Cookie Consent Plugins for WooCommerce Stores
A store is the hardest consent case on the web, and the reason is arithmetic. A brochure site runs analytics and maybe a font. A WooCommerce store runs analytics, a Meta pixel, Google Ads conversion tracking, a live chat widget, a reviews platform, a shipping calculator, a payment provider’s fraud script, and whatever the last three marketing plugins added. Every one of those is a consent decision, and several of them are attached to money you can measure.
That last part is what makes store consent different. On a content site, a badly configured banner costs you analytics accuracy. On a store it costs you attribution, which costs you ad spend efficiency, which costs you actual revenue. This article covers what genuinely exempts, what does not, and which plugins handle the WooCommerce case properly.
Verified August 2026. Prices confirmed against vendor pages.
What is exempt, and what only looks exempt
The strictly necessary exemption is narrower than most store owners assume, and it is defined by function rather than by whose script sets it. A cookie is exempt when it is required to deliver a service the visitor explicitly requested. Keeping items in a cart is exactly that, so WooCommerce’s own cart and session cookies qualify: the cart hash, the items-in-cart flag, and the session identifier all exist to make the shop work and none of them need consent.
What does not qualify: anything measuring behaviour, anything building an advertising audience, anything attributing a sale to a campaign, and anything a third party sets for its own purposes. Google Analytics is not exempt because it improves your store. A Meta pixel is not exempt because it fires on the thank-you page. Recently viewed products stored for merchandising is a marketing feature wearing a functional costume.
The practical consequence is that a correctly configured store still functions completely for a visitor who rejects everything. They can browse, add to cart, check out, and pay. You simply cannot see them do it. If rejecting consent breaks your checkout, something non-essential has been miscategorised as essential, and that is the error to look for first.
The 6 options compared
1. Complianz
The default for WooCommerce, at $59 a year for a single site with no traffic meter. For a store that is the decisive number, because store traffic is the thing you are actively trying to increase and every metered competitor turns that success into a bigger bill.
Its WooCommerce handling is the reason to choose it beyond price. Because it is built for WordPress it recognises WooCommerce and its extensions, categorises the store’s own cookies correctly as necessary without you researching each one, and configures blocking around the plugins actually installed. It covers Consent Mode v2 so your Google conversion tracking behaves properly when consent is denied, and it keeps a consent log. One licence, the whole 2026 requirement set, and a bill that does not move when a campaign lands.
- Price: From $59 a year, single site, flat
- WooCommerce: Recognises store cookies and extensions automatically
- Best for: Most stores, as the default
- Watch out for: Still verify your marketing plugins’ pixels
2. WebToffee GDPR Cookie Consent
The strongest alternative on pricing structure, at $69 a year for a single site with explicitly unlimited pageviews, rising to $199 for five sites, $399 for twenty-five and $1,199 for a hundred. WebToffee’s roots are in WooCommerce extensions, and the store orientation shows.
Unlimited pageviews is the headline feature and it is aimed directly at the metered platforms. A store doing seasonal volume, where November traffic is five times August traffic, pays the same all year. Its consent log exports to CSV, which covers the record-keeping requirement, and visitors can retrieve their own consent ID. The agency tiers are priced sensibly enough that a shop managing a portfolio of client stores should price them against the per-site cost of anything metered.
- Price: $69/yr single site, unlimited pageviews; $199 for 5
- WooCommerce: Strong, from a WooCommerce-native vendor
- Best for: Seasonal or high-traffic stores, and agencies
- Watch out for: No data subject request workflow
3. Borlabs Cookie
From €49 a year, flat, and the choice when your product pages carry embedded content. Stores are full of it: video demonstrations, size guides in embedded documents, Instagram feeds, review widgets, store locators on Google Maps. Each of those is a third-party request firing on page load.
Borlabs handles these with per-service placeholders rather than blanket removal, so a blocked product video becomes a click-to-load panel instead of an empty rectangle on a page you are paying to send traffic to. That distinction matters commercially as well as legally: a broken-looking product page converts worse than one that explains why the video is waiting. Its German regulatory orientation produces conservative defaults, which means more visitors see less tracking, which is the correct trade to make deliberately rather than by accident.
- Price: From €49 a year, single site, flat
- WooCommerce: Good, with the best embed handling here
- Best for: Stores with video, maps, and social embeds
- Watch out for: Conservative defaults reduce measured conversions
4. Cookiebot by Usercentrics
Priced by page count at roughly €12 a month under 500 pages, €28 under 5,000, and €49 above. Read that meter carefully before assuming it suits you, because a store’s page count is driven by its catalogue rather than its sales.
A boutique with forty products sits comfortably in the cheapest tier. A store with 8,000 SKUs, each generating product, variation, and category URLs, lands on the top tier at €588 a year regardless of revenue. Against a $59 flat licence that needs justifying, and the justification available is discovery: Cookiebot’s automatic scanner crawls the site and finds cookies you did not know about, then rescans on a schedule. On a store where marketing plugins get installed and forgotten, that is a genuine ongoing benefit rather than a one-off.
- Price: ~€12, €28, or €49 a month by page count
- WooCommerce: Good, with strong automatic cookie discovery
- Best for: Stores that keep adding marketing tools
- Watch out for: Large catalogues hit the top tier immediately
5. CookieYes
From $10 a month on a pageview meter, quick to configure, and able to serve several jurisdictions from one banner, which suits a store shipping internationally. For a small shop wanting compliance handled this afternoon it is a reasonable choice.
