Title: Privatto
Author: Sergio Inglez
Published: <strong>2026 年 7 月 13 日</strong>
Last modified: 2026 年 7 月 13 日

---

搜索插件

![](https://ps.w.org/privatto/assets/banner-772x250.png?rev=3605989)

![](https://ps.w.org/privatto/assets/icon-256x256.png?rev=3605989)

# Privatto

 作者：[Sergio Inglez](https://profiles.wordpress.org/sergioinglez/)

[下载](https://downloads.wordpress.org/plugin/privatto.2.1.0.zip)

 * [详情](https://cn.wordpress.org/plugins/privatto/#description)
 * [评价](https://cn.wordpress.org/plugins/privatto/#reviews)
 *  [安装](https://cn.wordpress.org/plugins/privatto/#installation)
 * [开发进展](https://cn.wordpress.org/plugins/privatto/#developers)

 [支持](https://wordpress.org/support/plugin/privatto/)

## 描述

Privatto is a self-hosted consent management platform (CMP) for WordPress, built
with Brazil’s LGPD and the GDPR in mind. It requires no external service.

**Main features:**

 * Granular consent banner with per-category preferences (necessary, analytics, 
   marketing, embeds).
 * Automatic blocking of third-party scripts and iframes via output buffering: matching`
   <script>` tags are switched to `type="text/plain"` before the page reaches the
   browser, so nothing runs before consent.
 * Google Consent Mode v2 injected with everything denied by default, updated when
   the visitor decides.
 * Proof of consent stored in your own database table: unique consent ID, action,
   categories (JSON), policy version, hashed IP (optional), country, user agent,
   page URL, and UTC timestamp. Exportable to CSV for audits.
 * LGPD document generator: privacy policy, terms of use, cookie policy, returns
   policy, and a plain-language summary, built from a guided form. Optional AI text
   refinement (Groq API) for the business description only — mandatory legal clauses
   never go through AI.
 * Data subject rights form (LGPD art. 18) with tracked protocols, 15-day response
   deadline monitoring, and an admin queue.
 * Simplified record of processing activities (ROPA) export, as required by ANPD
   Resolution CD/ANPD No. 2/2022, including for small-scale processing agents.
 * “Cookie preferences” reopen link so visitors can change or revoke consent at 
   any time.

**Important notice:** the generated documents are a structured starting point aligned
with the LGPD; they are not legal advice. Review by a lawyer is recommended, especially
for complex operations.

### External services

This plugin connects to one optional third-party service:

Groq API — used only if you paste a Groq API key in Privatto  LGPD Documents. It
is used to (1) rewrite, in more natural language, the free-text description of your
site/business that you typed into the document form, and (2) generate a plain-language
summary of your privacy policy for the same document. Only that free text (and the
derived facts needed to build the summary) is sent; the mandatory legal clauses 
are always generated locally and never sent to the API. This call happens only when
you click the “Refine with AI” / “Generate summary with AI” buttons — never automatically
and never on the public-facing site. If no key is configured, these buttons are 
disabled and everything works normally without any external call.
 Service: Groq(
https://groq.com ). Terms of Service: https://groq.com/terms-of-use · Privacy Policy:
https://groq.com/privacy-policy

Note: the plugin also ships a static reference catalog (service name, vendor, and
known script/domain signatures) used only to help the document generator recognize
and describe third-party services _that your own site may already be using_ (e.g.
Google Analytics, Meta Pixel, Stripe) when writing your cookie policy. This catalog
does not make any outbound request to those services — it is local, offline pattern-
matching against your own site’s HTML.

## 安装

 1. Upload the plugin through Plugins  Add New  Upload Plugin, or copy the `privatto`
    folder to `/wp-content/plugins/`.
 2. Activate the plugin. The consent table and default options are created on activation.
 3. Follow the onboarding wizard, then fine-tune under **Privatto  Settings**.
 4. Generate your legal documents under **Privatto  LGPD Documents**.

## 常见问题

### Does it depend on any external service?

No. Banner, blocking, consent records, and document generation all run on your own
site. The only optional external call is the Groq API, used exclusively to refine
free-text descriptions if you provide an API key.

### How does the tag blocking work?

The plugin buffers the full page output on `template_redirect`, injects Google Consent
Mode v2 (all denied) right after `<head>`, and rewrites any `<script>` whose `src`
or body matches the configured patterns. When the visitor consents, the allowed 
scripts are restored and executed.

### Where is the proof of consent stored?

In a dedicated table (`wp_pvto_consents`). Each decision records a UUID, action,
categories, policy version, optional irreversible IP hash, country, user agent, 
URL, and UTC date/time. You can view it under **Privatto  Logs** and export it to
CSV.

### Is uninstall data removal opt-in?

Yes. By default, uninstalling keeps the consent tables (they are your audit evidence)
and only removes settings. To delete everything, define `PVTO_DELETE_DATA` as `true`
in `wp-config.php` before removing the plugin.

## 评价

此插件暂无评价。

## 贡献者及开发者

「Privatto」是开源软件。 以下人员对此插件做出了贡献。

贡献者

 *   [ Sergio Inglez ](https://profiles.wordpress.org/sergioinglez/)

[帮助将「Privatto」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/privatto)

### 对开发感兴趣吗?

您可以[浏览代码](https://plugins.trac.wordpress.org/browser/privatto/)，查看[SVN仓库](https://plugins.svn.wordpress.org/privatto/)，
或通过[RSS](https://plugins.trac.wordpress.org/log/privatto/?limit=100&mode=stop_on_copy&format=rss)
订阅[开发日志](https://plugins.trac.wordpress.org/log/privatto/)。

## 更新日志

#### 1.4.0

 * Security hardening: prepared statements with the `%i` identifier placeholder,
   input unslashing/sanitization, output escaping.
 * Internationalization: translators comments and ordered placeholders.
 * Readme rewritten to WordPress.org standards.

## 额外信息

 *  版本 **1.4.0**
 *  最后更新：**2 月前**
 *  活跃安装数量 **不到10**
 *  WordPress 版本 ** 6.2 或更高版本 **
 *  已测试的最高版本为 **7.0.6**
 *  PHP 版本 ** 7.4 或更高版本 **
 *  语言
 * [English (US)](https://wordpress.org/plugins/privatto/)
 * 标签
 * [consent mode](https://cn.wordpress.org/plugins/tags/consent-mode/)[cookie consent](https://cn.wordpress.org/plugins/tags/cookie-consent/)
   [GDPR](https://cn.wordpress.org/plugins/tags/gdpr/)[lgpd](https://cn.wordpress.org/plugins/tags/lgpd/)
   [privacy](https://cn.wordpress.org/plugins/tags/privacy/)
 *  [高级视图](https://cn.wordpress.org/plugins/privatto/advanced/)

## 评级

尚未提交反馈。

[您的评价](https://wordpress.org/support/plugin/privatto/reviews/#new-post)

[查看全部评论](https://wordpress.org/support/plugin/privatto/reviews/)

## 贡献者

 *   [ Sergio Inglez ](https://profiles.wordpress.org/sergioinglez/)

## 支持

有话要说吗？是否需要帮助？

 [查看支持论坛](https://wordpress.org/support/plugin/privatto/)