[WordPress] 外掛分享： MantaWeb Consent Shield – Cookie Consent Banner & Real Cookie Blocker (GDPR, CCPA, Tikun 13)

內容簡介

MantaWeb Consent Shield 是一款專為 WordPress 設計的隱私同意管理外掛，結合可配置的同意橫幅、主動的腳本與 Cookie 阻擋功能、完整的審計日誌及合規檢查清單，確保網站遵循隱私法規，並不會將任何數據傳送至外部伺服器。

【主要功能】
• 四類別同意橫幅：必要、功能、分析、行銷
• 真正的腳本與 Cookie 阻擋器
• 自動化 Google Consent Mode v2 整合
• 不可變的同意日誌，完整的審計追蹤
• 5 步驟簡易設置向導

外掛標籤

開發者團隊

原文外掛簡介

MantaWeb Consent Shield is a privacy consent management plugin for WordPress built by MantaWeb. It combines a configurable consent banner with an active script and cookie blocker, a full audit log, and a compliance checklist – all without sending any data to external servers.
Who it is for
Any WordPress site that needs to comply with:

Israeli Privacy Law Amendment 13 (Tikun 13, in force August 2025)
GDPR + ePrivacy Directive (EU / UK)
CCPA “Do Not Sell My Personal Information” (California)

How it works
When a visitor lands on your site, Consent Shield shows a consent banner before any third-party scripts run. Scripts are blocked server-side using an output-buffer HTML rewriter – not just via the WordPress wp_enqueue_script filter. This means inline scripts (Google Tag Manager, Meta Pixel, GA4 config calls), iframes (YouTube, Vimeo, Google Maps), and tracking pixels are all held until the visitor gives consent, even when the page is served from a Cloudflare cache or WP-Rocket.
After consent, the plugin stores an immutable record (INSERT-only – no UPDATEs) in a local database table and fires Google Consent Mode v2 signals automatically for GA4 and Google Ads.
Key features – Free
4-category consent banner
* Necessary, Functional, Analytics, Marketing categories
* 1-button, 2-button, and 3-button layouts (configurable in the wizard)
* Fully customizable text – edit every word the visitor sees from the admin UI
* Floating privacy pill for post-consent withdrawal (required by Tikun 13)
* [mantacs_dsar_button] shortcode: adds a “Request my data” button that opens the visitor’s mail client with a pre-filled DSAR email addressed to your DPO
Real script and cookie blocker
* Output-buffer HTML rewriter – blocks scripts and iframes that bypass wp_enqueue_script
* Click-to-load placeholders for YouTube, Vimeo, and Google Maps embeds
* Cookie Sweeper removes cookies not belonging to consented categories on consent change
* Works behind Cloudflare cache, WP-Rocket, and other full-page caching systems
* ~50 built-in service definitions including Israeli payment gateways (Tranzila, Cardcom, Bit, iCount, ActiveTrail, Smoove)
Compliance tools
* Google Consent Mode v2 automatic wiring for GA4
* IP anonymization – IPv4 masked to /24, IPv6 to /48 (default ON)
* Tikun 13 compliance checklist with automatic checks and manual-check guidance
* Policy versioning – one click forces re-consent from all visitors
* Bot detection – hides the popup from search engine crawlers
Audit and data management
* Immutable consent log (INSERT-only) for a complete audit trail
* CSV export from the admin UI
* Admin activity log tracks every settings change
* WP-CLI commands: wp pcm status, wp pcm consents export, wp pcm policy bump, wp pcm tikun13 check, wp pcm wizard reset, wp pcm cache flush
Setup
* 5-step guided setup wizard (~3 minutes)
* All banner texts editable from the admin “Custom Texts” tab
* Light/dark mode support via CSS custom properties
What makes it different
Real blocker, not just an enqueue filter. Most consent plugins only hook into wp_enqueue_script. Consent Shield rewrites the HTML output server-side, so GTM’s dataLayer push, inline fbq() calls, and hardcoded