Changeset 3771537

Timestamp:

10/28/2026 08:11:59 PM (3 days ago)

Author:

zoobu

Message:

Release 5.4.0: optional Decline all, GPC to California rules, Do Not Sell choice, simpler monitoring settings, plus listing screenshots

Location:

cookieflame

Files:

• assets/screenshot-1.png (added)
• assets/screenshot-2.png (added)
• assets/screenshot-3.png (added)
• assets/screenshot-4.png (added)
• assets/screenshot-5.png (added)
• assets/screenshot-6.png (added)
• assets/screenshot-7.png (added)
• tags/5.4.0 (copied) (copied from cookieflame/trunk )
• tags/5.4.0/assets/css/admin.css (modified) (3 diffs)
• tags/5.4.0/assets/css/cookieconsent.css (modified) (2 diffs)
• tags/5.4.0/assets/js/admin-preview.js (added)
• tags/5.4.0/assets/js/admin.js (modified) (5 diffs)
• tags/5.4.0/assets/js/cookieconsent.js (modified) (36 diffs)
• tags/5.4.0/assets/js/cookieconsent.min.js (modified) (2 diffs)
• tags/5.4.0/changelog.txt (added)
• tags/5.4.0/cookieflame.php (modified) (53 diffs)
• tags/5.4.0/readme.txt (modified) (2 diffs)
• tags/5.4.0/uninstall.php (modified) (1 diff)
• trunk/assets/css/admin.css (modified) (3 diffs)
• trunk/assets/css/cookieconsent.css (modified) (2 diffs)
• trunk/assets/js/admin-preview.js (added)
• trunk/assets/js/admin.js (modified) (5 diffs)
• trunk/assets/js/cookieconsent.js (modified) (36 diffs)
• trunk/assets/js/cookieconsent.min.js (modified) (2 diffs)
• trunk/changelog.txt (added)
• trunk/cookieflame.php (modified) (53 diffs)
• trunk/readme.txt (modified) (2 diffs)
• trunk/uninstall.php (modified) (1 diff)

cookieflame/tags/5.4.0/assets/css/admin.css

@@ -625 +625 @@
   border: 1px solid #dcdcde;
   border-radius: 4px;
+}
+.cf-admin-manual-row select {
+  padding-right: 28px;
 }
 .cf-admin-manual-row .button-link-delete {
@@ -1017 +1020 @@
   color: #c2410c;
 }
+.cf-admin-upgrade-banner-dismiss {
+  margin: 0;
+  flex-shrink: 0;
+  align-self: flex-start;
+}
+.cf-admin-upgrade-banner-close {
+  background: none;
+  border: none;
+  color: #8c8f94;
+  font-size: 20px;
+  line-height: 1;
+  padding: 2px 4px;
+  cursor: pointer;
+  border-radius: 4px;
+}
+.cf-admin-upgrade-banner-close:hover,
+.cf-admin-upgrade-banner-close:focus {
+  color: #1d2327;
+  background: rgba(0, 0, 0, 0.05);
+}
 
 /* Licence tab Pro features card */
@@ -1475 +1498 @@
   transition: border-color .15s;
 }
+/* Room for WordPress's select arrow, drawn about 5-21px from the right edge. */
+.cf-admin-wrap .form-table select {
+  padding-right: 32px;
+}
 .cf-admin-wrap .form-table input:focus,
 .cf-admin-wrap .form-table select:focus,

cookieflame/tags/5.4.0/assets/css/cookieconsent.css

@@ -1 +1 @@
 /**
- * CookieFlame v4.41.0 — Consent Banner Stylesheet
+ * CookieFlame v5.4.0 — Consent Banner Stylesheet
  * ─────────────────────────────────────────────────────────────
  * Loaded on every front-end page via cookieflame_enqueue_assets().
- * Before v4.41.0 these rules were injected inline by
- * cookieconsent.js at runtime; they are now an external
- * stylesheet so the main JS bundle is ~5.6 KB smaller and
- * the CSS can be cached independently by the browser.
  *
  * Dark mode: JS adds `.cc-dark` to <html> when theme=dark.
  * Icon position: JS adds `.cc-icon-right` to <html> when
  * iconPosition=right (default is left).
+ *
+ * Custom properties (v5.4.0): the banner's colours, corner radius and
+ * font come from the --cc-* properties below. Override them on :root
+ * (and :root.cc-dark for the dark theme) to restyle the banner.
  */
+
+:root{--cc-font:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;--cc-radius:20px;--cc-btn-radius:12px;--cc-bg:#fff;--cc-text:#1d1d1f;--cc-text-muted:#555;--cc-link:#0071e3;--cc-focus:#0071e3;--cc-banner-shadow:rgba(0,0,0,.15);--cc-accent:#0071e3;--cc-accent-hover:#005bb5;--cc-accent-text:#fff;--cc-accent-shadow:rgba(0,113,227,.3);--cc-accent-shadow-hover:rgba(0,113,227,.35);--cc-secondary-bg:#e8e8ed;--cc-secondary-hover:#d2d2d7;--cc-secondary-text:#1d1d1f;--cc-save-bg:#34c759;--cc-save-hover:#28a745;--cc-save-text:#fff;--cc-save-shadow:rgba(52,199,89,.3);--cc-save-shadow-hover:rgba(52,199,89,.35);--cc-details:#555;--cc-details-hover:#555;--cc-border:#e8e8ed;--cc-divider:#f0f0f2;--cc-cat-desc:#646970;--cc-always-on:#767676;--cc-toggle-off:#ccc;--cc-toggle-on:#0071e3;--cc-knob:#fff;--cc-powered:#999;--cc-powered-hover:#666;--cc-icon-bg:#1d1d1f;--cc-icon-text:#fff;--cc-icon-shadow:rgba(0,0,0,.25);--cc-icon-shadow-hover:rgba(0,0,0,.35)}
+:root.cc-dark{--cc-bg:#1c1c1e;--cc-text:#f5f5f7;--cc-text-muted:#98989d;--cc-link:#2997ff;--cc-banner-shadow:rgba(0,0,0,.5);--cc-accent:#0a84ff;--cc-accent-hover:#0071e3;--cc-accent-shadow:rgba(10,132,255,.35);--cc-accent-shadow-hover:rgba(10,132,255,.4);--cc-secondary-bg:#2c2c2e;--cc-secondary-hover:#3a3a3c;--cc-secondary-text:#f5f5f7;--cc-save-bg:#30d158;--cc-save-hover:#28a745;--cc-save-shadow:rgba(48,209,88,.3);--cc-save-shadow-hover:rgba(48,209,88,.35);--cc-details:#98989d;--cc-details-hover:#c7c7cc;--cc-border:#2c2c2e;--cc-divider:#2c2c2e;--cc-cat-desc:#8e8e93;--cc-always-on:#8e8e93;--cc-toggle-off:#3a3a3c;--cc-toggle-on:#0a84ff;--cc-knob:#f5f5f7;--cc-powered:#aaa;--cc-powered-hover:#ddd;--cc-icon-bg:#f5f5f7;--cc-icon-text:#1d1d1f;--cc-icon-shadow:rgba(255,255,255,.15);--cc-icon-shadow-hover:rgba(255,255,255,.25)}
 
