Title: Privatto
Author: Sergio Inglez
Published: <strong>13 Luulyo, 2026</strong>
Last modified: 17 Luulyo, 2026

---

Raadi kaabayaal

![](https://ps.w.org/privatto/assets/banner-772x250.png?rev=3605989)

![](https://ps.w.org/privatto/assets/icon-256x256.png?rev=3605989)

# Privatto

 Qore [Sergio Inglez](https://profiles.wordpress.org/sergioinglez/)

[Soo Rog](https://downloads.wordpress.org/plugin/privatto.2.0.0.zip)

 * [Faahfaahin](https://so.wordpress.org/plugins/privatto/#description)
 * [Dibu-eegisyo](https://so.wordpress.org/plugins/privatto/#reviews)
 *  [Rakibaad](https://so.wordpress.org/plugins/privatto/#installation)
 * [Horumarinta](https://so.wordpress.org/plugins/privatto/#developers)

 [Taageero](https://wordpress.org/support/plugin/privatto/)

## Sharraxaad

Privatto is a self-hosted consent management platform (CMP) for WordPress, built
with Brazil’s LGPD and the European GDPR in mind. It does not rely on any external
service.

Official website, live demo and documentation: [interativus.com.br/privatto](https://interativus.com.br/privatto)

**Main features:**

 * Granular consent banner with per-category preferences (necessary, statistics,
   marketing, embeds).
 * Automatic blocking of third-party scripts and iframes via output buffering: matching`
   <script>` tags are switched to `type="text/plain"` before the page reaches the
   browser, so nothing runs before consent.
 * Google Consent Mode v2 injected with everything denied by default, updated according
   to the visitor’s choice.
 * Proof of consent stored in your own database table: unique ID, action, categories(
   JSON), policy version, IP hash (optional), country, user agent, page URL and 
   UTC timestamp. Exportable to CSV for audits.
 * LGPD document generator: privacy policy, terms of use, cookie policy, returns
   policy and a plain-language summary, built from a guided form — 100% local, with
   no external calls.
 * Data subject rights form (LGPD art. 18) with tracked protocols, 15-day response
   deadline monitoring and an admin queue.
 * Simplified record of processing activities (ROPA) export, as required by ANPD
   Resolution CD/ANPD No. 2/2022, including for small-scale processing agents.
 * “Cookie preferences” link to reopen the banner, letting visitors change or withdraw
   consent at any time.

**Important notice:** the generated documents are a structured, LGPD-aligned starting
point; they are not legal advice. Review by a lawyer is recommended, especially 
for complex operations.

### External services

Privatto does not connect to any external service. The banner, blocking, consent
records, plugin/script detection and document generation all run entirely on your
own server, with no data sent anywhere.

**About the third-party domain names found in the source code:** the plugin ships
a static, local catalog of well-known tracking/embed services (Google Tag Manager,
Meta Pixel, Stripe, RD Station/CloudFront, etc.). These domain strings are reference
data only, used to (a) describe — in the generated cookie policy — services the 
site owner already uses, and (b) match script/iframe patterns for consent-based 
blocking. Privatto never makes any request to those domains and never loads any 
remote file from them.

Note: the plugin also ships a static reference catalog (service name, vendor and
known script/domain signatures) used only to help the document generator recognize
and describe third-party services _that your own site may already be using_ (e.g.
Google Analytics, Meta Pixel, Stripe) when writing your cookie policy. This catalog
makes no outbound request to those services — it is a local, offline pattern check
against your own site’s HTML.

## Rakibaad

 1. Upload the plugin under Plugins  Add New  Upload Plugin, or copy the `privatto`
    folder to `/wp-content/plugins/`.
 2. Activate the plugin. The consent table and default options are created on activation.
 3. Follow the setup wizard, then fine-tune under **Privatto  Settings**.
 4. Generate your legal documents under **Privatto  LGPD Documents**.

## SBI

### Does the plugin rely on any external service?

No. The banner, blocking, consent records and document generation all run entirely
on your own site. Privatto does not make any calls to external services.

### How does tag blocking work?

The plugin captures the full page output on `template_redirect`, injects Google 
Consent Mode v2 (everything denied) right after `<head>`, and rewrites any `<script
>` whose `src` or content matches the configured patterns. When the visitor consents,
the allowed scripts are restored and executed.

### Where is the proof of consent stored?

In a dedicated table (`wp_pvto_consents`). Each decision records a UUID, action,
categories, policy version, irreversible IP hash (optional), country, user agent,
URL and UTC timestamp. You can view it under **Privatto  Logs** and export it to
CSV.

### Is data removal on uninstall optional?

Yes. By default, uninstalling preserves the consent tables (they are your audit 
evidence) and removes only the settings. To delete everything, define `PVTO_DELETE_DATA`
as `true` in `wp-config.php` before removing the plugin.

## Dibu-eegisyo

Ma jiraan wax dibu-eegis ah oo ku saabsan kaabahan.

## Ka-qaybgalayaasha & Horumariyayaasha

“Privatto” waa softiweer il furan. Dadka soo socda ayaa wax ku biiriyay kaabahan.

