=== Datoden Cookie Consent ===
Contributors: datoden
Tags: cookie banner, cookie consent, gdpr, consent mode, privacy
Requires at least: 6.5
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 3.0.4
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A clean cookie banner that follows the rules – Accept and Reject equally easy, nothing pre-ticked, nothing loaded from other servers.

== Description ==

In the WordPress admin the plugin is shown as "DT-cookie" in the DT-addons menu (Datoden's menu).

* Follows the EU/EEA rules for every visitor: consent before any non-necessary cookies, nothing set until the visitor has chosen.
* Accept all and Reject all are equally large, nothing is pre-ticked, and Settings lets visitors choose per category (Necessary, Statistics and – if you use it – Marketing).
* The choice is remembered for 12 months in the cookie dt_consent (for WordPress installed in a subfolder, e.g. /shop/, the cookie gets its own name, e.g. dt_consent_shop, and is limited to that path, so other sites on the same domain are not affected). Visitors can change it at any time via the shortcode [datoden_cookie_settings] or a menu item with the CSS class dt-consent-open.
* Google Consent Mode v2: Google tags start as denied and follow the visitor's choice.
* WP Consent API: plugins such as Site Kit and WP Statistics follow the choice automatically.
* Scripts you mark with type="text/plain" data-dt-consent="statistics" (or "marketing") only run after consent.
* Your logo (light and dark mode), accent colour and position – with a live preview.
* Follows the visitor's light or dark mode.
* The banner speaks the website's language: English, Swedish, German, French, Spanish, Italian, Dutch, Danish, Norwegian and Finnish – add your own languages, and change every text (heading, text, buttons and categories) with Reset text to go back.
* Ask everyone again: all visitors get the question again on their next visit, for example when you start using new cookies.
* Anonymous count of the choices per day (accept all, reject all, custom) – no personal data, stored on your website.
* Everything runs from the plugin: no external requests, no tracking.

= Free Datoden account (optional) =
Everything in the plugin works without an account. Connect the website to a free Datoden account and you also get website monitoring: Datoden checks your website every five minutes and emails you right away if it goes down, and before the SSL certificate or the domain expires. Nothing is sent to Datoden until you click Connect. See External services below for exactly what is sent.

= Pro add-on =
In the separate paid add-on Datoden Cookie Consent Pro (from Datoden, not part of this plugin): rules per country (for example 6 months in France, opt-out in the United States), a scan of the website that sets up the plugin, automatic blocking of known scripts, a list of services for the privacy policy and proof of consent stored on your website. This plugin works fully on its own without it.

== Frequently Asked Questions ==

= Which rules does it follow? =
The EU/EEA rules (GDPR and the ePrivacy rules): consent before all non-necessary cookies, Reject as easy as Accept, and the choice is kept for 12 months. This is not legal advice.

= Does it block scripts until consent? =
Plugins that use the WP Consent API and Google tags with Consent Mode follow the choice automatically. Other scripts can be marked with type="text/plain" data-dt-consent="statistics" (or "marketing") and are only run after consent.

= I use a cache plugin =
The cache of common cache plugins is cleared automatically when you save.

== Screenshots ==

1. The cookie banner on a website – Accept all and Reject all are equally easy.
2. Cookie settings – visitors choose per category.
3. The banner follows the visitor's dark mode.

== External services ==

This plugin can connect to Datoden (https://datoden.com), a service run by Responsit AB, Sweden. The connection is optional – everything in the plugin works without it. Nothing is sent to Datoden until an administrator clicks "Start DT-website-guard" (or "Connect") in the WordPress admin and approves the connection on datoden.se or datoden.com. You can disconnect at any time with "Disconnect" (or by turning DT-website-guard off) on the DT-website-guard page; then nothing more is sent.

What is sent to Datoden, and when (only while the website is connected, except the connection itself):

* When you connect: the website address, the administrator's language (Swedish or English), the WordPress address that Datoden returns to and a random check value. After you approve on Datoden, the website sends the one-time code it got back, together with the website address and the language, and receives a website key that is stored in your database.
* Once a day (WordPress cron), and when an administrator opens a DT plugin page and the last contact is more than six hours old: the website key, the language, and the folder names, versions and active state of the installed Datoden plugins (for example datoden-cookie-consent). The answer can contain short messages from Datoden and updated wording for the DT plugins' texts, which are shown on the plugins' pages.
* When an administrator opens the DT-website-guard page or a DT plugin page (at most every five minutes), or clicks "Check again": the website key, to get the latest result of Datoden's monitoring (up or down, response time, and the expiry dates of the SSL certificate and the domain). "Check again" also asks Datoden to check the website once more.
* When the DT-website-guard page is shown and the DT-website-guard plugin is installed: the list of Datoden's plugins and their versions is fetched from datoden.se, at most every six hours. No data about the website is sent.
* When you click "My websites": the website key, the language and the email address of the logged-in WordPress user, so that Datoden can sign you in directly if it is the same address as your Datoden account.
* When you save, use or delete a settings profile: the website key, and when saving the settings of DT-cookie and DT-darkmode (no personal data; website-specific values such as the logo and the privacy page are left out). They are stored in or read from your Datoden account.
* When you disconnect: the website key, so that Datoden can remove it.
* While connected, Datoden visits the public website every five minutes (like any visitor) to check that it is up, reads its SSL certificate and looks up the domain's public registration data to find when it expires. The plugin shows the dates as Datoden reports them; the website does not contact any other service for this.

Datoden terms: https://datoden.com/terms/
Datoden privacy policy: https://datoden.com/privacy-policy/

== Changelog ==

= 3.0.4 =
* No images or addresses are loaded from Datoden in the banner: the logo comes only from the settings (the site logo, your own image or none), and without a privacy page no policy link is shown.

