=== Datoden Cookie Consent ===
Contributors: datoden
Tags: cookie banner, cookie consent, gdpr, consent mode, privacy
Requires at least: 6.5
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 3.0.12
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A clean cookie banner that follows the rules – Accept and Reject equally easy, nothing pre-ticked, nothing loaded from other servers.

== Description ==

In the WordPress admin the plugin is shown as "DT-cookie" in the DT-addons menu (Datoden's menu).

* Follows the EU/EEA rules for every visitor: consent before any non-necessary cookies, nothing set until the visitor has chosen.
* Accept all and Reject all are equally large, nothing is pre-ticked, and Settings lets visitors choose per category (Necessary, Statistics and – if you use it – Marketing).
* The choice is remembered for 12 months in the cookie dt_consent (for WordPress installed in a subfolder, e.g. /shop/, the cookie gets its own name, e.g. dt_consent_shop, and is limited to that path, so other sites on the same domain are not affected). Visitors can change it at any time via the shortcode [datoden_cookie_settings] or a menu item with the CSS class dt-consent-open.
* Google Consent Mode v2: Google tags start as denied and follow the visitor's choice.
* WP Consent API: plugins such as Site Kit and WP Statistics follow the choice automatically.
* Scripts you mark with type="text/plain" data-dt-consent="statistics" (or "marketing") only run after consent.
* Your logo (light and dark mode), accent colour and position – with a live preview.
* Follows the visitor's light or dark mode.
* The banner speaks the website's language: English, Swedish, German, French, Spanish, Italian, Dutch, Danish, Norwegian and Finnish – add your own languages, and change every text (heading, text, buttons and categories) with Reset text to go back.
* Ask everyone again: all visitors get the question again on their next visit, for example when you start using new cookies.
* Anonymous count of the choices per day (accept all, reject all, custom) – no personal data, stored on your website.
* Everything runs from the plugin: no external requests, no tracking.

= Free Datoden account (optional) =
Everything in the plugin works without an account. Connect the website to a free Datoden account and you also get website monitoring: Datoden checks your website every five minutes and emails you right away if it goes down, and before the SSL certificate or the domain expires. Nothing is sent to Datoden until you click Connect. See External services below for exactly what is sent.

= Pro add-on =
In the separate paid add-on Datoden Cookie Consent Pro (from Datoden, not part of this plugin): rules per country (for example 6 months in France, opt-out in the United States), a scan of the website that sets up the plugin, automatic blocking of known scripts, a list of services for the privacy policy and proof of consent stored on your website. This plugin works fully on its own without it.

== Frequently Asked Questions ==

= Which rules does it follow? =
The EU/EEA rules (GDPR and the ePrivacy rules): consent before all non-necessary cookies, Reject as easy as Accept, and the choice is kept for 12 months. This is not legal advice.

= Does it block scripts until consent? =
Plugins that use the WP Consent API and Google tags with Consent Mode follow the choice automatically. Other scripts can be marked with type="text/plain" data-dt-consent="statistics" (or "marketing") and are only run after consent.

= I use a cache plugin =
The cache of common cache plugins is cleared automatically when you save.

== Screenshots ==

1. The cookie banner on a website – Accept all and Reject all are equally easy.
2. Cookie settings – visitors choose per category.
3. The banner follows the visitor's dark mode.

== External services ==

This plugin can connect to Datoden (https://datoden.com), a service run by Responsit AB, Sweden. The connection is optional – everything in the plugin works without it. Nothing is sent to Datoden until an administrator clicks "Start DT-website-guard" (or "Connect") in the WordPress admin and approves the connection on datoden.se or datoden.com. You can disconnect at any time with "Disconnect" (or by turning DT-website-guard off) on the DT-website-guard page; then nothing more is sent.

