{"id":303219,"date":"2026-04-28T11:47:14","date_gmt":"2026-04-28T11:47:14","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/arqam360-consent-privacy-pdplgdpr\/"},"modified":"2026-09-25T07:58:46","modified_gmt":"2026-09-25T07:58:46","slug":"arqam360-consent-privacy-pdplgdpr","status":"publish","type":"plugin","link":"https:\/\/de-ch.wordpress.org\/plugins\/arqam360-consent-privacy-pdplgdpr\/","author":23484126,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"2.0.7","stable_tag":"2.0.7","tested":"7.1.2","requires":"5.8","requires_php":"7.4","requires_plugins":null,"header_name":"Cookie Consent Banner \u2014 PDPL, GDPR & Arabic RTL (Arqam360)","header_author":"Arqam360","header_description":"PDPL, GDPR & Google Consent Mode v2 consent banner for WordPress & WooCommerce. Arabic RTL, AI cookie scanner, server-side consent forwarding.","assets_banners_color":"","last_updated":"2026-09-25 07:58:46","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/arqam360.com\/wordpress","header_author_uri":"https:\/\/arqam360.com","rating":0,"author_block_rating":0,"active_installs":0,"downloads":241,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"2.0.5":{"tag":"2.0.5","author":"arqam360","date":"2026-04-28 11:46:02","revision":3517335},"2.0.7":{"tag":"2.0.7","author":"arqam360","date":"2026-09-25 07:58:46","revision":3712614}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3517333,"resolution":"256x256","location":"assets","locale":"","width":250,"height":250}},"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["2.0.5","2.0.7"],"block_files":[],"assets_screenshots":[],"screenshots":{"1":"Settings page \u2014 enter your API key and configure the widget","2":"Consent banner on the storefront"}},"plugin_section":[],"plugin_tags":[20011,388,131785,235669,396],"plugin_category":[54],"plugin_contributors":[261276],"plugin_business_model":[],"class_list":["post-303219","plugin","type-plugin","status-publish","hentry","plugin_tags-consent","plugin_tags-cookie","plugin_tags-gdpr","plugin_tags-pdpl","plugin_tags-privacy","plugin_category-security-and-spam-protection","plugin_contributors-arqam360","plugin_committers-arqam360"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/arqam360-consent-privacy-pdplgdpr\/assets\/icon-256x256.png?rev=3517333","icon_2x":"https:\/\/ps.w.org\/arqam360-consent-privacy-pdplgdpr\/assets\/icon-256x256.png?rev=3517333","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>Free PDPL + GDPR cookie consent banner for Saudi, UAE, and GCC WordPress sites. Native Arabic RTL. Live in 60 seconds. No code, no developer, no credit card.<\/p>\n\n<p>The free tier covers what most stores need: a compliant banner with PDPL, GDPR, and UAE PDPA detection, native Arabic, Google Consent Mode v2, GPC support, a bilingual cookie declaration page, 1 domain, and 10,000 pageviews per month \u2014 forever. Upgrade when you're ready for the Cookie Scanner, DSAR portal, server-side event forwarding, audience activation, custom banner branding, or multi-domain support.<\/p>\n\n<p><strong>Key Features:<\/strong><\/p>\n\n<ul>\n<li><strong>Google Consent Mode v2<\/strong> \u2014 fires consent signals before any tag loads<\/li>\n<li><strong>18 regulations covered<\/strong> \u2014 Saudi PDPL, UAE PDPA, GDPR, CCPA, plus Qatar, Bahrain, Oman, Egypt, Morocco, Tunisia, Algeria, Jordan, Lebanon, Brazil LGPD, Canada PIPEDA, UK GDPR, and more<\/li>\n<li><strong>113-cookie classifier<\/strong> \u2014 including MENA-specific services (Tabby, Tamara, Mada, STC Pay, Salla, Zid) that global CMPs miss<\/li>\n<li><strong>Bilingual cookie declarations<\/strong> \u2014 every cookie ships with English + Arabic descriptions, on every plan<\/li>\n<li><strong>Native Arabic RTL<\/strong> \u2014 built for MENA merchants from day one<\/li>\n<li><strong>AI Cookie Scanner<\/strong> \u2014 discover every cookie and tracker (Pro plan)<\/li>\n<li><strong>Server-side event forwarding<\/strong> \u2014 Meta CAPI, GA4, sGTM, TikTok, Snap, LinkedIn, HubSpot, Mixpanel, BigQuery, Google Enhanced Conversions<\/li>\n<li><strong>Audience activation<\/strong> \u2014 segment your consented first-party data and sync to ad platforms (Pro\/Agency plan)<\/li>\n<li><strong>30+ Customization Options<\/strong> \u2014 colors, position, text, categories<\/li>\n<li><strong>Auto Regime Detection<\/strong> \u2014 detect visitor regulatory regime by IP location<\/li>\n<li><strong>Script + request quarantine<\/strong> \u2014 block trackers BEFORE they fire, not just after<\/li>\n<li><strong>GPC Support<\/strong> \u2014 respect Global Privacy Control browser signals<\/li>\n<\/ul>\n\n<p>Works with WooCommerce and any WordPress site.