OptSens | Cookie Consent Platform for GDPR & CCPA

Description

OptSens is a Consent Management Platform (CMP) that helps make your website compliant with GDPR, ePrivacy, CCPA, CPRA, ZZPL (Serbia), FADP (Switzerland) and other global privacy regulations.

This plugin is a connector to the OptSens cloud service. To use it you need an OptSens account at my.optsens.com. OptSens is a paid service with multiple plan tiers (Essential, Plus, Pro, Business). The plugin itself is free and open source.

Features

• IAB TCF 2.3 certified consent framework
• Google Consent Mode v2 (all seven consent types)
• CCPA / CPRA opt-out with Do Not Sell link
• GPP (Global Privacy Platform) support
• Automatic script and cookie blocking
• 52 banner languages with auto-detection
• Geo-targeting per region
• WordPress Consent API integration

Account required

This plugin requires an OptSens account. Sign up at my.optsens.com, add your domain to receive a Domain ID, then enter that ID in the plugin settings page. Plan details are shown in your OptSens account.

External services

This plugin connects to two OptSens services to deliver the consent management experience.

cdn.optsens.com

The plugin loads the OptSens consent management script from this CDN on every public page of your site. The script is loaded as <script src="https://cdn.optsens.com/optsens.min.js/YOUR_SITE_ID">. Each visitor’s browser fetches the script and sends its own IP and User-Agent header to the CDN as part of the normal HTTP request. The CDN does not log or store these headers beyond standard CDN cache metrics.

Data sent: visitor IP address, User-Agent (standard HTTP request headers only)
Trigger: every public page load when a Domain ID is configured
Privacy policy: https://optsens.com/privacy-policy

api.optsens.com

When you save your Domain ID in the plugin settings, the plugin sends one HTTPS request to validate that the ID is real and that the WordPress site hostname matches the domain registered to that ID. No visitor data is sent. The request is made only from the WordPress admin screen, never from public pages.

Data sent: Domain ID, hashed WordPress site hostname (first 16 chars of SHA-256)
Trigger: when an admin saves the settings, plus a 5-minute cached re-check on settings page render
Privacy policy: https://optsens.com/privacy-policy

Privacy

The plugin itself does not collect or store user data on your WordPress server beyond a single option (optsens_site_id) and short-lived validation cache transients. All consent records are stored in the OptSens cloud, scoped to your account. Visitors interact directly with the OptSens script; their consent choices, anonymized analytics, and IP-derived geo region are processed by the OptSens service under the OptSens Privacy Policy linked above.

For OptSens as a data processor under GDPR, request a Data Processing Agreement from your account contact at OptSens.

Technical details