SureCookie changelog and version history

202623 releases

1. SureCookie 1.8.0Latest

   Nov 2, 2026
   • New: You can now import your configuration from WPConsent under Settings > Tools > Migration, covering banner content, buttons, consent behavior, categories and cookies. SureCookie shows what will be replaced before anything changes, never deletes your WPConsent data. ( https://surecookie.com/docs/…
   • New: A “Take a Tour” button on every admin page opens a guided walkthrough of that page’s features and settings.
   • New: Meta’s tracking is now held until the visitor accepts Marketing, for both Meta Pixel for WordPress and Meta for WooCommerce. Those plugins previously set the _fbp cookie and sent Conversions API events while the page was built, which page caching then repeated to every later visitor.
   • Improvement: The setup wizard has been rebuilt. It opens by showing what setup covers, walks you through connecting and scanning, and ends on a screen listing what protects your site and what is still outstanding, with most of it fixable in one click.
   • Improvement: Setup now offers to keep your cookie list up to date automatically. Scheduled re-scanning was off on about three quarters of sites, which leaves the published policy describing cookies the site no longer sets.
   • Improvement: On local sites, and sites with WP-Cron switched off, setup now offers the browser-based scanner instead of a scan button that cannot work.
   • Improvement: Known Services has an “Analyzed on Your Site” section listing services detected but not yet added, and the “Services We Recognised” notice now links straight to it.
   • Improvement: Turning off “Enable Cookie Banner” no longer hides the banner and preference modal content fields, so you can write your copy before it goes live. A notice explains that blocking is paused while the banner is off.
   • Improvement: When a visitor’s browser sends a “do not sell or share” privacy signal, the preference window now names the categories that signal keeps off, instead of offering switches it silently overrides.
   • Improvement: A scan now records which host set each cookie when that host is within the cookie’s own domain. SureCookie Pro’s Compliance Guard uses it to hold only that host instead of the whole domain.
   • Improvement: An embed held for review by SureCookie Pro’s Compliance Guard now tells visitors the site owner is reviewing it, rather than only that it is blocked. Administrators also see where to approve or release it.
   • Improvement: The banner now downloads one font file instead of three, about 29 KB less per page view, and no longer replaces the site’s own Figtree when a theme uses that font.
   • Improvement: While migrating from WPConsent, the pages using WPConsent’s shortcodes keep working after you deactivate it.
   • Improvement: With a browser privacy signal switched on, such as Firefox’s “Tell websites not to sell or share my data”, accepting cookies released nothing at all. It now holds back only the categories that signal covers, and anything still held explains why. The developer consent summary matches wh…
   • Improvement: The cookie policy now shows one table per category with a Provider column, instead of a table per provider. Cells no longer break words apart under themes that set word-break, and Duration reads “30 days” rather than a bare “30”.
   • Improvement: Consent records now match what the visitor chose. Saving preferences with every category on was recorded as “Partially Accepted” rather than “Accepted”, and “Only Essential” as “Partially Accepted” rather than “Declined”. Existing records are unchanged.
   • Improvement: WooCommerce order attribution cookies were credited to an unrelated website on the cookie policy, and cookies our classifier could not identify published lines such as “The purpose of this cookie is unclear”. Both are corrected on existing policies too.
   • Fix: The setting that disables browser-based scanning had no effect. Turning it off now hides the option on both the setup wizard and the Scanning screen.
   • Fix: If verifying your domain failed twice, the second message never appeared. It is now shown.
   • Fix: On local sites and sites with WP-Cron off, the browser-scan notice claimed your server had blocked our scanner. Nothing had been blocked, and the explanation is now accurate.
   • Fix: Changing a scanned cookie’s category no longer fails when the cookie moved after the page loaded. In Automatic Scanning this left Pending Review entries that Approve All could never clear.
   • Fix: On Scripts and Embeds, setting one service’s hosts to different categories could leave its embed loading forever with no placeholder, and every row read “Unknown”. Rows now name their service, with a notice when categories disagree.
   • Fix: A scan could count the same cookie more than once, or report a known cookie as new. Scan totals, the change summary and the Automatic Scanning queue now count each cookie once.
   • Fix: Avada’s Live editor now opens normally. The editing canvas no longer shows blocked-content placeholders, and blocking still applies everywhere else.
   • Fix: Avada videos loaded Vimeo and YouTube before consent when the Video Facade option or Avada’s iframe lazy loading was on. They are now held behind the usual placeholder.
   • Fix: A third-party script, video or font link loaded before consent when its tag was written in an unusual but valid way, such as a “>” inside an attribute value or a space before the “>” of a closing tag. It is now held like any other.
   • Fix: On LearnDash lessons using Vimeo Video Progression, Mark Complete unlocked but only reloaded the lesson, so students could not progress. Finishing the video now records it as watched.
   • Fix: With Google Consent Mode on, Google tags added by another script could stay blocked in the browser after a visitor accepted, while the server had already allowed them. The two now agree.
   • Fix: On hosts whose page cache keeps the cookies a page sends, such as WP Engine, the consent shared through the WP Consent API came from whoever loaded the page first. The banner now sets it in the visitor’s own browser.
   • Fix: In the preferences window, a cookie’s duration showed as a bare number, and session cookies added through Known Services showed “0”, also in the Cookies list. They now read “30 days” or “Session”.