 #cc-overlay{position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:999998;opacity:0;pointer-events:none;transition:opacity .3s;backdrop-filter:blur(2px);-webkit-backdrop-filter:blur(2px)}
 #cc-overlay.cc-show{opacity:1;pointer-events:auto}
-#cc-banner{position:fixed;bottom:0;left:0;right:0;z-index:999999;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;font-size:14px;line-height:1.5;color:#1d1d1f;background:#fff;box-shadow:0 -8px 40px rgba(0,0,0,.15);transform:translateY(100%);transition:transform .4s cubic-bezier(.4,0,.2,1);border-radius:20px 20px 0 0;max-height:90vh;overflow-y:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}
+#cc-banner{position:fixed;bottom:0;left:0;right:0;z-index:999999;font-family:var(--cc-font);font-size:14px;line-height:1.5;color:var(--cc-text);background:var(--cc-bg);box-shadow:0 -8px 40px var(--cc-banner-shadow);transform:translateY(100%);transition:transform .4s cubic-bezier(.4,0,.2,1);border-radius:var(--cc-radius) var(--cc-radius) 0 0;max-height:90vh;overflow-y:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}
 #cc-banner.cc-show{transform:translateY(0)}
 #cc-banner,#cc-banner *{box-sizing:border-box;-webkit-tap-highlight-color:transparent}
@@ -21 +24 @@
 .cc-inner{max-width:720px;margin:0 auto;padding:32px 32px 20px}
 .cc-title{font-size:20px !important;font-weight:800 !important;margin:0 0 8px !important;letter-spacing:-.3px;line-height:1.3 !important;color:inherit !important;background:none !important;border:none !important;padding:0 !important;text-transform:none !important}
-.cc-text{margin:0 0 20px !important;color:#555 !important;font-size:14px !important;font-weight:400 !important;line-height:1.6 !important;padding:0 !important;border:none !important;background:none !important;text-transform:none !important}
-.cc-text a{color:#0071e3 !important;text-decoration:none !important;font-weight:500 !important;background:none !important;border:none !important;box-shadow:none !important}
+.cc-text{margin:0 0 20px !important;color:var(--cc-text-muted) !important;font-size:14px !important;font-weight:400 !important;line-height:1.6 !important;padding:0 !important;border:none !important;background:none !important;text-transform:none !important}
+.cc-text a{color:var(--cc-link) !important;text-decoration:none !important;font-weight:500 !important;background:none !important;border:none !important;box-shadow:none !important}
 .cc-text a:hover{text-decoration:underline !important}
 .cc-buttons{display:flex;gap:10px;flex-wrap:wrap;align-items:center;margin-bottom:16px}
-.cc-btn{display:inline-flex !important;align-items:center !important;justify-content:center !important;border-radius:12px !important;border:none !important;font-weight:700 !important;cursor:pointer !important;letter-spacing:-.1px !important;text-transform:none !important;text-decoration:none !important;line-height:1 !important;white-space:nowrap !important;-webkit-appearance:none !important;appearance:none !important;outline:none !important;box-shadow:none !important;text-shadow:none !important;float:none !important;margin:0 !important}
-.cc-btn:focus{outline:2px solid #0071e3 !important;outline-offset:2px !important}
+.cc-btn{display:inline-flex !important;align-items:center !important;justify-content:center !important;border-radius:var(--cc-btn-radius) !important;border:none !important;font-weight:700 !important;cursor:pointer !important;letter-spacing:-.1px !important;text-transform:none !important;text-decoration:none !important;line-height:1 !important;white-space:nowrap !important;-webkit-appearance:none !important;appearance:none !important;outline:none !important;box-shadow:none !important;text-shadow:none !important;float:none !important;margin:0 !important}
+.cc-btn:focus{outline:2px solid var(--cc-focus) !important;outline-offset:2px !important}
 .cc-btn:active{transform:scale(.97) !important}
-.cc-btn-accept{background:#0071e3 !important;color:#fff !important;font-size:15px !important;padding:14px 32px !important;box-shadow:0 2px 8px rgba(0,113,227,.3) !important;transition:background .15s,box-shadow .15s,transform .1s !important}
-.cc-btn-accept:hover{background:#005bb5 !important;box-shadow:0 4px 16px rgba(0,113,227,.35) !important;color:#fff !important}
-.cc-btn-decline{background:#e8e8ed !important;color:#1d1d1f !important;font-size:13px !important;padding:11px 22px !important;box-shadow:none !important;transition:background .15s,transform .1s !important}
-.cc-btn-decline:hover{background:#d2d2d7 !important;color:#1d1d1f !important}
-.cc-btn-save{background:#34c759 !important;color:#fff !important;font-size:14px !important;padding:13px 28px !important;box-shadow:0 2px 8px rgba(52,199,89,.3) !important;transition:background .15s,box-shadow .15s,transform .1s !important}
-.cc-btn-save:hover{background:#28a745 !important;box-shadow:0 4px 16px rgba(52,199,89,.35) !important;color:#fff !important}
-.cc-btn-details{background:transparent !important;color:#555 !important;padding:11px 4px;font-weight:500;font-size:13px;text-decoration:none !important;border:none !important;box-shadow:none !important;cursor:pointer;transition:color .15s !important}
-.cc-btn-details:hover{color:#555 !important;text-decoration:none !important;background:transparent !important;box-shadow:none !important}
-.cc-categories{margin:0 0 16px !important;border:1px solid #e8e8ed !important;border-radius:14px !important;overflow:hidden !important;display:none}
+.cc-btn-accept{background:var(--cc-accent) !important;color:var(--cc-accent-text) !important;font-size:15px !important;padding:14px 32px !important;box-shadow:0 2px 8px var(--cc-accent-shadow) !important;transition:background .15s,box-shadow .15s,transform .1s !important}
+.cc-btn-accept:hover{background:var(--cc-accent-hover) !important;box-shadow:0 4px 16px var(--cc-accent-shadow-hover) !important;color:var(--cc-accent-text) !important}
+.cc-btn-decline{background:var(--cc-secondary-bg) !important;color:var(--cc-secondary-text) !important;font-size:13px !important;padding:11px 22px !important;box-shadow:none !important;transition:background .15s,transform .1s !important}
+.cc-btn-decline:hover{background:var(--cc-secondary-hover) !important;color:var(--cc-secondary-text) !important}
+.cc-btn-reject{background:var(--cc-secondary-bg) !important;color:var(--cc-secondary-text) !important;font-size:15px !important;padding:14px 32px !important;transition:background .15s,transform .1s !important}
+.cc-btn-reject:hover{background:var(--cc-secondary-hover) !important;color:var(--cc-secondary-text) !important}
+.cc-btn-save{background:var(--cc-save-bg) !important;color:var(--cc-save-text) !important;font-size:14px !important;padding:13px 28px !important;box-shadow:0 2px 8px var(--cc-save-shadow) !important;transition:background .15s,box-shadow .15s,transform .1s !important}
+.cc-btn-save:hover{background:var(--cc-save-hover) !important;box-shadow:0 4px 16px var(--cc-save-shadow-hover) !important;color:var(--cc-save-text) !important}
+.cc-btn-details{background:transparent !important;color:var(--cc-details) !important;padding:11px 4px;font-weight:500;font-size:13px;text-decoration:none !important;border:none !important;box-shadow:none !important;cursor:pointer;transition:color .15s !important}
+.cc-btn-details:hover{color:var(--cc-details-hover) !important;text-decoration:none !important;background:transparent !important;box-shadow:none !important}
+.cc-categories{margin:0 0 16px !important;border:1px solid var(--cc-border) !important;border-radius:14px !important;overflow:hidden !important;display:none}
 .cc-categories.cc-open{display:block !important}
-.cc-cat{padding:16px 20px !important;border-bottom:1px solid #f0f0f2 !important;display:flex !important;justify-content:space-between !important;align-items:center !important;gap:16px !important;background:none !important}
+.cc-cat{padding:16px 20px !important;border-bottom:1px solid var(--cc-divider) !important;display:flex !important;justify-content:space-between !important;align-items:center !important;gap:16px !important;background:none !important}
 .cc-cat:last-child{border-bottom:none !important}
 .cc-cat-label{font-weight:700 !important;font-size:14px !important;line-height:1.3 !important;color:inherit !important;text-transform:none !important}
-.cc-cat-desc{font-size:12px !important;color:#646970 !important;margin-top:3px !important;font-weight:400 !important;line-height:1.4 !important;text-transform:none !important}
-.cc-always-on{font-weight:400 !important;font-size:11px !important;color:#767676 !important}
+.cc-cat-desc{font-size:12px !important;color:var(--cc-cat-desc) !important;margin-top:3px !important;font-weight:400 !important;line-height:1.4 !important;text-transform:none !important}
+.cc-always-on{font-weight:400 !important;font-size:11px !important;color:var(--cc-always-on) !important}
+.cc-gpc-note{font-size:12px !important;color:var(--cc-text) !important;margin-top:6px !important;font-weight:600 !important;line-height:1.4 !important;text-transform:none !important}
 .cc-toggle{position:relative !important;width:46px !important;height:26px !important;flex-shrink:0 !important;display:block !important}
 .cc-toggle input{opacity:0 !important;width:0 !important;height:0 !important;position:absolute !important}
-.cc-toggle .cc-slider{position:absolute !important;inset:0 !important;background:#ccc !important;border-radius:26px !important;cursor:pointer !important;transition:background .2s !important;border:none !important;box-shadow:none !important}
-.cc-toggle .cc-slider:before{content:"" !important;position:absolute !important;width:20px !important;height:20px !important;left:3px !important;bottom:3px !important;background:#fff !important;border-radius:50% !important;transition:transform .2s !important;box-shadow:0 1px 3px rgba(0,0,0,.15) !important}
-.cc-toggle input:checked+.cc-slider{background:#0071e3 !important}
+.cc-toggle .cc-slider{position:absolute !important;inset:0 !important;background:var(--cc-toggle-off) !important;border-radius:26px !important;cursor:pointer !important;transition:background .2s !important;border:none !important;box-shadow:none !important}
+.cc-toggle .cc-slider:before{content:"" !important;position:absolute !important;width:20px !important;height:20px !important;left:3px !important;bottom:3px !important;background:var(--cc-knob) !important;border-radius:50% !important;transition:transform .2s !important;box-shadow:0 1px 3px rgba(0,0,0,.15) !important}
+.cc-toggle input:checked+.cc-slider{background:var(--cc-toggle-on) !important}
 .cc-toggle input:checked+.cc-slider:before{transform:translateX(20px) !important}
-.cc-toggle input:disabled+.cc-slider{background:#0071e3 !important;opacity:.5 !important;cursor:default !important}
-.cc-toggle input:focus-visible+.cc-slider{outline:2px solid #0071e3 !important;outline-offset:2px !important}
-.cc-powered{text-align:center !important;padding:0 0 16px !important;font-size:11px !important;color:#999 !important;font-weight:400 !important;background:none !important;border:none !important;margin:0 !important}
+.cc-toggle input:disabled+.cc-slider{background:var(--cc-toggle-on) !important;opacity:.5 !important;cursor:default !important}
+.cc-toggle input:focus-visible+.cc-slider{outline:2px solid var(--cc-focus) !important;outline-offset:2px !important}
+.cc-powered{text-align:center !important;padding:0 0 16px !important;font-size:11px !important;color:var(--cc-powered) !important;font-weight:400 !important;background:none !important;border:none !important;margin:0 !important}
 .cc-pref-buttons{display:none !important;gap:10px;flex-wrap:wrap;align-items:center;margin-bottom:8px}
 .cc-pref-buttons.cc-open{display:flex !important}
-.cc-powered a{color:#999 !important;text-decoration:none !important;font-weight:400 !important;background:none !important;border:none !important;box-shadow:none !important}
-.cc-powered a:hover{color:#666 !important;text-decoration:none !important}
-#cc-icon{position:fixed !important;bottom:18px !important;left:18px !important;z-index:999997 !important;width:48px !important;height:48px !important;border-radius:50% !important;background:#1d1d1f !important;color:#fff !important;border:none !important;cursor:pointer !important;box-shadow:0 2px 12px rgba(0,0,0,.25) !important;display:none;align-items:center !important;justify-content:center !important;padding:0 !important;transition:transform .15s,box-shadow .15s !important;-webkit-appearance:none !important;appearance:none !important;margin:0 !important;text-decoration:none !important;outline:none !important}
-#cc-icon:hover{transform:scale(1.1) !important;box-shadow:0 4px 20px rgba(0,0,0,.35) !important}
-#cc-icon:focus-visible{outline:2px solid #0071e3 !important;outline-offset:2px !important}
+.cc-powered a{color:var(--cc-powered) !important;text-decoration:none !important;font-weight:400 !important;background:none !important;border:none !important;box-shadow:none !important}
+.cc-powered a:hover{color:var(--cc-powered-hover) !important;text-decoration:none !important}
+#cc-icon{position:fixed !important;bottom:18px !important;left:18px !important;z-index:999997 !important;width:48px !important;height:48px !important;border-radius:50% !important;background:var(--cc-icon-bg) !important;color:var(--cc-icon-text) !important;border:none !important;cursor:pointer !important;box-shadow:0 2px 12px var(--cc-icon-shadow) !important;display:none;align-items:center !important;justify-content:center !important;padding:0 !important;transition:transform .15s,box-shadow .15s !important;-webkit-appearance:none !important;appearance:none !important;margin:0 !important;text-decoration:none !important;outline:none !important}
+#cc-icon:hover{transform:scale(1.1) !important;box-shadow:0 4px 20px var(--cc-icon-shadow-hover) !important}
+#cc-icon:focus-visible{outline:2px solid var(--cc-focus) !important;outline-offset:2px !important}
 #cc-icon.cc-show{display:flex !important}
 .cc-icon-right #cc-icon{left:auto !important;right:18px !important}
-#cc-ccpa-banner{position:fixed;bottom:0;left:0;right:0;z-index:999999;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;font-size:14px;line-height:1.5;color:#1d1d1f;background:#fff;box-shadow:0 -8px 40px rgba(0,0,0,.15);transform:translateY(100%);transition:transform .4s cubic-bezier(.4,0,.2,1);border-radius:20px 20px 0 0}
+#cc-ccpa-banner{position:fixed;bottom:0;left:0;right:0;z-index:999999;font-family:var(--cc-font);font-size:14px;line-height:1.5;color:var(--cc-text);background:var(--cc-bg);box-shadow:0 -8px 40px var(--cc-banner-shadow);transform:translateY(100%);transition:transform .4s cubic-bezier(.4,0,.2,1);border-radius:var(--cc-radius) var(--cc-radius) 0 0;max-height:90vh;overflow-y:auto}
 #cc-ccpa-banner.cc-show{transform:translateY(0)}
 #cc-ccpa-banner *{box-sizing:border-box}
 .cc-ccpa-inner{max-width:720px;margin:0 auto;padding:20px 32px;display:flex;align-items:center;gap:20px;flex-wrap:wrap}
 .cc-ccpa-text{flex:1;min-width:280px}
-.cc-ccpa-text p{margin:0;color:#555}
+.cc-ccpa-text p{margin:0;color:var(--cc-text-muted)}
+.cc-ccpa-text p.cc-ccpa-gpc{margin:8px 0 0;color:var(--cc-text);font-weight:600}
+.cc-ccpa-gpc:before{content:"\2713\00a0"}
 .cc-ccpa-actions{display:flex;gap:10px;align-items:center;flex-shrink:0}
-.cc-ccpa-link{color:#0071e3;text-decoration:underline;font-size:13px;font-weight:500;white-space:nowrap}
-.cc-dark #cc-banner,.cc-dark #cc-ccpa-banner{background:#1c1c1e !important;color:#f5f5f7 !important;box-shadow:0 -8px 40px rgba(0,0,0,.5) !important}
-.cc-dark .cc-text{color:#98989d !important}
-.cc-dark .cc-text a,.cc-dark .cc-ccpa-link{color:#2997ff !important}
-.cc-dark .cc-btn-details{color:#98989d !important}
-.cc-dark .cc-btn-details:hover{color:#c7c7cc !important}
-.cc-dark .cc-btn-decline{background:#2c2c2e !important;color:#f5f5f7 !important}
-.cc-dark .cc-btn-decline:hover{background:#3a3a3c !important;color:#f5f5f7 !important}
-.cc-dark .cc-categories{border-color:#2c2c2e !important}
-.cc-dark .cc-cat{border-bottom-color:#2c2c2e !important}
-.cc-dark .cc-cat-desc{color:#8e8e93 !important}
-.cc-dark .cc-always-on{color:#8e8e93 !important}
-.cc-dark .cc-toggle .cc-slider{background:#3a3a3c !important}
-.cc-dark .cc-toggle .cc-slider:before{background:#f5f5f7 !important}
-.cc-dark .cc-toggle input:checked+.cc-slider{background:#0a84ff !important}
-.cc-dark .cc-toggle input:disabled+.cc-slider{background:#0a84ff !important}
-.cc-dark .cc-btn-accept{background:#0a84ff !important;box-shadow:0 2px 8px rgba(10,132,255,.35) !important}
-.cc-dark .cc-btn-accept:hover{background:#0071e3 !important;box-shadow:0 4px 16px rgba(10,132,255,.4) !important}
-.cc-dark .cc-btn-save{background:#30d158 !important;box-shadow:0 2px 8px rgba(48,209,88,.3) !important}
-.cc-dark .cc-btn-save:hover{background:#28a745 !important;box-shadow:0 4px 16px rgba(48,209,88,.35) !important}
-.cc-dark .cc-ccpa-text p{color:#98989d !important}
-.cc-dark .cc-powered{color:#aaa !important}
-.cc-dark .cc-powered a{color:#aaa !important}
-.cc-dark .cc-powered a:hover{color:#ddd !important}
-.cc-dark .cc-cat-label{color:#f5f5f7 !important}
-.cc-dark .cc-title{color:#f5f5f7 !important}
-.cc-dark #cc-icon{background:#f5f5f7 !important;color:#1d1d1f !important;box-shadow:0 2px 12px rgba(255,255,255,.15) !important}
-.cc-dark #cc-icon:hover{box-shadow:0 4px 20px rgba(255,255,255,.25) !important}
-@media(max-width:480px){.cc-inner{padding:24px 20px 16px}.cc-title{font-size:18px}.cc-buttons{gap:8px}.cc-btn-accept{font-size:14px;padding:12px 24px}.cc-btn-decline{font-size:12px;padding:10px 18px}}
+.cc-ccpa-link{color:var(--cc-link);text-decoration:underline;font-size:13px;font-weight:500;white-space:nowrap}
+#cc-ccpa-banner .cc-btn-details{padding:11px 0}
+.cc-ccpa-choice{display:none}
+.cc-ccpa-choice.cc-open{display:block}
+.cc-ccpa-choice-inner{max-width:720px;margin:0 auto;padding:20px 32px}
+.cc-ccpa-choice-title{font-size:16px;font-weight:800;line-height:1.3;margin:0 0 6px;color:inherit}
+.cc-ccpa-choice-text,.cc-ccpa-choice-note{margin:0 0 14px;color:var(--cc-text-muted)}
+.cc-ccpa-choice-status{margin:0 0 14px;font-weight:600;color:var(--cc-text)}
+.cc-ccpa-choice-note{font-size:12px;margin:10px 0 0}
+.cc-ccpa-choice-buttons{display:flex;gap:10px;flex-wrap:wrap;align-items:center}
+@media(max-width:480px){.cc-inner{padding:24px 20px 16px}.cc-title{font-size:18px}.cc-buttons{gap:8px}.cc-btn-accept{font-size:14px;padding:12px 24px}.cc-btn-decline{font-size:12px;padding:10px 18px}.cc-ccpa-inner{padding:16px 20px;gap:12px}.cc-ccpa-text{min-width:0;flex:1 1 100%}.cc-ccpa-actions{flex-wrap:wrap;flex-shrink:1;width:100%;justify-content:space-between}.cc-ccpa-link{white-space:normal}.cc-ccpa-choice-inner{padding:16px 20px}}