What is sent to Datoden, and when (only while the website is connected, except the connection itself):

* When you connect: the website address, the administrator's language (Swedish or English), the WordPress address that Datoden returns to and a random check value. After you approve on Datoden, the website sends the one-time code it got back, together with the website address and the language, and receives a website key that is stored in your database.
* Once a day (WordPress cron), and when an administrator opens a DT plugin page and the last contact is more than six hours old: the website key, the language, and the folder names, versions and active state of the installed Datoden plugins (for example datoden-cookie-consent). The answer can contain short messages from Datoden and updated wording for the DT plugins' texts, which are shown on the plugins' pages.
* When an administrator opens the DT-website-guard page or a DT plugin page (at most every five minutes), or clicks "Check again": the website key, to get the latest result of Datoden's monitoring (up or down, response time, and the expiry dates of the SSL certificate and the domain). "Check again" also asks Datoden to check the website once more.
* When the DT-website-guard page is shown and the DT-website-guard plugin is installed: the list of Datoden's plugins and their versions is fetched from datoden.se, at most every six hours. No data about the website is sent.
* When you click "My websites": the website key, the language and the email address of the logged-in WordPress user, so that Datoden can sign you in directly if it is the same address as your Datoden account.
* When you save, use or delete a settings profile: the website key, and when saving the settings of DT-cookie and DT-darkmode (no personal data; website-specific values such as the logo and the privacy page are left out). They are stored in or read from your Datoden account.
* When you disconnect: the website key, so that Datoden can remove it.
* While connected, Datoden visits the public website every five minutes (like any visitor) to check that it is up, reads its SSL certificate and looks up the domain's public registration data to find when it expires. The plugin shows the dates as Datoden reports them; the website does not contact any other service for this.

Datoden terms: https://datoden.com/terms/
Datoden privacy policy: https://datoden.com/privacy-policy/

== Source code ==

Everything in this plugin is the original, human-readable source code. The PHP, JavaScript and CSS files are written by hand and are neither minified nor generated by a build tool, so there is no build step: the files in the plugin folder are the source and can be read and edited directly.

== Changelog ==

= 3.0.12 =
Core 3.0.8: the return from Datoden (Connect) is also checked with a WordPress nonce (WordPress.org review); the readme describes the source code.

= 3.0.11 =
Datoden-core 3.0.7: the plugins' settings are checked with a single database query when the page loads – missing or non-autoloaded settings used to cost one query each on every page.

= 3.0.10 =
* Review fixes in all plugins: prefixed JavaScript names, the WordPress 6.9 template enhancement output buffer (older WordPress: the buffer is closed explicitly), cache paths from content_url(). Dark Mode: block theme palettes are converted per use. SVG Support: steps back while the SVG Support plugin is active. Code Snippets: the WPCode switch button is shown for all imported snippets.

= 3.0.9 =
* Datoden-core 3.0.5: the plugin icon shows its symbol at full size, cut by the corner with the Datoden logo.

= 3.0.8 =
* Datoden-core 3.0.4: plugin icons without the white background – the cut corner is transparent and the Datoden logo uses the icon's light colour.

= 3.0.7 =
* Datoden-core 3.0.3: new plugin icon design – a cut white corner with the Datoden logo.

= 3.0.6 =
* Datoden-core 3.0.2: the plugin's own icon (the same as on WordPress.org) is shown in the DT-addons overview and in the header of the plugin's page.

= 3.0.5 =
* Datoden-core 3.0.1: the header on the plugin's page shows the plugin's name as on WordPress.org.

= 3.0.4 =
* No images or addresses are loaded from Datoden in the banner: the logo comes only from the settings (the site logo, your own image or none), and without a privacy page no policy link is shown.

= 3.0.3 =
* The HEX field for the accent colour is now in the row of colour swatches.

= 3.0.2 =
* Accent colour: a custom colour is shown correctly, the colour can be typed as HEX, and the text colour of the Accept button can be chosen – Auto (white or black, whichever is easier to read), White, Black or Custom. The previews show the real colours in a dark admin too.

= 3.0.1 =
* Logo: an image chosen with Light mode/Dark mode is now saved (autosave was not told that the value changed, so the choice was lost on reload). The light-mode preview stays light in a dark admin.

