Plugin Pulse
← Market reports

Privacy & Consent: state of the market

511 tracked plugins · 5.7M+ active installs · 5,559,954 downloads in the last 30 days · average health 66/100

The read · 2026-08-10

The consent banner race is already over

Nobody new is winning the top of this category, and the incumbents have made sure of it. CookieYes holds 18% of the category's installs and shipped a release seven days ago. Complianz, on the same install scale, also shipped within the week. When the two biggest players in a 512-plugin category are still updating weekly, there's no gap to walk into.

What's unusual here is the health of the top end. Every plugin in the top eleven by installs shipped a release inside the last two months, most inside a month. That's not typical of a mature category, where the leaders usually start coasting once the install base is locked in. Consent plugins can't coast, because the rules underneath them keep changing and browser behaviour changes with them.

The one exception is Gravatar Enhanced, sitting at 100K+ installs with no release in 146 days. It's a privacy-adjacent plugin rather than a consent tool, which probably explains the slower cadence, but it's the only plugin near the top that looks parked.

The real movement is in local law

Growth this quarter came from plugins built for one jurisdiction, not one more banner. Something called FZ-152 RF, which maps to Russian data-localisation law, went from 300+ to 900+ installs. Bitron Right of Withdrawal, a Slovak consumer-rights plugin for WooCommerce, and a handful of EU withdrawal-compliance tools all crossed into new install territory in mid-July, several on the same day.

That clustering suggests a rule change or a marketplace requirement landing around then, though the cause isn't visible in the data. What is visible: buyers are solving specific legal obligations their banner doesn't cover.

An opening exists, just not at the top

Two newcomers proved a general-purpose banner can still find users. SureCookie went from roughly 100 installs to 10K+ in three months, and Cookiez climbed from almost nothing to 20K+. Both are real growth, and both are still an order of magnitude off fifth place.

The category pulled 5.3M downloads in the last 30 days and grew 14.2% over the window, so demand is healthy. But 181 of the 512 tracked plugins are in poor shape, mostly small and neglected, and the strong plugins are all clustered at the top. This is a moat with a side door: unreachable head, live market underneath it.

The consent banner race is already over

Nobody new is winning the top of this category, and the incumbents have made sure of it. CookieYes holds 18% of the category's installs and shipped a release seven days ago. Complianz, on the same install scale, also shipped within the week. When the two biggest players in a 512-plugin category are still updating weekly, there's no gap to walk into.

What's unusual here is the health of the top end. Every plugin in the top eleven by installs shipped a release inside the last two months, most inside a month. That's not typical of a mature category, where the leaders usually start coasting once the install base is locked in. Consent plugins can't coast, because the rules underneath them keep changing and browser behaviour changes with them.

The one exception is Gravatar Enhanced, sitting at 100K+ installs with no release in 146 days. It's a privacy-adjacent plugin rather than a consent tool, which probably explains the slower cadence, but it's the only plugin near the top that looks parked.

The real movement is in local law

Growth this quarter came from plugins built for one jurisdiction, not one more banner. Something called FZ-152 RF, which maps to Russian data-localisation law, went from 300+ to 900+ installs. Bitron Right of Withdrawal, a Slovak consumer-rights plugin for WooCommerce, and a handful of EU withdrawal-compliance tools all crossed into new install territory in mid-July, several on the same day.

That clustering suggests a rule change or a marketplace requirement landing around then, though the cause isn't visible in the data. What is visible: buyers are solving specific legal obligations their banner doesn't cover.

An opening exists, just not at the top

Two newcomers proved a general-purpose banner can still find users. SureCookie went from roughly 100 installs to 10K+ in three months, and Cookiez climbed from almost nothing to 20K+. Both are real growth, and both are still an order of magnitude off fifth place.

The category pulled 5.3M downloads in the last 30 days and grew 14.2% over the window, so demand is healthy. But 181 of the 512 tracked plugins are in poor shape, mostly small and neglected, and the strong plugins are all clustered at the top. This is a moat with a side door: unreachable head, live market underneath it.

Top plugins

By active installs, open plugins only

1 CookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice) 1M+ installs · 4.8★ 1M+ A91 2 Complianz GDPR/CCPA Cookie Consent Banner 1M+ installs · 4.7★ 1M+ A94 3 Cookie Compliance for WordPress – Cookie Consent, GDPR & CCPA 900K+ installs · 4.8★ 900K+ A91 4 CookieAdmin – Cookie Consent Banner 400K+ installs · 5.0★ 400K+ A86 5 GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice for CCPA, EU Cookie Law 300K+ installs · 4.6★ 300K+ A93 6 WP Consent API 200K+ installs · 5.0★ 200K+ B84 7 iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more 200K+ installs · 4.7★ 200K+ A90 8 WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) 200K+ installs · 4.8★ 200K+ A90 9 Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More 100K+ installs · 4.8★ 100K+ A90 10 Real Cookie Banner: GDPR & ePrivacy Cookie Consent 100K+ installs · 4.9★ 100K+ A91

Closed by wp.org

Removed from the directory; sites still running them get no warning

User Session Synchronizer unknown 100+ 2026-08-12

The report is written by a model reading exactly the measurements shown on this page, drawn from Plugin Pulse's own daily crawl. Install counts are wp.org tiers, so tier crossings are the growth signal. See all Privacy & Consent plugins or how this works.