cookieflame/tags/5.4.0/assets/js/admin.js

@@ -10 +10 @@
     cc_anon_id:     { vendor: "CookieFlame",     category: "necessary",   purpose: "Anonymous ID for consent logging" },
     cookieflame_dnt:       { vendor: "CookieFlame",     category: "necessary",   purpose: "Do-not-track opt-out flag" },
-    "wp-settings-": { vendor: "WordPress",         category: "necessary",   purpose: "Admin interface preferences", prefix: true },
-    "wp-settings-time-": { vendor: "WordPress",    category: "necessary",   purpose: "Admin settings timestamp", prefix: true },
-    wordpress_logged_in_: { vendor: "WordPress",   category: "necessary",   purpose: "Login session", prefix: true },
-    wordpress_sec_: { vendor: "WordPress",         category: "necessary",   purpose: "Secure login session", prefix: true },
-    wordpress_test_cookie: { vendor: "WordPress",  category: "necessary",   purpose: "Checks cookie support" },
-    wp_lang:        { vendor: "WordPress",         category: "necessary",   purpose: "Language preference" },
+    "wp-settings-": { vendor: "WordPress",         category: "necessary",   purpose: "Remembers dashboard layout settings", prefix: true },
+    "wp-settings-time-": { vendor: "WordPress",    category: "necessary",   purpose: "Records when dashboard settings were last saved", prefix: true },
+    wordpress_logged_in_: { vendor: "WordPress",   category: "necessary",   purpose: "Keeps you logged in", prefix: true },
+    wordpress_sec_: { vendor: "WordPress",         category: "necessary",   purpose: "Confirms your login when you open the dashboard", prefix: true },
+    wordpress_rec_: { vendor: "WordPress",         category: "necessary",   purpose: "Recovery mode after a site error (administrators only)", prefix: true },
+    wordpress_test_cookie: { vendor: "WordPress",  category: "necessary",   purpose: "Checks your browser accepts cookies before you log in" },
+    wp_lang:        { vendor: "WordPress",         category: "necessary",   purpose: "Remembers the language picked on the login page" },
+    comment_author_: { vendor: "WordPress",        category: "necessary",   purpose: "Remembers your name for comments, if you ask it to", prefix: true },
+    comment_author_email_: { vendor: "WordPress",  category: "necessary",   purpose: "Remembers your email for comments, if you ask it to", prefix: true },
+    comment_author_url_: { vendor: "WordPress",    category: "necessary",   purpose: "Remembers your website for comments, if you ask it to", prefix: true },
+    "wp-postpass_": { vendor: "WordPress",         category: "necessary",   purpose: "Remembers the password entered for a protected page", prefix: true },
     woocommerce_cart_hash: { vendor: "WooCommerce", category: "necessary",  purpose: "Shopping cart contents" },
     woocommerce_items_in_cart: { vendor: "WooCommerce", category: "necessary", purpose: "Cart item count" },
@@ -181 +186 @@
   function identifyBuiltIn(name) {
     if (KNOWN[name]) return KNOWN[name];
-    var match = null;
+    // Longest prefix wins (wp-settings-time- over wp-settings-).
+    var match = null, matchLen = 0;
     var keys = Object.keys(KNOWN);
     for (var i = 0; i < keys.length; i++) {
-      if (KNOWN[keys[i]].prefix && name.indexOf(keys[i]) === 0) { match = KNOWN[keys[i]]; break; }
+      if (KNOWN[keys[i]].prefix && keys[i].length > matchLen && name.indexOf(keys[i]) === 0) { match = KNOWN[keys[i]]; matchLen = keys[i].length; }
     }
     return match;
@@ -320 +326 @@
   }
 
-  // WordPress core vendors that are always necessary
-  var WP_CORE_VENDORS = ["WordPress", "WooCommerce", "PHP"];
+  // Vendors listed under WordPress Core Cookies (PHP sessions and
+  // WooCommerce are not core, so they appear in the main table).
+  var WP_CORE_VENDORS = ["WordPress"];
   var PLUGIN_VENDOR = "CookieFlame";
 
@@ -2354 +2361 @@
     .then(function (data) {
       if (!data.success) {
-        if (startBtn) { startBtn.disabled = false; startBtn.textContent = "Start Cookie Discovery"; }
+        if (startBtn) { startBtn.disabled = false; startBtn.textContent = "Start Cookie Discovery (uses your own browser)"; }
         return;
       }
@@ -2405 +2412 @@
     })
     .catch(function (err) {
-      if (startBtn) { startBtn.disabled = false; startBtn.textContent = "Start Cookie Discovery"; }
+      if (startBtn) { startBtn.disabled = false; startBtn.textContent = "Start Cookie Discovery (uses your own browser)"; }
       cookieflameNotice("Error: " + err.message, "error");
     });

cookieflame/tags/5.4.0/assets/js/cookieconsent.js

@@ -1 +1 @@
 /**
- * CookieFlame v5.3.0
+ * CookieFlame v5.4.0
  * ─────────────────────────────────────────────────────────────
  * Self-hosted cookie consent manager with Google Consent Mode v2,
- * IAB TCF v2.2, automatic script blocking, iframe facades with
+ * automatic script blocking, iframe facades with
  * thumbnails, Elementor video widget support, multi-region
  * compliance (GDPR/CCPA), and passive cookie monitoring.
@@ -40 +40 @@
   } catch (e) {}
 
-  var PLUGIN_VERSION = "5.3.0";
+  var PLUGIN_VERSION = "5.4.0";
 
