Works with your stack
Cookie consent for gallery and slider plugins
images stay, videos call out
Image galleries show your own files from your own site. Most need no consent at all. Videos and fonts are where another company comes in.
Galleries and sliders, one by one
What each gallery or slider puts on your pages
- Envira Gallery Lite
- Images and lightbox from your site. No cookie, no browser storage, no outside server on visitor pages.
- FooGallery
- Images from your site, no cookie. A frame opens only when a visitor opens a gallery item that is a frame.
- NextGEN Gallery
- Image galleries set no cookie. Pro video galleries build a YouTube, Vimeo, TikTok or other player by script when a video opens.
- Smart Slider 3
- Google Fonts by default, until you save them locally. YouTube and Vimeo layers load their provider’s scripts after the page loads, some before any click.
What matters for consent with Galleries and sliders
Your images are not trackers
A gallery of your own images sets no cookie and calls no one. It shows for every visitor, whatever they choose.
Videos bring their provider
A video player from YouTube or Vimeo sets the provider’s cookies. When it is built by script, a banner that reads the page HTML does not see it.
Fonts count too
A slider that loads fonts from Google tells Google about every visit. Copy the fonts to your site. See fonts.
The rest of the page
Cookie Rocks holds known trackers until the visitor agrees. Galleries without videos have nothing for it to hold.
What our tests found on Galleries and sliders
Good to know · Envira Gallery LiteEnvira Gallery Lite sets no cookie and contacts no other site for visitors
setting “Usage tracking (_usage_tracking)” · by default: off
Images and the lightbox are served by the site, with no frame. Usage statistics are off unless an administrator turns them on; they send a weekly site report, nothing about visitors.
Read in its code, 16 October 2026, Envira Gallery Lite 1.16.2.
Full detail
Envira Gallery Lite 1.16.2 sets no cookie, uses no browser storage and contacts no other site on visitor pages: gallery images are the site's own files (data-envira-src, lazy-loaded) and the lightbox script is served by the site; there is no iframe. Its usage statistics are off unless an administrator ticks the box in the setup wizard; when on, the server sends a weekly site report to evusage.enviragallery.com, nothing about visitors.
Good to know · FooGalleryFooGallery sets no cookie and contacts no other site on visitor pages
setting “Improve FooGallery” · by default: off
Images are the site's own files. The lightbox creates a frame only when such an item is opened. Its usage report is sent only after an administrator agrees, about settings, not visitors.
Read in its code, 16 October 2026, FooGallery 3.3.8.
Full detail
FooGallery 3.3.8 sets no cookie, uses no browser storage and contacts no other site on visitor pages: lazy-loaded images (data-src, data-src-fg) are the site's own files, and video panels are absent from the free code. Its lightbox creates an iframe with JavaScript only when an iframe item is opened. Its usage report (usage.fooplugins.com) is sent from the server only after an administrator agrees, about settings, not visitors.
Good to know · NextGEN GalleryNextGEN Gallery sets no cookie or storage for visitors
Its only cookie (X-Frame-Events_<md5>, 3 hours) is set in the admin. Usage statistics are off unless an administrator opts in, and are about the site, not visitors.
Read in its code, 16 October 2026, NextGEN Gallery 4.5.3.
Full detail
NextGEN Gallery 4.5.3 sets no cookie and no browser storage on visitor pages; its only cookie, X-Frame-Events_<md5> (3 hours), is set in the admin. Usage statistics are off unless an administrator ticks the box in the setup wizard, and are then sent weekly by the server about the site, not about visitors. It has no WP Consent API code.
Set before the choice · NextGEN GalleryNextGEN Pro video galleries create players a banner reading the HTML cannot hold
The player is created by script when the lightbox opens: YouTube (not youtube-nocookie), Vimeo without dnt, Dailymotion, Twitch, TikTok and others. The page only carries the video address.
Read in its code, 16 October 2026, NextGEN Gallery 4.5.3.
