We've just added PrivacyShield GDPR+ to our product lineup — free to download.
GDPR cookie consent banner, a DSAR request form with email verification, and a privacy pol
What it does
PrivacyShield GDPR+ gives a WordPress site the core pieces needed for GDPR compliance, without a subscription:
- Cookie consent banner — a front-end banner that records each visitor's choice (accept, reject, or per-category) before non-essential scripts run.
- Real script blocking — known-tracker tags are rewritten at render time (not just hidden with CSS) so they cannot fire before consent is given, and the output stays safe to page-cache. A small client-side script re-activates a blocked tag the moment its category is consented to, with no page reload.
- Iframe/embed blocking — YouTube, Vimeo, Google Maps, Instagram, Facebook, X, TikTok, Spotify, and SoundCloud embeds are replaced with a placeholder at render time (a -only blocker can't catch these, since an iframe sets cookies just by loading). Visitors can grant consent for the whole category or load a single embed on the spot.
- WP Consent API integration — registers PrivacyShield as the site's consent management plugin and keeps the visitor's choice in sync, so other Consent-API-aware plugins can correctly check wp_has_consent() instead of tracking or blocking blindly.
- Google Consent Mode v2 — sends gtag consent default/update signals so Google Tag Manager's own per-tag consent checks work correctly alongside the banner.
- Data Subject Access Request (DSAR) form — a shortcode form visitors can use to request their data. Every submission must be confirmed via a link emailed to the address the requester typed, so a request can't be actioned against someone else's email address by mistake.
- Privacy policy generator — produces starting policy text based on the bundled GDPR rule set, for the site owner to review and adapt.
- Configurable log retention — consent records are purged automatically on a schedule (default 18 months, adjustable), instead of being kept forever.
This free build covers GDPR only. For CCPA/CPRA, DPDP, LGPD, PIPEDA, POPIA, automatic cookie scanning, geo-targeted rules, and DSAR automation, see PrivacyShield GDPR+ Pro.
Not legal advice. PrivacyShield GDPR+ is a compliance *tool*, not a law firm. The privacy policy generator produces a starting draft based on the bundled rule set, and the plugin as a whole helps you implement common GDPR mechanics (consent, script blocking, DSAR handling) — but whether your site is actually compliant depends on your own data practices and jurisdiction. Have a qualified professional review your policy and setup before relying on it.
Shortcode Add the DSAR request form to any page or post with:
Details
- Version: 1.5.1
- Requires: WordPress 6.0+
- Tested up to: WordPress 7.0
- Requires PHP: 7.4+
- Author: ICT World 24
- License: GPL v2 or later