Bulgaro GDPR

Bulgaro GDPR adds a GDPR cookie consent banner (cookie notice) to your WordPress site: it blocks analytics and marketing scripts until the visitor agrees, records every consent, and never breaks checkout.

The free plugin includes:

• A cookie consent banner with Accept, Necessary only, and category preferences — 14 languages or automatic browser detection
• Consent management with records stored as a pseudonymous SHA-256 id (no IP address) — GDPR and ePrivacy friendly
• Automatic blocking for known trackers (GA4, GTM, Meta Pixel, and others)
• Google Consent Mode v2
• A scanner that stays on your server
• Coverage for WordPress core cookies, WooCommerce, and payment providers
• A Consent Register showing how many consents were recorded and the most recent entries

Payment scripts are detected and never blocked, so checkout can finish. Covered providers include Stripe, PayPal, WooPayments, ePay.bg, BORICA, myPOS, EasyPay, Paysera, Revolut Pay, Mollie, Klarna, Adyen, Square, Braintree, Amazon Pay, Google Pay, Razorpay, PayU, 2Checkout, iCard, TBI Bank and NestPay virtual POS.

The admin screens are available in English and Bulgarian.

Bulgaro GDPR Pro

Bulgaro GDPR Pro is an optional paid add-on that adds:

• 10 extra banner color themes (15 in total) and 3 extra banner shapes
• Custom Scripts Manager — inject your own functional, analytics and marketing snippets, each fired only after the visitor consents to that category
• Consent Register audit tools — CSV export for audits and a configurable retention window
• A daily automatic website scan with an email alert when a new third-party tracking service appears

The free plugin is fully functional on its own; the add-on only adds the extras above. Learn more: https://supremecommerce.eu/bulgaro-gdpr/

External services

The core GDPR features — cookie banner, script blocker, scanner and payment coverage — work entirely on your own server and send no data anywhere. The only same-domain requests are from the built-in Website Scanner, which reads pages on your OWN site (same domain) with the user agent BulgaroGDPR-Scanner, and only when you start a scan from the admin. No visitor data is ever sent off your site.

Freemius (payments and licensing). The plugin uses the Freemius service to sell and manage the optional Pro upgrade: secure checkout, license activation, update delivery and (only if you opt in) anonymous usage diagnostics. On activation you are shown an opt-in screen that you can skip — the free plugin runs fully in anonymous mode and contacts Freemius only when you choose to connect, buy a license, activate one, or check for a Pro update. Data that may then be sent includes your site URL, WordPress/PHP versions, admin email and license key, used to deliver and validate your purchase. Freemius is operated by Freemius, Inc.
Terms: https://freemius.com/terms/ — Privacy policy: https://freemius.com/privacy/

The service and CDN domain names that appear inside the plugin code (for example Google Analytics, Stripe, jQuery/Swiper CDNs) are detection patterns only: they are text the scanner matches against the HTML of your own pages to recognise which third-party scripts a visitor’s browser would load. The plugin never loads, enqueues or connects to any of them.

Payment and captcha hosts (Stripe, PayPal, ePay.bg, BORICA, reCAPTCHA, and the rest of the catalog) are loaded by those providers when a visitor reaches a form or checkout. This plugin does not contact them itself.