Plugin Pulse Beta
← Market reports

Privacy & Consent: state of the market

916 tracked plugins · 5.8M+ active installs · 6,380,681 downloads in the last 30 days · average health 69/100

The read · 12 Oct 2026

Five serious contenders and nobody in charge

Cookie consent has a crowded top and no single owner. CookieYes and Complianz both sit at 1M+ installs, Cookie Compliance for WordPress is right behind at 800K+, and CookieAdmin and GDPR Cookie Compliance each hold a few hundred thousand more. The leader has only 18% of the category's installs, which leaves real room to compete.

None of the incumbents is coasting either. Every one of the top eleven shipped a release in the last six weeks, and several shipped within the last four days. That pace suggests vendors treat constant compliance updates as the cost of staying in the game. The one stale name near the top is Gravatar Enhanced, 209 days without a release, and it's a privacy add-on rather than a consent tool.

SureCookie is the proof the door is open

SureCookie went from 200+ to 60K+ installs in 90 days and now ranks 19th in the category. It's the biggest move here by a wide margin, and it happened against well-maintained rivals, so it didn't win by exploiting a neglected leader. The data doesn't show what drove it. What it does show is that a fragmented top with no moat lets a new entrant scale fast if it can reach users.

Demand is rising underneath it. The category logged close to 5 million downloads in the last 30 days, and downloads are up 169% over the window. The cause isn't clear yet, but a market growing that quickly is easier to enter than a flat one, and SureCookie is likely riding some of that wave. The other climbers, CookieRay, Kansleri and ConsentOwl among them, are still in the hundreds or low thousands and don't change the picture.

The long tail is thinning

Below the leaders, the category looks weaker. More of its 858 tracked plugins are in poor shape than in good shape, and the losses cluster there. Legal Pages is the largest to slip, falling from 10K+ to 8K+ installs, and the rest of the decliners are small.

Two plugins were closed in the window. GDPR Data Request Form, which had 5K+ installs, was closed on 2026-09-28, and adz.world followed on 2026-09-29. Neither closure has a recorded reason.

The read is an opening at the top for a newcomer with reach, sitting above a long tail that's mostly fading.

Top plugins

By active installs, open plugins only

1 CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) 1M+ installs · 4.8★ 1M+ A92 2 Complianz GDPR/CCPA Cookie Consent Banner 1M+ installs · 4.7★ 1M+ A87 3 Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA 800K+ installs · 4.8★ 800K+ B80 4 CookieAdmin – Cookie Consent Banner 400K+ installs · 5.0★ 400K+ A86 5 GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law 300K+ installs · 4.6★ 300K+ A89 6 WP Consent API 300K+ installs · 5.0★ 300K+ B84 7 iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more 200K+ installs · 4.7★ 200K+ A88 8 WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) 200K+ installs · 4.8★ 200K+ A89 9 Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More 100K+ installs · 4.8★ 100K+ A88 10 Real Cookie Banner: GDPR & ePrivacy Cookie Consent 100K+ installs · 4.9★ 100K+ A89

Closed by wp.org

Removed from the directory; sites still running them get no warning

Smart Cookie Kit unknown 2K+ 2026-10-29 DSGVO All in one for WP unknown 10K+ 2026-10-23 EASY-JS-WPAPI Client HANDLE for the WordPress REST-API unknown 10+ 2026-10-23 CF7 ReCaptcha Mine unknown 10+ 2026-10-14 Mentions légales [FR] unknown 2K+ 2026-10-11 Datareporter Webcare author-request 700+ 2026-09-29 User Session Synchronizer security-issue 100+ 2026-08-12

The report is written by a model reading exactly the measurements shown on this page, drawn from Plugin Pulse's own daily crawl. Install counts are wp.org tiers, so tier crossings are the growth signal. See all Privacy & Consent plugins or how this works.