ads. No additional configuration needed. ### Can I customize the banner appearance? Yes. All banner design settings are included: colors, positions, layouts, overlay, border radius, spacing, box shadow, and custom CSS. Logo upload requires a free account. ### Does it block YouTube and other embeds? Yes. The plugin automatically detects and blocks YouTube, Vimeo, Google Maps, OpenStreetMap, Facebook, Instagram, and Spotify embeds until consent is given. A privacy-friendly placeholder with a click-to-load button is shown instead. ### Can I use this on non-German / international websites? Yes. KaaTai works on any GDPR website and the admin interface is fully available in **English and German**. Its legal-text templates and some presets are tailored to German/DACH law (DSGVO, TDDDG) — among the strictest in the EU — which also benefits sites elsewhere in Europe. For multilingual sites, legal texts can be output per language via dedicated shortcodes. More localized presets are planned. ### Does it work with WooCommerce? Yes. The plugin includes a Checkout Banner mode (minimal single-line banner) and a one-click e-commerce setup that automatically configures the right cookie categories for WooCommerce shops. ### What PHP and WordPress versions are supported? PHP 7.4 or higher and WordPress 5.8 or higher. Tested up to WordPress 6.9 and PHP 8.3. ### Where can I get support? Support is available on the [WordPress.org support forum](https://wordpress.org/support/plugin/kaatai-consent-manager/). Account holders can also open a ticket from the dashboard. ## Recensioni Non ci sono recensioni per questo plugin. ## Contributi e sviluppo “KaaTai Consent Manager” è un software open source. Le persone che hanno contribuito allo sviluppo di questo plugin sono indicate di seguito. Collaboratori * [ kaatai ](https://profiles.wordpress.org/kaatai/) [Traduci “KaaTai Consent Manager” nella tua lingua.](https://translate.wordpress.org/projects/wp-plugins/kaatai-consent-manager) ### Ti interessa lo sviluppo? [Esplora il codice](https://plugins.trac.wordpress.org/browser/kaatai-consent-manager/) segui il [repository SVN](https://plugins.svn.wordpress.org/kaatai-consent-manager/), segui il [log delle modifiche](https://plugins.trac.wordpress.org/log/kaatai-consent-manager/) tramite [RSS](https://plugins.trac.wordpress.org/log/kaatai-consent-manager/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 3.41.8 — July 24, 2026 * Fix: Corrected outdated wording in the Imprint and Privacy Policy tabs that still claimed the legal texts are created in the KaaTai dashboard via API key. Since the account page is read-only and the plugin is the leading source, both texts are generated locally from your company data — no account needed. The account tip now correctly describes the revision-safe archive of every version. * Fix: Added the missing German translation for the optional “Powered by KaaTai” notice in the banner settings (it previously showed in English). #### 3.41.7 — July 24, 2026 * Fix: The imprint generator now works without an account, just like the privacy policy generator. Its file was mistakenly dropped from the store build, so the Imprint tab only showed an account prompt instead of the editor — even though the plugin is the leading source and the account page is read-only. Company-data form, imprint preview and the [kccm_impressum] shortcode now run locally, no account needed. #### 3.41.6 — July 24, 2026 * Maintenance: Declared compatibility with WordPress 7.0. No functional code changed— this release only clears the “untested with your version of WordPress” notice on WP 7.0. #### 3.41.5 — July 24, 2026 * Fix: The setup wizard’s scanner showed no results when a “wrapper” plugin such as Google Site Kit was present, even though the scan itself worked — a display error stopped the result list from rendering. Fixed. * Change: The setup step no longer suggests creating an account for a deep scan. The quick homepage scan is enough to get started; the deep scan stays available in the scanner tab. #### 3.41.4 — July 19, 2026 * Fix: Without a licence key entered, the premium build could do less than the free version from the WordPress store — the scanner asked for an account that the free version does not need. Both builds now share the same baseline of what works without an account. #### 3.41.3 — July 19, 2026 * Fix: The small “Powered by KaaTai” notice in the banner is now off by default and only appears if you switch it on. It used to show on a fresh install without anyone agreeing to it. * Change: The setting is now called “Support us” instead of “Hide branding” and is unchecked. If you had hidden the branding before, nothing changes for you. #### 3.41.2 — July 19, 2026 * Fix: The banner logo reappears on sites with an account. A server-side check still looked at the _name_ of the plan, which only worked while the backend handed out every key as “pro”. Once it started sending the real plan, sites whose account is not literally called “pro” lost their banner logo. * Fix: More importantly, saving