Compliance by Hu-manity.co

Changelog

3.1.2

• Compatibility: Verified and confirmed compatible with WordPress 7.0.
• Fix: Banner position and banner size now save correctly on sites without a Cookie Compliance subscription — since 3.0.1 these settings appeared to save but silently reverted on every reload.
• Fix: Reconnecting a domain to a different Cookie Compliance app now refreshes its plan status right away — the visit-limit notice and autoblocking allowance update on save instead of lagging until the next hourly sync.
• Fix: Account setup now confirms an explicit success response before activating a paid plan, so an incomplete or interrupted server reply can no longer leave an account on the wrong plan.
• Tweak: Banner-script delivery is now server-controlled, so future banner improvements can roll out gradually and safely without requiring a plugin update. Your current banner is unchanged.
• Tweak: Configuration and plan changes made in your Cookie Compliance dashboard now apply to your site faster. Previously a publish or plan upgrade could take until the next scheduled sync to take effect; your site now refreshes its settings right away via a secure server signal.

3.1.1

• Fix: The cookie compliance banner and per-form privacy consent prompts now render correctly on sites where Cloudflare Rocket Loader or a caching/optimizer plugin (WP Rocket, LiteSpeed Cache, Autoptimize, NitroPack, Jetpack Boost) defers script execution. The plugin’s inline configuration and per-form helper scripts now signal these tools to skip them, extending the banner-script protection added in 3.0.3.
• Tweak: The WordPress dashboard widget now shows a protection scorecard — GPC signal, consent records, and visit quota — replacing the previous usage chart.

3.1.0

• New: WP Consent API integration — Compliance now registers as the active Consent Management Platform under the WP Consent API when that plugin is installed, so cooperative plugins like WooCommerce, Google Site Kit, Burst Statistics, WP Statistics, AddToAny, and Pixel Manager for WooCommerce automatically gate themselves on the consent state captured by your banner. Hu-manity’s four consent levels map to the WP Consent API’s five categories: Strictly Necessary → functional (always allowed), Functional → preferences, Analytics → statistics and statistics-anonymous, Marketing → marketing. Global Privacy Control automatically suppresses the marketing category. A new “WP Consent API” toggle on the Configuration tab lets you turn the integration off; it is on by default when both plugins are active.
• Tweak: The loading screen now reads “Hang tight — this may take a few seconds on slower connections” and the troubleshooting panel waits 15 seconds before appearing, giving slow connections more breathing room before setup suggestions surface.

3.0.6

• Tweak: The Consent Security Policy (CSP) warning on the Compliance settings page now clears immediately once a valid .htaccess is detected — reloading the page, clicking Purge Cache, or clicking Pull Configuration each re-evaluate in real time.

3.0.5

• Fix: Disabling Autoblocking via the legacy settings form on multisite sites now saves correctly.

3.0.4

• Fix: The Compliance settings page no longer breaks on sites where Cloudflare Rocket Loader or a caching/optimizer plugin (WP Rocket, LiteSpeed Cache, Autoptimize, NitroPack, SG Speed Optimizer, or Jetpack Boost) is configured to process WP admin scripts. The plugin’s admin bundle now signals these tools to skip it, extending the same banner-script protection added in 3.0.3.
• Fix: If the Compliance settings page fails to load, you now see a “Loading Compliance dashboard…” message that reveals troubleshooting steps (caching plugin, browser extension, incognito mode) and a link to support — replacing the silent white screen some users hit when a CDN, optimizer, or browser extension blocked the admin bundle.

3.0.3

• Tweak: Send client type, plugin version, and admin UI mode (React or Legacy) as HTTP headers on platform API requests to support integration adoption analytics. No effect on banner behavior, site visitors, or consent data.
• Docs: Added a Privacy section to the readme describing, by service and data category, what the plugin sends to Hu-manity.co services and when. Placed after Installation per WordPress convention. Covers admin-side state stored on the WordPress site (options, transients, localStorage), the visitor IP visibility implied by the banner’s direct browser-to-platform requests, retention of plugin-side caches and platform-side account/consent data, sub-processors (Braintree for plugin-initiated payments, additional payment gateway providers for webapp-managed subscriptions, and Hu-manity.co’s email subscription service), data processing location (European Union, AWS Ireland), and concrete data-subject rights (deactivation, CSV export, account deletion, and GDPR Article 17 / CCPA erasure of visitor records within a 30-day SLA per GDPR Article 12).
• Fix: Added JS optimizer exclusion attributes to the banner script tags to prevent caching and performance plugins from delaying consent recording. Covers WP Rocket (data-nowprocket), Autoptimize (data-noptimize), LiteSpeed Cache (data-no-optimize), NitroPack (nitro-exclude), Jetpack Boost (data-jetpack-boost), and Cloudflare Rocket Loader (data-cfasync). Also adds stable IDs (hu-banner-options, hu-banner-js) so users of plugins without attribute support (W3 Total Cache, SG Optimizer, Swift Performance) can enter these as exclusion keywords in their plugin settings.
• New: GPC banner mode is now configurable directly from the plugin. The Protection tab’s GPC panel exposes three options for what visitors see when their browser signals Global Privacy Control — “Show passive notice” (a brief auto-dismiss confirmation that the preference was honored), “Silent” (no on-screen indication), or “Show full banner” (the standard consent flow). When CCPA or other US privacy laws are selected, the plugin defaults to “Show passive notice” — improving transparency without re-displaying the banner on every page. The active mode is also surfaced on the GPC Support card under Compliance Behavior so site admins can see at a glance how GPC manifests for their visitors. The setting can still be changed at any time in the Cookie Compliance web application.