<\/p>\n\n<h3>Tag manager placement<\/h3>\n\n<p>The plugin loads its script in the document <code>&lt;head&gt;<\/code>, before any other script\nWordPress prints, so the Google Consent Mode v2 \"denied\" default is set before\nyour tags read it.<\/p>\n\n<p>There is one case it cannot control. If your Google Tag Manager or GA4 snippet\nis pasted directly into your theme's <code>header.php<\/code> <strong>above<\/strong> the <code>wp_head()<\/code>\ncall, that snippet runs before anything WordPress outputs, including this\nplugin \u2014 and it will read no consent state.<\/p>\n\n<p>Two ways to be sure:<\/p>\n\n<ul>\n<li>Move the GTM snippet below <code>wp_head()<\/code> in your theme, or<\/li>\n<li>Install GTM through this plugin's container guidance instead of hardcoding it.<\/li>\n<\/ul>\n\n<p>If you manage tags entirely inside a GTM container loaded via a plugin or\n    wp_head, no action is needed.<\/p>\n\n<h3>Credentials<\/h3>\n\n<p>The plugin uses two credentials from your Arqam360 dashboard, in the same way\nStripe uses a publishable key and a secret key:<\/p>\n\n<ul>\n<li><strong>Widget Key<\/strong> (<code>ciq_live_...<\/code>) \u2014 public. It appears in your page source and\nloads the consent banner. This is by design; it authorizes the banner and\nnothing else.<\/li>\n<li><strong>Site Token<\/strong> (<code>ciq_sk_live_...<\/code>) \u2014 secret. It opens your Arqam360 dashboard\ninside wp-admin and is never written to your pages. It is shown once, when\nyou create it.<\/li>\n<\/ul>\n\n<p>The two are not interchangeable and the settings page will refuse a credential\npasted into the wrong field.<\/p>\n\n<h3>External Services<\/h3>\n\n<p>This plugin connects to the Arqam360 service to function:<\/p>\n\n<ol>\n<li><p><strong>Arqam360 CDN<\/strong> (cdn.arqam360.com) \u2014 The consent banner JavaScript is loaded from Arqam360's CDN. This script renders the cookie consent banner on your site and handles consent collection. No personal visitor data is sent to the CDN; it only serves the static JavaScript file.<\/p><\/li>\n<li><p><strong>Arqam360 API<\/strong> (api.arqam360.com) \u2014 When a Widget Key is configured, the plugin fetches your widget configuration (colors, text, position, compliance settings) from the Arqam360 API. Consent records are also sent to this API for storage and analytics. Your Widget Key authenticates these requests. If a Site Token is also configured, it is used only to open the dashboard inside wp-admin, and is sent from your server to api.arqam360.com over HTTPS \u2014 never to a visitor's browser.<\/p><\/li>\n<\/ol>\n\n<p>A free Arqam360 account is required (free forever for the consent banner, no credit card). Sign up at <a href=\"https:\/\/arqam360.com\">arqam360.com<\/a>.<\/p>\n\n<ul>\n<li><a href=\"https:\/\/arqam360.com\/terms\">Terms of Service<\/a><\/li>\n<li><a href=\"https:\/\/arqam360.com\/privacy\">Privacy Policy<\/a><\/li>\n<\/ul>\n\n<h3>For agencies and developers<\/h3>\n\n<p>If you build WordPress or WooCommerce sites for clients, Arqam360 runs a partner\nprogramme. Your client subscribes to Arqam360 directly and you earn 20% of what\nthey actually pay, for 12 months from their first paid invoice.<\/p>\n\n<p>You install nothing extra and support nothing \u2014 we handle the consent side. A\nclient who stays on the free plan earns you nothing, so this is worth it where\nyou are already recommending a paid tool.<\/p>\n\n<p>Terms, including how referrals are attributed and how payouts work:\nhttps:\/\/arqam360.com\/partners<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin folder to \/wp-content\/plugins\/<\/li>\n<li>Activate through the Plugins menu<\/li>\n<li>Go to Settings &gt; Arqam360<\/li>\n<li>Enter your API key from arqam360.com<\/li>\n<li>Save \u2014 the consent banner appears immediately<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"do%20i%20need%20a%20separate%20account%3F\"><h3>Do I need a separate account?<\/h3><\/dt>\n<dd><p>Yes. Sign up at arqam360.com \u2014 free forever for the consent banner, no credit card required. Premium features (Cookie Scanner, DSAR, server-side events, audiences) gate behind paid plans starting at $9.99\/mo. New accounts get a 14-day Pro trial to evaluate everything before deciding.<\/p><\/dd>\n<dt id=\"does%20this%20work%20without%20woocommerce%3F\"><h3>Does this work without WooCommerce?<\/h3><\/dt>\n<dd><p>Yes! Works on any WordPress site.<\/p><\/dd>\n<dt id=\"what%20is%20google%20consent%20mode%20v2%3F\"><h3>What is Google Consent Mode v2?<\/h3><\/dt>\n<dd><p>Google requires consent signals before tracking tags fire. Without it, your ads lose conversion tracking. This plugin handles it automatically.<\/p><\/dd>\n<dt id=\"does%20it%20support%20arabic%3F\"><h3>Does it support Arabic?<\/h3><\/dt>\n<dd><p>Yes \u2014 native Arabic RTL. Auto-detects language based on visitor preferences.