   /* ═══════════════════════════════════════════
@@ -49 +49 @@
     cookieExpiry:   365,
     privacyUrl:     "/privacy-policy",
-    ccpaUrl:        "/privacy-policy#do-not-sell",
     geoApi:         "",
     logEndpoint:    "",
     reconsentDays:  365,
     cspSafe:        false,
-    tcfEnabled:     true,
+    // IAB TCF v2.2 stub. Off since v5.4.0 (it never carried a TC string);
+    // the code is kept and can be switched on through the
+    // cookieflame_frontend_config filter (tcfEnabled: true).
+    tcfEnabled:     false,
     cmpId:          1,
     cmpVersion:     1,
@@ -65 +67 @@
     iconPosition:   "left",
     consentVersion: "",
+    // Show "Decline All" next to "Accept All" on the GDPR banner's first
+    // screen (Settings > Show "Decline all" on the first screen).
+    rejectFirstScreen: false,
+    // List WordPress login cookies in the declaration under "If you log
+    // in" (Settings > Visitor logins). Login cookies are never listed
+    // with the others, so the declaration is the same for every visitor.
+    visitorLogins: false,
 
     autoBlockPatterns: [
@@ -122 +131 @@
       description:        'We use cookies to improve your experience, analyse traffic and personalise content. You can choose which categories to allow.',
       acceptAllButton:    "Accept All",
+      rejectAllButton:    "Decline All",
       declineAllButton:   "Decline All",
       saveButton:         "Save Preferences",
@@ -128 +138 @@
       alwaysOnLabel:      "(always on)",
       ccpaTitle:          "Your Privacy Choices",
-      ccpaDescription:    'We use cookies and similar technologies. Under California law, you have the right to opt out of the sale or sharing of your personal information.',
+      ccpaDescription:    "We use cookies and similar technologies. Under US state privacy laws, such as California's, you have the right to opt out of the sale or sharing of your personal information.",
       ccpaAcceptButton:   "OK",
-      ccpaDnsmpiLink:     "Do Not Sell My Personal Information"
+      ccpaDnsmpiLink:     "Do Not Sell or Share My Personal Information",
+      ccpaGpcNotice:      "Your browser asked us not to sell or share your information. We're honouring that.",
+      ccpaChoiceTitle:    "Do Not Sell or Share My Personal Information",
+      ccpaChoiceText:     "Information about your visit may be used by advertising partners whose cookies run on this site. Under US state privacy laws that can count as selling or sharing. You can opt out in this browser.",
+      ccpaOptOutButton:   "Opt out",
+      ccpaCancelButton:   "Cancel",
+      ccpaOptedOut:       "You've opted out of the sale or sharing of your personal information in this browser.",
+      ccpaGpcOptedOut:    "Your browser's Global Privacy Control signal asked us not to sell or share your information, so you're opted out in this browser.",
+      ccpaDoneButton:     "Done",
+      ccpaOptInButton:    "Allow selling or sharing",
+      ccpaOptInGpcNote:   "Allowing it overrides your browser's Global Privacy Control signal on this site only.",
+      ccpaMoreSettings:   "More cookie settings",
+      gpcPrefNote:        "Your browser's Global Privacy Control signal is on, so Marketing stays off unless you switch it on here.",
+      changePreferences:  "Change cookie preferences",
+      loginCookiesTitle:  "If you log in",
+      loginCookiesIntro:  "These cookies are only set if you log in to an account on this site. They keep you signed in and remember your account settings. They're needed for logging in to work, so they don't ask for your consent."
     },
 
@@ -181 +206 @@
     var ext = window.__ccConfig;
     // shallow merge top-level primitives
-    var keys = ["cookieName","cookieExpiry","privacyUrl","ccpaUrl","geoApi",
+    var keys = ["cookieName","cookieExpiry","privacyUrl","geoApi",
       "logEndpoint","reconsentDays","cspSafe","tcfEnabled","cmpId",
-      "cmpVersion","vendorListVersion","storageMethod","cookieDomain","shareSubdomains","theme","showPoweredBy","iconPosition","consentVersion"];
+      "cmpVersion","vendorListVersion","storageMethod","cookieDomain","shareSubdomains","theme","showPoweredBy","iconPosition","consentVersion",
+      "rejectFirstScreen","visitorLogins"];
     keys.forEach(function (k) {
       if (ext[k] !== undefined) CONFIG[k] = ext[k];
@@ -207 +233 @@
   // visitor's browser is sending the GPC signal.
   var gpcActive = !!window.__ccGPC;
+
+  /* GPC rules (Cal. Code Regs. tit. 11 §7025, applied in every region):
+     - A GPC signal is a valid opt-out of selling and sharing: Marketing
+       stays off and Google's ad signals are denied, with no extra steps.
+     - The opt-out is saved in the consent cookie (state.gpc), so a later
+       visit without GPC keeps it.
+     - The visitor can opt back in only through a separate choice: the
+       US notice's "Allow selling or sharing" button, or switching
+       Marketing on and saving in the preferences. That sets
+       state.gpcOptIn. OK and Accept All never opt back in. */
+  function applyGpc(state) {
+    if (gpcActive && state && !state.gpcOptIn) {
+      state.marketing = false;
+      state.gpc = 1;
+    }
+    return state;
+  }
 
   // Merged blocking rules from PHP (built-in defaults + auto-generated
@@ -227 +270 @@
     cc_anon_id:     { vendor: "CookieFlame",     category: "necessary",   purpose: "Anonymous ID for consent logging", expiry: "1 year" },
     cookieflame_dnt:       { vendor: "CookieFlame",     category: "necessary",   purpose: "Do-not-track opt-out flag", expiry: "1 year" },
+    // PHP sessions (started by some plugins and hosts, not by WordPress)
+    PHPSESSID:      { vendor: "PHP",              category: "necessary",   purpose: "Server-side session identifier", expiry: "Session" },
     // WordPress core
-    PHPSESSID:      { vendor: "PHP",              category: "necessary",   purpose: "Server-side session identifier", expiry: "Session" },
-    wp_settings_:   { vendor: "WordPress",         category: "necessary",   purpose: "Admin interface preferences", prefix: true, expiry: "1 year" },
-    "wp-settings-": { vendor: "WordPress",         category: "necessary",   purpose: "Admin interface preferences", prefix: true, expiry: "1 year" },
-    "wp-settings-time-": { vendor: "WordPress",    category: "necessary",   purpose: "Admin settings timestamp", prefix: true, expiry: "1 year" },
-    wordpress_logged_in_: { vendor: "WordPress",   category: "necessary",   purpose: "Login session", prefix: true, expiry: "Session" },
-    wordpress_sec_: { vendor: "WordPress",         category: "necessary",   purpose: "Secure login session", prefix: true, expiry: "Session" },
-    wordpress_test_cookie: { vendor: "WordPress",  category: "necessary",   purpose: "Checks cookie support", expiry: "Session" },
-    wp_lang:        { vendor: "WordPress",         category: "necessary",   purpose: "Language preference", expiry: "Session" },
+    "wp-settings-": { vendor: "WordPress",         category: "necessary",   purpose: "Remembers dashboard layout settings", prefix: true, expiry: "1 year" },
+    "wp-settings-time-": { vendor: "WordPress",    category: "necessary",   purpose: "Records when dashboard settings were last saved", prefix: true, expiry: "1 year" },
+    wordpress_logged_in_: { vendor: "WordPress",   category: "necessary",   purpose: "Keeps you logged in", prefix: true, expiry: "Session, or 14 days with Remember Me" },
+    wordpress_sec_: { vendor: "WordPress",         category: "necessary",   purpose: "Confirms your login when you open the dashboard", prefix: true, expiry: "Session, or 14 days with Remember Me" },
+    wordpress_rec_: { vendor: "WordPress",         category: "necessary",   purpose: "Recovery mode after a site error (administrators only)", prefix: true, expiry: "1 week" },
+    wordpress_test_cookie: { vendor: "WordPress",  category: "necessary",   purpose: "Checks your browser accepts cookies before you log in", expiry: "Session" },
+    wp_lang:        { vendor: "WordPress",         category: "necessary",   purpose: "Remembers the language picked on the login page", expiry: "Session" },
+    comment_author_: { vendor: "WordPress",        category: "necessary",   purpose: "Remembers your name for comments, if you ask it to", prefix: true, expiry: "1 year" },
+    comment_author_email_: { vendor: "WordPress",  category: "necessary",   purpose: "Remembers your email for comments, if you ask it to", prefix: true, expiry: "1 year" },
+    comment_author_url_: { vendor: "WordPress",    category: "necessary",   purpose: "Remembers your website for comments, if you ask it to", prefix: true, expiry: "1 year" },
+    "wp-postpass_": { vendor: "WordPress",         category: "necessary",   purpose: "Remembers the password entered for a protected page", prefix: true, expiry: "10 days" },
     // WooCommerce
     woocommerce_cart_hash: { vendor: "WooCommerce", category: "necessary",  purpose: "Shopping cart contents", expiry: "Session" },
@@ -272 +320 @@
     if (match) return match;
 
-    // Prefix match in built-in database
+    // Prefix match in built-in database: the longest prefix wins, so
+    // wp-settings-time-1 is not taken for a wp-settings- cookie.
+    var matchLen = 0;
     Object.keys(KNOWN_COOKIES).forEach(function (key) {
-      if (!match && KNOWN_COOKIES[key].prefix && name.indexOf(key) === 0) {
+      if (KNOWN_COOKIES[key].prefix && key.length > matchLen && name.indexOf(key) === 0) {
         match = KNOWN_COOKIES[key];
+        matchLen = key.length;
       }
     });
 
     return match || null;
+  }
+
+  // Cookies WordPress sets when someone logs in. The declaration never
+  // lists the ones in the viewer's own browser; with visitorLogins on it
+  // lists all of them under "If you log in" instead. wordpress_[hash] is
+  // the login cookie on sites without HTTPS, wordpress_rec_ is admin-only.
+  var LOGIN_COOKIE_RE = /^(?:wordpress_(?:logged_in_|sec_|rec_|test_cookie$|[0-9a-f]{32}$)|wp-settings-|wp_lang$)/;
+
+  function isLoginCookie(name) {
+    return LOGIN_COOKIE_RE.test(name);
+  }
+
+  function loginCookieRows() {
+    var keep = "Session, or 14 days with Remember Me";
+    return [
+      { name: "wordpress_logged_in_[hash]", purpose: "Keeps you logged in", expiry: keep },
+      { name: location.protocol === "https:" ? "wordpress_sec_[hash]" : "wordpress_[hash]", purpose: "Confirms your login when you open your account dashboard", expiry: keep },
+      { name: "wordpress_test_cookie", purpose: "Checks your browser accepts cookies before you log in", expiry: "Session" },
+      { name: "wp_lang", purpose: "Remembers the language you picked on the login page", expiry: "Session" },
+      { name: "wp-settings-[user ID]", purpose: "Remembers your dashboard layout settings", expiry: "1 year" },
+      { name: "wp-settings-time-[user ID]", purpose: "Records when your dashboard settings were last saved", expiry: "1 year" }
+    ];
   }
 