3.0.2

• Fix: Decouple Autoblocking from privacy law selection in React and legacy settings — the toggle now appears for connected users regardless of whether laws are configured, and is no longer mislabeled as a Pro-only feature in the legacy UI.
• Fix: Preserve boolean types when caching Designer, Account, and Analytics API responses — compliance flags such as gpcSupportMode, doNotTrackMode, onScroll, onClick, uiBlocking, revokeConsent and nested regulations were being silently coerced to strings, which risks breaking strict type checks downstream.

3.0.1

• Fix: Resolved missing file error preventing plugin activation for some users who updated during the initial 3.0.0 release

3.0.0

• Rebrand: Plugin renamed from “Cookie Notice & Compliance for GDPR / CCPA” to “Compliance by Hu-manity.co”. WordPress admin sidebar now reads “Compliance” with Settings and Audit Trail submenus. All internal option keys and slugs remain unchanged — no action required for existing installs.
• New: Modern React-based admin dashboard replaces the legacy PHP settings pages. Three main tabs — Protection, Settings, and Audit Trail — with a polished, card-based interface.
• New: Guided setup wizard with banner template picker (6 presets), setup checklist, and quick-start configuration for new installs.
• New: Welcome Modal with in-plugin account creation, plan selection, and Braintree payment — complete the signup flow without leaving WordPress.
• New: Protection Chooser — redesigned tier selection (Basic, Professional, Business) with feature comparison cards.
• New: 5-position banner placement selector (top, bottom, floating left, floating right, floating center) with fixed/floating toggle. Dismiss animation controls added to Banner Design settings.
• New: Law Selector with geo-aware regulation display and compliance context for GDPR, CCPA, and 100+ jurisdictions.
• New: Consent Modes panel — configure Google Consent Mode v2, Facebook, and Microsoft consent toggles directly from the plugin.
• New: Audit Trail tab — view consent log records pulled live, with dynamic consent level labels.
• New: Conditional Display rule builder — control when and where the consent banner appears.
• New: Excluded Script Handles setting — exclude specific scripts from autoblocking by handle name.
• New: Centralized notification system with contextual calls-to-action based on your setup status and subscription tier.
• New: Portal deep links — jump directly from the plugin to the relevant page in the Cookie Compliance web application.
• New: Live configuration sync — admin pages pull fresh banner configuration from the platform on load.
• New: React ErrorBoundary prevents white-screen crashes — admin gracefully recovers from unexpected errors.
• Improvement: Pro feature indicators show locked features with upgrade prompts for free-tier users.
• Improvement: Usage dashboard shows near-limit nudge at 70%+ of cycle usage.
• Improvement: Email-exists recovery flow guides users who try to register with an existing account.
• Fix: Domain URL normalization on login prevents duplicate app registrations.

2.5.16

• Fix: Multisite with global override now correctly reads blocking data and cache-purge transients from network storage
• Fix: Custom patterns and providers are now always included in huOptions regardless of autoblocking state

2.5.15

• Fix: Multisite with global override now correctly loads custom blocking patterns and providers on the frontend

2.5.12

• New: Added pull configuration option to sync on demand instead of waiting for cron

2.5.11

• Security: Enforce TLS verification for platform API requests.
• Security: Require capability + nonce for cache purge and privacy consent/conditional rule AJAX handlers.
• Tweak: Switch admin notice JS to vanilla to avoid jQuery conflicts and ensure notices can be closed.

