About this plugin
719. A cookie banner that blocks third-party scripts until the visitor accepts, and a Wizard that generates your Cookie Policy and your Personal Data Processing Policy.
Key features
- Cookie consent banner, with two color templates to choose from
- Automatic blocking of third-party scripts until the visitor accepts
- Google Consent Mode v2 (optional, off by default): instead of blocking them, it loads Google Analytics, Tag Manager and Ads without cookies until the visitor accepts. With low traffic, visitors who reject don’t show up in your Google reports
- Guided 6-step legal Wizard that generates your Cookie Policy and your Personal Data Processing Policy, and finishes with a compliance check of the site
- Automatic creation of the legal pages on your site, or insertion via shortcode if you already have your own text
- ARCOP rights page: explains to your visitors how to exercise their rights over their data (access, rectification, erasure, objection and portability) by writing to your email
- Consent log with SHA-256 hash chaining, exportable to CSV
- Comprobador de Ley: a running checklist with a traffic-light view of your site’s legal and technical status, including detection of known vulnerabilities in WordPress core, active plugins and the active theme. What the plugin can’t solve, the cookieAz by MacLucan team can: security audit and monthly maintenance for your WordPress
Why choose CookieAz
719
It’s not a generic template: the Wizard follows the structure required by article 14 ter of the Chilean law and asks only what that law requires (data controller, purposes, ARCOP rights, international transfers, retention periods).
Guided legal Wizard
The Wizard walks you step by step through your company details and generates the documents for you.
Know what’s missing
The Comprobador de Ley checks 15 legal and technical points on your site and shows you with a traffic light what’s in order and what isn’t, with the reason it matters under the law.
Consent log
Every time a visitor accepts, rejects or customizes their preferences, a record is stored with the date, policy version, anonymized IP (hash) and chained hash. It serves as backup that your site requested and recorded consent; it doesn’t identify individual visitors. It’s yours: you can export it to CSV at any time.
About the generated legal texts
The Wizard doesn’t provide legal advice. It generates both policies from the answers you give, following the structure required by article 14 ter. The pages carry a shortcode, not fixed text: the content is built from your answers and updates when you change them in the Wizard.
Since its accuracy depends on your answers matching what your site actually does, review the published result, and consult a lawyer if you handle sensitive data, make automated decisions, or aren’t sure of your legal basis. Before the Data Protection Agency, the data controller is the site owner, not CookieAz or whoever installed it.
External services
This plugin connects to the following third-party services:
-
org — detects your own server’s public IP address to suggest the hosting country (international transfers section of the Data Processing Policy). It only runs when an administrator clicks “Auto-detect” in step 2 of the legal Wizard. No visitor data is sent.
org/ (see site footer).
-
co — turns that IP into a country. It runs on the same “Auto-detect” click. Only the server’s own public IP is sent.
co/privacy/.
-
Supabase (CookieAz’s own backend) — (a) Only if you enable “Share usage data with CookieAz” in Settings (off by default): once a week, your site URL and the plugin/WordPress/PHP versions are sent. (b) Only if you ask for help in the Comprobador de Ley and confirm in the dialog, which shows what will be sent: in addition, your checklist results and a technical inventory (active plugins and theme, their versions and known vulnerabilities), so the cookieAz by MacLucan team can contact you.
No visitor data is ever sent.
com/privacy.
-
net — checks whether your WordPress version, active plugins or theme have known vulnerabilities. It runs when an administrator opens the Comprobador de Ley, at most once every 10 minutes. Only the WordPress version and the slugs of your active plugins and theme are sent: no site URL and no visitor data.
com/privacy/.