the design settings silently cleared the stored logo URL on those sites — that was data loss, not just a display problem. Re- enter the logo once if it went missing; it will stick from now on. * Change: The check now asks whether an account is connected at all, instead of comparing plan names. There are no paid plans any more, so there was nothing left to distinguish. #### 3.41.1 — July 19, 2026 * Fix: The banner no longer renders empty labels. On multilingual installations every caption could disappear — title, body text, “Accept all”, “Reject all” and “Save” showed as blank areas. The cause was a stored empty string, not a missing translation: WordPress only checks _whether_ a setting exists, so an empty value overrode the built-in default. Single-language sites were never affected. * Fix: The two link targets (imprint, privacy policy) are deliberately excluded from that fallback — an empty value there is a valid choice (“no link”), whereas a default path would point nowhere. * Note: The fix works without any data change. Affected sites are correct immediately after updating; nothing has to be re-entered. #### 3.41.0 — July 19, 2026 * Change: The service catalogue now follows the account’s feature flag instead of a plan name. Since the plugin became free there are no plans any more, and the old check was still keyed to one. Nothing changes for you: without an account you keep 22 service presets, with a free account all 106. * Fix: The preset list for accounts contained five duplicate entries (Microsoft Clarity, Hotjar, Meta Pixel, Vimeo, OpenStreetMap) — 49 entries for 44 distinct services. Harmless for the result, but every count derived from it was wrong. * Change: The unused preset tiers left over from the former Starter and Business plans were removed. #### 3.40.0 — July 16, 2026 * Fix: Imprint generator — the professional regulation is now pre-filled per profession and you can state where it is published. German law (§ 5 (1) no. 5 lit. c DDG) requires both the name of the regulation and how to access it; the URL field existed but was hidden, and the hint only asked for the name. Nothing you already entered is overwritten. * Change: The plugin is free — there are no paid plans any more. Without an account you get 22 service presets; a free account unlocks all 106. All prices (€1.90/ €2.49/€2.90) and the Starter/Business/Pro tiers are gone from the plugin and this page. * Change: Promo screens now point to the free registration instead of a purchase. The upgrade pricing table in the service library is gone. * Change: The service lists in the library promo are rendered from the actual preset source instead of hand-maintained lists — those had drifted and showed 16 services where there were really 22. * Change: The license tab shows “Account: Free” instead of “Plan: Pro”, and the gold PRO badge in the header is gone. Neither implied anything you paid for. * Fix: Existing installations now pick up additional service presets automatically. Previously a re-seed only happened when the API key changed or someone hit “refresh cache” by hand. #### 3.39.0 — June 16, 2026 * New: Multilingual cookie banner. The banner auto-starts in the visitor’s browser language and offers a manual language switcher (DE/EN for now, schema open for more). Per-language banner texts in the admin; category and service descriptions switch along. A language allowlist controls which languages appear on the frontend. * New: Multilingual service descriptions in the banner detail view, lazy-loaded per language. * New: Fixed-language variants for the settings link/button shortcodes — [kccm_settings_link_de]/[ kccm_settings_link_en], [kccm_settings_button_de] / [kccm_settings_button_en], plus a lang=”de|en” attribute — for multilingual sites (WPML/Polylang). * Change: Google Tag Manager protection. Services loaded via GTM (e.g. Google Analytics, Meta Pixel) are no longer injected directly by the plugin while GTM is active, which prevents double-loading. Managed via the GTM service list. * Fix: The admin interface is now fully English-first — strings that previously stayed German in the settings/script tabs and the setup wizard now follow the selected language. * Fix: Scanner description corrected — the deep scan checks your most important pages (from the navigation menus, up to 20), not “all subpages”. * Fix: Banner texts stay aligned with the default language — switching the default language now moves the texts with it, so the per-language tabs no longer show the wrong language’s content. * Fix: Dropdown options in the admin stay readable on hover (dark-theme contrast fix). #### 3.38.0 — June 15, 2026 * New: Full English admin UI. Switch the plugin interface to English via the “Plugin language” setting (English is now the source language; German is provided via translation). The plugin is now ready for international users — with the same deep DSGVO/DACH compliance. * New: Language-specific legal-text shortcodes for multilingual sites (WPML/Polylang). Alongside [kccm_datenschutz] / [kccm_impressum] you