Melon Consent is a lightweight, self-contained consent banner with real script and content blocking for WordPress. It does not just display a cookie notice — it technically blocks non-essential scripts, iframes, embeds and external connections until the visitor has given consent. No cloud. No accoun
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 6.5 and PHP 7.4.
SourceWordPress plugins · Nov 1, 2026
01 / Source details
Aboutthistool.
Melon Consent is a lightweight, self-contained consent banner with real script and content blocking for WordPress. It does not just display a cookie notice — it technically blocks non-essential scripts, iframes, embeds and external connections until the visitor has given consent.
No cloud. No account. No monthly fees. No telemetry. Everything runs on your own WordPress installation.
Features
Consent banner with four layouts: compact card, center modal, top/bottom bar, side drawer
Five design presets (Clean Light, Soft Neutral, Dark Contrast, Minimal Bar, Brand Accent) with custom colors and live preview
Category- and service-level consent (Necessary, Statistics, Marketing, External Media)
Melon Consent itself performs no external requests, loads no remote assets for its own operation, and sends no data to the plugin author. The domain lists contained in the plugin code (for example googletagmanager.com or youtube.com) are blocklist matching rules : they are used to detect and BLOCK requests to those hosts until the visitor consents — not to perform requests.
External requests only occur for third-party services that (a) the site owner has explicitly enabled in the plugin settings and (b) the visitor has consented to — or, for embedded content, that the visitor actively triggers by clicking “load once” on a placeholder. The following services can be involved:
Google Analytics 4 (disabled by default)
Used for web analytics when the site owner enables the managed integration. After the visitor consents to the “Statistics” category (or, only if the site owner explicitly enables the Advanced Consent Mode, before consent with all consent signals denied), the plugin loads the gtag.js script from googletagmanager.com and Google Analytics collects usage data (page URL, referrer, browser/device information, approximate location derived from the IP address, events). This data is sent to Google LLC / Google Ireland Ltd. Terms: https://marketingplatform.google.com/about/analytics/terms/us/ — Privacy: https://policies.google.com/privacy
Google Tag Manager (disabled by default)
Used for tag management when the site owner enables the managed integration. After the visitor consents (or in the explicit Advanced Consent Mode, with denied consent signals), the plugin loads the gtm.js container script from googletagmanager.com. Which further data is collected depends on the tags configured inside the site owner’s container. Provider: Google LLC / Google Ireland Ltd. Terms: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/ — Privacy: https://policies.google.com/privacy
Google Consent Mode v2
When Google Analytics or Google Tag Manager is enabled, the plugin sets the Google consent signals (analytics_storage, ad_storage, ad_user_data, ad_personalization) — all “denied” by default — and sends updates after the visitor’s decision. In the default strict mode no request to Google happens before consent; the signals only take effect once Google tags are loaded.
YouTube (blocking enabled by default)
YouTube videos embedded by the site owner are blocked and replaced with a local placeholder. Only when the visitor consents to YouTube (permanently or one-time per embed) is the video iframe loaded from youtube-nocookie.com (privacy-enhanced mode) or youtube.com, which transmits the visitor’s IP address and browser information to Google and may set cookies/use local storage. Provider: Google LLC / Google Ireland Ltd. Terms: https://www.youtube.com/t/terms — Privacy: https://policies.google.com/privacy
Google Maps (blocking enabled by default)
Google Maps embeds are blocked and replaced with a local placeholder. Only after the visitor’s consent is the map loaded from google.com/maps, maps.googleapis.com or related Google hosts, which transmits the visitor’s IP address and browser information to Google. Provider: Google LLC / Google Ireland Ltd. Terms: https://cloud.google.com/maps-platform/terms — Privacy: https://policies.google.com/privacy
OpenStreetMap (blocking enabled by default)
OpenStreetMap embed iframes are blocked and replaced with a local placeholder. Only after the visitor’s consent is the map loaded from openstreetmap.org, which transmits the visitor’s IP address and browser information to the OpenStreetMap Foundation (or to the configured third-party/self-hosted tile server). Terms: https://osmfoundation.org/wiki/Terms_of_Use — Privacy: https://osmfoundation.org/wiki/Privacy_Policy
Custom services
Site owners can define additional third-party services with their own blocking rules. For those, the request behaviour and the applicable terms depend entirely on the service configured by the site owner; the plugin only blocks and (after consent) releases the site owner’s own embed code.
