WordPress core ships no banner and no Consent Mode defaults. Cookifi is one script in the header, ahead of every analytics tag — and the only thing to watch is a caching or optimization plugin moving it.
None on self-hosted WordPress. On WordPress.com, plugins require the Business or Commerce tier; below that, use the theme's header field if it has one.
Plugins → Add New → install and activate 'WPCode – Insert Headers and Footers'. The free version is enough.
Code Snippets → Header & Footer. The Header box only exists on this screen — the snippets list is a different feature.
WPCode prints the box in the order it is typed, so the Cookifi script has to come before any GA tag already in there. Save Changes.
Purge the page cache, the object cache and the CDN. Until then visitors get HTML without the script.
In a child theme's functions.php, add_action('wp_head', …) at priority 1 does the same thing without a plugin.
In the Cookifi admin click Add, enter a name and your domain — a sitemap URL is optional — and click Create.
Open the property and copy the script under General → Integration script.
Click the Google icon in the script toolbar to include the Consent Mode default command. The defaults themselves are set under Regions, together with URL Passthrough and Ads Data Redaction.
Paste it as high in the <head> as the platform allows, on every page. Save, reload, and confirm the banner appears.
If the platform strips data- attributes and the banner does not load, switch to Query string mode in the Installation script section and copy the script again.
Cannot touch the head at all? Use the GTM Installation script in a Custom HTML tag with the Consent Initialization – All Pages trigger. Direct installation is still the recommendation, because ad blockers can suppress GTM.
Core has no GA4 or GTM integration. Site Kit by Google can inject both and has a consent-mode toggle, but it relies on a plugin that implements the WP Consent API. Whichever route you take, the Cookifi script has to sit before any GA tag in the same header box, or the first pageview of each visit fires unprotected.
WordPress ships no cookie banner of its own, so until you add a CMP nothing asks for consent and nothing holds a tag back.
One script in the head, a scan that suggests the categories for you, and a 14-day trial that needs no card.
One monthly base from €10 plus usage on read events — the first 10,000 each month are free. Subdomains and team members are unlimited, so a second site is not a second plan.
Live chat and email on every plan, with a human response within one business day on Enterprise. We are a small team, which is why the things customers ask for tend to ship quickly.
Google and Microsoft Consent Mode v2 are first-class, GA4 and GTM are the default path, and Cookifi is a Google-certified CMP partner.
No. A child theme's functions.php with add_action('wp_head', …) at priority 1 is equivalent, and one fewer plugin to update.
Only if you use Site Kit's consent-mode toggle, which expects a plugin implementing that API. Cookifi sets the Consent Mode defaults itself, so the tags it governs do not depend on it.
Consent Mode defaults have to be in place before gtag loads. WPCode prints the box top to bottom, so a GA tag above the Cookifi script would run first — and the first pageview of every visit would be unprotected.
Every fact on this page comes from the pages linked below. Spotted something out of date? Tell us and we will correct it.
Last reviewed November 2, 2026
14 days, no credit card. If the install takes you longer than ten minutes, tell us — on our side that counts as a bug.