PrivacyShield GDPR+

PrivacyShield GDPR+ gives a WordPress site the core pieces needed for GDPR compliance, without a subscription:
• Cookie consent banner — a front-end banner that records each visitor’s choice (accept, reject, or per-category) before non-essential scripts run.
• Real script blocking — known-tracker tags are rewritten at render time (not just hidden with CSS) so they cannot fire before consent is given, and the output stays safe to page-cache. A small client-side script re-activates a blocked tag the moment its category is consented to, with no page reload.
• Iframe/embed blocking — YouTube, Vimeo, Google Maps, Instagram, Facebook, X, TikTok, Spotify, and SoundCloud embeds are replaced with a placeholder at render time (a -only blocker can’t catch these, since an iframe sets cookies just by loading). Visitors can grant consent for the whole category or load a single embed on the spot.
• WP Consent API integration — registers PrivacyShield as the site’s consent management plugin and keeps the visitor’s choice in sync, so other Consent-API-aware plugins can correctly check wp_has_consent() instead of tracking or blocking blindly.
• Google Consent Mode v2 — sends gtag consent default/update signals so Google Tag Manager’s own per-tag consent checks work correctly alongside the banner.
• Data Subject Access Request (DSAR) form — a shortcode form visitors can use to request their data. Every submission must be confirmed via a link emailed to the address the requester typed, so a request can’t be actioned against someone else’s email address by mistake.
• Privacy policy generator — produces starting policy text based on the bundled GDPR rule set, for the site owner to review and adapt.
• Configurable log retention — consent records are purged automatically on a schedule (default 18 months, adjustable), instead of being kept forever.

This free build covers GDPR only. For CCPA/CPRA, DPDP, LGPD, PIPEDA, POPIA, automatic cookie scanning, geo-targeted rules, and DSAR automation, see PrivacyShield GDPR+ Pro.

Not legal advice. PrivacyShield GDPR+ is a compliance *tool*, not a law firm. The privacy policy generator produces a starting draft based on the bundled rule set, and the plugin as a whole helps you implement common GDPR mechanics (consent, script blocking, DSAR handling) — but whether your site is actually compliant depends on your own data practices and jurisdiction. Have a qualified professional review your policy and setup before relying on it.

Shortcode
Add the DSAR request form to any page or post with:

[privacyshield_dsar_form]