can now use fixed language variants — [kccm_datenschutz_de], [kccm_datenschutz_en], [kccm_impressum_de],[ kccm_impressum_en] — or the lang=”de|en” attribute, to place the right text on each language page. * Fix: The API-key field is now available in the free version. Previously the entire license card was premium-only, so free users could not connect (or disconnect) an optional free SaaS account. The field is back in both builds; the store promo card remains below it as an upsell. * Fix: Settings page layout without an API key. A stray closing tag (the newsletter card was only opened for a valid license but always closed) closed the settings container early, pushing the “unlock premium” card into a second column next to the content and breaking on small screens. The card now appears correctly below the license card. * Change: SaaS legal-text fetch and sync are now language-aware — the selected language mode applies to texts delivered by the SaaS and to synchronization ( Impressum/privacy policy are stored under the matching language). #### 3.37.2 — June 12, 2026 * Fix: Manually assigned cookie categories in the scanner are now persistent. Previously the assignments were lost on every page load (the stored JSON was corrupted while being read back) and had to be re-assigned after each scan. Existing assignments reappear immediately after the update — nothing needs to be re-assigned. #### 3.37.1 — June 12, 2026 * Security: Rate limit for the unauthenticated consent logger (60 events/hour per IP) — prevents database flooding of the consent log table via the public AJAX endpoint. If the limit is hit, only the log entry is skipped; the consent itself( cookie/banner) is unaffected. * Security: REST API rate limiter switched to a fixed window (start timestamp stored in the bucket) with hashed keys to avoid key collisions for IP addresses. #### 3.37.0 — June 11, 2026 * New: GTM-managed mode for vendors — services loaded via Google Tag Manager (GA4, Meta Pixel, Microsoft Clarity, Hotjar, etc.) can be marked as “managed via GTM”. They stay listed in the banner and privacy policy for transparency, but the plugin no longer injects their script — GTM loads it and Google Consent Mode governs the signal. Prevents duplicate scripts (e.g. two GA4 loaders). * Fix: GTM service checklist now auto-saves on change (previously the checkmarks were lost on reload unless a hidden “save” button was clicked). * Change: Vendor cards for GTM-managed services show an “über GTM” badge and their direct toggle is disabled — managed exclusively via the GTM service list to prevent accidental double activation. #### 3.36.0 — June 11, 2026 * Brand: Internal product strings unified to “KaaTai Consent Manager — DSGVO-konformes Consent Management” (matches the WordPress.org listing name). Previously mixed with “Consent by KaaTai” in admin texts, legal text generator footer, and update display name. * Fix: Auto-Blocker output buffer now skips REST API and AJAX requests (avoids breaking JSON responses) * Fix: document.body guard in all blocker scripts (osm-blocker, etc.) — prevents JS crash when scripts load before body is ready * Fix: Button border in WP 6.7+ visible again * Fix: “Vertreten durch” field no longer overwritten on save in legal company data form * Fix: Broker-specific fields cleared when role is not “insurance broker” * Fix: WP Rocket compatibility — data-nowprocket attribute on all KCCM scripts to prevent delayed JS issues #### 3.35.3 — April 29, 2026 * Fix: GTM checklist — added GA4 (most common GTM use case), removed YouTube (not a GTM service) * Fix: GTM checklist vendor ID corrected (ga4 instead of google_analytics) * New: 7 privacy policy text blocks for marketing services (Meta Pixel, Google Ads Remarketing, LinkedIn Insight, Pinterest Tag, TikTok Pixel, Twitter/X Pixel) * Fix: Vendor toggle now creates vendor from preset catalog if not in database ( upsert) * Fix: Meta Platforms Ireland address updated (Merrion Road, Dublin 4) * Fix: Twitter/X privacy URL unified #### 3.35.1 — April 21, 2026 * Fix: Store version was deployed without build step — premium code markers were active in WP.org release * Fix: Free users saw license key prompt in setup wizard (should only appear in premium version) * Fix: Sidebar badges showed plan levels (Starter/Business/Pro) instead of unified“ Premium” label * Fix: kccm_has_feature() used premium API path instead of store feature map — all features incorrectly disabled #### 3.35.0 — April 16, 2026 * Remove: Custom CSS field removed from store version (WP.org guideline compliance) * Remove: Script integration textareas removed from store version * Fix: Last inline style tag replaced with wp_add_inline_style and JS class approach * Fix: Legacy ccm_ shortcode aliases removed — only kccm_ prefixed shortcodes * New: 5 additional design options — button text color, link color, overlay opacity, box shadow, banner spacing #### 3.34.0 — April 12, 2026 * Refactor: Store-Plugin uses KCCM_IS_STORE compile-time constant — all local features fully functional without API