Smart cookie
consent control

Features

• Embeds held back until consent (e.g. a pasted 640×360 YouTube iframe) shrink to fit the screen and keep their shape (aspect ratio from the iframe's width and height); the video that loads after consent fits the same way
• The consent placeholder inside a small embed tightens its layout, so the text and the Load it / Cookie settings buttons stay visible on phones

Fixes

• The consent placeholder copied the iframe's fixed width and ran off the side of the page on phones (horizontal scrolling)
• Sites that already size their embeds (their own CSS, WordPress responsive embeds, page builders) keep their sizes: the new rules have no CSS specificity, so any existing rule wins

Features

• Cookie list shows visitors only cookies a scan actually found, or that the site owner added and confirmed; the dictionary never adds cookies by itself
• Full scan: server pass (cookies your server sets) plus a browser pass in hidden, credentialless frames (cookies scripts set, e.g. Google Analytics)
• Unknown cookies wait as "Unclassified: please review"; cookies missed by several scans are flagged "Not found recently", then hidden unless pinned
• Code found in pages (gtag.js, YouTube) becomes a prompt, with one click to list an embed's own third-party cookies
• Categories without cookies are left out of the banner; "Accept all" only covers categories the visitor was shown
• Automatic blocking of known trackers and embeds until consent, with placeholders that keep the embed's size. On for new installs; sites updating from an earlier version keep their previous behaviour (blocking off) until the owner turns it on
• Updating sites see a "Turn on automatic blocking - trackers and embeds wait for consent. Recommended." notice (dismissible per user) and an Overview checklist item (stays until blocking is on), with one-click "Turn it on" and "Preview what gets blocked" (the scan results show what would change)
• Google tags load in Consent Mode by default (Consent Mode v2, every signal denied until the visitor agrees, so Google sets no cookies); "Block Google tags until consent" remains available. Existing sites keep any saved choice, otherwise Consent Mode
• Google Consent Mode v2 and Microsoft UET consent signals, Global Privacy Control, re-consent when a new category is used
• Consent records with consent ID, method and categories shown; retention setting with daily clean-up
• Consent record CSV export is now free for the latest 30 records; Premium exports every record or a date range
• Redesigned admin: Overview, Banner & design, Categories & cookies, Scan, Consent records, Legal & regions, Licence
• Colour presets (Light, Dark, Warm, High contrast), Match my site, custom colours with WCAG AA checks and suggested fixes
• Live desktop and phone preview of the banner, settings dialog and cookie button; sticky save bar; on-brand dialogs
• Banner positions (card left/right, bottom bar, centre), equal-weight Accept/Reject, corner styles, cookie button icon, position and size
• window.gscookie JavaScript API and gscookie:consent event; gscookie_has_consent() in PHP; [gscookie_declaration] and [gscookie_settings_link] shortcodes

Fixes

• Seeded dictionary cookies no longer appear in the visitor list or cookie policy unless a scan finds them (existing installs are cleaned up on update)
• Accept all and Reject all now look exactly the same (Reject was less prominent)
• YouTube and other embeds no longer load before consent
• Choosing "Load Google tags in Consent Mode" always sends the denied Consent Mode defaults first, even if the Consent Mode switch was off
• Banner no longer locks page scrolling; keyboard focus and Esc handled properly
• Scanner works on hosts where the site cannot reach its own public address (Docker, some firewalls)
• Admin and front-end styles scoped to gsck- so they no longer clash with Gradespace Core (.gsc-card etc.)
• thegradespace.com: the Stripe webhook now licenses only GSCookie checkouts and subscriptions (other products on the account no longer create GSCookie licences) - deploy soon

Features

Fixes

Features

• First-visit bottom banner ("We value your privacy") with Accept All, Reject All, and Customise buttons
• Floating icon now hidden on first visit — pops in with animation after consent choice
• Cookie scanner now crawls up to 5 pages (home, privacy policy, first post, first page)
• Scanner detects noscript pixels, tracking img tags, and dataLayer/gtag() references
• 32 provider patterns (up from 9): HubSpot, MS Clarity, TikTok, LinkedIn Insight, Twitter/X Ads, Crisp, Zendesk, Mailchimp, Cloudflare, WooCommerce and more
• Cookie dictionary expanded to 47 known entries (up from 17)
• Admin UI: light/dark theme auto-applied from saved Setting across all 4 admin pages
• Live theme preview — changing Theme dropdown instantly toggles admin UI without saving
• Admin CSS scoped to .gsc-admin-wrap only — no longer overrides global WP admin body
• All hardcoded dark colour values replaced with CSS custom property tokens for both themes
• Admin buttons and cards redesigned with pill shape, accent colours, and depth

Fixes

• Status badges (ok/custom/pending) no longer invisible on light backgrounds
• Cookie table code element colour corrected for light mode
• Card hover glow, premium card gradient, and plan badge all theme-aware
• Consent chart donut-hole fill now matches card background in both themes
• White canvas background on dark Consent Trends card resolved

Features

• WordPress upgrade path now redirects to Stripe with saved license email
• Automatic post-checkout license sync back into WP admin
• Manual “Sync license now” fallback in plugin license screen

Fixes

• Improved webhook/session timing fallback when license is not ready instantly
• Typed and stabilized license lookup API for build reliability

Features

• WordPress consent plugin with GDPR/CCPA controls
• Free and paid licensing with Stripe checkout
• Plugin download and setup flow from gscookie landing page

Fixes

• Initial release baseline