@@ -410 +483 @@
     // Connecticut, Montana, Oregon, Texas, Delaware, Iowa, Nebraska,
     // New Hampshire, New Jersey, Minnesota, plus others pending).
-    if (gpcActive) {
+    if (gpcActive && !state.gpcOptIn) {
       update.ad_storage = "denied";
       update.ad_user_data = "denied";
@@ -666 +739 @@
   ];
 
+  // Patterns match whole hostnames (the host itself or a subdomain of
+  // it), plus an optional path prefix: "x.com" matches x.com and
+  // www.x.com but not netflix.com or box.com.
+  function iframePatternMatches(src, pattern) {
+    var host, path;
+    try {
+      var u = new URL(src, location.href);
+      host = u.hostname.toLowerCase();
+      path = u.pathname.toLowerCase();
+    } catch (e) { return false; }
+    var slash = pattern.indexOf("/");
+    var pHost = slash === -1 ? pattern : pattern.slice(0, slash);
+    var pPath = slash === -1 ? "" : pattern.slice(slash);
+    if (host !== pHost && host.slice(-pHost.length - 1) !== "." + pHost) return false;
+    return !pPath || path.indexOf(pPath) === 0;
+  }
+
   function getIframeBlockCategory(src) {
     if (!src) return null;
-    var lower = src.toLowerCase();
     for (var i = 0; i < IFRAME_BLOCK_PATTERNS.length; i++) {
-      if (lower.indexOf(IFRAME_BLOCK_PATTERNS[i].pattern) !== -1) {
+      if (iframePatternMatches(src, IFRAME_BLOCK_PATTERNS[i].pattern)) {
         return IFRAME_BLOCK_PATTERNS[i].category;
       }
@@ -838 +927 @@
       var src = iframe.src || "";
       if (!src) continue;
-      for (var j = 0; j < IFRAME_BLOCK_PATTERNS.length; j++) {
-        if (src.indexOf(IFRAME_BLOCK_PATTERNS[j].pattern) !== -1) {
-          iframe.src = src;
-          break;
-        }
-      }
+      if (getIframeBlockCategory(src)) iframe.src = src;
     }
   }
@@ -896 +980 @@
   function saveState(state, action) {
     var prev = consentState;
+    // A click on an embed's placeholder loads that embed now; the GPC
+    // opt-out is saved again on the next page view (boot()).
+    if (!(action && action.indexOf("facade_accept_") === 0)) applyGpc(state);
     consentState = state;
     storageSet(CONFIG.cookieName, JSON.stringify(state), CONFIG.cookieExpiry);
@@ -958 +1045 @@
       if (!s || typeof s !== "object" || Array.isArray(s)) return null;
       if (!s.ts || isNaN(new Date(s.ts).getTime())) return null;
-      // Check re-consent expiry
+      // Check re-consent expiry. A period below 1 day means the default.
+      var days = Number(CONFIG.reconsentDays);
+      if (!(days >= 1)) days = 365;
       var age = (Date.now() - new Date(s.ts).getTime()) / 864e5;
-      if (age > CONFIG.reconsentDays) return null;
+      if (age > days) return null;
       // Consent version check: if the site owner has clicked
       // "Invalidate All Consent", the version string will not
@@ -1183 +1272 @@
       var alwaysOn = t.required
         ? ' <span class="cc-always-on">' + escHtml(txt.alwaysOnLabel) + '</span>' : "";
+      var gpcNote = gpcActive && t.id === "marketing"
+        ? '<div class="cc-gpc-note">' + escHtml(txt.gpcPrefNote) + '</div>' : "";
       return '<div class="cc-cat">' +
         '<div><div class="cc-cat-label">' + escHtml(t.name) + alwaysOn + '</div>' +
-        '<div class="cc-cat-desc">' + escHtml(t.description || "") + '</div></div>' +
+        '<div class="cc-cat-desc">' + escHtml(t.description || "") + '</div>' + gpcNote + '</div>' +
         '<label class="cc-toggle"><input type="checkbox" id="cc-cb-' + escHtml(t.id) + '"' +
           ' aria-label="' + escHtml(t.name) + '"' +
@@ -1200 +1291 @@
         '<div class="cc-buttons">' +
           '<button class="cc-btn cc-btn-accept" id="cc-accept">' + escHtml(txt.acceptAllButton) + '</button>' +
+          (CONFIG.rejectFirstScreen ? '<button class="cc-btn cc-btn-reject" id="cc-reject">' + escHtml(txt.rejectAllButton) + '</button>' : '') +
           '<button class="cc-btn cc-btn-details" id="cc-details" aria-expanded="false">' + escHtml(txt.showDetailsButton) + '</button>' +
         '</div>' +
@@ -1221 +1313 @@
     document.getElementById("cc-accept").addEventListener("click", acceptAll);
     document.getElementById("cc-decline").addEventListener("click", declineAll);
+    var rejectBtn = document.getElementById("cc-reject");
+    if (rejectBtn) rejectBtn.addEventListener("click", declineAll);
     document.getElementById("cc-save").addEventListener("click", savePrefs);
     document.getElementById("cc-details").addEventListener("click", toggleDetails);
     icon.addEventListener("click", function () { showBanner("gdpr"); });
     // No overlay click handler — banner must be dismissed via buttons only
+    emitRendered("gdpr", banner);
+  }
+
+  // cc:banner-rendered fires once each banner's markup is in the page
+  // (before it is shown), so other code can adjust it.
+  // detail: { banner: "gdpr" | "ccpa", element, state }
+  function emitRendered(type, el) {
+    emit("cc:banner-rendered", { banner: type, element: el, state: getPublicState() });
   }
 
@@ -1231 +1333 @@
   ═══════════════════════════════════════════ */
   function buildCcpaBanner() {
+    if (document.getElementById("cc-ccpa-banner")) return;
     var txt = CONFIG.text;
     var banner = document.createElement("div");
@@ -1240 +1343 @@
 
     banner.innerHTML =
-      '<div class="cc-ccpa-inner">' +
-        '<div class="cc-ccpa-text"><p>' + escHtml(txt.ccpaDescription) + '</p></div>' +
+      '<div class="cc-ccpa-inner" id="cc-ccpa-notice">' +
+        '<div class="cc-ccpa-text"><p>' + escHtml(txt.ccpaDescription) + '</p>' +
+          (gpcActive ? '<p class="cc-ccpa-gpc">' + escHtml(txt.ccpaGpcNotice) + '</p>' : '') +
+        '</div>' +
         '<div class="cc-ccpa-actions">' +
-          '<a href="' + escHtml(CONFIG.ccpaUrl) + '" class="cc-ccpa-link">' + escHtml(txt.ccpaDnsmpiLink) + '</a>' +
+          '<a href="#" class="cc-ccpa-link" id="cc-ccpa-dns" role="button">' + escHtml(txt.ccpaDnsmpiLink) + '</a>' +
           '<button class="cc-btn cc-btn-accept" id="cc-ccpa-ok">' + escHtml(txt.ccpaAcceptButton) + '</button>' +
         '</div>' +
-      '</div>';
+      '</div>' +
+      '<div class="cc-ccpa-choice" id="cc-ccpa-choice"></div>' +
+      (CONFIG.showPoweredBy ? '<div class="cc-powered"><a href="https://www.cookieflame.com" target="_blank" rel="noopener">Powered by CookieFlame</a></div>' : '');
 
     document.body.appendChild(banner);
 
+    // OK only closes the notice. It never changes the visitor's choices:
+    // US visitors start with everything allowed, and a GPC visitor's
+    // opt-out was saved before the notice appeared.
     document.getElementById("cc-ccpa-ok").addEventListener("click", function () {
-      var s = buildStateAllGranted();
-      saveState(s, "ccpa_acknowledge");
-      banner.classList.remove("cc-show");
+      if (consentState) logConsent("ccpa_acknowledge", consentState);
+      closeCcpaBanner();
+    });
+    document.getElementById("cc-ccpa-dns").addEventListener("click", function (e) {
+      e.preventDefault();
+      showCcpaChoice(true);
+    });
+    emitRendered("ccpa", banner);
+  }
+
+  // The "Do Not Sell or Share" choice, drawn from the current state.
+  function renderCcpaChoice() {
+    var el = document.getElementById("cc-ccpa-choice");
+    if (!el) return;
+    var txt = CONFIG.text;
+    var optedOut = !(consentState && consentState.marketing);
+    var html = '<div class="cc-ccpa-choice-inner">' +
+      '<p class="cc-ccpa-choice-title">' + escHtml(txt.ccpaChoiceTitle) + '</p>';
+    if (optedOut) {
+      html += '<p class="cc-ccpa-choice-status">' + escHtml(gpcActive ? txt.ccpaGpcOptedOut : txt.ccpaOptedOut) + '</p>' +
+        '<div class="cc-ccpa-choice-buttons">' +
+          '<button class="cc-btn cc-btn-accept" id="cc-ccpa-done">' + escHtml(txt.ccpaDoneButton) + '</button>' +
+          '<button class="cc-btn cc-btn-decline" id="cc-ccpa-optin">' + escHtml(txt.ccpaOptInButton) + '</button>' +
+        '</div>' +
+        (gpcActive ? '<p class="cc-ccpa-choice-note">' + escHtml(txt.ccpaOptInGpcNote) + '</p>' : '');
+    } else {
+      html += '<p class="cc-ccpa-choice-text">' + escHtml(txt.ccpaChoiceText) + '</p>' +
+        '<div class="cc-ccpa-choice-buttons">' +
+          '<button class="cc-btn cc-btn-accept" id="cc-ccpa-optout">' + escHtml(txt.ccpaOptOutButton) + '</button>' +
+          '<button class="cc-btn cc-btn-decline" id="cc-ccpa-cancel">' + escHtml(txt.ccpaCancelButton) + '</button>' +
+        '</div>';
+    }
+    html += '<button class="cc-btn cc-btn-details" id="cc-ccpa-more">' + escHtml(txt.ccpaMoreSettings) + '</button></div>';
+    el.innerHTML = html;
+
+    var bind = function (id, fn) { var b = document.getElementById(id); if (b) b.addEventListener("click", fn); };
+    bind("cc-ccpa-done", closeCcpaBanner);
+    bind("cc-ccpa-cancel", closeCcpaBanner);
+    bind("cc-ccpa-optout", function () {
+      var s = copyState(consentState);
+      s.marketing = false;
+      saveState(s, "ccpa_opt_out");
+      renderCcpaChoice();
+      focusFirst("cc-ccpa-choice");
       emit("cc:update");
     });
+    bind("cc-ccpa-optin", function () {
+      var s = copyState(consentState);
+      s.marketing = true;
+      if (gpcActive) s.gpcOptIn = 1;
+      delete s.gpc;
+      saveState(s, "ccpa_opt_in");
+      renderCcpaChoice();
+      focusFirst("cc-ccpa-choice");
+      emit("cc:update");
+    });
+    bind("cc-ccpa-more", function () {
+      closeCcpaBanner();
+      openPreferences();
+    });
+  }
+
+  function showCcpaChoice(open) {
+    var notice = document.getElementById("cc-ccpa-notice");
+    var choice = document.getElementById("cc-ccpa-choice");
+    if (!notice || !choice) return;
+    if (open) renderCcpaChoice();
+    notice.style.display = open ? "none" : "";
+    choice.classList.toggle("cc-open", !!open);
+    if (open) focusFirst("cc-ccpa-choice");
+  }
+
+  function closeCcpaBanner() {
+    var b = document.getElementById("cc-ccpa-banner");
+    if (b) b.classList.remove("cc-show");
+    showCcpaChoice(false);
+    document.removeEventListener("keydown", _trapFocus);
+    if (_preFocusEl && typeof _preFocusEl.focus === "function") {
+      try { _preFocusEl.focus(); } catch (e) {}
+    }
+    _preFocusEl = null;
+  }
+
+  function focusFirst(id) {
+    var el = document.getElementById(id);
+    var b = el && el.querySelector("button");
+    if (b) { try { b.focus(); } catch (e) {} }
+  }
+
+  // A fresh state with the same choices as src (everything allowed when
+  // there is none yet), keeping an earlier GPC opt-in.
+  function copyState(src) {
+    var s = { ts: new Date().toISOString(), cv: CONFIG.consentVersion, cc: detectedCountry };
+    CONFIG.cookieTypes.forEach(function (t) { s[t.id] = src ? !!src[t.id] : true; });
+    if (src && src.gpcOptIn) s.gpcOptIn = 1;
+    return s;
   }
 
