Funciones y cobertura de cumplimiento
Flujo de consentimiento
- Flujo orientado a GDPR/ePrivacy: Aceptar todo, Rechazar todo, categorías granulares.
- Modelo opt-in por defecto: only necessary cookies active before consent.
- Full consent lifecycle: save, update, withdraw, and US-style Do not sell/share.
- Consent evidence logging: status, categories, source, signal type, timestamps, versioning.
- Consent versioning + re-consent support via
consentversion.
Integración con Moodle
- Modern hook callbacks:
before_http_headers,before_footer_html_generation. - Privacy API provider (metadata / export / delete).
- Admin reports and settings integration.
Control de scripts e inserciones
- Category-based blocking/unblocking.
- Iframe placeholder flow for external media.
- Optional GA4/GTM integration gated by analytics consent.
IAB TCF foundation
- Isolated TCF module.
__tcfapibridge scaffold.- Mapping local categories to TCF purposes.
Premium Cookie Scanner
- Manual scan (current page or selected Moodle URL).
- Detects cookies, scripts, iframes, resources.
- Vendor/category suggestions + confidence + unknown flag.
- Dedicated scanner report with tabs, filtering, search.
Security hardening
- POST-only sensitive endpoints.
- Sesskey/capability checks.
- Scanner throttling (configurable).
- Minimized scanner URL storage (without query/fragment).
- Sanitized public error responses.
Accessibility & UX
- ARIA-friendly modal/actions.
- Floating consent control.
- Improved admin UI with cards, badges, filters, responsive tables.
Internacionalización
- Paquetes de idioma disponibles:
- English 🇬🇧
- Polish 🇵🇱
- German 🇩🇪
- Italian 🇮🇹
- Portuguese 🇵🇹
- Portuguese (Brazil) 🇧🇷
- Spanish 🇪🇸
- Greek 🇬🇷
- French 🇫🇷
- Russian 🇷🇺
- Indonesian 🇮🇩
Más idiomas disponibles bajo petición — contactar con Soporte.
Normativas soportadas
- Europa: GDPR / RODO (UE), normas de cookies / ePrivacy (UE), UK GDPR + PECR (Reino Unido), nFADP (Suiza), marcos de tipo DPA (dependientes de la jurisdicción).
- Norteamérica: CCPA / CPRA (California), VCDPA (Virginia), CTDPA (Connecticut), CPA (Colorado), UCPA (Utah), PIPEDA (Canadá).
- Latinoamérica: LGPD (Brasil).
- África y Oriente Medio: POPIA (Sudáfrica), PDPL (Arabia Saudí).
- Asia-Pacífico: PDPA (Singapur), Privacy Act (Australia).
Nota: es cobertura de compatibilidad funcional, no una garantía automática de cumplimiento legal sin configuración e implantación adecuadas.