key * Refactor: Premium-only files physically removed from store build * Docs: External Services section documents all referenced third-party detection patterns * Fix: Premium build gets -premium version suffix to distinguish from store version #### 3.33.0 — March 27, 2026 * Refactor: Plugin slug migrated from consent-by-kaatai to kaatai-consent-manager * Refactor: Code prefix migrated from ccm_ to kccm_ (4+ character prefix per WP. org requirement) * Refactor: All inline scripts and styles migrated to wp_add_inline_script/style * Fix: DB migration for ccm_ to kccm_ prefix (options, transients, user meta) #### 3.32.0 — March 19, 2026 * Security: Input sanitization hardened — all $_GET/$_COOKIE wrapped with sanitize_text_field * Security: Nonce checks and cookie JSON data sanitization improved * Refactor: Removed build-time premium flag in favor of runtime feature gates #### 3.30.0 — March 6, 2026 * Feature: Status tab — new setup step for responsible person (GDPR Art. 13 check) * Feature: Precise error message when privacy policy cannot be generated * Fix: DSE section numbering, X-Button banner close #### 3.29.4 — February 28, 2026 * Feature: Wizard Free version — new responsible person step with GDPR Art. 13 form * Feature: Auto-Blocker — 17 new patterns (Tidio, Crisp, Zendesk, PayPal, Klarna, and more) * Style: All wizard and admin buttons use unified gold design #### 3.28.0 — February 20, 2026 * Feature: Store vs Premium build separation * Feature: Auto-Blocker own admin tab with per-vendor toggles * Feature: Branding toggle (Powered by hide, local, no SaaS required) * Fix: Uninstall cleanup — 11 missing options + 2 transients #### 3.27.3 — February 15, 2026 * Security: SSRF protection, IP spoofing hardening, rate-limit improvements * Security: CSV export limited to 100,000 rows against memory exhaustion #### 3.27.2 — February 13, 2026 * Accessibility: Decorative icons marked with aria-hidden, color-picker labels linked, scanner aria-live region #### 3.27.0 — February 10, 2026 * Fix: Banner stays visible after accepting on cached pages — cache-safe Early- Hide * Fix: OpenStreetMap blocking extended (osm.org, openstreetmap.de) * Fix: Cookie set with Secure flag on HTTPS sites * Accessibility: WCAG AA color contrast and focus-visible on all interactive elements #### 3.26.0 — February 1, 2026 * Feature: Auto Script Blocker — automatically blocks known tracking scripts from third-party plugins * Feature: Runtime Engine — activates blocked scripts upon consent #### 3.25.0 — January 25, 2026 * Feature: Audit Scanner mode — detect compliance gaps after setup * Feature: Compliance score with color-coded report #### 3.24.0 — January 15, 2026 * Feature: Service Library — on-demand service catalog with 1-click install #### 3.23.0 — January 10, 2026 * Feature: 4 new embed blockers — Vimeo, Facebook, Instagram, Spotify #### 3.20.0 — December 2025 * Feature: WooCommerce Checkout Banner mode * Feature: One-Click E-Commerce Setup #### 3.18.0 — November 2025 * Feature: Legal Generator — Privacy policy HTML generation (GDPR-compliant) #### 3.17.0 — November 2025 * Feature: Legal Generator — Local Impressum HTML generation #### 3.15.0 — October 2025 * Rename: Plugin renamed from “Custom Consent Manager” to “Consent by KaaTai” * Change: New slug kaatai-consent-manager #### 3.13.0 — September 2025 * Feature: All banner design settings now free for all plans * Feature: 3-step setup wizard on first activation #### 3.10.0 — August 2025 * Feature: Cookie Scanner with deep scan and 67 service detection * Feature: Banner Editor — 3 positions, border-radius, live preview #### 3.8.0 — July 2025 * Feature: Banner Editor with theme presets (Light/Dark/Custom) * Feature: Layout types, logo upload, overlay option #### 3.7.0 — June 2025 * Feature: Impressum and Datenschutz shortcodes * Improvement: Consolidated admin tabs from 11 to 7 ## Meta * Versione **3.41.8** * Ultimo aggiornamento **3 mesi fa** * Installazioni attive **10+** * Versione WordPress ** 5.8 o superiore ** * Testato fino alla versione **6.9.10** * Versione PHP ** 7.4 o superiore ** * Lingua * [English (US)](https://wordpress.org/plugins/kaatai-consent-manager/) * Tag * [cookie banner](https://it.wordpress.org/plugins/tags/cookie-banner/)[cookie consent](https://it.wordpress.org/plugins/tags/cookie-consent/) [cookie notice](https://it.wordpress.org/plugins/tags/cookie-notice/)[dsgvo](https://it.wordpress.org/plugins/tags/dsgvo/) [GDPR](https://it.wordpress.org/plugins/tags/gdpr/) * [Visualizzazione avanzata](https://it.wordpress.org/plugins/kaatai-consent-manager/advanced/) ## Valutazioni Non sono state ancora inviate recensioni. [La tua recensione](https://wordpress.org/support/plugin/kaatai-consent-manager/reviews/#new-post) [Vedi tutte le recensioni](https://wordpress.org/support/plugin/kaatai-consent-manager/reviews/) ## Collaboratori * [ kaatai ](https://profiles.wordpress.org/kaatai/) ## Supporto Hai qualcosa da dire? Ti serve aiuto? [Chiedi nel forum di supporto](https://wordpress.org/support/plugin/kaatai-consent-manager/)