@@ -1268 +1469 @@
   function _trapFocus(e) {
     if (e.key !== "Tab") return;
-    var banner = document.getElementById("cc-banner") || document.getElementById("cc-ccpa-banner");
-    if (!banner || !banner.classList.contains("cc-show")) return;
+    var banner = document.querySelector("#cc-banner.cc-show, #cc-ccpa-banner.cc-show");
+    if (!banner) return;
     var focusable = [];
     var all = banner.querySelectorAll('button, a[href], input:not([disabled]), select, textarea, [tabindex]:not([tabindex="-1"])');
@@ -1278 +1479 @@
       var p = el.parentElement;
       while (p && p !== banner) {
-        if (p.style && window.getComputedStyle(p).display === "none") { hidden = true; break; }
+        if (window.getComputedStyle(p).display === "none") { hidden = true; break; }
         p = p.parentElement;
       }
@@ -1295 +1496 @@
   function showBanner(mode) {
     if (mode === "ccpa") {
+      _preFocusEl = document.activeElement;
       requestAnimationFrame(function () {
         var b = document.getElementById("cc-ccpa-banner");
         if (b) {
           b.classList.add("cc-show");
-          _preFocusEl = document.activeElement;
-          b.focus();
+          var choice = document.getElementById("cc-ccpa-choice");
+          if (choice && choice.classList.contains("cc-open")) focusFirst("cc-ccpa-choice");
+          else b.focus();
           document.addEventListener("keydown", _trapFocus);
         }
@@ -1307 +1510 @@
     }
     _preFocusEl = document.activeElement;
+    // "Decline All" on the first screen is for the GDPR banner only, never
+    // when the preferences are opened by a US or other visitor.
+    var rj = document.getElementById("cc-reject");
+    if (rj) {
+      if (complianceMode === "gdpr") rj.style.removeProperty("display");
+      else rj.style.setProperty("display", "none", "important"); // beats .cc-btn's !important
+    }
     requestAnimationFrame(function () {
       var ov = document.getElementById("cc-overlay");
@@ -1354 +1564 @@
   ═══════════════════════════════════════════ */
   function acceptAll() {
-    saveState(buildStateAllGranted(), "accept_all");
+    var s = buildStateAllGranted();
+    if (consentState && consentState.gpcOptIn) s.gpcOptIn = 1;
+    saveState(s, "accept_all");
     closeBanner();
     emit("cc:accept-all"); emit("cc:update");
@@ -1366 +1578 @@
 
   function savePrefs() {
-    saveState(buildStateFromCheckboxes(), "save_preferences");
+    var s = buildStateFromCheckboxes();
+    // Switching Marketing on here is the separate choice that opts a GPC
+    // visitor back in.
+    if (s.marketing && (gpcActive || (consentState && consentState.gpcOptIn))) s.gpcOptIn = 1;
+    saveState(s, "save_preferences");
     closeBanner();
     emit("cc:save"); emit("cc:update");
@@ -1383 +1599 @@
     }
   }
+
+  /* ═══════════════════════════════════════════
+     COOKIE SETTINGS LINK
+     [cookieflame_settings_link], the declaration's button and any
+     element with the class cc-open-settings reopen the visitor's
+     choices: the "Do Not Sell or Share" choice for US visitors, the
+     preferences for everyone else.
+  ═══════════════════════════════════════════ */
+  function openPreferences() {
+    if (!document.getElementById("cc-banner")) {
+      applyThemeClasses();
+      buildGdprBanner();
+      hideAllBanners();
+      if (consentState) syncCheckboxes(consentState);
+    }
+    showBanner("gdpr");
+  }
+
+  function openUsChoices() {
+    applyThemeClasses();
+    buildCcpaBanner();
+    showBanner("ccpa");
+    showCcpaChoice(true);
+  }
+
+  function openSettings() {
+    if (complianceMode === "ccpa") openUsChoices();
+    else openPreferences();
+  }
+
+  document.addEventListener("click", function (e) {
+    var t = e.target && e.target.closest ? e.target.closest(".cc-open-settings") : null;
+    if (!t) return;
+    e.preventDefault();
+    openSettings();
+  });
 
   /* ═══════════════════════════════════════════
@@ -1435 +1687 @@
     getComplianceMode:  function () { return complianceMode; },
     getCountry:         function () { return detectedCountry; },
-    show:               function () { showBanner("gdpr"); }, // always open preference manager
+    show:               openPreferences, // always open preference manager
+    showSettings:       openSettings,    // what the Cookie settings link opens
     acceptAll:          acceptAll,
     declineAll:         declineAll,
@@ -1461 +1714 @@
     // Add browser cookies
     var browserCookies = document.cookie.split(";").map(function (c) { return c.trim().split("=")[0]; }).filter(Boolean);
+    browserCookies = browserCookies.filter(function (n) { return !isLoginCookie(n); });
     for (var b = 0; b < browserCookies.length; b++) {
       var bInfo = identifyCookie(browserCookies[b]);
@@ -1473 +1727 @@
     for (var c = 0; c < customCookies.length; c++) {
       var cc = customCookies[c];
-      if (cc.name && cc.vendor && cc.category && cc.category !== "unclassified" && !allCookies[cc.name]) {
+      if (cc.name && cc.vendor && cc.category && cc.category !== "unclassified" && !allCookies[cc.name] && !isLoginCookie(cc.name)) {
         allCookies[cc.name] = {
           name: cc.name, vendor: cc.vendor, category: cc.category,
@@ -1562 +1816 @@
     }
 
+    if (CONFIG.visitorLogins) {
+      var loginRows = loginCookieRows();
+      html += '<div class="cc-declaration-login">';
+      html += '<p><b>' + escHtml(CONFIG.text.loginCookiesTitle) + '</b></p>';
+      html += '<p>' + escHtml(CONFIG.text.loginCookiesIntro) + '</p>';
+      html += '<table><thead><tr>';
+      html += '<th>Name</th><th>Provider</th><th>Purpose</th><th>Expiry</th>';
+      html += '</tr></thead><tbody>';
+      for (var li = 0; li < loginRows.length; li++) {
+        html += '<tr>';
+        html += '<td><code>' + escHtml(loginRows[li].name) + '</code></td>';
+        html += '<td>WordPress</td>';
+        html += '<td>' + escHtml(loginRows[li].purpose) + '</td>';
+        html += '<td>' + escHtml(loginRows[li].expiry) + '</td>';
+        html += '</tr>';
+      }
+      html += '</tbody></table></div>';
+    }
+
+    html += '<p><button type="button" class="cc-open-settings cc-declaration-change">' + escHtml(CONFIG.text.changePreferences) + '</button></p>';
     html += '</div>';
     el.innerHTML = html;
@@ -1581 +1855 @@
   var preloadedConsent = loadState();
   if (preloadedConsent) {
+    // Marketing scripts created before boot() runs stay blocked for GPC.
+    if (gpcActive && !preloadedConsent.gpcOptIn) preloadedConsent.marketing = false;
     consentState = preloadedConsent;
     updateConsentMode(preloadedConsent);
@@ -1649 +1925 @@
     var existing = loadState();
 
+    var gpcNewOptOut = false;
     if (existing) {
-      // GPC override: when Global Privacy Control is active, suppress
-      // marketing consent in the effective state. The stored cookie
-      // is not modified — if the visitor later disables GPC, their
-      // original consent choice is restored. This ensures marketing
-      // scripts and ad signals stay blocked while GPC is active.
-      if (gpcActive) existing.marketing = false;
+      // GPC: a signal that arrives after the visitor's choice is
+      // processed as an opt-out and saved, so it holds on later visits
+      // without GPC (§7025(c)(5)). An earlier opt-in made while GPC was
+      // on (gpcOptIn) is kept.
+      if (gpcActive && !existing.gpcOptIn && (existing.marketing || !existing.gpc)) {
+        gpcNewOptOut = !!existing.marketing;
+        applyGpc(existing);
+        storageSet(CONFIG.cookieName, JSON.stringify(existing), CONFIG.cookieExpiry);
+      }
       consentState = existing;
       updateConsentMode(existing);
@@ -1681 +1961 @@
           if (ic) ic.classList.add("cc-show");
         }
+        if (gpcNewOptOut) logConsent("gpc_optout", existing);
         emit("cc:ready");
         renderDeclaration();
@@ -1691 +1972 @@
             if (ic) ic.classList.add("cc-show");
           }
+          if (gpcNewOptOut) logConsent("gpc_optout", existing);
           emit("cc:ready");
           renderDeclaration();
@@ -1714 +1996 @@
         startIframeObserver();
         if (gpcActive) {
-          // GPC active: grant analytics and preferences but deny marketing.
-          // This fulfills the CCPA/CPRA requirement to honor Global Privacy
-          // Control as a valid opt-out of the sale or sharing of personal
-          // information. Fines have been issued for ignoring GPC (Sephora
-          // $1.2M, DoorDash $375K, Tractor Supply $1.3M).
-          var gpcState = buildStateAllGranted();
-          gpcState.marketing = false;
-          saveState(gpcState, "ccpa_gpc_optout");
+          // GPC active: allow analytics and preferences but opt out of
+          // selling and sharing (Marketing off), saved before the notice
+          // appears. The notice says the signal was honoured.
+          saveState(applyGpc(buildStateAllGranted()), "ccpa_gpc_optout");
         } else {
           saveState(buildStateAllGranted(), "ccpa_auto_grant");

