Description
Bulgaro GDPR adds a GDPR cookie consent banner (cookie notice) to your WordPress site: it blocks analytics and marketing scripts until the visitor agrees, records every consent, and never breaks checkout.
The free plugin includes:
- A cookie consent banner with Accept, Necessary only, and category preferences — 14 languages or automatic browser detection
- Consent management with records stored as a pseudonymous SHA-256 id (no IP address) — GDPR and ePrivacy friendly
- Automatic blocking for known trackers (GA4, GTM, Meta Pixel, and others)
- Google Consent Mode v2
- A scanner that stays on your server
- Coverage for WordPress core cookies, WooCommerce, and payment providers
- A Consent Register showing how many consents were recorded and the most recent entries
Payment scripts are detected and never blocked, so checkout can finish. Covered providers include Stripe, PayPal, WooPayments, ePay.bg, BORICA, myPOS, EasyPay, Paysera, Revolut Pay, Mollie, Klarna, Adyen, Square, Braintree, Amazon Pay, Google Pay, Razorpay, PayU, 2Checkout, iCard, TBI Bank and NestPay virtual POS.
The admin screens are available in English and Bulgarian.
Bulgaro GDPR Pro
Bulgaro GDPR Pro is an optional paid add-on that adds:
- 10 extra banner color themes (15 in total) and 3 extra banner shapes
- Custom Scripts Manager — inject your own functional, analytics and marketing snippets, each fired only after the visitor consents to that category
- Consent Register audit tools — CSV export for audits and a configurable retention window
- A daily automatic website scan with an email alert when a new third-party tracking service appears
The free plugin is fully functional on its own; the add-on only adds the extras above. Learn more: https://supremecommerce.eu/bulgaro-gdpr/
External services
The core GDPR features — cookie banner, script blocker, scanner and payment coverage — work entirely on your own server and send no data anywhere. The only same-domain requests are from the built-in Website Scanner, which reads pages on your OWN site (same domain) with the user agent BulgaroGDPR-Scanner, and only when you start a scan from the admin. No visitor data is ever sent off your site.
Freemius (payments and licensing). The plugin uses the Freemius service to sell and manage the optional Pro upgrade: secure checkout, license activation, update delivery and (only if you opt in) anonymous usage diagnostics. On activation you are shown an opt-in screen that you can skip — the free plugin runs fully in anonymous mode and contacts Freemius only when you choose to connect, buy a license, activate one, or check for a Pro update. Data that may then be sent includes your site URL, WordPress/PHP versions, admin email and license key, used to deliver and validate your purchase. Freemius is operated by Freemius, Inc.
Terms: https://freemius.com/terms/ — Privacy policy: https://freemius.com/privacy/
The service and CDN domain names that appear inside the plugin code (for example Google Analytics, Stripe, jQuery/Swiper CDNs) are detection patterns only: they are text the scanner matches against the HTML of your own pages to recognise which third-party scripts a visitor’s browser would load. The plugin never loads, enqueues or connects to any of them.
Payment and captcha hosts (Stripe, PayPal, ePay.bg, BORICA, reCAPTCHA, and the rest of the catalog) are loaded by those providers when a visitor reaches a form or checkout. This plugin does not contact them itself.
Installation
- Upload the
bulgaro-gdprfolder to/wp-content/plugins/. - Activate Bulgaro GDPR from the Plugins screen.
- Open Bulgaro GDPR Settings and set the cookie policy URL.
- Open Bulgaro GDPR WordPress & Payments and confirm the shop’s payment gateways are in the catalog.
- Run Scan Website. Checkout, cart and a product page are included when WooCommerce is active.
Place [bulgaro_consent_settings] on the policy page so visitors can change their choice. Place [bulgaro_cookie_table] to list WordPress, WooCommerce and payment cookies. The “Create Cookie Policy page” button publishes a ready page with both.
FAQ
-
Does this block card payments?
-
No. Payment providers are classified as necessary and the script blocker ignores their URLs. ePay.bg, BORICA and NestPay are usually a form post; the scanner reads form actions on the checkout page.
-
Does the plugin phone home?
-
No. There is no license server and no remote call except the scanner reading your own URLs.
-
Is the compliance score a legal guarantee?
-
No. It is a technical configuration score.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Bulgaro GDPR” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “Bulgaro GDPR” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
2.0.1
- Fix: the daily cleanup no longer calls itself in a loop — old consent records are pruned again
- Fix: banner languages no longer mix on Bulgarian sites — each language shows its own texts
- Fix: the generated Cookie Policy page now includes the live cookie table
- Fix: Settings, Consent Register and Activate License open before the Freemius opt-in is answered
- Fix: the compliance light turns red when the banner is off, even before the first scan
- Fix: consent records count from their last update, so a renewed consent is not deleted early
- Fix: clicking “Create Cookie Policy page” again shows “already set” instead of “page created”
- Fix: saving settings no longer clears the server’s PHP cache
- Fix: Czech reopen button reads “Cookies”
- New: set how long the visitor’s choice is remembered (1–730 days) in Settings
- Improve: the cookie table shows the real consent cookie lifetime
- Improve: the Quick guide points to Auto-blocking in the free version
2.0.0
- New: one-click “Install PRO now” — after activating a license, PRO installs and switches on right from the Activate License screen
- New: the free copy switches off automatically when PRO is active, so only one copy ever runs
- Improve: a clean four-item admin menu — Dashboard, Consent Register, Settings and Activate License
- Improve: Custom Scripts and AI Register (PRO) now open as tabs inside Settings
- Improve: the plugin menu sits in the WooCommerce group, next to the other Bulgaro tools
- Improve: after licensing steps you stay on the Activate License screen
- Fix: the plugin stays active through the free to PRO upgrade
- Fix: the auto-save badge no longer shows when nothing was saved
- Fix: the PRO badge in the Reopen button settings stays next to its label
- Fix: Crisp chat detection in the scanner
- Bulgarian admin translation updated
1.x (2026)
- 1.7 — Activate License screen, Pro reopen logo, consent-retention presets, multi-recipient scan alerts, WordPress.org review reminder
- 1.6 — reopen button with icons (free and Pro), Live Preview for every visual setting, full Bulgarian admin
- 1.5 — Pro AI tools: auto-labeling, AI Register, multilingual AI disclosures, AI image source marking
- 1.4 — AI Transparency module for the EU AI Act (Art. 50): page generator, banner link, shortcodes
- 1.3 — Pro upgrade powered by Freemius, Custom Scripts Manager, email scan alerts, Consent Register audit tools
- 1.0 – 1.2 — Consent Register, payment-safe script blocker, rate-limited consent endpoint, Cookie Policy generator
- 0.9 – 0.10 — first releases: consent banner in 14 languages, script blocker, website scanner, payment coverage for Bulgarian and EU checkouts