2. SureCookie 1.7.0

   Oct 20, 2026
   • New: The preferences window now includes links to your Cookie Policy, Privacy Policy, and Legal Notice. You can reorder or hide them under Banner > Content > Preference Modal.
   • New: Added a Legal Notice (Imprint) page setting for countries that require one. Select the page alongside your other legal links in the preference modal settings.
   • New: The preferences window now shows which services receive data and when it is transferred outside the EU/EEA, based on your scan results and services catalog.
   • New: Added a support shortcut to the admin top bar, labels for its icons on hover, and an Enable Automatic Scanning button on the dashboard when scheduled scans are disabled.
   • Improvement: The setup wizard now stays on the scan step to show results as they arrive. You can continue at any time while the scan runs in the background.
   • Improvement: Scan results now refresh automatically when a scan finishes, even when the scanning log is closed.
   • Improvement: The setup wizard now explains when a scan is blocked by your host’s firewall or finds nothing, and offers a browser-based scan instead.
   • Improvement: The setup wizard now provides a Cookie Preferences link for all themes, including block themes, which receive a shortcode to add it.
   • Improvement: The setup wizard now selects your homepage by default when scanning, since it often contains the most tracking.
   • Improvement: Licence activation errors now include clearer guidance instead of raw error messages.
   • Improvement: Added Ukrainian translations for the banner, preferences window, and admin screens.
   • Improvement: Business Details can now be saved without selecting a privacy law. Leave Applicable Privacy Regimes empty if none applies to your site.
   • Improvement: Updated the Analytics category description to better explain what its cookies do.
   • Improvement: Hardened the security of the plugin.
   • Fix: The setup wizard now lets you connect your account when SureCookie Pro is active but has no licence key.
   • Fix: If your browser blocks the account connection pop-up, you are now returned to your previous setup wizard step.
   • Fix: The dashboard tour button now correctly describes its action instead of suggesting it opens the banner designer.
   • Fix: The setup wizard now explains when scanning is paused because WP-Cron is disabled and what to ask your hosting provider.
   • Fix: Consent records are now saved on servers that block URLs ending in -log. Site Health also warns when the original address is blocked.
   • Fix: Deleting consent logs now works on servers that block URLs ending in -log.
   • Fix: Shortcode and block features that depend on WordPress React, such as Powerful Docs search, now load correctly on affected sites.
   • Fix: First-party session cookies, such as PHPSESSID, are now attributed to your own site in the cookie policy. Existing entries are corrected automatically.
   • Fix: Geographic Rules now work correctly with page caching. Visitors receive the rules for their own region instead of another region’s cached settings. Clear your cache once after updating.
   • Fix: Consent Log selections now stay in sync with the displayed rows when changing pages or filters, preventing accidental deletion of hidden records.
   • Fix: Changes made while settings are saving are no longer lost. The Save button remains available until all changes are stored.
   • Fix: The Country list in Compliance > Business Details now includes all countries and territories, including the Cayman Islands, Bermuda, and Puerto Rico.
   • Fix: Consent sharing on multisite networks now tracks sites by their identity rather than their address, so shared records remain removable after a subsite’s address changes. Existing records are repaired automatically where possible.
   • Fix: LearnDash lessons using Vimeo Video Progression now unlock the Mark Complete button after visitors accept cookies and finish watching. Added the surecookie_scripts_restored browser event for plugins that need to initialise scripts after they are restored.
   • Fix: Accept All and Reject All buttons in the preferences window now retain their appearance on hover, even with themes and builders that apply their own button styles.
   • Fix: Removed an extra scrollbar and unexpected page scrolling caused by a hidden screen-reader element.