Ka-qaybgalayaasha

 *   [ Sergio Inglez ](https://profiles.wordpress.org/sergioinglez/)

[Ku tarjun “Privatto” luqaddaada.](https://translate.wordpress.org/projects/wp-plugins/privatto)

### Ma xiisaynaysaa horumarinta?

[Baadh koodka](https://plugins.trac.wordpress.org/browser/privatto/), fiiri [bakhaarka SVN](https://plugins.svn.wordpress.org/privatto/),
ama iska qor [diiwaanka horumarinta](https://plugins.trac.wordpress.org/log/privatto/)
adigoo adeegsanaya [RSS](https://plugins.trac.wordpress.org/log/privatto/?limit=100&mode=stop_on_copy&format=rss).

## Isbeddellada

#### 2.0.0

 * New: functionality/plugin discovery. Privatto now scans installed plugins (reading
   only each plugin’s own local readme.txt/header — no external calls) and surfaces
   the ones that may require consent, in a new “Discoveries” screen for human review.
   Nothing is applied automatically.
 * New: curated signature base mapping popular plugins (analytics, marketing, functional)
   to likely cookie categories, with a heuristic fallback for unknown plugins.
 * New: passive script scanner. Third-party script/iframe domains that actually 
   load on the site are recorded (deduplicated) so you can categorize them.
 * New: approving a discovery adds its signature to automatic blocking and generates
   a ready-to-use text suggestion for your documents (draft only — never published
   automatically).
 * New: dashboard reformulated with a 7/30/90-day period selector, KPI variation
   vs. previous period, and an accept-rate-by-category breakdown.
 * New: Records screen with summary cards, structured action/country filters, and
   category badges instead of raw JSON.
 * New: settings for the passive scanner, region behavior and an opt-in “Powered
   by Privatto” seal.
 * New: “Pending suggestions” tab in Documents — approved discoveries generate ready-
   to-use, editable text you add to a Cookie Declaration draft (never auto-published).
 * New: [privatto_declaracao_cookies] shortcode renders a public list of the services/
   cookies used, built from the approved draft items.
 * New: WP Consent API interoperability. When the WP Consent API is active, Privatto
   additively announces the visitor’s choice (mapping its categories to functional/
   statistics/marketing/preferences) so compatible plugins can read the consent 
   state. Privatto’s own blocking is unchanged.
 * New: multilingual banner. Add per-locale translations of the banner texts and
   button labels under Settings  Languages; the correct language is picked automatically
   from the visitor’s locale, falling back to the base language and then to the 
   default texts. English and Spanish ship with ready-to-use suggested translations.
 * New: optional “Powered by Privatto” seal on the banner (off by default; enable
   under Settings  Compliance).
 * New: lightweight geolocation (region behavior). Reads the visitor country only
   from headers your infrastructure already provides (Cloudflare, CloudFront, GeoIP)—
   no bundled IP database, no external call. Modes: always strict (opt-in for everyone),
   adaptive (opt-in for BR/EU, configurable elsewhere) or manual. Falls back to 
   strict when geo is unavailable.
 * New: confidence levels for discoveries with a certainty-based palette (high=green,
   medium=blue, low=gray) plus a legend, and a configurable threshold that decides
   which levels generate automatic document suggestions (default: high only).
 * Removed: optional Groq AI text refinement. Document generation is now 100% local,
   with no external calls at all.
 * Note: Privatto remains free and fully self-contained — no telemetry and no remote
   signature service are used.

#### 1.4.0

 * Security hardening: prepared statements with the `%i` identifier placeholder,
   input unslashing/sanitization, output escaping.
 * Internationalization: translator comments and ordered placeholders.
 * Readme rewritten to follow WordPress.org standards.

## Meta

 *  Version **2.0.0**
 *  Last updated **14 saac kahor**
 *  Active installations **In ka yar 10**
 *  WordPress version ** 6.2 ama ka sareeya **
 *  Tested up to **7.0.2**
 *  PHP version ** 7.4 ama ka sareeya **
 *  Language
 * [English (US)](https://wordpress.org/plugins/privatto/)
 * Tags
 * [consent mode](https://so.wordpress.org/plugins/tags/consent-mode/)[cookie consent](https://so.wordpress.org/plugins/tags/cookie-consent/)
   [GDPR](https://so.wordpress.org/plugins/tags/gdpr/)[lgpd](https://so.wordpress.org/plugins/tags/lgpd/)
   [privacy](https://so.wordpress.org/plugins/tags/privacy/)
 *  [Aragti Sare](https://so.wordpress.org/plugins/privatto/advanced/)

## Qiimeynta

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/privatto/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/privatto/reviews/)

## Ka-qaybgalayaasha

 *   [ Sergio Inglez ](https://profiles.wordpress.org/sergioinglez/)

## Taageero

Ma heysaa waxaad dhahdo? Caawimaad ma u baahan tahay?

 [Eeg madasha taageerada](https://wordpress.org/support/plugin/privatto/)