ConsentLab – GDPR Cookie Consent Banner

by consentlab

Description

ConsentLab is a free, privacy-first cookie consent banner that helps your WordPress site meet GDPR, ePrivacy and CNIL requirements — without writing a single line of code.

Install the plugin, connect it to your ConsentLab account in one click, and design your cookie notice in the dashboard. The plugin loads it on your site, blocks analytics and marketing scripts until the visitor consents, records proof of consent, and keeps your Google Consent Mode v2 signals in sync — so your Google Analytics and Google Ads measurement stays compliant.

A lightweight, fast Consent Management Platform (CMP) built for real GDPR compliance — not just a cookie banner.

Features:

Customizable cookie consent banner (colors, texts, position) designed in the ConsentLab dashboard
Native Google Consent Mode v2 — GA4 & Google Ads
Automatic script blocking by category (analytics, marketing)
Cookies cleared automatically on consent withdrawal
Proof-of-consent storage and statistics, hosted in the EU
Hide the banner for logged-in administrators
Deferred script loading for performance (no jQuery)
Free plan available — no credit card required

External services

This plugin relies on the ConsentLab service to display the consent banner and to record consent. This connection is required for the plugin to function.

What it does and what data is sent:

Loads the banner script from https://cdn.consentlab.eu/widget/v1/consentlab.min.js.
Fetches your banner configuration from https://api.consentlab.eu using your public API key. The same endpoint is called from your WordPress admin to display the connection status (project name and plan).
Sends visitors’ consent choices (categories accepted/refused, an anonymised consent id and timestamp) to https://api.consentlab.eu for consent-proof storage and statistics.

The service is provided by ConsentLab.

Installation

Upload the plugin files to /wp-content/plugins/consentlab/, or install the plugin through the WordPress plugins screen directly.
Activate the plugin through the ‘Plugins’ screen in WordPress.
Go to Settings > ConsentLab.
Click “Connect with ConsentLab” — sign in (or create a free account), pick the project for this site, and the API key is configured automatically.

Alternatively, you can set it up manually: create a project at https://app.consentlab.eu, copy its API key, paste it in the plugin settings and save.

Screenshots

The ConsentLab consent banner on your website — compliant, customisable, refusing as easy as accepting.
Banner customization in the ConsentLab dashboard — colors, logo, position, languages, published instantly.
The automatic cookie scanner detects and categorises your trackers, with email alerts on new ones.
Consent analytics — acceptance rate, trends per site, CSV export.
All your sites and consents at a glance in the ConsentLab dashboard.

Faq

Do I need a ConsentLab account?

Yes. The banner configuration (design, texts, cookie categories) is managed in the ConsentLab dashboard. A free plan is available — no credit card required.

Where are consent choices stored?

Consent choices are stored on ConsentLab’s servers in the European Union, as proof of consent required by GDPR. No personal data such as IP addresses is stored with the consent record.

Does the plugin slow down my site?

No. The banner script is a small file served from a CDN and is deferred by default, so it does not block page rendering.

Can I use the plugin on a staging site?

Yes. Endpoints can be overridden with the CONSENTLAB_API_BASE, CONSENTLAB_CDN_URL and CONSENTLAB_DASHBOARD_URL constants in wp-config.php (see the Environment panel in the plugin settings).

Does the plugin work with a strict Content-Security-Policy (CSP)?

Yes. The widget is enqueued through the standard WordPress script API, so if your CSP plugin adds nonces to script tags (via the wp_script_attributes or script_loader_tag filters), the nonce is applied to the ConsentLab tag automatically — and the widget propagates it to everything it injects. No configuration needed. Full guide: https://consentlab.eu/en/docs/csp

Reviews

Changelog

1.3.5

Security hardening: the Connect redirect is now validated against an allowlist (safe redirect). No functional change.

1.3.4

Compatibility verified with WordPress 7.1 — no functional change.

1.3.3

Expanded the plugin description with clearer feature highlights (cookie banner, GDPR/CCPA consent, Consent Mode v2) — no functional change.

1.3.2

Clearer plugin name and description, and refined tags to help you find it — no functional change.

1.3.0

One-click “Connect with ConsentLab”: sign in, pick your project and the API key is configured automatically — no more copy-paste (secure OAuth Authorization-Code + PKCE flow).
Manual API key entry is still available as a fallback.

1.2.0

Live API key validation: the connection is now checked as you type, before saving.
“Customize banner” now links straight to your project’s banner editor.
Added a confirmation that the banner is live, with a link to view your site.

1.1.1

Internal: widget asset renamed cookie-cmp.min.js -> consentlab.min.js (brand consistency)

1.1.0

Renamed plugin slug and text domain to consentlab (options are migrated automatically).
New settings screen: branded header, live connection status (project name and plan), onboarding for new users, quick links.
Banner can be hidden for logged-in administrators.
Endpoints overridable via constants, options or filters (staging support).
Widget is now loaded through wp_enqueue_script with optional defer strategy.

1.0.0

Initial release.