3. SureCookie 1.6.1

   Oct 7, 2026
   • Improvement: SureCart affiliates are now credited even if visitors browse a few pages before accepting cookies. The affiliate code is preserved on internal links until the tracker runs, without storing anything on the visitor’s device. Visitors who decline are still not credited.
   • Fix: Some scanned cookies showed “null” as the provider. This is now either left blank or filled correctly from the services list, and existing entries are fixed automatically after update.
   • Fix: On sites using optimization plugins like WP Rocket or Autoptimize, trackers served from your own site could run before consent. SureCookie now ensures these stay blocked until consent, while other optimizations continue as normal.
   • Fix: When using delayed JavaScript execution, blocking one tracker could stop other scripts from running. Scripts now continue to load as expected, while blocked trackers still wait for consent.
   • Fix: With W3 Total Cache Minify enabled, blocked scripts could be combined and run before consent. These are now excluded from combining so they load only after consent. If you use page caching, clear caches once after updating.
   • Fix: SureCart affiliate tracking could run before consent and set cookies even after visitors declined. It now waits for Marketing consent and is correctly reflected in the cookie policy.
   • Fix: Global Privacy Control is now fully respected by script blocking. Visitors sending this signal receive only essential cookies and scripts, regardless of previous choices.
   • Fix: Declining or withdrawing consent now removes both scanned and manually added cookies for that category. Essential and allowed cookies are preserved.
   • Fix: Pages visited during cookie scans could be cached with trackers unblocked. These pages are no longer cached, ensuring visitors always see the correct consent-controlled version. Clear your cache after updating.
   • Fix: Duplicate cookies could appear in the cookie policy when added manually and detected by scan. Cookies are now merged into a single entry using your custom wording.
   • Fix: Some scripts from known service domains could load before consent if not explicitly listed. Blocking now applies consistently across the entire domain, while still allowing exceptions where needed.
   • Fix: With certain optimization settings, the cookie banner could lose styling or appear behind content. Styling is now preserved and displayed correctly.
   • Fix: Translation issues in Dutch and other languages have been corrected, including table labels and scan timers.
   • Fix: On sites using WP Rocket with Minify JavaScript on, trackers such as Plausible, Fathom, Simple Analytics and Cloudflare Web Analytics were copied to your own site by WP Rocket and ran when a visitor first interacted, before they had chosen. They now stay at their original address and wait for…

4. SureCookie 1.6.0

   Sep 30, 2026
   • New: Banner > Content now lets you manage all four buttons in one place. You can reorder them, show or hide each one, and set custom labels. Empty labels fall back to translated defaults, so most sites do not need to change anything. Preferences and refusal options always remain visible.
   • New: PixelYourSite now respects visitor consent. Its pixels, cookies, and tracking events are held until the visitor accepts the relevant category, then start on the same page. Google Consent Mode and Global Privacy Control are also respected.
   • New: The dashboard now shows when a new version of SureCookie or SureCookie Pro is available, with a quick link to the updates screen. Visible only to users who can update plugins.
   • New: Added a surecookie_capability filter to control who can manage SureCookie settings. Useful for agencies that want to restrict access. Default behavior remains unchanged.
   • Improvement: The default banner message is now shorter and fits better on mobile screens, helping PageSpeed measure your site content instead of the banner. Custom messages are not affected.
   • Improvement: Reduced unused configuration data loaded on each page, lowering page size while keeping cookie policy and preferences unchanged.
   • Fix: Improved compatibility with W3 Total Cache so the banner and its scripts are not broken by file combining.
   • Fix: Screen readers now announce banner buttons using their visible labels, improving accessibility across all languages.
   • Fix: The preferences window now only shows Accept All where it is enabled in the banner, ensuring consent logs remain accurate.
   • Fix: Button order and labels are now validated to prevent missing or duplicate buttons, and labels are limited to a safe length.
   • Fix: Visitors sending Global Privacy Control could be treated as consenting on the server, allowing some plugins to run when they should not. The server now matches the browser and Google Consent Mode, so everything except essential cookies is denied regardless of consent model or any earlier choic…
   • Fix: Re-requesting consent now correctly resets previous choices on both browser and server, preventing trackers from running before a new choice is made.
   • Fix: Google reCAPTCHA and Google Fonts are now blocked until consent when using Google Consent Mode. You can still allow them manually if needed.
   • Fix: HubSpot tracking is now correctly blocked for EU-hosted portals.
   • Fix: Cookie policy now lists only services your site actually loads, avoiding incorrect entries.
   • Fix: Google Consent Mode defaults are now consistent for all visitors, preventing cached pages from applying incorrect consent states.
   • Fix: Placeholder content styling is now consistent across themes, while still allowing basic formatting.
   • Fix: Microsoft Clarity now receives consent updates correctly, so analytics tracking and session recordings work as expected.
   • Fix: EU and EEA geographic rules now apply correctly across all supported regions.
   • Fix: Scripts that depend on each other now load in the correct order after consent, preventing broken functionality.

