How the code is licensed, and what a key covers.
Last updated: 6 November 2026.
The code is free software
Cookie Rocks Audit and Cookie Rocks are free software, licensed under the GNU General Public License, version 2 or later, like WordPress itself. You may use, study, change and share the code under that licence. A key never restricts these freedoms: it gives access to updates, support and the features served by our servers.
What one key covers
| What is included | |
|---|---|
| Your site | One registered domain, with or without www, and up to 3 subdomains (for example shop., staging. or dev.). |
| Local development | localhost, .local, .test, .localhost and IP addresses: free, unlimited, never counted. |
| Staging hosts | 2 extra places on known staging hosts (such as WP Engine, Kinsta, WordPress.com, InstaWP, Pantheon, Cloudways, Flywheel, GoDaddy), which you can free and reuse at any time. |
| Moving | You can move a key to another domain yourself, up to 3 times a year. |
Community keys: free for non-commercial sites
- Given on request to a personal or non-commercial site, after we read the request. One year, free, renewed in one click from the account in the last 14 days, as long as the site stays non-commercial.
- One domain or one subdomain, exactly (www allowed). Unlike a paid key, it covers no extra subdomain and no staging site. Local sites stay free.
- One key per person, asked with a personal e-mail address. The key cannot be moved to another site; ask for a new one instead.
- A Community key is not for SEO blogs, sites of AI-generated content or link farms. It can be switched off without notice if the site lives on advertising, carries affiliate links, sells products or services, or becomes commercial in any other way.
Keys for many sites
- From 10 keys in one subscription, the keys are agency keys: each one covers one site, for example a client site, with the same rules as above.
- A key locks to the first live site that activates it. You can also assign a domain in advance from your account, or change it (3 times a year).
- Agency keys can be managed, added or removed from your account.
Activation and checks
When you activate a key, and about once a day after that, the plugin sends our server the key, the site’s domain and the plugin version. Our server answers with the state of the key. Nothing about your visitors is ever sent. If our server cannot be reached, the plugin keeps working with its last answer for up to 30 days.
When a key ends
See our terms of sale, section 9: the banner and the blocking of trackers keep working, the settings lock except three actions, updates and support stop. The free Audit keeps updating; if a new version ever needs a newer Cookie Rocks, WordPress tells you before you update, and so do we by e-mail.
Trademarks
“Cookie Rocks” and its logo belong to Djase Amcou LC. The GPL covers the code, not the name: you may not publish a changed version under the Cookie Rocks name, or present it as ours.