Hey everyone 👋

SureCookie Pro 1.2.0 adds a full data-request workflow, gives AI assistants more to work with, and makes the Compliance Guard much easier to manage when one tracker needs a closer look. There are also a few thoughtful improvements around scanning, privacy wording, and theme color support.

What’s new

Handle visitor privacy requests from start to finish
There’s a new Data Requests workflow for GDPR and CCPA requests. You can publish the form with the “[ surecookie_data_request ]” shortcode or let SureCookie place it on your privacy policy page, then choose which rights visitors can request, including access, portability, rectification, erasure, objection, restriction, and a free-form other option.

What that means for you:

• Give visitors a clear way to submit privacy requests without building your own process
• Keep everything in one workflow instead of tracking requests manually
• Offer the exact rights your site needs to support

AI assistants can now help with Data Requests and Geographic Rules
With an active license, AI assistants can now work through the data request queue, including spotting requests that are already past their statutory deadline, and manage Geographic Rules as well. Pro settings also describe themselves more clearly and warn when a setting could loosen blocking.

Release one tracker without switching off the whole guard
You can now release a single tracker held by the Compliance Guard instead of turning the whole guard off site-wide. The new Blocked Until Reviewed list shows what’s being held, whether something else would still block it, and lets you release it in one click. SureCookie also remembers those releases and repairs already-stuck entries on the next page load.

SureCookie data now joins WordPress privacy exports and erasure tools
SureCookie’s records now appear in WordPress’s own Tools > Export Personal Data and Erase Personal Data screens. That means requests handled through WordPress core can include the data SureCookie stores too.

Better than before

• Automatic Scanning is easier to review when a scan finds lots of new cookies, with a shorter summary, a separate full-list panel, and Approve All placed up top.
• Long cookie names are now shortened from the middle so both ends stay readable.
• The California privacy template now uses the current “Do Not Sell or Share My Personal Information” wording.
• The California template now better reflects sharing for cross-context behavioral advertising, not just a sale.
• Astra’s global color palette is now available in the custom banner color picker.
• Block theme color palettes are now available in the banner color picker too.

Fixes

• Resources set to Always allowed are no longer released on the server side but blocked again in the browser. Fixed.
• Domain-based Always allowed entries now match the host correctly, so allowing your own domain won’t accidentally allow a third-party tracker just because it mentions that domain in a query string. Fixed.

We think you’ll like this one. Update when you’re ready.

As always, support is one click away if anything feels off.

Hey everyone 👋

This release gives you better day-to-day control over privacy work, makes it easier to reuse a setup across sites, and fixes a long list of real-world blocking issues on cached, optimized, and plugin-heavy WordPress sites. Let’s get into it.

What’s new

Track privacy requests in one place
There’s a new Data Requests screen where GDPR and CCPA requests arrive, stay organized, and show their response deadline. If you use SureCookie Pro, you can answer them there. If not, the screen still shows the workflow so nothing gets missed.

What that means for you:

• Keep requests moving without losing track of deadlines
• See the full workflow even before upgrading to Pro

Import and export your setup
You can now move settings, Cookie Categories, and Custom Cookies between sites. Handy if you manage multiple installs or want a backup before making bigger changes.

AI Assistants can now reach much more of SureCookie
AI assistants can now inspect your setup more deeply, including a diagnostic summary, blocked scripts and embeds, the Known Services library, and the pages and menus your settings point to. That means faster answers and more useful help when you want to troubleshoot or make changes.

Customize the blocked-content placeholder
You can now control the Blocked Content UI, so the placeholder shown instead of blocked videos or embeds can better match your site and explain what visitors need to do.

Verify your domain with DNS
If a firewall or security plugin blocks our scanner, you can now verify your domain with a DNS TXT record instead. Allowlisting the scanner still works too.

Ask AI to help with cookie cleanup and scan planning
You can now ask an AI assistant to recategorize cookies in bulk, or check your remaining scan allowance before starting a scan.

Better than before

• Consent logs now have a date filter, so it’s easier to review a specific time period.
• Hide Unused Categories now lets you keep empty categories out of the visitor preferences modal.
• An Astra Global Palette option makes banner colors match your Astra theme more easily.
• AI assistant setting controls now describe allowed values and flag settings that affect what visitors see before consent.
• Trackers injected after page load are now held behind consent and show the usual Accept & Load placeholder.
• Script and embed matching is no longer case-sensitive.
• The Google Consent Mode screen now better explains what Tag Manager does and does not cover.
• Presto Player videos and embeds now follow the category set on the Scripts and Embeds page.
• Resources blocked by the built-in service list now appear on the Scripts and Embeds page so you can reassign their category there.
• The blocked-content message now explains that the content would connect to the service, instead of saying it requires cookies.