= 3.0.0 =
* New name on WordPress.org: Datoden Cookie Consent (shown as DT-cookie in the DT-addons menu). The free plugin contains no locked Pro features – they are only in the separate Datoden Cookie Consent Pro. Websites with the earlier version are moved to the new folder automatically; settings are kept. Consent cookie: WordPress in a subfolder (e.g. /shop/) gets its own cookie (dt_consent_shop) limited to its path.

= 2.0.1 =
* Plugin Check: redirects to Datoden use wp_safe_redirect, and the descriptions on the Datoden plugins overview are translated with WordPress' own function. Datoden-core 2.0.1.

= 2.0.0 =
* New prefix datoden_ instead of dt_ (WordPress.org). Settings and data are moved automatically on the first load; the old [dt_…] shortcodes, hooks and REST routes keep working. Works together with older DT plugins until they are updated. Datoden-core 2.0.0.

= 1.10.12 =
* Ready for WordPress.org: Plugin Check rules (sanitising, nonces, WordPress file functions), no inline scripts in admin pages, DT-core 1.17.22.

= 1.10.11 =
* DT-core 1.17.21: shared core cleaned up (unused code removed) – the same core in every plugin, no change in behaviour.

= 1.10.10 =
* The website name is shown in the field instead of as a placeholder.

= 1.10.8 =
* DT-core 1.17.12: the menu heading is called DT-addons and the overview section Datoden plugins.

= 1.10.7 =
* DT-core 1.17.11: the Pro features require a licence – the website must be connected to Datoden and have a purchased licence or be activated by Datoden. Without a licence the base plugin runs without Pro, with a notice saying why (three days to connect after installing or updating).

= 1.10.6 =
* DT-core 1.17.10: DT-website-guard includes itself in the list sent to Datoden – Control the website, Health and Updates show again in My websites, and DT-website-guard gets its updates from Datoden.

= 1.10.5 =
* DT-core 1.17.9: the menu heading is called Datoden Addons (DT-datoden-addons wrapped onto two lines).

= 1.10.4 =
* DT-core 1.17.8: the menu heading is called DT-datoden-addons (without the Pro badge); the first row in the menu and the overview are still called DT-website-guard.

= 1.10.3 =
* DT-core 1.17.7: the DT-website-guard overview shows every DT plugin – the ones that are not installed with Install (downloaded from Datoden) and Read more; deactivated ones with Activate.

= 1.10.2 =
* DT-addons is now called DT-website-guard (the menu, the overview, the plugins list and the texts in every DT plugin). The folder and the settings stay the same (dt-addons), so updates and everything saved work as before. DT-core 1.17.6.

= 1.10.1 =
* DT-core 1.17.5: the card about what Pro adds is shown at the top of the sidebar (only without Pro) – in every DT plugin.

= 1.10.0 =
* The WP Consent API is built in (own code with the same interface): Site Kit, WP Statistics and other plugins that follow the WP Consent API get the visitor's choice without installing the WP Consent API plugin (if it is installed, it is used instead – nothing loads twice). The choice is passed to the WP Consent API on every page load.

= 1.9.0 =
* Free and Pro in one: Pro is now an add-on to DT-cookie instead of a separate version that replaces it. DT-cookie (the base plugin, free on WordPress.org) stays installed and active, keeps the settings and is updated from there; DT-cookie Pro adds the Pro features and requires DT-cookie. Upgrade, go back or remove Pro – settings and data stay. If DT-cookie is newer than Pro, DT-cookie runs without the Pro features until Pro has been updated. DT-core 1.17.0.

= 1.8.1 =
* Fix: critical error when DT-cookie Pro was installed while an older free version was active. Pro now turns the free version off immediately and starts from the next request.

= 1.8.0 =
* Free and Pro: built as a free version (WordPress.org) and DT-cookie Pro (Datoden). Pro takes over the free version and keeps the settings, is updated from Datoden while connected and shows Pro in the header. Nothing stops working when switching either way. DT-core 1.16.0.