5. SureCookie 1.5.1

   Sep 21, 2026
   • New: A surecookie_translate_string filter for translation plugins other than WPML and Polylang. It receives every string SureCookie renders on the server, along with the string’s name and whether it holds formatting.
   • Improvement: The services catalog now records which services set no cookies at all, starting with Fathom Analytics, Plausible, Simple Analytics, Umami and Cloudflare Web Analytics. With SureCookie Pro this stops Compliance Guard holding them for review. On its own it changes nothing, and those serv…
   • Improvement: The Cookie Scanner now names the services it recognised, not just the number of cookies it saw. Services that only set cookies after consent, or that load inside a blocked embed, leave little for a scan to find, so a low cookie count used to read as a broken scan even though their cook…
   • Improvement: Site Health now warns when SureCookie is seeing your CDN or reverse proxy instead of your visitors. Left unnoticed, geographic rules apply the wrong country, consent records store it, and per-visitor rate limits collapse into one shared bucket. The check names which case you have and w…
   • Fix: On themes and page builders that size a video or map with CSS rather than width and height attributes, such as the Bricks theme, a blocked embed showed a small consent box floating in a large empty area instead of filling the space the embed would have taken. The prompt now covers the whole em…
   • Fix: On WPML and Polylang sites, text in the preferences window and on blocked-content placeholders lost its links, bold and paragraphs, while the same text kept them on single-language sites. Both now keep their formatting through translation.
   • Fix: A service you stopped using kept publishing its cookies to your cookie policy forever, with no way to clear them, because those rows are not cookies a scan found and so had no Delete button. Each now offers “Remove service”, which clears every cookie that service declares. If the service is st…
   • Fix: Scripts and Embeds could report that a resource always loads while every visitor was being refused it, because SureCookie Pro’s Compliance Guard was holding that address for review. A held row now reads “Held for review” and says it will not load until you release it. An “Always allowed” rule…
   • Fix: Services loaded through an embed, such as YouTube and Vimeo, were never marked as detected in the Known Services library, because their entries are recognised by an address that includes a path while results were matched on the bare domain. They are now detected correctly.
   • Fix: A site with an active SureCookie Pro licence could be limited to free scan allowances for up to a week. The licence was sent to our servers without checking whether it arrived, so a lost or rejected message was recorded as a success. SureCookie now waits for confirmation and retries on its own.
   • Fix: Ad blockers with cookie-notice filtering, which most visitors run, broke two things. The cookie policy tables lost all styling, because the stylesheet’s file name matched a filter rule; and the preferences window and floating privacy button disappeared along with the banner they sat inside, le…
   • Fix: On a phone, the Confirm My Choices button in the preferences window was sliced in half in most languages, because all three buttons were held on one line and translated labels are wider than the English ones. They now wrap onto a second line whenever they do not fit.
   • Fix: Sites that keep WordPress in its own folder, or run a setup like Bedrock, could not connect to the cookie scanner: SureCookie sent our servers where WordPress’s files live rather than where the site is served, so the ownership check looked in the wrong place. Both addresses are now sent. Nothi…
   • Fix: On Google Analytics 4 sites, the cookie policy left the Purpose column empty for your property’s own analytics cookie, directly below a near-identical row that had one. It now reads the same as the rest. Anything you typed yourself, or that a scan found, still takes precedence.
   • Fix: The floating cookie banner could collapse to a sliver on your site while the settings screen showed a normal width, if the width field had ever been left empty and saved as zero. The width is now kept within the range the field offers, an already-saved zero no longer reaches visitors, and the…

