CF
ConsentFlow

Cookie consent for any website.

Sign in

Welcome back — enter your credentials.

No account? Sign up

CF

ConsentFlow

Documentation

Sites

Site

Checking… Open site ↗
1

Install on your site

Choose your platform — WordPress sites should use the official plugin.

ConsentFlow WordPress plugin

Injects the loader first in <head>, works with WP Rocket, and reports scripts for scanning.

⬇ Download plugin (.zip)
Server URL
Site key
  1. WordPress admin → Plugins → Add New → Upload Plugin → choose the zip → Activate
  2. Go to Settings → ConsentFlow
  3. Paste the server URL and site key above → Save
  4. Remove any manual embed from HFCM, theme header, or Elementor
  5. Deactivate other cookie banner plugins (Cookie Law Info, etc.)
  6. Clear WP Rocket + Cloudflare cache, then visit your site once

Do not also paste the loader script manually — duplicate embeds break WP Rocket and cache a bad loader file.

Paste as the first script in your site’s <head>. Works on Webflow, Shopify, React, and custom HTML.


                  
                

              

              

            


            

              

                2
                
Verify connection

              

              
Load any page on your site after installing the embed. We detect your domain automatically and start scanning.

              

              

              

                
                
              

            


            

              Advanced: site key & platforms
              

                
                

                  
                  
                

                
                

              

            


            


            


            

              

                

                  
Compliance test

                  
Verify no trackers fire before consent. Opens a probe page with scripts loaded before the embed.

                

                Run test ↗
              

            

          


          

            

              

                
Tracker scan & script tags

                
All scripts found on your site. Change categories to control when each runs. Use Always allow to exempt scripts from blocking entirely.

              

              
            

            
            

          


          

            

              
Consent popup — behavior override

              
Controls what visitors see and whether trackers are blocked before consent. Overrides geo auto-detect when set.

              

                

                  
                  
                

                

                  
                  
                  
Keep enabled for therapy, healthcare, and EU/CA traffic (CIPA/GDPR).

                

                

                  
                  
                

              

              

            


            

              
Widget appearance

              
Controls how the consent banner looks on your site — theme, brand color, and position.

              

                

                  
                  
                

                

                  
                  
                  
Used for links and primary buttons.

                

                

                  
                  
                

              

              

            


            
Policies & labels

            

              

              

                
              

              

              
Recommended for GDPR visitors.

              

                
              

              

                
              

              

                
                
Using placeholder ID 404 — register at IAB Europe for EU programmatic ads.

                
Only required if you run EU ad tech. Otherwise disable IAB TCF below.

              

              

                

                  
                  
                

              

              

              

              

              

                
                
One host or path fragment per line. Matching scripts, images, and iframes are never blocked. Webflow/WordPress CDNs are included by default.

              

            

            

              
              
            

          


          

            
Cookies are auto-detected from your HTML scan and live visitors. Change categories to control when each cookie is allowed. Set OPENAI_API_KEY on the server for AI-filled descriptions.

            

          


          

            
Select a site to view analytics

          


          

            
Invite team members by email. They must have a ConsentFlow account first.

            

            

              
              
              
            

          

          

        


        

          

            
🍪

            
Select a site

            
Choose a site from the sidebar or create a new one. Paste the embed script and you're live in minutes.

            
    
              
  1. 1. Copy the embed code
    2. 
              
  2. 2. Visit your site to connect
    3. 
              
  3. 3. Review detected trackers
    4.