Universal Consent & Privacy Framework (Alpha)
Open-source WordPress privacy & cookie consent toolkit. Strict GDPR-oriented defaults, local vendor catalog, script blocking, policy pages, and an optional Playwright deep scanner. Not legal advice, not a compliance guarantee.
Install
Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/jeffreyreedjr/universal-consent-privacy-framework/releases/download/Alpha/universal-consent-privacy-framework.zipUniversal Consent & Privacy Framework (UCPF)
Open-source WordPress privacy & cookie consent toolkit. Strict GDPR-oriented defaults, local-first catalog, optional Playwright deep scanner. Not legal advice and not a guarantee of regulatory compliance.
- Plugin slug:
universal-consent-privacy-framework - License: GPL-2.0-or-later
- Never phones home (remote registry off by default; never loads remote executable code)
Screenshots
| Banner & Branding | Front-end consent | Cookie Scanner |
|---|---|---|
 |
 |
 |
Directory / SVN assets (icons, banners, screenshots) live in .wordpress-org/. The plugin zip also ships assets/branding/ icons for the WP admin menu.
Quick start
1. Install the plugin
- Download a release zip or run
.\package.ps1from this repo. - Upload to WordPress (Plugins → Add New → Upload) or copy the folder to
wp-content/plugins/. - Activate → Privacy Consent → Setup Wizard.
Or install from WordPress.org once listed (Dashboard updates).
2. Brand your business
Privacy Consent → Banner & Branding: business name, logo URL, theme (Classic + studio presets), accent colors, custom CSS, optional “Powered by” toggle.
Agencies: see docs/WHITE-LABEL.md (wp-content/ucpf-brand.php).
3. Scan cookies
| Path | When |
|---|---|
| Built-in guest crawl | Always available in Cookie Scanner |
| Local deep scan | cd tools/ucpf-scanner → scan CLI → Import JSON |
| Self-hosted scanner API | docs/SCANNER-SERVER.md — Node service + HTTPS + WP Advanced URL/key |
Details: docs/GETTING-STARTED.md, tools/ucpf-scanner/README.md, docs/SCANNER-SERVER.md.
Updates (secure, no phone-home)
- WordPress.org (primary): Dashboard plugin updates via WordPress core.
- GitHub Releases (secondary): download zip + verify SHA256.
There is no custom phone-home updater. Prefer branding via settings / ucpf-brand.php over forking the plugin folder so you keep WP.org updates.
First public push: docs/FIRST_PUSH.md. Release process: docs/RELEASING.md.
Security
See SECURITY.md. Report vulnerabilities via GitHub Security Advisories.
Contributing
See CONTRIBUTING.md. Good first contributions: noise filters (data/noise-filters.json), vendor catalog, Open Cookie Database rebuild, translations, scanner classify rules.
Docs
| Doc | Topic |
|---|---|
| GETTING-STARTED | Install, brand, scan |
| CLOUDFLARE-CACHE | CF Cache Rules for consent HTML + asset ?ver= |
| WHITE-LABEL | Agency branding without forking |
| RELEASING | Version tags, WP.org, checksums |
| DEVELOPER | Hooks, registry, REST |
| SCANNER-SERVER | Self-host Playwright API on your VPS |
Disclaimer
UCPF helps support privacy compliance workflows. Final legal review remains the site owner’s responsibility. Generated policies are templates only.
Credits
Created and developed by Jeffrey Reed Jr.
Releases
1 release. Each count is every asset in that release; expand a row for the breakdown.