6. SureCookie 1.5.0

   Sep 9, 2026
   • New: A new “Compliance” section gathers your legal pages and business details in one place. Cookie Policy moves here from Tracking Manager (old links still work), Tracking Manager’s “Cookies” group is now a single “All Cookies” item, and Consent Logs and Data Requests sit below Settings.
   • New: A privacy policy generator under Compliance > Legal Pages builds a draft from your cookie and consent settings, including disclosures only SureCookie can make about what a consent record holds. Nothing is published for you, and the screen tracks what is still left to review. The generated page…
   • New: “Business Details” holds your legal entity name, address, country, privacy contact and the privacy laws your site is subject to. Your privacy policy, cookie policy and Business Details shortcodes all read from it, and a settings export now carries it to another site. ( https://surecookie.com/d…
   • New: Shortcodes such as [surecookie_company_name] and [surecookie_contact_email] put your business details anywhere shortcodes work, including page builders. The full list with copy buttons is on the Business Details screen. Anything you have not filled in shows as a marker to administrators only,…
   • New: SureCookie contributes suggested text to WordPress’s own Privacy Policy Guide under Tools > Privacy, and can be set as your site’s privacy policy page. Setting it swaps the /privacy-policy/ address over, and SureCookie asks first because that changes a public URL.
   • New: “Compliance Check” is the first screen under Compliance. It introduces the upcoming checker, which will load your live site and report what fires before a visitor consents, and lets you connect your site so the check can run.
   • New: You can now correct a scanned cookie’s purpose, duration and provider, not just its category. Open it from SureCookie > All Cookies and edit. Your wording survives later scans; clear a field to go back to what the scanner reported.
   • New: A scanned cookie can now be deleted. Previously a cookie from a plugin or service you had removed stayed on your cookie policy with no way to clear it. If it is still being set, it reappears on the next scan.
   • New: Consent records can be kept with no IP address at all, for sites that would rather hold no personal identifier. Add the surecookie_skip_consent_logs_ips filter and records keep the date, categories and session, but no IP or country is stored, and no address is sent to work out a country. Off b…
   • New: Geographic rules can now target individual US states, so a rule can apply to California for CCPA rather than to the whole country. Consent records and the PDF certificate show the state as well. Geographic rules need SureCookie Pro.
   • Fix: Geographic rules had no effect on sites behind a CDN or load balancer. SureCookie read the address of the CDN rather than the visitor, so every visitor resolved as “location unknown” and the fallback rule was applied to the whole site: the banner appeared in countries you had excluded, and scr…
   • Fix: The first automatic scan treated everything it found as new, so with Compliance Guard on (the default) it blocked every third-party resource at once, including support widgets and payment scripts, in a state no visitor’s consent could release. A first scan now records what your site already lo…
   • Fix: Turning the cookie banner off also turned off “Block Scripts Until Consent”, and turning the banner back on did not restore it, so the banner returned while nothing was being blocked. Toggling the banner now leaves that setting alone. If you have ever switched your banner off and on, please ch…
   • Fix: An “Always allowed” rule could allow far more than you chose, or nothing at all. It applied to every service on the same web address, so allowing Google reCAPTCHA also allowed Google Ads and Google Maps before consent; a broader scanner entry could override a specific address; and an address t…
   • Fix: Blocked resources could still load before consent. A blocked host is now held back whether the page loads it as a script, an iframe, an embed or an object, which closes gaps for Google Maps drawn with the JavaScript API, the YouTube and Vimeo players and Tag Manager’s no-JavaScript fallback. A…
   • Fix: Google Fonts loaded before consent on every site, even with the service listed as blocked. Web fonts and stylesheets arrive on a different kind of tag than scripts and embeds, and that tag was never held back, so the visitor’s IP address still reached Google. Stylesheets and fonts are now held…
   • Fix: The WP Consent API bridge never ran, on any site, for the whole life of the feature. Other plugins that read consent through that standard were told nothing until a visitor clicked the banner, and the opt-out side had never run at all. It now runs on every request. A follow-on fix stops the fo…
   • Fix: Front-end page builders such as Beaver Builder, Bricks, Divi, Elementor and …

7. SureCookie 1.4.0

   Aug 24, 2026

8. SureCookie 1.3.1

   Aug 3, 2026

9. SureCookie 1.3.0

   Aug 3, 2026

10. SureCookie 1.2.4

    Jul 21, 2026

11. SureCookie 1.2.3

    Jul 14, 2026

12. SureCookie 1.2.2

    Jul 10, 2026

13. SureCookie 1.2.1

    Jul 9, 2026

14. SureCookie 1.2.0

    Jun 29, 2026

15. SureCookie 1.1.0

    Jun 15, 2026

16. SureCookie 1.0.0

    Jun 8, 2026

17. SureCookie 0.0.1-beta.4

    May 20, 2026

18. SureCookie 0.0.1-beta.3

    May 19, 2026

19. SureCookie 0.0.1-beta.2

    May 1, 2026

20. SureCookie 0.0.1-beta.1

    Apr 13, 2026

21. SureCookie 0.0.0-alpha.3

    Apr 3, 2026

22. SureCookie 0.0.0-alpha.2

    Mar 31, 2026

23. SureCookie 0.0.0-alpha.1

    Mar 23, 2026