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>2.0.7<\/h4>\n\n<ul>\n<li>Tested against WordPress 7.1.<\/li>\n<li><strong>Security.<\/strong> The plugin now uses two separate credentials: a public Widget Key for the banner and a secret Site Token for the dashboard. Previously one key did both jobs, which meant the credential printed in your public page source could also open your Arqam360 account. Your banner keeps working after this update with no changes; to use the dashboard inside wp-admin, add a Site Token in Settings.<\/li>\n<li><strong>Fixed: Google Consent Mode v2 could fire too late.<\/strong> The script was loaded in the page footer with <code>async<\/code>, so tags placed in <code>&lt;head&gt;<\/code> could run before the \"denied\" default was set. It now loads synchronously in <code>&lt;head&gt;<\/code>, before any other script WordPress prints. See the new \"Tag manager placement\" section for the one case this cannot cover.<\/li>\n<li><strong>Fixed: the \"Respect Global Privacy Control\" setting did nothing.<\/strong> It was saved but never sent to the widget, so unchecking it had no effect. It is now honoured.<\/li>\n<li>Removed the IAB TCF option. It was never sent to the widget, and Arqam360 is not a registered IAB CMP, so enabling it would have produced a consent string that ad-tech vendors reject. It will return once registration is complete.<\/li>\n<li>Split loading is now the default: a 3KB script sets the consent default immediately, then the banner loads in the background.<\/li>\n<\/ul>\n\n<h4>2.0.6<\/h4>\n\n<ul>\n<li>Listing copy updated to reflect the freemium model \u2014 banner is free forever (no credit card), premium features (scanner, DSAR, server-side events, audiences) gate behind paid plans. New accounts still get a 14-day Pro trial.<\/li>\n<\/ul>\n\n<h4>2.0.5<\/h4>\n\n<ul>\n<li>Removed wordpress.org directory assets (icon-256x256.png) from the plugin zip; these are now uploaded separately via SVN per WordPress.org plugin guidelines.<\/li>\n<\/ul>\n\n<h4>2.0.4<\/h4>\n\n<ul>\n<li>Settings page redesigned with card-grouped sections matching the Arqam360 dashboard look<\/li>\n<li>Dashboard empty state refreshed with brand styling and clearer CTAs<\/li>\n<li>Inline <code>&lt;style&gt;<\/code> and <code>&lt;script&gt;<\/code> tags removed from view files; styling moved to admin.css; admin body class set via <code>admin_body_class<\/code> filter<\/li>\n<\/ul>\n\n<h4>2.0.3<\/h4>\n\n<ul>\n<li>Trimmed tags to 5 (wordpress.org limit)<\/li>\n<\/ul>\n\n<h4>2.0.2<\/h4>\n\n<ul>\n<li>Removed deprecated load_plugin_textdomain() call (auto-loaded since WP 4.6)<\/li>\n<li>Aligned readme.txt heading with plugin Plugin Name header<\/li>\n<li>Prefixed dashboard-page.php local variables with arqam360_ to satisfy Plugin Check<\/li>\n<\/ul>\n\n<h4>2.0.1<\/h4>\n\n<ul>\n<li>Aligned text domain with the assigned plugin slug (arqam360-consent-privacy-pdplgdpr) to satisfy Plugin Check<\/li>\n<\/ul>\n\n<h4>2.0.0<\/h4>\n\n<ul>\n<li>Embedded dashboard \u2014 opens the full Arqam360 dashboard inside wp-admin via a new top-level \"Arqam360\" menu, no more bouncing to a browser tab<\/li>\n<li>Single-sign-on \u2014 the dashboard authenticates automatically using your existing API key; no extra login<\/li>\n<li>Settings page kept and accessible under Arqam360 \u2192 Settings<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release<\/li>\n<\/ul>","raw_excerpt":"Free PDPL + GDPR cookie consent banner for MENA WordPress sites. Native Arabic RTL. Google Consent Mode v2. Scanner and DSAR on Pro.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/de-ch.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/303219","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/de-ch.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/de-ch.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/de-ch.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=303219"}],"author":[{"embeddable":true,"href":"https:\/\/de-ch.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/arqam360"}],"wp:attachment":[{"href":"https:\/\/de-ch.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=303219"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/de-ch.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=303219"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/de-ch.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=303219"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/de-ch.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=303219"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/de-ch.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=303219"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/de-ch.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=303219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}