Skip to content
Devix Open Source

Guide

Getting started

Install, activate, and the common trackers are already blocked.

  1. Upload the plugin zip under Plugins → Add New → Upload, and activate it.
  2. Settings → Cookie Consent to choose the layout and point at your privacy policy.
  3. Add a link people can use to change their mind: put [devix_cookie_settings] in a footer widget, or give any menu item, link or button the attribute data-cc-open.

That is the whole setup. Before anyone answers, nothing non-essential runs.

What is blocked out of the box

Category Recognised by handle or URL
analytics Google Analytics, Tag Manager, Site Kit, Hotjar, Clarity, Matomo, Plausible, Segment, Mixpanel
marketing Meta pixel, TikTok, LinkedIn Insight, Google Ads, X, HubSpot
embeds YouTube, Vimeo, Dailymotion, Facebook, Instagram, TikTok (marketing); Google Maps (analytics)

Add your own in Settings → Cookie Consent, one line per category:

analytics: my-stats-plugin, stats.example.com
marketing: partner-widget

A word containing a dot or a slash is matched against the script's URL; anything else is matched against its WordPress handle. Find a handle by viewing source and looking at the id attribute: <script id="google-analytics-js"> is the handle google-analytics.

When a tag still gets through

Some themes print snippets straight into header.php, which never become WordPress handles. Switch on Scan the whole page: the plugin then passes over the finished HTML and rewrites anything pointing at a host in your rules. It costs one pass over the page, so leave it off unless you need it.

Google Consent Mode v2

On by default. The defaults are printed before anything else on the page, denying every Google signal, and the update is sent the moment someone decides. Your Tag Manager container and Analytics tags then behave correctly for European visitors.

If you use Site Kit, leave its tags enqueued — the handles are recognised, and Consent Mode does the rest.

Checking it works

Open your site in a private window with the browser's network panel on:

  • Before you answer the notice, there should be no request to googletagmanager.com, connect.facebook.net or youtube.com.
  • The tags are in the page, with type="text/plain" and a data-cc attribute.
  • Accept, and those requests appear.

Changing your policy

Raise Policy version in the settings. Everyone is asked again, and until they answer nothing non-essential runs — including for visitors who agreed to the old wording.

Updated 12 Sep 2026