Fixes

• YouTube videos added with Elementor’s Video widget are now properly held behind consent and play in place once accepted.
• Fixed cases where the banner failed to appear when JavaScript was combined by caching plugins, especially LiteSpeed Cache.
• Improved cached CSS and JS handling with WP Rocket, W3 Total Cache, LiteSpeed Cache, and Flying Press.
• Fixed the admin dashboard shrinking when MemberPress Courses is active.
• Google Consent Mode now shows the rule actually in force and warns when a category is granted before the visitor answers.
• Scripts inlined as data: URIs by performance plugins like Perfmatters are now blocked correctly.
• Scans on sites using Google Consent Mode now see the site the way an accepting visitor would, so Cookie Detection is more accurate.
• Banner and Modal descriptions now handle non-breaking spaces and long unbreakable content without overflowing.
• AI-assisted scans of specific pages now scan the pages you selected, not the site defaults.
• Changing a setting through an AI assistant now clears stale cached Banner output more reliably.
• Consent log filters offered to AI assistants now include the missing actions and columns.
• Very large inline scripts no longer quietly stop blocking on a page, and the limit is now written to the scan log if reached.
• On CDN-backed sites, core WordPress and Theme files are no longer held back by mistake, and common asset CDNs are now treated as Essential.
• Blocking and the consent banner now work correctly on post types rendered through another plugin’s templates.
• A category set on a script or embed is now respected even when the match is based on the script contents, not just its URL.
• The Do Not Block option is now shown consistently whether or not SureCookie Pro is active.
• Accept & Load now repairs blocked video placeholders on pages cached before this release.
• The built-in service list no longer stops early and drop later blocking patterns silently.
• Several blocking descriptions in the UI were corrected to better match how SureCookie actually works.
• Domain verification failures now report the real reason returned by the scanning service instead of a guessed one.

We think you’ll like this one. Update when you’re ready.

As always, support is one click away if anything feels off.

Hey everyone 👋

This release gives you a precise way to let one trusted script through without opening the door to everything else, plus a fix that closes a real gap in how fallback regions handled blocking. Let’s get into it.

 What’s new

Whitelist a script without turning off blocking Some scripts, like a payment processor, shouldn’t wait on consent. Always Allowed lets you pick a specific script or embed on the Scripts and Embeds page and keep it running before consent, while everything else on your site stays blocked exactly as before.

What that means for you:

• Keep business-critical tools running without compromising blocking elsewhere
• Set it resource by resource, no global toggle required

See exactly which region governed each visitor’s consent Consent records now log which geographic rule applied to each visitor, determined server-side, so it can’t be spoofed. Useful the moment someone asks you to prove your consent setup was actually GDPR- or CCPA-aware for a specific visitor.

Your full Known Services library, unlocked All 150+ services in the catalog are available to add in one click, no cap, no waiting on a scan.

Fixes

• Fallback regions now actually control blocking when a visitor’s location can’t be determined. Before, blocking followed your global settings instead, so a fallback set to hide the banner could still block scripts with no way for the visitor to consent. Fixed.

Before you update

SureCookie Pro 1.1.0 requires SureCookie Core 1.3.0 or later. Geographic Rules and Consent Sharing have moved into the new Tracking Manager section added in Core 1.3.0. Update both plugins together.

We think you’ll like this one. Update when you’re ready.

As always, support is one click away if anything feels off.

Team SureCookie

Hey everyone 👋

This release makes it faster to set up the tools you already use, gives you a backup way to scan sites that block our scanner, and fixes a bug that was quietly stopping consent signals from reaching Google on some setups. Let’s get into it.

What’s new

Add popular tools in one click. Know you’re running Google Analytics, Meta Pixel, or Stripe? Add them from the new Known Services library instead of waiting for a scan to find them. Adding a service declares its cookies and blocks its scripts until consent right away.

What that means for you:

• Set up common tools instantly, no scan required
• Free includes 5 services; Pro unlocks the full 150+ library

Scan sites even when your host blocks it If your hosting firewall was blocking SureCookie’s scanner, you had no way to detect cookies automatically. Now you can run the scan from your own browser instead.

Add your own scripts to block Under the new Scripts and Embeds page, you can now manually add anything a scan might miss, like a script that only loads on certain pages.

Better than before

• The admin is more organized. Cookie Manager is now Tracking Manager, with scanning, services, cookies, and scripts all in one place.
• Cookie cleanup is faster. Move several cookies into a new category at once, and deleting a category now asks where its cookies should go instead of dumping them into Uncategorized.
• The service catalog is smarter. Stripe, Cloudflare Turnstile, hCaptcha, and Google Sign-In are now correctly filed as Essential or Functional instead of Marketing.
• SureCookie is lighter on every page load. Unused scan data no longer loads on pages that don’t need it.

Fixes

• Consent signals now reach Google on server-side and self-hosted GTM setups. They weren’t being sent at all before. Fixed!
• Security cookies like captcha and CSRF tokens no longer break your site when visitors decline marketing. They’re now correctly treated as Essential. Fixed!
• Manually set cookie categories now stick. A rescan was silently overwriting your changes. Gone.
• Consent PDF exports no longer break in Arabic or Hebrew. Fixed!
• Blocked embeds that load later (lazy load, AJAX) now show a working “Accept & Load” button. Fixed!

