Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Cookie Notice is a widely used WordPress plugin that displays a cookie consent banner and remembers the visitor choice; the free version informs but does not block scripts.
Cookie Notice is a widely used WordPress plugin, originally by dFactory and now maintained under Hu-manity.co, that displays a cookie consent banner and remembers the visitor decision. The free version shows the notice and lets visitors accept or decline, while a paid Cookie Compliance module adds script blocking, granular categories and consent logging.
Cookie Notice stores a small first party cookie that records whether the visitor accepted or rejected cookies. The core plugin does not itself collect analytics or build profiles. If you enable the optional cloud Compliance module, additional consent records may be processed by the vendor.
A crucial point is that the free Cookie Notice banner does not block third party scripts on its own, so analytics and marketing tags can still load before consent unless you gate them manually. Under the GDPR and ePrivacy Directive a banner that informs but does not actually prevent cookies is not sufficient for valid prior consent.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
The plugin consent cookie is strictly necessary and does not require consent. The tools it is meant to govern, however, require freely given, specific, informed and unambiguous opt in, and they must be prevented from running until that opt in is recorded. Plan how each tag will be conditionally loaded.
Used in its basic form, Cookie Notice keeps data on your own WordPress server, so no international transfer occurs. If you activate the hosted Cookie Compliance service, review where that provider processes data, as a United States based component would introduce a transfer requiring appropriate safeguards.
Decide whether the free banner meets your needs or whether you require the Compliance module or a full CMP for script blocking. Wire analytics and marketing tags so they only fire after consent, set a reasonable consent lifetime and a clear decline option, and document the configuration. Re check after theme or plugin updates that can reset behaviour.
Websites using Cookie Notice must obtain user consent under GDPR regulations.
DPIA considerations
The banner itself processes only a consent flag and is low risk, so a DPIA is rarely needed for it. Focus your assessment on the analytics and advertising tools the banner is meant to govern, and on the optional cloud module if enabled.
Sample consent text
This site uses Cookie Notice to record your cookie choice. This strictly necessary function does not require your prior consent; other cookies load only after you accept.
Third-party domains contacted
cdn.hu-manity.coapp.cookiecompliance.ioCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| cookie_notice_accepted | Necessary | 1 month | Records whether the visitor accepted or rejected cookies so the banner is not shown again during the period. |
Cookie Notice is an essential service, but transparency matters. Manage all your consent with FlowConsent.
It sets a single first party cookie that records the visitor accept or reject decision, typically for around one month to a year depending on settings. It does not track browsing or build profiles.
The plugin own consent cookie is strictly necessary and exempt from consent. The third party tags it is meant to control do require consent before they may load.
Operating the banner relies on legitimate interest (Art. 6(1)(f) GDPR) and your obligation to obtain consent. The opt in it records then forms the legal basis (Art. 6(1)(a)) for any non essential cookies.
The core plugin keeps consent data on your own server, so there is no transfer. The optional hosted Cookie Compliance module may process data in the United States, which would require appropriate safeguards.
A DPIA is normally not required for the banner itself because it processes minimal data. Assess the tools it governs instead, since high risk analytics or advertising may warrant a DPIA.
Remember that the free version does not block scripts, so configure your tags to load only after consent or use the Compliance module. Provide an equally easy decline option and test that non essential cookies are absent before consent.
Stronger WordPress options that block scripts include Complianz, CookieYes, Cookiebot and Real Cookie Banner. Choose based on automatic blocking, scanning, languages and TCF support.
Maintain your cookie list and policy page manually or with a scanner, since the free plugin does not scan your site. Review after adding new tools and link the policy from the banner.