Privacy
Melon Consent stores the visitor’s consent decision exclusively in a strictly necessary first-party cookie ( melon_consent ) in the visitor’s browser: consent version, timestamp and the choices per category and service. It stores no personal data, no IP addresses and no consent logs, and it sends no data to the plugin author. A suggested privacy policy text is provided via the WordPress Privacy API. Third-party services enabled by the site owner process data under their own privacy policies once the visitor consents.
Legal Disclaimer
Melon Consent supports site owners in technically implementing consent and blocking optional services. A consent banner alone does not automatically make a website legally compliant. This plugin does not constitute legal advice.
See it in action
Screenshots & previews.
Consent banner (compact card layout, Clean Light preset)Settings dialog with category and service togglesYouTube placeholder before consentAdmin: services configurationAdmin: banner design with live previewAdmin: texts and linksAdmin: advanced settings, import/export and diagnostics
02 / Source details
Gettingstarted.
01Upload the plugin ZIP via Plugins → Add New → Upload Plugin , or unzip it into /wp-content/plugins/ .
02Activate Melon Consent through the Plugins menu.
03Open Melon Consent in the admin menu and follow the setup steps: select services, enter tracking IDs, design the banner, review texts and links, then test in a private browser window.
03 / Source details
Frequently asked questions.
Does Melon Consent guarantee legal compliance?
No plugin can. Melon Consent supports you in technically implementing consent and blocking optional services. Legal compliance depends on your entire website, your texts and your configuration. The plugin does not constitute legal advice.
Does the plugin send data to Melonlabs?
No. The plugin contains no telemetry, performs no external requests, and stores no visitor data on the server.
Does it support Google Consent Mode v2?
Yes. All four signals (analytics_storage, ad_storage, ad_user_data, ad_personalization) default to “denied” and are updated after a decision. The strict basic mode (default) loads no Google tags before consent; the advanced mode is an explicit opt-in.
Does it block YouTube before consent?
Yes. No request is made to youtube.com, youtube-nocookie.com or ytimg.com before consent — including thumbnails. A locally rendered placeholder is shown instead.
Does youtube-nocookie.com remove the need for consent?
No. The privacy-enhanced mode reduces cookie usage but does not automatically prevent every data transfer. Melon Consent therefore blocks it before consent as well.
Does it support Google Maps?
Yes: embed iframes, the Maps JavaScript API and statically detectable map resources are blocked before consent and replaced with a placeholder.
Does Google Search Console need consent?
Normally no. Verification via DNS, HTML file or meta tag involves no tracking of visitors, so it is intentionally not a blockable service in Melon Consent.
Does it work with caching plugins?
Yes, by design. The served HTML is identical for every visitor (blocked content is inert in the markup); the visitor’s browser activates allowed content after reading the consent cookie. No cache variants are needed.
Can visitors revoke consent?
Yes — via the floating privacy button, the [melon_consent_settings] shortcode, a link with the data-melon-open-settings attribute, or MelonConsent.openSettings() . After revocation, known Google Analytics cookies are removed and the page reloads.
Does it store consent logs?
No. The decision is stored only in a first-party cookie in the visitor’s browser. No personal data, no IP addresses, no consent history in the database.
What happens when consent is revoked?
The cookie is updated, known first-party cookies of the affected services (e.g. _ga , _gid ) are removed, and the page reloads. Already-executed third-party scripts cannot always be fully removed from memory — that is why the reload is required.
Can every third-party script be detected automatically?
No plugin can automatically detect every custom third-party integration. Melon Consent reliably covers well-known services and gives you custom rules and a manual wrapper for everything else.
Does it support OpenStreetMap and Leaflet?
OpenStreetMap embed iframes are blocked automatically. A locally loaded Leaflet library can still request external tiles — wrap custom maps in [melon_consent_content service="openstreetmap"]…[/melon_consent_content] or add a custom rule with your tile domains.
Website LLMs.txt and LLMs-Full.txt Generator is an LLMs.txt generator and llms-full.txt generator for WordPress. It helps site owners generate, manage, preview, validate, and serve AI discovery files from published public content. Use it to create structured /llms.txt and optional /llms-full.txt end
EngageDock AI is a customizable floating contact widget for WordPress websites that want more leads and faster visitor communication. It helps small businesses turn website traffic into calls, texts, emails, and callback requests from one clean contact panel. Key Features: Click-to-Call – One tap ca
Altify AI is an auto ALT text and AI ALT text plugin for WordPress images. It helps generate descriptive image ALT text for accessibility and image SEO. Use bulk image ALT text tools for your Media Library, generate featured image ALT text automatically, and scale WooCommerce image ALT updates with
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati
