The read · 2026-08-10
The consent banner race is already over
Nobody new is winning the top of this category, and the incumbents have made sure of it. CookieYes holds 18% of the category's installs and shipped a release seven days ago. Complianz, on the same install scale, also shipped within the week. When the two biggest players in a 512-plugin category are still updating weekly, there's no gap to walk into.
What's unusual here is the health of the top end. Every plugin in the top eleven by installs shipped a release inside the last two months, most inside a month. That's not typical of a mature category, where the leaders usually start coasting once the install base is locked in. Consent plugins can't coast, because the rules underneath them keep changing and browser behaviour changes with them.
The one exception is Gravatar Enhanced, sitting at 100K+ installs with no release in 146 days. It's a privacy-adjacent plugin rather than a consent tool, which probably explains the slower cadence, but it's the only plugin near the top that looks parked.
The real movement is in local law
Growth this quarter came from plugins built for one jurisdiction, not one more banner. Something called FZ-152 RF, which maps to Russian data-localisation law, went from 300+ to 900+ installs. Bitron Right of Withdrawal, a Slovak consumer-rights plugin for WooCommerce, and a handful of EU withdrawal-compliance tools all crossed into new install territory in mid-July, several on the same day.
That clustering suggests a rule change or a marketplace requirement landing around then, though the cause isn't visible in the data. What is visible: buyers are solving specific legal obligations their banner doesn't cover.
An opening exists, just not at the top
Two newcomers proved a general-purpose banner can still find users. SureCookie went from roughly 100 installs to 10K+ in three months, and Cookiez climbed from almost nothing to 20K+. Both are real growth, and both are still an order of magnitude off fifth place.
The category pulled 5.3M downloads in the last 30 days and grew 14.2% over the window, so demand is healthy. But 181 of the 512 tracked plugins are in poor shape, mostly small and neglected, and the strong plugins are all clustered at the top. This is a moat with a side door: unreachable head, live market underneath it.
The consent banner race is already over
Nobody new is winning the top of this category, and the incumbents have made sure of it. CookieYes holds 18% of the category's installs and shipped a release seven days ago. Complianz, on the same install scale, also shipped within the week. When the two biggest players in a 512-plugin category are still updating weekly, there's no gap to walk into.
What's unusual here is the health of the top end. Every plugin in the top eleven by installs shipped a release inside the last two months, most inside a month. That's not typical of a mature category, where the leaders usually start coasting once the install base is locked in. Consent plugins can't coast, because the rules underneath them keep changing and browser behaviour changes with them.
The one exception is Gravatar Enhanced, sitting at 100K+ installs with no release in 146 days. It's a privacy-adjacent plugin rather than a consent tool, which probably explains the slower cadence, but it's the only plugin near the top that looks parked.
The real movement is in local law
Growth this quarter came from plugins built for one jurisdiction, not one more banner. Something called FZ-152 RF, which maps to Russian data-localisation law, went from 300+ to 900+ installs. Bitron Right of Withdrawal, a Slovak consumer-rights plugin for WooCommerce, and a handful of EU withdrawal-compliance tools all crossed into new install territory in mid-July, several on the same day.
That clustering suggests a rule change or a marketplace requirement landing around then, though the cause isn't visible in the data. What is visible: buyers are solving specific legal obligations their banner doesn't cover.
An opening exists, just not at the top
Two newcomers proved a general-purpose banner can still find users. SureCookie went from roughly 100 installs to 10K+ in three months, and Cookiez climbed from almost nothing to 20K+. Both are real growth, and both are still an order of magnitude off fifth place.
The category pulled 5.3M downloads in the last 30 days and grew 14.2% over the window, so demand is healthy. But 181 of the 512 tracked plugins are in poor shape, mostly small and neglected, and the strong plugins are all clustered at the top. This is a moat with a side door: unreachable head, live market underneath it.