= 1.7.28 =
* DT-core 1.15.1: the header (logo, Datoden badge, buttons, language switch, Saved) and the Made by Datoden line are rendered by the core – the plugin only provides its name, version, description and any tabs. The collapse/expand arrow always sits at the far right of the card.

= 1.7.27 =
* DT-core 1.14.0: the header, the DT-addons menu and everything else shared (dt-hub.php, dt-autosave.js, dt-admin.css and Datoden images) live in the dt-core/ folder. Of all active DT plugins only the newest copy is used – updating one plugin with a newer core gives every plugin the new header, and all pages load the same files (cached once by the browser).

= 1.7.26 =
* Shared header script: in DT-addons, Messages go below Install or update in the sidebar.

= 1.7.25 =
* The tab row sits at the top of the main column – above the main cards only, so the sidebar starts at the top beside it.

= 1.7.24 =
* Tabs (e.g. Languages | Menus in DT-language) are a full-width row right below the header, above the cards – no longer small inside the header, so they are not missed.

= 1.7.23 =
* Every card – also in the main column and the cards above it – collapses and expands with a click on its heading. The arrow sits right after the heading, so switches and buttons on the right stay visible when the card is collapsed.

= 1.7.22 =
* Sidebar cards collapse and expand with a click on their heading – remembered per card. Collapsed Messages shows the count. In DT-addons the Datoden account is at the top of the sidebar (DT-hub 1.13.2).

= 1.7.21 =
* Closed messages stay closed after reloading the page.

= 1.7.20 =
* Messages are shown in the sidebar (Messages card) instead of the header.

= 1.7.19 =
* The first item under DT-addons in the menu is called DT-addons instead of Overview.

= 1.7.18 =
* The Datoden menu is now called DT-addons; the overview has a larger DT-website-guard panel.

= 1.7.17 =
* Undo/Redo tooltips say what will be undone or redone. Undo, Redo and Saved are always in the same place, greyed out when there is nothing to do.

= 1.7.16 =
* Header: subtle dividers between the groups of controls.

= 1.7.15 =
* Undo now works everywhere, also right after a change, for added/removed rows, the form builder and the code editor.

= 1.7.14 =
* Undo / Redo in the header of every DT plugin. The save status keeps its width; other messages are shown on top so nothing moves.

= 1.7.13 =
* Header rearranged: version next to the plugin name, buttons top right, Saved after the language switch, the Datoden logo links to Datoden's apps.

= 1.7.12 =
* The Datoden overview page has the same header as the plugins.

= 1.7.11 =
* Dark mode: the header shows the light Datoden logo (datoden-logo-darkmode.svg).

= 1.7.10 =
* The sidebar toggle moved into the header; when hidden the content uses the full width. The collapsed header shows the Datoden logo.

= 1.7.9 =
* The sidebar now lines up with the content (no extra gap at the top).

= 1.7.8 =
* The sidebar toggle sits in the top right corner with a sidebar icon.

= 1.7.7 =
* Header buttons: keep the header at the top while scrolling (pin) and collapse it so only Saved and the language switch show. The sidebar can be collapsed to a small button. The language switch is greyed out on pages without texts to translate.

= 1.7.6 =
* The settings page uses the same colours as the other DT plugins: the banner colour only shows in the preview.

= 1.7.5 =
* The plugin header now stays at the top when you scroll. Saved status and the SV | EN language switch moved from the admin bar into the header, below the badges.

= 1.7.4 =
* Unified names: the plugin is now called DT-cookie - datoden (lowercase after DT, like all DT plugins). The folder, settings and shortcodes are unchanged.

= 1.7.3 =
* Saved in the admin bar no longer gets a different background on hover.

= 1.7.2 =
* Saved / Saving… is shown in the admin bar at the top, to the left of the SV | EN language switch (also on mobile) – no longer in the plugin's page header.

