Kavin DPDP Cookie Consent

Description

India’s Digital Personal Data Protection Act, 2023 requires consent that is free, specific and as easy to withdraw as to give. Kavin DPDP Cookie Consent makes sure no analytics or advertising tag runs until a visitor agrees.

What happens on your site

• On the first visit, nothing optional loads. Google Consent Mode v2 is set to “denied” before any tag can run.
• The banner offers Accept all and Reject all with equal weight, plus a Choose option with a switch for Analytics and one for Advertising.
• Each category shows exactly which tools it covers, what they collect, their cookies, how long they are kept and who receives the data.
• Tags load only for the categories the visitor allows. Allowing Analytics does not allow Advertising.
• A “Privacy choices” button stays on every page, so visitors can change or withdraw their choice at any time. Withdrawing deletes that category’s cookies.
• Every choice is saved as a consent record with the time and notice version. No name, email or raw IP address is stored.

Tools the plugin can load for you

Google Analytics 4, Google Ads, Meta Pixel, Microsoft Clarity and Microsoft Ads (UET). Enter the ID and the plugin adds the tag only after consent.

Tags added by your theme or other plugins

Known tracking scripts added elsewhere, including Google Analytics, Google Ads, Google Tag Manager, AdSense, Meta Pixel, Microsoft Clarity and Ads, Hotjar, Jetpack Stats, WooCommerce order attribution, TikTok and LinkedIn, are held back the same way and released after consent.

“Scan my site now” opens your key pages as a visitor would and lists every tag it finds, with its ID and the plugin that added it: Site Kit, Rank Math, MonsterInsights, GTM4WP, PixelYourSite, Facebook for WooCommerce, WPCode, or code pasted into the theme.

If Site Kit by Google is installed, its Analytics, Ads, Tag Manager and AdSense IDs are read automatically. Nothing needs copying across.

WooCommerce

• Separate, unticked boxes for email offers and WhatsApp offers at checkout and account signup. Works with the classic checkout and the Checkout block.
• Each order gets a note saying what the customer agreed to and declined, with the notice version, shown on the order screen.
• Customers change or withdraw their choice in My Account → Account details. An unticked box at checkout never cancels an earlier yes.

Also included

• [kvn_dpdp_form_notice] – the one-line privacy notice to place under a contact form.
• [kvn_dpdp_choices] – a “Privacy choices” link for your footer or menu.
• “Ask everyone again” – raise the notice version and every visitor is asked again.
• CSV export of all consent records.

Kavin DPDP Cookie Consent Pro (optional, paid)

This plugin is complete on its own, and nothing in it is locked. If you also need the rest of the DPDP Act’s notice and rights work, Kavin DPDP Cookie Consent Pro is a separate plugin that adds to this one:

• The consent banner in all 22 languages of the Eighth Schedule, in place of English and Hindi.
• A privacy notice page built from what your site actually does, in English and every language your banner offers.
• A privacy request form with a response clock and a list of what is due, so visitors can ask for their data, correction, deletion, or withdraw consent.
• Re-notice emails to the people whose data you already hold.

Pro costs $20 a year or $80 once, with a 14-day money-back guarantee. Details and purchase: kavinstudios.com/wordpress/kavin-dpdp-cookie-consent

This plugin helps you meet the DPDP Act’s consent requirements. It is not legal advice, and your privacy notice must still describe what your site actually does.

External services

This plugin can load the tracking tools below on your site. Each one loads only when you enter its ID on the Tracking tools tab (or Site Kit by Google already holds it), and only after the visitor allows that tool’s category in the banner. Nothing is sent to these services before consent, and nothing is sent to Kavin Studios at any time.

Google tag (Google Analytics 4 and Google Ads)
Loaded from googletagmanager.com when the visitor allows Analytics (Google Analytics) or Advertising (Google Ads). Google receives the pages viewed, device and browser details, approximate location, and for Google Ads, ad clicks and purchases, as described in the banner.
Terms · Privacy policy

Meta Pixel
Loaded from connect.facebook.net when the visitor allows Advertising. Meta receives pages viewed, products added to cart and purchases, which it can link to the visitor’s Facebook or Instagram account.
Terms · Privacy policy

Microsoft Clarity
Loaded from clarity.ms when the visitor allows Analytics. Microsoft receives clicks, scrolling and mouse movement, and session replays with typed text hidden.
Terms · Privacy statement

Microsoft Advertising (UET)
Loaded from bat.bing.com when the visitor allows Advertising. Microsoft receives ad clicks and purchases from Bing and Microsoft ads.
Terms · Privacy statement

Tags that your theme or other plugins add are not loaded by this plugin; it only holds them back until consent.