2.5.10

• Fix: Make close icon keyboard-focusable (Enter/Space handler, tabindex, focus outline)
• Fix: Ensure policy link uses href/target and data attrs so “Message” position opens correctly
• Fix: Enqueue frontend JS when [cookies_revoke] shortcode is present to allow reopen links for logged-in sessions
• Fix: Guard legacy options fallback to avoid PHP 8 fatal on non-array settings

2.5.9

• Security: Fixed Stored XSS vulnerability in [cookies_accepted] shortcode via HTML entity resurrection
• New: Easy Digital Downloads privacy consent support
• Fix: Improved bot detection and object cache compatibility

2.5.8

• New: Microsoft Clarity Consent API v2 support
• Fix: Prevent loading banner in Beaver Builder
• Fix: Improved bot detection and object cache compatibility
• Fix: Close icon accessibility by switching to button

2.5.7

• New: Microsoft Consent Mode support
• Tweak: Convert banner links to buttons (for accessibility)
• Tweak: Improved compatibility with caching plugins
• Fix: Displaying cookie notice in admin

2.5.6

• New: Added Form and Source columns to Privacy Consents table
• Fix: WooCommerce render block issue
• Tweak: Updated WooCommerce Blocks Checkout handling
• Tweak: Disable Privacy Consent cupport when there are no forms available
• Tweak: Updated Chart.js to 4.4.8

2.5.5

• New: Added Privacy Consent activity chart
• Fix: Hummingbird caching plugin compatibility

2.5.4

• New: Option to handle all or selected forms in Privacy Consent
• Fix: Undefined array key “form_type” when switching WooCommerce forms

2.5.3

• Fix: Undefined huOptions variable
• Fix: Prevent loading Privacy Consent modules without Cookie Compliance
• Tweak: Updated Chart.js to 4.4.6

2.5.2

• Fix: Fatal error on pages with embedded contact form 7 forms

2.5.1

• Fix: Missing one of the plugin files

2.5.0

• New: Introducing Privacy Consent
• Tweak: UI updates for the Consent Logs page
• Tweak: Onboarding screen UI improvements
• Tweak: Switch from local to GMT time for consent logs display
• Tweak: Admin menu reorganization

2.4.18

• Fix: Potential security issue with escaping textarea fields
• Fix: Saving link target for Privacy Policy page
• Fix: Force protocol for widget URL

2.4.17

• New: SpeedyCache caching plugin compatibility
• New: Breeze caching plugin compatibility
• Fix: Improved WP Rocket plugin compatibility
• Fix: Improved Speed Optimize plugin compatibility
• Fix: Network settings override switching
• Tweak: Chart.js updated to 4.4.3

2.4.16

• New: Option to enable/disable bot detection
• Fix: Typo in wp_die() function calls
• Tweak: Improved escaping text strings

2.4.15

• New: Passing Google Consent default parameters (Cookie Compliance only)
• Fix: Invalid Norwegian language locale code

2.4.14

• New: Google Consent V2 support (Cookie Compliance only)
• New: Added scripts option to Compliance Settings

2.4.13

• Fix: Removed unneeded parameter from WP Fastest Cache compatibility fix

2.4.12

• New: WP Optimize caching plugin compatibility
• Fix: WP Fastest Cache plugin compatibility

2.4.11

• New: Dedicated Consent Logs page
• New: Google AMP support for Cookie Compliance
• New: Settings navigation through tabs and menu items
• Fix: Saving App ID/Key not working in edge cases
• Tweak: Chart.js updated to 4.4.0

2.4.10

• New: Option to enable/disable caching compatibility
• New: WP Fastest Cache plugin compatibility
• Fix: Potential security issue with purging cache
• Fix: Improved refreshing Compliance analytics data
• Tweak: Chart.js updated to 4.3.2

2.4.9

• New: WP Rocket plugin compatibility
• New: LiteSpeed Cache plugin compatibility
• New: Google Consent Mode support (Cookie Compliance only)
• New: Facebook Pixel Consent Mode support (Cookie Compliance only)

2.4.8

• New: Added Pages to Conditional display
• Fix: Homepage display issue
• Fix: Background color issue
• Tweak: Improved WP Rocket support
• Tweak: Improved SG Optimizer support

2.4.7

• New: Conditional display of the banner
• Tweak: Improved sanitization and validation of data
• Tweak: PHP 8.1 and 8.2 compatibility
• Tweak: Added async attribute when autoblocking is disabled

2.4.6

• Fix: Cookie Compliance inactive status issue

2.4.5

• Tweak: Remove the notice from the Elementor page builder
• Tweak: Remove the notice from widgets screen
• Fix: Improved Contact Form 7 reCaptcha compatibility

