AIFORYA Consent Analytics: the GDPR consent banner augmented by AI
A complete WordPress CMP: GDPR/CCPA consent banner, real script blocking before consent, Google Consent Mode v2 included, timestamped audit log, and an AI layer (copywriter, forecast, dark patterns, Vision heatmap). BYOK model with no commission.
AIFORYA Consent Analytics: Your GDPR Consent Banner, Augmented by AI
AIFORYA Consent Analytics is a complete Consent Management Platform (CMP) for WordPress. It displays your cookie banner, actually blocks third-party scripts before consent, publishes Google Consent Mode v2 at no extra charge, and keeps a timestamped audit log with an irreversible IP fingerprint. On top of this compliance core, it adds a layer of generative AI that no mainstream CMP ships: a banner copywriter, a consent-rate forecast, an EDPB-aligned dark-pattern detector, an audit risk score, AI-assisted privacy-policy drafting, and a predictive visual heatmap powered by Vision. All in BYOK — your own API key, with no commission and no per-domain or per-session quota.
Technical specifications: Compatible with WordPress 6.0+, PHP 8.0+. Multi-language and performance-optimised (asynchronous, non-blocking frontend script).
Included in the AIFORYA subscription, unlimited AI usage via your own API key.
The Challenge: Being Compliant Without Being Charged by Volume
Cookie compliance has become mandatory — and a market where dominant players bill per domain or per scanned session. Want a clean banner, real tracker blocking, and the Consent Mode v2 that Google requires? With most SaaS CMPs, those functions quickly slide into a paid tier that grows with your traffic.
Web professionals run into three realities:
- Technical compliance is a trap. A banner that merely "hides" scripts in CSS blocks nothing: trackers still fire before the user's choice. A serious CMP must prevent scripts from executing server-side, publish Consent Mode v2, and prove consent in the event of an audit.
- Costs rise with success. Per-domain billing, session quotas, Consent Mode v2 sold as a premium add-on: the more your site grows, the heavier the bill — for a function that is standardised and, at Google, free.
- The banner stays a black box. Tools collect consent but never help you optimise it: which label puts people off, which configuration looks like a dark pattern, what impact a change will have. You navigate on gut feeling.
AIFORYA Consent Analytics answers all three: a robust, complete CMP core, a Consent Mode v2 included at no extra charge, and an intelligence layer that helps you move from a "compliant banner" to consent-rate optimisation.
Key Features
Here is what the extension really does, verified in the code, with no empty promises. Features marked by AI call a genuine language model via your key; the others are deterministic, local processes.
The GDPR/CCPA Consent Banner (the core)
- Description: The extension displays a configurable consent banner (top / bottom / centre position, accent colour, accept / refuse / customise buttons) via an asynchronous frontend script that does not block loading. Crucially, it rewrites the
<script>tags of known services totype="text/plain"as long as consent has not been given: trackers (Google Analytics, GTM, Meta Pixel, Hotjar, YouTube, Clarity, and about a dozen others) are genuinely prevented from executing, not merely hidden. They are reactivated client-side after the user's choice. - Concrete benefit: You get solid technical compliance — the only kind that holds up in an audit. Blocking is applied at server level, not as CSS cosmetics.
Google Consent Mode v2 — Included, Never Paywalled
- Description: The extension injects the
gtag('consent', 'default', …)state in all-denied mode into the<head>(top priority), then updates it client-side after the visitor's choice. This is exactly the building block Google requires for measurement and advertising audiences. - Concrete benefit: Where several CMPs reserve Consent Mode v2 for a higher subscription tier, it is included at no extra charge in every AIFORYA plan. That is a direct differentiator against solutions that monetise it.
Audit Log and Proof Export
- Description: Every interaction is recorded with a timestamp, the action (consent given / withdrawn / updated), the chosen categories, the country, the variant shown, and the policy version in force. The IP address is never stored in clear text: it is hashed with SHA-256 and a salt, irreversibly. You export up to 500 recent events as CSV or JSON as auditable proof. A daily cron automatically purges logs older than 365 days.
- Concrete benefit: Facing a DPO or an audit, you produce clean, anonymised proof of consent in seconds, without exposing any personal data.
Multi-Variant Banners and A/B Optimisation (Data-Driven)
- Description: Create several banner variants and let the extension serve them in A/B via weighted random selection, with impression, consent, and refusal counters. An optimiser then automatically recalculates the weights in proportion to the observed consent rate (Laplace smoothing). This is a deterministic and transparent algorithm, run locally — not a call to an AI model.
- Concrete benefit: Your best variants rise to the top on their own, based on your real numbers. The mechanism is predictable and auditable, with no black box.
AI Banner Copywriter
- Description: From your objective and the tone you want, the AI generates three honest banner variations (title, message, accept / refuse labels), ready to test in A/B.
- Concrete benefit: You escape the blank-page syndrome and feed your A/B test with polished wording, without writing each variant yourself.
- BYOK integration: Generation relies on your API key (Anthropic at Anthropic, or a compatible provider). Cost displayed, no AIFORYA markup.