The pageview meter is the thing to model. Stores buy traffic, and paid traffic arrives in bursts, so the month you most want your consent tool working smoothly is the month it costs most. Run the numbers on your peak month rather than your average one, then compare that against a flat licence over two years. On blocking, do the verification yourself: load a product page in a private window with the network tab open and confirm nothing fires before you touch the banner, paying particular attention to review widgets and chat.
- Price: From $10 a month, scaling with pageviews
- WooCommerce: Adequate; verify your own scripts
- Best for: Small stores needing multi-jurisdiction quickly
- Watch out for: Peak-season traffic drives the bill
6. Real Cookie Banner
A WordPress-native option with a free version and the same European regulatory orientation as Borlabs, worth shortlisting for the way it models third-party services rather than for its banner design.
It treats each service as a defined entity with known cookies, purposes, and blocking rules, which produces more accurate categorisation than generic script filtering. For a store that is useful because the long tail of ecommerce scripts, the abandoned-cart tool, the loyalty widget, the upsell engine, is exactly where generic approaches get vague. Confirm current paid pricing with the vendor, and if embedded content matters to your product pages, evaluate it head to head against Borlabs on your own catalogue rather than on features.
- Price: Free version available; confirm paid tiers with vendor
- WooCommerce: Accurate service-level categorisation
- Best for: Stores with a long tail of marketing scripts
- Watch out for: Compare directly against Borlabs before buying
Comparison table
| Plugin | Price | Meter | Consent Mode v2 | Store strength |
|---|---|---|---|---|
| Complianz | From $59/yr | None | Yes | Recognises WooCommerce automatically |
| WebToffee | $69/yr single site | None, unlimited views | Yes | Seasonal traffic, agency tiers |
| Borlabs Cookie | From €49/yr | None | Yes | Embed placeholders on product pages |
| Cookiebot | €12 to €49/mo | Page count | Yes | Automatic cookie discovery |
| CookieYes | From $10/mo | Pageviews | Yes | Fast multi-jurisdiction setup |
| Real Cookie Banner | Free tier; confirm paid | None published | Yes | Service-level categorisation |
Consent, conversion tracking, and the revenue you can measure
When a visitor declines advertising consent, your ad platforms stop receiving the signals that tell them which clicks became sales. That is not merely a reporting problem. Ad platform bidding algorithms optimise against conversion data, so a store feeding back fewer conversions gets worse optimisation and pays more per acquisition. This is the mechanism by which a consent implementation touches revenue.
Consent Mode v2 exists precisely for this. Rather than blocking Google’s tags outright, it signals consent state through four parameters including the two advertising ones, letting Google send cookieless pings and model the conversions it can no longer observe directly. Implemented properly it recovers a meaningful share of lost attribution while remaining compliant. Implemented as an afterthought it does neither.
Three things worth doing deliberately:
- Record your consent rate as a metric. If 40% accept, your reported conversions are a fraction of real ones and every channel comparison you make is against an incomplete denominator.
- Change the banner copy, not the mechanics. Explaining plainly what the measurement is for lifts acceptance. Making Reject All harder to find is a violation under the 2026 rules and, in the EEA, specifically forbidden.
- Resist dark patterns even where they work. Average fines for minor cookie violations reached about €47,000 in early 2026, which is a poor return on a few percentage points of consent rate.
Related guides
Frequently asked questions
Do WooCommerce cart cookies need consent?
No. Cart and session cookies deliver a service the visitor explicitly requested, which is the definition of strictly necessary. Categorise them as necessary and leave them running.
Will rejecting consent break my checkout?
It should not, and if it does you have miscategorised something. Test the full path, browse to payment confirmation, after clicking Reject All. Payment provider fraud scripts are the usual culprit and generally belong in the necessary category.
How much conversion data will I lose?
It depends entirely on your consent rate, which you should measure rather than guess. Consent Mode v2 modelling recovers part of the gap. Plan on your reported figures understating reality and compare periods on a like-for-like basis.
Does server-side tagging avoid the problem?
No. Moving where a tag executes does not change whether you have permission to process the data. Server-side tagging improves reliability and page speed and can reduce client-side blocking, but consent is still required for the same purposes.
What about abandoned cart emails?
Capturing an email address at checkout and using it to chase an abandoned cart is marketing, not cart function. Handle it under your marketing basis with a clear notice, not under the necessary exemption.
Do I need this if I only sell domestically outside the EU?
Check who actually visits before deciding. And several US state laws now impose their own consent and opt-out duties, so the practical answer for most stores is one banner configured for multiple regimes rather than none.
The verdict
For most stores: Complianz at $59 a year, flat. It knows what WooCommerce is, it covers Consent Mode v2 and consent logging, and growing traffic does not raise the price.
If your traffic is seasonal or already large: WebToffee at $69 a year with unlimited pageviews, and its $199 five-site tier if you manage more than one store.
If your product pages carry embedded video, maps, or social feeds: Borlabs from €49 a year, for placeholders that keep blocked pages looking intentional rather than broken.
Then measure your consent rate and put it next to your conversion figures. Whichever plugin you choose, that single number tells you how much of your store’s performance you are actually seeing, and no feature comparison can substitute for it.