cookieflame/tags/5.4.0/assets/js/cookieconsent.min.js

@@ -1 +1 @@
 /**
- * CookieFlame v5.3.0
+ * CookieFlame v5.4.0
  * ─────────────────────────────────────────────────────────────
  * Self-hosted cookie consent manager with Google Consent Mode v2,
- * IAB TCF v2.2, automatic script blocking, iframe facades with
+ * automatic script blocking, iframe facades with
  * thumbnails, Elementor video widget support, multi-region
  * compliance (GDPR/CCPA), and passive cookie monitoring.
@@ -17 +17 @@
  *   • Timezone-based geo heuristic with server-side fallback
  */
-!function(){"use strict";var e={};try{for(var t=document.cookie.split(";"),n=0;n<t.length;n++){var o=t[n].trim().split("=")[0];o&&(e[o]=!0)}}catch(e){}var c="5.3.0",r={cookieName:"cc_consent",cookieExpiry:365,privacyUrl:"/privacy-policy",ccpaUrl:"/privacy-policy#do-not-sell",geoApi:"",logEndpoint:"",reconsentDays:365,cspSafe:!1,tcfEnabled:!0,cmpId:1,cmpVersion:1,vendorListVersion:2,storageMethod:"cookie",cookieDomain:"",shareSubdomains:!1,theme:"light",showPoweredBy:!1,iconPosition:"left",consentVersion:"",autoBlockPatterns:[{pattern:"googletagmanager.com/gtag",category:"analytics"},{pattern:"google-analytics.com",category:"analytics"},{pattern:"analytics.google.com",category:"analytics"},{pattern:"hotjar.com",category:"analytics"},{pattern:"mixpanel.com",category:"analytics"},{pattern:"segment.com/analytics",category:"analytics"},{pattern:"segment.io",category:"analytics"},{pattern:"clarity.ms",category:"analytics"},{pattern:"plausible.io",category:"analytics"},{pattern:"js.hs-analytics.net",category:"analytics"},{pattern:"connect.facebook.net",category:"marketing"},{pattern:"snap.licdn.com",category:"marketing"},{pattern:"ads.linkedin.com",category:"marketing"},{pattern:"googleads.g.doubleclick.net",category:"marketing"},{pattern:"googlesyndication.com",category:"marketing"},{pattern:"googleadservices.com",category:"marketing"},{pattern:"ads-twitter.com",category:"marketing"},{pattern:"analytics.tiktok.com",category:"marketing"},{pattern:"pintrk",category:"marketing"},{pattern:"s.pinimg.com/ct",category:"marketing"},{pattern:"widget.intercom.io",category:"preferences"},{pattern:"js.intercomcdn.com",category:"preferences"}],regionRules:{gdpr:["AT","BE","BG","CY","CZ","DE","DK","EE","ES","FI","FR","GR","HR","HU","IE","IT","LT","LU","LV","MT","NL","PL","PT","RO","SE","SI","SK","IS","LI","NO","GB","GG","JE","IM","CH","BR","ZA"],ccpa:["US"]},text:{title:"We value your privacy",description:"We use cookies to improve your experience, analyse traffic and personalise content. You can choose which categories to allow.",acceptAllButton:"Accept All",declineAllButton:"Decline All",saveButton:"Save Preferences",showDetailsButton:"Manage preferences",hideDetailsButton:"Hide preferences",alwaysOnLabel:"(always on)",ccpaTitle:"Your Privacy Choices",ccpaDescription:"We use cookies and similar technologies. Under California law, you have the right to opt out of the sale or sharing of your personal information.",ccpaAcceptButton:"OK",ccpaDnsmpiLink:"Do Not Sell My Personal Information"},cookieTypes:[{id:"necessary",name:"Necessary",description:"Required for the site to function. Cannot be disabled.",required:!0,consentMode:["security_storage","functionality_storage"],tcfPurposes:[1],onAccept:function(){}},{id:"preferences",name:"Preferences",description:"Remember your settings and personalisation choices.",required:!1,defaultValue:!1,consentMode:["functionality_storage","personalization_storage"],tcfPurposes:[2,3],onAccept:function(){},onReject:function(){}},{id:"analytics",name:"Analytics",description:"Help us understand how visitors use the site.",required:!1,defaultValue:!1,consentMode:["analytics_storage"],tcfPurposes:[4,5,6],onAccept:function(){},onReject:function(){}},{id:"marketing",name:"Marketing",description:"Used to deliver relevant ads and track campaigns.",required:!1,defaultValue:!1,consentMode:["ad_storage","ad_user_data","ad_personalization"],tcfPurposes:[7,8,9,10],onAccept:function(){},onReject:function(){}}]};if(window.__ccConfig&&"object"==typeof window.__ccConfig){var a=window.__ccConfig;["cookieName","cookieExpiry","privacyUrl","ccpaUrl","geoApi","logEndpoint","reconsentDays","cspSafe","tcfEnabled","cmpId","cmpVersion","vendorListVersion","storageMethod","cookieDomain","shareSubdomains","theme","showPoweredBy","iconPosition","consentVersion"].forEach(function(e){void 0!==a[e]&&(r[e]=a[e])}),a.text&&"object"==typeof a.text&&Object.keys(a.text).forEach(function(e){r.text[e]=a.text[e]}),Array.isArray(a.cookieTypes)&&(r.cookieTypes=a.cookieTypes),Array.isArray(a.autoBlockPatterns)&&(r.autoBlockPatterns=a.autoBlockPatterns),a.regionRules&&(r.regionRules=a.regionRules)}window.__ccConsentVersion&&(r.consentVersion=window.__ccConsentVersion);var i=!!window.__ccGPC;window.__ccBlockRules&&Array.isArray(window.__ccBlockRules)&&window.__ccBlockRules.length&&(r.autoBlockPatterns=window.__ccBlockRules);var s={cc_consent:{vendor:"CookieFlame",category:"necessary",purpose:"Stores your consent preferences",expiry:"1 year"},cc_anon_id:{vendor:"CookieFlame",category:"necessary",purpose:"Anonymous ID for consent logging",expiry:"1 year"},cookieflame_dnt:{vendor:"CookieFlame",category:"necessary",purpose:"Do-not-track opt-out flag",expiry:"1 year"},PHPSESSID:{vendor:"PHP",category:"necessary",purpose:"Server-side session identifier",expiry:"Session"},wp_settings_:{vendor:"WordPress",category:"necessary",purpose:"Admin interface preferences",prefix:!0,expiry:"1 year"},"wp-settings-":{vendor:"WordPress",category:"necessary",purpose:"Admin interface preferences",prefix:!0,expiry:"1 year"},"wp-settings-time-":{vendor:"WordPress",category:"necessary",purpose:"Admin settings timestamp",prefix:!0,expiry:"1 year"},wordpress_logged_in_:{vendor:"WordPress",category:"necessary",purpose:"Login session",prefix:!0,expiry:"Session"},wordpress_sec_:{vendor:"WordPress",category:"necessary",purpose:"Secure login session",prefix:!0,expiry:"Session"},wordpress_test_cookie:{vendor:"WordPress",category:"necessary",purpose:"Checks cookie support",expiry:"Session"},wp_lang:{vendor:"WordPress",category:"necessary",purpose:"Language preference",expiry:"Session"},woocommerce_cart_hash:{vendor:"WooCommerce",category:"necessary",purpose:"Shopping cart contents",expiry:"Session"},woocommerce_items_in_cart:{vendor:"WooCommerce",category:"necessary",purpose:"Cart item count",expiry:"Session"},wp_woocommerce_session_:{vendor:"WooCommerce",category:"necessary",purpose:"Shopping session",prefix:!0,expiry:"2 days"},_ga:{vendor:"Google Analytics",category:"analytics",purpose:"Distinguishes visitors",expiry:"2 years"},_ga_:{vendor:"Google Analytics",category:"analytics",purpose:"Stores session state",prefix:!0,expiry:"2 years"},_gid:{vendor:"Google Analytics",category:"analytics",purpose:"Distinguishes visitors (24h)",expiry:"24 hours"},_gat:{vendor:"Google Analytics",category:"analytics",purpose:"Throttles request rate",expiry:"1 minute"},wp_wk_ga_untrack_:{vendor:"Google Analytics",category:"analytics",purpose:"GA opt-out flag",prefix:!0,expiry:"Persistent"},_gcl_au:{vendor:"Google Ads",category:"marketing",purpose:"Conversion linker",expiry:"90 days"},_gcl_aw:{vendor:"Google Ads",category:"marketing",purpose:"Stores ad click info",expiry:"90 days"},_gac_:{vendor:"Google Ads",category:"marketing",purpose:"Campaign information",prefix:!0,expiry:"90 days"},IDE:{vendor:"Google DoubleClick",category:"marketing",purpose:"Ad serving and frequency",expiry:"1 year"},test_cookie:{vendor:"Google DoubleClick",category:"marketing",purpose:"Checks cookie support",expiry:"15 minutes"},NID:{vendor:"Google",category:"preferences",purpose:"Stores preferences",expiry:"6 months"}},d=window.__ccCustomCookies||[];function u(e){for(var t=0;t<d.length;t++){var n=d[t];if("exact"===n.match&&e===n.name)return n;if("prefix"===n.match&&0===e.indexOf(n.name))return n;if("contains"===n.match&&-1!==e.indexOf(n.name))return n}var o=s[e];return o||(Object.keys(s).forEach(function(t){!o&&s[t].prefix&&0===e.indexOf(t)&&(o=s[t])}),o||null)}var l=null,p="none",f=null,m=null,g=!1,y=0;function v(e){return"string"!=typeof e&&(e=String(e)),e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}function h(e){if("localStorage"===r.storageMethod)try{return localStorage.getItem(e)}catch(e){return null}var t=document.cookie.match(new RegExp("(?:^|;\\s*)"+e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")+"=([^;]*)"));if(!t)return null;try{return decodeURIComponent(t[1])}catch(e){return null}}function w(e,t,n){if("localStorage"!==r.storageMethod){var o=new Date;o.setTime(o.getTime()+864e5*n);var c=e+"="+encodeURIComponent(t)+";expires="+o.toUTCString()+";path=/;SameSite=Lax;Secure";r.cookieDomain&&(c+=";domain="+r.cookieDomain),document.cookie=c}else try{localStorage.setItem(e,t)}catch(e){}}function b(){if(m)return m;var e=h("cc_anon_id");return e?(m=e,e):(w("cc_anon_id",m="cc_"+function(){if("undefined"!