AI Consent-Rate Forecast
- Description: Before deploying a change, the AI estimates its likely impact at 7, 30, and 90 days, with an uncertainty margin, from your site's real statistics.
- Concrete benefit: You decide on a quantified projection rather than on gut feeling, then measure the gap against reality.
- BYOK integration: The analysis goes through your API key. Data stays between your server and the provider you choose.
AI Dark-Pattern Detector and Audit Risk Score
- Description: Two complementary diagnostics. The dark-pattern detector evaluates your banner configuration (contrast, pre-ticked boxes, option complexity) and returns a score from 0 to 100 with concrete fixes, based on the EDPB guidelines. The audit risk score sweeps your overall compliance (effective blocking, log, policy, dark patterns, geographic statistics) and produces a score with a list of findings by severity.
- Concrete benefit: You get, on demand, a compliance pre-audit you would normally pay a consultant for — and you know exactly what to fix first.
- BYOK integration: Diagnostics generated via your key (Anthropic and Opus depending on the task), cost of each call displayed.
AI-Assisted Policy Drafting and Vision Heatmap
- Description: When a new tracker is detected, the AI drafts the paragraphs to add to your privacy policy (purpose, legal basis, third parties) — human validation remains required before publishing. In parallel, the predictive visual heatmap analyses a screenshot of your banner (JPEG / PNG / WebP up to 6 MB) via a Vision model and identifies attention zones and friction points, before any live test.
- Concrete benefit: Your legal documentation tracks your real trackers instead of freezing a generic template, and you visually spot what catches or blocks the eye on the banner.
- BYOK integration: Drafting via Anthropic; Vision via Anthropic, with an automatic fallback to OpenAI's
gpt-4o. All on your key.
Monthly Insights, Transparent AI Costs, and Multi-Provider BYOK
- Description: Each month, a cron automatically generates three to five actionable recommendations from your overall consent rate, by country and by variant; delivery goes through Resend if configured, otherwise
wp_mail. You can also trigger it manually. The dashboard also aggregates the real AI cost of the month per function, computed from consumed tokens and your provider's pricing. On the key side, you connect Anthropic, OpenAI, or Google, with configurable priority; keys are encrypted at rest and masked on display. - Concrete benefit: You steer your compliance with numbers and you see down to the cent what each AI function really costs you — no opaque billing layer in between.
- BYOK integration: The cost comes from your own provider billing: transparency is total and verifiable.
Concrete Use Cases
For the E-commerce Owner
Marc runs his WooCommerce store and depends on advertising tracking to steer his campaigns. He installs AIFORYA Consent Analytics as his primary CMP: clean banner, real script blocking, Consent Mode v2 active for Google Ads — without paying a premium by volume. The copywriter generates three banner variants, the data-driven A/B surfaces the best performer, and the rate forecast shows the expected impact before each change. His marketing consent rate rises, and his ad measurement becomes reliable again.
For the Digital Agency
An agency manages compliance for about fifteen client sites (Agency plan). The audit risk score and the dark-pattern detector have become its reporting tools: each month, it delivers a quantified pre-audit, the list of fixes by severity, and the AI cost incurred, down to the cent. The included Consent Mode v2 lets it move clients off per-domain-billed CMPs. This tangible deliverable justifies its management contracts and sets it apart.
For the WordPress Freelancer and the DPO
Julie administers several premium sites and must prove compliance to their managers. The audit log with SHA-256 hashed IP and the CSV/JSON export give her clean proof of consent to present in the event of a check. AI-assisted policy drafting updates the notices as soon as a new tracker appears. Because the model is BYOK, each client pays their own AI calls directly — a few euros a month — with no commission or quota.
Clear and Predictable Pricing
AIFORYA offers its extensions in a bundled subscription, with no hidden fees, no commission on your sales, and no AI usage quota or per-domain billing. You pay for the software and its support; you keep full control over your AI costs.
| Plan | Price | Sites | Key Points |
|---|---|---|---|
| Free | 0€ | 1 site | 1 free extension of your choice |
| Starter | €29 / month incl. VAT | 1 site | Complete CMP, script blocking, Consent Mode v2, audit log, AI features, unlimited AI usage via your key, standard support |
| Pro | €99 / month incl. VAT | 5 sites | Access to the entire AIFORYA extension catalogue, priority support |
| Agency | €2,490 / year incl. VAT | Unlimited sites | Full catalogue, white-label option, dedicated support, no change waiting period |
Important note on the BYOK model: The subscription covers the software licence, updates, and support. Your AI calls (Anthropic, OpenAI, Google) are billed separately and directly by the provider you choose, via your own API key. For standard usage, this cost is generally between €2 and €8 per month. AIFORYA applies NO markup on your AI consumption, and no commission on your revenue. The dashboard shows you this cost down to the cent, per function.
Frequently Asked Questions
General AIFORYA Questions
-
How do I create my Anthropic (or OpenAI, Google) API key? The process takes less than 5 minutes. Create an account on the provider's platform, add a payment method, then generate a key in the "API Keys" section. Detailed step-by-step guides are available in the AIFORYA documentation.