= 1.7.1 =
* Messages in the page header: WordPress and plugin notices, messages from Datoden and the Datoden account row (DT-website-guard, Datoden apps) now sit in the page header, to the left of Saved, instead of pushing the page down. Long messages show two lines – click for the full text.

= 1.7.0 =
* Autosave: the settings are saved as soon as something changes – the Save button is removed. The status (Saved / Saving… / Could not save) is shown in the page header, as in DT-slideshow. Ask everyone again is a button that applies at once (previously a checkbox for the next save).

= 1.6.1 =
* The fields with per-language texts are tagged, so that Text fields in the admin bar (DT-language 1.3.0) can highlight them.

= 1.6.0 =
* Several languages with DT-language: the banner is always shown in the page's language, the languages are managed by DT-language, and each language's texts are edited with the SV | EN switch in the admin bar – the same choice as in Customize, DT-slideshow and DT-contact. Without DT-language everything works as before.

= 1.5.4 =
* Custom accent colour: the colour picker opens again.

= 1.5.3 =
* Settings page scripts and styles are loaded the WordPress way (no inline tags). Activation no longer changes other plugins' settings or deactivates other cookie banners – the site scan shows them instead.

= 1.5.2 =
* Settings profiles with a free Datoden account: save the settings and use them on your other websites.

= 1.5.1 =
* Adding a language saves it right away.

= 1.5.0 =
* Texts in the banner: the fields show the text visitors see, every text can be changed, Reset text, and you can add your own languages.

= 1.4.5 =
* Small layout fix.

= 1.4.4 =
* The scan result is folded away; adding or removing the list in the privacy policy is always at the top.

= 1.4.3 =
* The scan is placed right below the cookie banner switch.

= 1.4.2 =
* The privacy policy is only changed after you click OK. Proof of consent is shown 100 at a time.

= 1.4.1 =
* The scan is at the top of the settings page and sets up what is needed automatically.

= 1.4.0 =
* Rules per country (EU/EEA, Germany, France, Italy, Spain, UK, Switzerland, USA opt-out with Global Privacy Control, or by the visitor).
* The banner in ten languages.
* Scan the website with suggestions, automatic blocking of known scripts and the shortcode [dt_cookie_list].

= 1.3.1 =
* Clean-up on uninstall, readme with External services and screenshots.

= 1.3.0 =
* Proof of consent: every visitor choice is stored on your website (time, consent ID, choices, banner version, privacy page, checksum of the shortened IP). Search by ID and export as CSV. Kept for 13 months. Nothing is sent to Datoden.

= 1.2.0 =
* Anonymous statistics of visitor choices (accept all, reject all, custom) per day, stored only on the website.

= 1.1.9 =
* Shared Datoden module updated.

= 1.1.8 =
* Messages from Datoden are shown at the top when the website is connected, and can be closed.

= 1.1.7 =
* Website monitoring as an on/off switch at the top of the Datoden overview.

= 1.1.6 =
* Website monitoring explained in plain words: what you get, three steps to start, and a "Start Website monitoring – free" button.

= 1.1.5 =
* A cleaner Datoden overview: the DT plugins as tiles and a tidier account card.

= 1.1.4 =
* The Datoden overview lists the DT plugins as cards.

= 1.1.3 =
* My websites opens your Datoden account directly through a secure one-time link when it is safe; otherwise you sign in and land on the right page.

= 1.1.2 =
* Shows "Connected to Datoden" next to the version and a shortcut to My websites in Datoden when the website is connected.

= 1.1.1 =
* The preview shows the banner in both light and dark mode with the right logo.

= 1.1.0 =
* DT names in code and files: the menu class is dt-consent-open and scripts are marked with data-dt-consent. The old dd- names still work.

= 1.0.1 =
* The consent cookie is called dt_consent. A choice stored under the old name is moved automatically.

= 1.0.0 =
* First version.

== Upgrade Notice ==

= 2.0.0 =
Install all DT plugins together; settings are moved automatically.
