Features & compliance coverage
Consent flow
- GDPR/ePrivacy-first consent flow: Accept all, Reject all, granular categories.
- Default opt-in model: only necessary cookies active before consent.
- Full consent lifecycle: save, update, withdraw, and US-style Do not sell/share.
- Consent evidence logging: status, categories, source, signal type, timestamps, versioning.
- Consent versioning + re-consent support via
consentversion.
Moodle integration
- Modern hook callbacks:
before_http_headers,before_footer_html_generation. - Privacy API provider (metadata / export / delete).
- Admin reports and settings integration.
Script & embed control
- Category-based blocking/unblocking.
- Iframe placeholder flow for external media.
- Optional GA4/GTM integration gated by analytics consent.
IAB TCF foundation
- Isolated TCF module.
__tcfapibridge scaffold.- Mapping local categories to TCF purposes.
Premium Cookie Scanner
- Manual scan (current page or selected Moodle URL).
- Detects cookies, scripts, iframes, resources.
- Vendor/category suggestions + confidence + unknown flag.
- Dedicated scanner report with tabs, filtering, search.
Security hardening
- POST-only sensitive endpoints.
- Sesskey/capability checks.
- Scanner throttling (configurable).
- Minimized scanner URL storage (without query/fragment).
- Sanitized public error responses.
Accessibility & UX
- ARIA-friendly modal/actions.
- Floating consent control.
- Improved admin UI with cards, badges, filters, responsive tables.
Internationalization
- Multilingual language packs are available:
- English 🇬🇧
- Polish 🇵🇱
- German 🇩🇪
- Italian 🇮🇹
- Portuguese 🇵🇹
- Portuguese (Brazil) 🇧🇷
- Spanish 🇪🇸
- Greek 🇬🇷
- French 🇫🇷
- Russian 🇷🇺
- Indonesian 🇮🇩
Additional languages can be added on request — contact Support.
Supported regulations
- Europe: GDPR / RODO (EU), ePrivacy / cookie rules (EU), UK GDPR + PECR (UK), nFADP (Switzerland), DPA-style frameworks (jurisdiction-dependent).
- North America: CCPA / CPRA (California), VCDPA (Virginia), CTDPA (Connecticut), CPA (Colorado), UCPA (Utah), PIPEDA (Canada).
- Latin America: LGPD (Brazil).
- Africa & Middle East: POPIA (South Africa), PDPL (Saudi Arabia).
- Asia-Pacific: PDPA (Singapore), Privacy Act (Australia).
Note: this is functional compatibility coverage, not an automatic legal compliance guarantee without proper configuration and deployment.
Pricing
Lifetime licenses, free updates.
Frequently asked questions
-
In a world of increasingly complex privacy regulations and “different country, different rules”, managing cookie consent is challenging.
This plugin helps Moodle users worldwide meet requirements with ease: one-click setup for a quick start, plus advanced options, documentation, and tutorials for flexible configuration for different legal and institutional needs. - Lifetime licenses with free updates: 1 site $79, 5 sites $249, 10 sites $499, Unlimited $1,299. See the Pricing section above for the full table and buy links.
-
GDPR/ePrivacy-first flow: Accept all, Reject all, and granular categories. Default opt-in: only necessary cookies are active before consent. Full lifecycle: save, update, withdraw, plus US-style “Do not sell/share”. Consent evidence is logged (status, categories, source, signal type, timestamps, versioning). Consent versioning and re-consent are supported via
consentversion. - ARIA-friendly modal and actions, floating consent control, and improved admin UI with cards, badges, filters, and responsive tables.
-
Modern hook callbacks (
before_http_headers,before_footer_html_generation), Privacy API provider (metadata / export / delete), and full integration with admin reports and settings. - Manual scan on the current page or a selected Moodle URL. Detects cookies, scripts, iframes, and resources. Vendor/category suggestions with confidence and unknown flag. Dedicated scanner report with tabs, filtering, and search.
- Category-based blocking/unblocking, iframe placeholder flow for external media, and optional GA4/GTM integration gated by analytics consent.
- GDPR/RODO (EU), UK GDPR + PECR (UK), ePrivacy/cookie rules (EU member states), CCPA/CPRA (California), VCDPA (Virginia), CTDPA (Connecticut), CPA (Colorado), UCPA (Utah), PIPEDA (Canada), LGPD (Brazil), PDPL (Saudi Arabia), POPIA (South Africa), nFADP (Switzerland), Privacy Act (Australia), PDPA (Singapore), and DPA (jurisdiction-dependent Data Protection Act frameworks).
-
Multilingual language packs are available:
- English 🇬🇧
- Polish 🇵🇱
- German 🇩🇪
- Italian 🇮🇹
- Portuguese 🇵🇹
- Portuguese (Brazil) 🇧🇷
- Spanish 🇪🇸
- Greek 🇬🇷
- French 🇫🇷
- Russian 🇷🇺
- Indonesian 🇮🇩
Additional languages can be added on request — contact Support.
-
Yes. Isolated TCF module,
__tcfapibridge scaffold, and mapping of local categories to TCF purposes. - POST-only sensitive endpoints, sesskey/capability checks, configurable scanner throttling, minimized scanner URL storage (no query/fragment), and sanitized public error responses.
- This is functional compatibility coverage, not an automatic legal compliance guarantee. Proper configuration and deployment are required for your jurisdiction and use case.