2.4.4

• Fix: Undefined index: status and subscription

2.4.3

• Fix: Deprecated preg_replace() notice in PHP 8.1

2.4.2

• New: Compatibility with Autoptimize plugin
• Fix: Improved Contact Form 7 reCaptcha support
• Fix: Fixed non-static method cookies_set()

2.4.1

• New: Contact Form 7 reCaptcha support
• Tweak: Switched health status from critical to recommended when Cookie Compliance is not integrated
• Tweak: Add SimeSite=Lax for created cookies

2.4.0

• New: Advanced Multisite support
• Fix: Polylang translation not working for shortcode
• Fix: Parse error: syntax error, unexpected ‘[‘

2.3.1

• New: Option to run consent banner in debug mode
• Fix: Invalid validation of dismissable notices

2.3.0

• New: Compliance Multi-license pricing options
• Tweak: WordPress 6.0 compatibility

2.2.3

• Fix: Undefined notice in WP dashboard
• Fix: Close icon event not firing
• Tweak: Remove aria-label from the close icon
• Tweak: CSS tweaks in the admin

2.2.2

• Fix: Uncrawlable close notice link
• Tweak: WordPress 5.9 compatibility
• Tweak: Prevent displaying the notice in an iframe
• Tweak: Send site language to a web app on signup

2.2.1

• Fix: Missing variable definition in frontend

2.2.0

• New: Option to hide banner for logged in users (Compliance only)

2.1.5

• Tweak: Additional sanitization applied

2.1.4

• Fix: WordPress 5.8 widgets compatibility

2.1.3

• Fix: HTML attributes removed from text strings
• Tweak: Improved sanitization of options

2.1.2

• Tweak: Improved escaping of button labels

2.1.1

• Fix: Security bug related to compliance caching

2.1.0

• New: Introducing Cookie Compliance Free plan

2.0.4

• Fix: Undefined constant HOURS_IN_SECONDS
• Fix: Button style none adding CSS classes “cn-set-cookie cn-button”
• Tweak: Switched the behavior of close icon from accept to reject
• Tweak: Minified frontend and admin js files

2.0.3

• Fix: Cookies accepted function issue when Compliance activated

2.0.2

• Tweak: UI/UX improvements

2.0.1

• Fix: Pending Compliance update blocking the notice
• Fix: PHP Warning: Cannot modify header information
• Tweak: UI/UX fixes for the settings screen

2.0.0

• New: Introducing Cookie Compliance for GDPR/CCPA

1.3.2

• Tweak: Speed up Corona Banner loading by moving JS file to footer with async parameter
• Tweak: Improve buttons CSS padding
• Tweak: Accessibility improvements on links

1.3.1

• Fix: Unable to select Privacy policy link
• Fix: Blank Cookies policy link in a message
• Fix: Undefined index: on_click
• Tweak: Adjusted default opacity back to 100

1.3.0

• New: Introducing Corona Banner that displays data about Coronavirus pandemia and five steps recommended by the WHO (World Health Organization)
• New: Option to set bar opacity
• New: Accept the notice with close icon
• Fix: Policy link added to message without policy option enabled

1.2.51

• Fix: Problems with iOS and OK/Reject button
• Tweak: Added Separate cookie expiry for Reject, props Carlos Buchart

1.2.50

• Fix: The body css class always set to “cookies-refused”
• Tweak: Improve IE & Safari CustomEvent and ClassList support
• Tweak: Change the plugin js init event

1.2.49

• New: Option to accept the notice with any page click
• Tweak: Remove jQuery dependency
• Tweak: Swtich from jQuery to CSS3 animations
• Tweak: Improve the CSS and HTML structure

1.2.48

• Fix: HTML tags stripped from cookie message
• Fix: Link target not accepted in inline privacy link

1.2.47

• New: Option to select the privacy policy link position
• Tweak: Do not relad the page on refuse button click
• Tweak: Added aria-label attribute to cookie notice container

1.2.46

• Tweak: Remove WP Super Cache cookie on deactivation
• Tweak: Remove plugin version from the db on deactivation

1.2.45

• Tweak: Improved WP Super Cache support
• Tweak: CSS container style issue and media query for mobile

1.2.44

• Fix: The text of the revoke button ignored in shortcode
• Fix: Revoke consent button not displayed automatically in top position
• Tweak: Add shortcode parsing for content of [cookies_accepted], thanks to dsturm

1.2.43

• New: Option to revoke the user consent
• New: Script blocking extended to header and footer
• New: Synchronization with WordPress 4.9.6 Privacy Policy page
• New: Custom button class option
• Tweak: Added 1 hour cookie expiry option

1.2.42

• New: Introducing [cookies_accepted][/cookies_accepted] shortcode
• Fix: Infinite cookie expiry issue