-
Can I cancel my subscription at any time? Yes. Subscriptions have no fixed term. You can cancel at any time from your client area. The extension keeps working until the end of your current billing period.
-
How does the BYOK (Bring Your Own Key) model work? You insert your own API key into the extension settings. AI calls are then made directly from your WordPress server to the provider, with your key. This guarantees total cost transparency and better confidentiality: your data never passes through AIFORYA's servers.
-
What are the real AI costs? They are low and depend on your volume. The extension only calls the AI on occasional actions (copywriter, forecast, dark patterns, audit, heatmap, monthly insights). For most users, the monthly bill from the provider is between €2 and €8. And above all, you see it down to the cent in the dashboard.
-
Is my data stored by AIFORYA? No. All your data (consent log, statistics) stays on your WordPress server. AI analyses are occasional, and only aggregated, non-identifying data is sent to the AI provider via your key. The IP address is hashed with SHA-256 and never stored in clear text.
-
Is the extension compatible with Elementor / Divi / Breakdance? Yes. AIFORYA Consent Analytics works at the
<head>and WordPress frontend level, independently of your page builder or theme, in compliance with WordPress standards. -
Is there a trial period? No. The Free plan's free extensions let you evaluate the catalogue with no commitment, and every paid plan comes with a full 14-day money-back guarantee.
-
What happens if Anthropic or OpenAI changes its prices? That is an advantage of the BYOK model. If prices drop — which is frequent — you benefit immediately. If a provider becomes too expensive, you switch to another compatible one simply by changing your API key.
-
Can I use my subscription on several sites? Yes. The Pro and Agency plans are designed for professionals managing multiple sites. Licences are managed from a single dashboard.
-
Does AIFORYA provide technical support? Absolutely. Responsive technical support by email is included in all subscriptions. Response times vary by plan.
Questions Specific to AIFORYA Consent Analytics
-
Is this a cookie banner (CMP) or just an analytics tool? It is a complete CMP. The extension displays your banner, actually blocks third-party scripts before consent, publishes Google Consent Mode v2, and logs consent. You do not need another CMP alongside it: this one handles the entire consent cycle, then adds an AI optimisation layer on top.
-
Is the script blocking real or cosmetic? Real. The
<script>tags of known services are rewritten totype="text/plain"as long as consent has not been given, which prevents them from executing server-side. They are reactivated only after the visitor's explicit choice — this is not a simple CSS mask. -
Is Google Consent Mode v2 really included at no extra charge? Yes, in every plan. The extension injects the default all-denied state into the
<head>then updates it after the visitor's choice. This is our direct difference from CMPs that reserve this function for a paid tier. -
Are the AI features genuinely operational? Yes — and we only sell what is. Fully wired: banner copywriter, consent-rate forecast, dark-pattern detector, audit risk score, AI-assisted policy drafting, Vision heatmap, and monthly insights. A/B optimisation, on the other hand, is a deterministic algorithm (weighting by observed consent rate), not an LLM call — we say so clearly rather than presenting it as "AI-weighted".
-
How does proof export work, and does it comply with the GDPR? You export up to 500 recent consent events as CSV or JSON. Each entry contains the timestamp, the action, the categories, the country, and the policy version — but never the IP in clear text (it is SHA-256 hashed with a salt). Logs older than 365 days are purged automatically. No personally identifiable data is transmitted to the AI for analyses.
AIFORYA Commitments
Client Sovereignty The BYOK model is a guarantee. You control your data, your costs, and your dependencies. AIFORYA provides the tool, you keep the power. Your consent data never leaves your server to pass through us.
Radical Transparency No hidden margins, no opaque credit systems, no commission on your sales, no per-domain or per-session billing. The dashboard pushes this transparency down to the cent: real AI cost per function. We announce what the product does — not what it might do one day.
Guaranteed Service Continuity AIFORYA is built to last. In the event of a business interruption, a patrimonial mechanism seals the release of the source code. Your extensions will keep working, guaranteeing the longevity of your investment.
GDPR Compliance by Design Confidentiality is not a promise; it is built into the product's architecture. Real script blocking before consent, SHA-256 hashed IP never stored in clear text, aggregated data sent to the AI, automatic log purging: GDPR compliance is a prerequisite, not a checkbox.
Uncompromising Quality Software is a living product. AIFORYA commits to regular updates for security, compatibility with the latest WordPress versions, and continuous feature enrichment — including the progressive activation of new AI capabilities.
Move from a Compliant Banner to Consent Optimisation
Stop choosing between a CMP that charges you by volume and a banner that blocks nothing. AIFORYA Consent Analytics combines a robust GDPR/CCPA consent banner, real script blocking, an included Consent Mode v2, an exportable audit log, and an AI layer that helps you optimise your consent rate — copywriter, forecast, dark patterns, audit, policy, Vision heatmap. All in BYOK, with no commission or quota.
Start for free with no credit card. Installation takes less than 5 minutes.