Skip to content

Works with your stack

Cookie consent for Google for WooCommerce

the ads tag comes last

← Cookie Rocks for your stack

Google for WooCommerce adds the Google Ads tag to every page once a conversion action exists. It prints its own consent defaults, late in the page and for Europe only. Ads tags should wait for marketing consent.

By WooCommerce, Inc. · woocommerce.com · WordPress.org

Is this your product? Tell us if anything here is out of date. Write to us

Google for WooCommerce

WordPress plugin

Tested
Tested version
3.10.0
How
Tested automatically around each Cookie Rocks version
Last test
7 November 2026
Latest version
3.10.0 tested
Active installs
800,000+

What Google for WooCommerce adds to your visitors’ browser

No trackers In our test of Google for WooCommerce 3.10.0 on 7 November 2026, the plugin itself added no tracker and no cookie. What you place in your pages with it, such as a video or a map, still counts.

What matters for consent with Google for WooCommerce

Late defaults of its own

The plugin adds Google Ads with its own Consent Mode defaults, denied for European visitors only. They arrive after your banner’s defaults. A filter in the plugin removes them, so only your consent plugin sets the defaults.

It reads WP Consent API

When WP Consent API is present, and Google Analytics for WooCommerce is not, the plugin reads the visitor’s statistics and marketing choices and sends the Consent Mode update itself.

Enhanced conversions

Off by default. When on, a known customer’s pages carry their email, name and phone hashed, but their postal address in clear text in the HTML.

What the choice should cover

Conversion tracking for ads is marketing. Cookie Rocks holds known trackers until consent, and the visitor’s marketing choice should decide this tag.

What our tests found on Google for WooCommerce

  • Depends on a setting · Google for WooCommerceGoogle for WooCommerce enhanced conversions print the address in clear text

    setting “Enhanced conversions” · by default: off

    Off by default. When on, each page of a known customer prints the email, names and phone hashed, but the street, city, postal code and country in clear text.

    Read in its code, 16 October 2026, Google for WooCommerce 3.9.6.

    Full detail

    With Google for WooCommerce's enhanced conversions on (off by default), every page of a known customer's session prints gtag('set','user_data') with the email, first name, last name and phone hashed (SHA-256), but the street, city, region, postal code and country in clear text in the HTML.

How we test it

Around each version, with its latest release

Around each Cookie Rocks version, a fresh WordPress installs its latest version from WordPress.org next to Cookie Rocks and runs the same checks. A new version joins the next run on its own.

  • Google for WooCommerce 3.10.0, tested on 7 November 2026.
  • The banner shows, the trackers of the test page wait for consent and load after it, and Cookie Rocks raises no PHP error.
  • Settings of the test: Default settings after activation.
  • Last run: Google for WooCommerce 3.10.0 on 7 November 2026, with WordPress 7.1.3.

Questions

What happens after the 30-day trial?

The banner, your visitors’ choices and your proofs of consent keep working. Without a key, most settings lock, updates and support stop. Take a key at any time and everything opens again.

For Google for WooCommerce users

Ads tags wait for a yes.

marketing needs consent

Every feature of the complete plugin for 30 days, no card.

  • During the trial: everything, including the full settings and the scans
  • After 30 days without a key: the banner, your visitors’ choices and your proofs of consent keep working
  • What waits for a key: most settings, updates and support

How the trial works, in detail

Get your trial key

Your e-mail and your site. Your key arrives as soon as you confirm your e-mail.

One trial per domain. Local and staging sites never use up your key.

We keep your e-mail address to send your key and help you with it, as explained in our privacy policy. No newsletter, nothing else.