1.2.41

• Fix: Infinite redirection loop with scroll enabled

1.2.40

• Fix: Div align center on some themes
• Tweak: Extended list of allowed HTML tags in refuse code
• Tweak: Minified CSS and JS

1.2.39

• New: Option to reload the page after cookies are accepted

1.2.38

• Tweak: Move frontend cookie js functions before the document ready call, thanks to fgreinus
• Tweak: Adjust functional javascript code handling
• Fix: Chhromium infinity expiration date not valid
• Fix: Remove deprecated screen_icon() function

1.2.37

• Tweak: Add aria landmark role=”banner”
• Tweak: Extend cn_cookie_notice_args with button class

1.2.36.1

• Fix: Repository upload issue with 1.2.36

1.2.36

• Fix: String translation support for WMPL 3.2+
• Fix: Global var possible conflict with other plugins
• Tweak: Add $options array to “cn_cookie_notice_output” filter, thanks to chesio.
• Tweak: Removed local translation files in favor of WP repository translations.

1.2.35

• Tweak: Use html_entity_decode on non-functional code block
• Tweak: get_pages() function placement optimization
• Tweak: Filterable manage cookie notice capability

1.2.34

• Fix: Empty href in links HTML validation issue

1.2.33

• New: Greek translation thanks to Elias Stefanidis

1.2.32

• Fix: Accept cookie button hidden on acceptance instead of the cookie message container

1.2.31

• New: Non functional Javascript code field
• Fix: Minified Javascript caching issue

1.2.30

• Fix: jQuery error after accepting cookies

1.2.29

• Tweak: Add class to body element when displayed
• Tweak: Italian translation update

1.2.28

• New: Option to set on scroll offset

1.2.27

• Tweak: Correctly remove scroll event, limit possible conflicts
• Tweak: Italian translation update

1.2.26

• Fix: Accept cookies on scroll option working unchecked.
• Fix: call_user_func() warning on lower version of WP

1.2.25

• New: Option to accept cookies on scroll, thanks to Cristian Pascottini

1.2.24

• New: Option to refuse to accept cookies
• New: setCookieNotice custom jQuery event
• Tweak: Italian translation updated, thanks to Luca Speranza

1.2.23

• New: Finnish translation, thanks to Daniel Storgards

1.2.22

• Tweak: Swedish translation updated, thx to Ove Kaufeldt

1.2.21

• New: Plugin development moved to dFactory GitHub Repository
• Tweak: Code cleanup

1.2.20

• New: Option to select scripts placement, header or footer

1.2.19

• New: Danish translation, thanks to Lui Wallentin Gottler

1.2.18.1

• Fix: Quick fix for 1.2.18 print_r in code

1.2.18

• New: More info link target option
• Tweak: Additional HTML ids, for more flexible customization

1.2.17

• New: Hebrew translation, thanks to Ahrale Shrem

1.2.16

• Tweak: Dutch translation missing due to a typo

1.2.15

• New: Danish translation, thanks to Hans C. Jorgensen
• Fix: Notice bar not visible if no animation selected

1.2.14

• New: Hungarian translation, thanks to Surbma

1.2.13

• New: Croatian translation, thanks to Marko Beus

1.2.12

• New: Slovenian translation, thanks to Thomas Cuk

1.2.11

• New: Swedish translation, thanks to Daniel Storgards

1.2.10

• New: Italian translation, thanks to Luca
• Tweak: Confirmed WP 4.0 compatibility

1.2.9.1

• Tweak: Enable HTML in cookie message text
• New: Option to donate this plugin 🙂

1.2.8

• New: Czech translation, thanks to Adam Laita

1.2.7

• New: French translation, thanks to Laura Orsal
• New: Deleting plugin settings on deactivation as an option

1.2.6

• New: German translation, thanks to Alex Ernst

1.2.5

• New: Spanish translation, thanks to Fernando Blasco

1.2.4

• New: Added filter hooks to customize where and how display the cookie notice

1.2.3

• New: Portuguese translation, thanks to Luis Maia

1.2.2

• Fix: Read more linking to default site language in WPML & Polylang

1.2.1

• Tweak: UI improvements for WP 3.8

1.2.0

• Fix: Cookie not saving in IE
• Fix: Notice hidden under Admin bar bug
• Tweak: Improved WPML & Polylang compatibility

1.1.0

• New: Rewritten cookie setting method to pure JS
• Fix: Compatibility with WP Super Cache and other caching plugins

1.0.2

• New: Dutch translation, thanks to Heleen van den Bos

1.0.1

• Tweak: Changed setting cookie mode from AJAX to JS driven

1.0.0

Initial release