Before you update

If you use SureCookie Pro, update to 1.1.0 alongside this release. Geographic Rules and Consent Sharing have moved into the new Tracking Manager section, and Pro 1.1.0 needs Core 1.3.0 to work correctly. Geographic Targeting is now Geographic Rules, and Consent Forwarding is now Consent Sharing.

We think you’ll like this one. Update when you’re ready.

As always, support is one click away if anything feels off.

Team SureCookie

Hey everyone 👋

Small but useful update to both Core and Pro, mostly focused on smoothing out onboarding and cleaning up a few rough edges.

Better than before

• Core: A banner button-order notice now links directly to Geo Targeting rules, so you can fix ordering issues without hunting for the setting.
• Pro: License activation now happens right in the onboarding Connect step, and the package zip size is smaller.
• Core: Presto Player video and audio embeds are now blocked until consent, closing a gap in script blocking.

Squashed

• Core: Fixed a misleading “5 pages per scan” limit shown to licensed users who aren’t actually capped.
• Core: Fixed Pro license activation issues during onboarding and broken re-consent entry points.
• Pro: Removed a shutdown action that was interfering with other plugins and themes.

Developer note: a new surecookie_searchable_post_types filter is available for adding custom post types to search.

Update when you get a chance.

Team SureCookie

Hey everyone 👋

SureCookie Pro is officially out. This release brings together every feature Pro users have had access to during beta: multisite consent sharing, geo-targeted banners, CSV exports, and a lot of polish underneath.

What’s new

Show different banners to different regions Geo Rules let you target banner visibility, messaging (with rich-text formatting), and even restrict banners to specific URLs, so a visitor in the EU sees GDPR-appropriate copy while a visitor elsewhere doesn’t get an unnecessary prompt.

Share consent across your whole network Consent Forwarding shares a visitor’s consent choice across all sub-sites on a WordPress multisite network, so they’re not re-prompted on every subdomain.

Export your consent logs Pull consent activity out as a CSV whenever you need it for an audit or a client report.

Customize how your banner looks A custom color picker for banner layout, plus custom SVG icons for the re-consent floating widget, so the banner matches your brand instead of a template default.

Better than before

• Dashboard translated into 9 languages, with full 20-language support matching Core.
• Pro now auto-installs Core if you activate Pro without it, one less setup step.
• “Notify Me When Cookies/Trackers Change” is on by default, so you hear about changes without digging for the toggle.

Squashed

• Fixed Accept All button visibility issues in certain regions.
• Fixed a compliance banner incorrectly triggering for visitors in unresolvable countries.

We think you’ll like this one. Update when you’re ready.

Team SureCookie

Hey everyone 👋

This release trims more weight off your site and cleans up a few rough edges in the admin.

Better than before

• Fonts are now served as woff2, roughly 60% smaller, so your banner loads with less weight on every page.
• The banner stylesheet now loads asynchronously, improving your site’s FCP and LCP scores.
• Unread consent logs now show a notification dot in your dashboard, so nothing slips by unnoticed.

Squashed

• Fixed missing accessibility focus outlines on interactive banner elements.
• If the remote script-blocking list fails to load, SureCookie now falls back gracefully instead of leaving scripts unblocked.
• Fixed a compatibility issue on SQLite-based WordPress installs.

No rush, but it’s there when you want it.

Team SureCookie

Hey everyone 👋

Quick patch to fix two layout issues some of you ran into after the 1.2.1 update.

Squashed

• Resource Blocking was breaking page layouts on classic themes running WordPress 7.0 with block-based content. Fixed.
• Blocked video embeds (Vimeo, YouTube, etc.) were leaving an empty gap where the video should be. Gone.

Update when you get a chance.

Team SureCookie

Hey everyone 👋

This release is almost entirely about speed and reliability, your visitors will feel it even if they never open a settings page.

Better than before

• The public-facing script shrank by about 96%, from 1.4MB down to roughly 50KB, and now loads deferred, so it stops competing with your page’s core content for load time.
• Local and staging sites are now clearly blocked from running scans, so you won’t burn quota testing on a dev environment.
• Cookie Policy pages now render correctly alongside WP Rocket and Perfmatters caching, and WPML/Polylang translations apply properly.

Squashed

• Consent logs no longer disappear on sites with long-lived page caching.
• .site and .test staging domains are now recognized correctly.
• Fixed HTML rendering in message editor lists, a stuck category-deletion bug, and leftover agent credentials after uninstall.
• The “Powered by” footer text now translates correctly.

Developer Note: If you’re integrating with window.surecookieManager, check the updated timing guidance before this update, load order has changed.

Update when you get a chance.

Team SureCookie