Full detail
In NextGEN video galleries (Pro), nextgen_video_helper.js creates the player iframe with document.createElement when the visitor opens the lightbox: www.youtube.com/embed (not youtube-nocookie), player.vimeo.com without dnt, Dailymotion, Twitch, VideoPress or fast.wistia.net; TikTok galleries create www.tiktok.com/embed/v2. Thumbnails only carry data-video-url, so a banner that reads the HTML does not hold these iframes.
Depends on a setting · Smart Slider 3Smart Slider 3 loads layer fonts from Google by default
setting “Save fonts locally” · by default: off
Save fonts locally (off by default) serves them from the site. The last slide is kept in local storage, not a cookie. Its scripts skip WP Rocket's Delay JavaScript, so its videos never wait.
Read in its code, 16 October 2026, Smart Slider 3 3.5.1.39.
Full detail
Smart Slider 3 loads layer fonts with a stylesheet link to fonts.googleapis.com by default; Save fonts locally (off by default) copies the CSS and font files to the site. Its Maintain session option keeps the last slide in localStorage under ss-<slider id>, not in a cookie, and its nextendsession cookie is set in the admin only. It excludes its own scripts from WP Rocket's Delay JavaScript, so its videos never wait for a visitor gesture.
Set before the choice · Smart Slider 3Smart Slider 3 Vimeo layers load Vimeo's script on every page, even with a cover
setting “YouTube and Vimeo privacy enhanced mode” · by default: off
- player.vimeo.com/api/player.js loads after every page load, even with a cover image.
- Privacy enhanced mode (off by default) moves YouTube to youtube-nocookie.com and adds dnt=1 for Vimeo.
- YouTube's iframe_api still comes from www.youtube.com.
- Cover images are linked from i.ytimg.com and i.vimeocdn.com.
Read in its code, 16 October 2026, Smart Slider 3 3.5.1.39.
Full detail
A Smart Slider 3 Vimeo layer adds player.vimeo.com/api/player.js after every page load, even with a cover image; its iframe follows on load with autoplay, no cover or on mobile, otherwise on click. The YouTube and Vimeo privacy enhanced mode (off by default) only switches the YouTube player to youtube-nocookie.com, while iframe_api still comes from www.youtube.com, and adds dnt=1 for Vimeo. Cover images the editor fills in are linked from i.ytimg.com and i.vimeocdn.com.
Set before the choice · Smart Slider 3Smart Slider 3 builds YouTube players by script, out of sight of the HTML
After load, the plugin adds YouTube's script and builds the player at once with autoplay, without a cover image or on phones and tablets; otherwise on a click on the cover.
Read in its code, 16 October 2026, Smart Slider 3 3.5.1.39.
Full detail
A Smart Slider 3 YouTube layer is not an iframe in the page: the server writes an empty div and the video address only in escaped JSON inside an inline new _N2.FrontendItemYouTube(...) call. After the page load event, the plugin's own script adds www.youtube.com/iframe_api and builds the player at once when autoplay is on, when the layer has no cover image, or on phones and tablets; otherwise on a click on the cover. Nothing runs when the user agent contains Chrome-Lighthouse.
Galleries, feeds and maps
Other plugins of the same kind.
Questions
Do image galleries need consent?
No, when the images come from your site. Envira Gallery Lite, FooGallery and NextGEN Gallery image galleries set no cookie on visitor pages.
Is a click on a video thumbnail consent?
No. It is a click on your gallery, not a choice about the video provider’s cookies.
What happens after the 30-day trial?
The banner, your visitors’ choices and your proofs of consent keep working. Without a key, most settings lock, updates and support stop. Take a key at any time and everything opens again.
For sites with galleries and sliders
Keep your galleries, add consent.
images never wait
Every feature of the complete plugin for 30 days, no card. Your image galleries keep working as they do today.
- During the trial: everything, including the full settings and the scans
- After 30 days without a key: the banner, your visitors’ choices and your proofs of consent keep working
- What waits for a key: most settings, updates and support
Get your trial key
Your e-mail and your site. Your key arrives as soon as you confirm your e-mail.