=typeof crypto&&"function"==typeof crypto.randomUUID)try{return crypto.randomUUID()}catch(e){}return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(e){var t=16*Math.random()|0;return("x"===e?t:3&t|8).toString(16)})}(),730),m)}function k(){var e={timestamp:l?l.ts:null,complianceMode:p,country:f,gpc:i,consentVersion:r.consentVersion};return r.cookieTypes.forEach(function(t){e[t.id]=l?!!l[t.id]:!!t.required}),e}function _(e,t){window.dispatchEvent(new CustomEvent(e,{detail:t||k()}))}function x(){window.dataLayer=window.dataLayer||[],window.dataLayer.push(arguments)}function E(e){var t={};r.cookieTypes.forEach(function(n){n.consentMode&&n.consentMode.forEach(function(o){t[o]=e[n.id]?"granted":"denied"})}),i&&(t.ad_storage="denied",t.ad_user_data="denied",t.ad_personalization="denied"),x("consent","update",t)}var A=new Map,S=!1;function L(e){var t={};return r.cookieTypes.forEach(function(n){n.tcfPurposes&&n.tcfPurposes.forEach(function(o){t[o]=!!e[n.id]})}),{tcString:"",tcfPolicyVersion:4,cmpId:r.cmpId,cmpVersion:r.cmpVersion,gdprApplies:"gdpr"===p,eventStatus:"useractioncomplete",cmpStatus:"loaded",listenerId:void 0,isServiceSpecific:!0,useNonStandardTexts:!1,publisherCC:"GB",purposeOneTreatment:!1,purpose:{consents:t,legitimateInterests:{}},vendor:{consents:{},legitimateInterests:{}},specialFeatureOptins:{},publisher:{consents:{},legitimateInterests:{},customPurpose:{consents:{},legitimateInterests:{}},restrictions:{}}}}function C(e,t,n,o){if("function"==typeof n)if("addEventListener"===e){var c=++y;if(A.set(c,n),l){var a=L(l);a.listenerId=c,n(a,!0)}}else"removeEventListener"===e?n({listenerId:o},A.delete(o)):"getTCData"===e?n(l?L(l):null,!!l):"ping"===e?n({gdprApplies:"gdpr"===p,cmpLoaded:S,cmpStatus:S?"loaded":"stub",displayStatus:"hidden",apiVersion:"2.2",cmpVersion:r.cmpVersion,cmpId:r.cmpId,gvlVersion:r.vendorListVersion,tcfPolicyVersion:4},!0):n(null,!1)}function B(e){A.forEach(function(t,n){var o=L(e);o.listenerId=n;try{t(o,!0)}catch(e){}})}function I(e){if(!e)return null;for(var t=e.toLowerCase(),n=0;n<r.autoBlockPatterns.length;n++){var o=r.autoBlockPatterns[n];if(o.pattern instanceof RegExp){if(o.pattern.test(t))return o.category}else if(-1!==t.indexOf(o.pattern.toLowerCase()))return o.category}return null}function T(e){document.querySelectorAll('script[type="text/plain"][data-cc]').forEach(function(t){var n=(t.getAttribute("data-cc")||"").toLowerCase();if(e[n]&&!t.getAttribute("data-cc-activated")){t.setAttribute("data-cc-activated","1");var o=document.createElement("script");o.isWPRocket=!0,Array.from(t.attributes).forEach(function(e){"type"!==e.name&&"data-cc"!==e.name&&"data-cc-activated"!==e.name&&"data-cc-auto"!==e.name&&o.setAttribute(e.name,e.value)}),!t.src&&t.textContent&&(o.textContent=t.textContent),t.parentNode.insertBefore(o,t.nextSibling),t.parentNode.removeChild(t)}}),["img","iframe","link"].forEach(function(t){document.querySelectorAll(t+"[data-cc][data-cc-src]").forEach(function(n){var o=(n.getAttribute("data-cc")||"").toLowerCase();e[o]&&!n.getAttribute("data-cc-activated")&&(n.setAttribute("data-cc-activated","1"),"link"===t?n.href=n.getAttribute("data-cc-src"):n.src=n.getAttribute("data-cc-src"))})})}var O=[{pattern:"youtube.com",category:"marketing"},{pattern:"youtube-nocookie.com",category:"marketing"},{pattern:"youtu.be",category:"marketing"},{pattern:"player.vimeo.com",category:"marketing"},{pattern:"vimeo.com",category:"marketing"},{pattern:"dailymotion.com",category:"marketing"},{pattern:"open.spotify.com",category:"preferences"},{pattern:"soundcloud.com",category:"preferences"},{pattern:"google.com/maps",category:"preferences"},{pattern:"maps.google.com",category:"preferences"},{pattern:"facebook.com/plugins",category:"marketing"},{pattern:"instagram.com",category:"marketing"},{pattern:"tiktok.com/embed",category:"marketing"},{pattern:"twitter.com",category:"marketing"},{pattern:"x.com",category:"marketing"}];function D(){return!(!document.body||!(document.body.classList.contains("elementor-editor-active")||document.body.classList.contains("fl-builder-edit")||document.body.classList.contains("et-fb-root-ancestor")))}var P=[],M=0,R=null,q=!1;function V(){if(R&&P.length){var e=P;P=[];try{R(e)}catch(e){}}}function N(){0!==P.length&&(2!==M?1!==M&&3!==M&&(M=1,function(){var e=window.__ccConfig&&window.__ccConfig.facadesUrl||null;if(!e)return void(M=3);var t=document.createElement("script");t.src=e,t.async=!0,t.onload=function(){M=2,V()},t.onerror=function(){M=3},(document.head||document.documentElement).appendChild(t)}()):V())}function U(e){var t=e.src||e.getAttribute("data-src")||"";if(t&&!e.getAttribute("data-cc-facade")&&!D()){var n=function(e){if(!e)return null;for(var t=e.toLowerCase(),n=0;n<O.length;n++)if(-1!==t.indexOf(O[n].pattern))return O[n].category;return null}(t);if(n){var o=l||Z();o&&o[n]||(e.setAttribute("data-cc-facade","1"),e.setAttribute("data-cc-iframe-cat",n),e.setAttribute("data-cc-original-src",t),e.removeAttribute("src"),e.style.display="none",P.push({type:"iframe",node:e,category:n,src:t}),N())}}}function G(e){if(!e.getAttribute("data-cc-facade")&&!D()){var t=e.getAttribute("data-settings");if(t){var n;try{n=JSON.parse(t)}catch(e){return}var o=n.youtube_url||n.vimeo_url||"";if(o){var c=o.toLowerCase(),r=null;if((-1!==c.indexOf("youtube")||-1!==c.indexOf("youtu.be")||-1!==c.indexOf("vimeo")||-1!==c.indexOf("dailymotion"))&&(r="marketing"),r&&(!l||!l[r])){if(!l){var a=Z();if(a&&a[r])return}e.setAttribute("data-cc-facade","1"),q=!0,P.push({type:"elementor",node:e,category:r,url:o}),N()}}}}}function j(){for(var e=document.querySelectorAll("iframe[src]"),t=0;t<e.length;t++)U(e[t]);for(var n=document.querySelectorAll(".elementor-widget-video"),o=0;o<n.length;o++)G(n[o]);for(var c=document.querySelectorAll(".wp-block-embed__wrapper iframe[src]"),r=0;r<c.length;r++)U(c[r])}function J(){new MutationObserver(function(e){e.forEach(function(e){e.addedNodes.forEach(function(e){if(1===e.nodeType){if("IFRAME"===e.tagName&&U(e),e.querySelectorAll){for(var t=e.querySelectorAll("iframe[src]"),n=0;n<t.length;n++)U(t[n]);for(var o=e.querySelectorAll(".elementor-widget-video"),c=0;c<o.length;c++)G(o[c])}e.classList&&e.classList.contains("elementor-widget-video")&&G(e)}})})}).observe(document.documentElement,{childList:!0,subtree:!0})}function W(){for(var e=document.querySelectorAll("iframe[src]"),t=0;t<e.length;t++){var n=e[t];if(!n.getAttribute("data-cc-facade")){var o=n.src||"";if(o)for(var c=0;c<O.length;c++)if(-1!==o.indexOf(O[c].pattern)){n.src=o;break}}}}function H(e,t){r.cookieTypes.forEach(function(n){var o=!!e[n.id];if((t?!!t[n.id]:null)!==o||null===t)if(o&&"function"==typeof n.onAccept)try{n.onAccept()}catch(e){console.warn("[CookieConsent] onAccept error for "+n.id,e)}else if(!o&&"function"==typeof n.onReject)try{n.onReject()}catch(e){console.warn("[CookieConsent] onReject error for "+n.id,e)}})}function F(e,t){var n=l;if(l=e,w(r.cookieName,JSON.stringify(e),r.cookieExpiry),E(e),q&&t)for(var o=document.querySelectorAll(".cc-iframe-facade[data-cc-elementor-widget]"),a=0;a<o.length;a++){var s=o[a].getAttribute("data-cc-iframe-cat");if(s&&e[s])return void window.location.reload()}K(e,n),T(e),function(e){for(var t=document.querySelectorAll(".cc-iframe-facade"),n=0;n<t.length;n++)if(!t[n].getAttribute("data-cc-elementor-widget")&&e[t[n].getAttribute("data-cc-iframe-cat")]){var o=t[n].nextElementSibling;if(o&&"IFRAME"===o.tagName&&o.getAttribute("data-cc-facade")){var c=o.getAttribute("data-cc-original-src");c&&(o.src=c,o.style.display="",o.removeAttribute("data-cc-facade"))}t[n].parentNode.removeChild(t[n])}}(e),t&&"auto_grant_non_eu"!==t&&"ccpa_auto_grant"!==t&&setTimeout(W,300),H(e,n),$(e),r.tcfEnabled&&B(e),t&&function(e,t){if(r.logEndpoint){var n={};r.cookieTypes.forEach(function(e){n[e.id]=!!t[e.id]});var o={anonymousId:b(),timestamp:(new Date).toISOString(),action:e,consent:n,complianceMode:p,country:f,url:location.href,userAgent:navigator.userAgent,tcfEnabled:r.tcfEnabled,gpc:i,consentVersion:r.consentVersion,version:c};try{var a=JSON.stringify(o);navigator.sendBeacon?navigator.sendBeacon(r.logEndpoint,new Blob([a],{type:"application/json"})):fetch(r.logEndpoint,{method:"POST",body:a,headers:{"Content-Type":"application/json"},keepalive:!0})}catch(e){}}}(t,e)}function $(e){r.cookieTypes.forEach(function(t){if(!t.required){var n=document.getElementById("cc-cb-"+t.id);n&&(n.checked=!!e[t.id])}});var t=document.getElementById("cc-cats"),n=document.getElementById("cc-details"),o=document.getElementById("cc-pref-buttons");t&&t.classList.remove("cc-open"),n&&(n.textContent=r.text.showDetailsButton),o&&o.classList.remove("cc-open")}function Z(){var e=h(r.cookieName);if(!e)return null;try{var t=JSON.parse(e);return!t||"object"!=typeof t||Array.isArray(t)||(!t.ts||isNaN(new Date(t.ts).getTime())||(Date.now()-new Date(t.ts).getTime())/864e5>r.reconsentDays||r.consentVersion&&t.cv!==r.consentVersion)?null:t}catch(e){return null}}function Y(){var e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:f};return r.cookieTypes.forEach(function(t){e[t.id]=!0}),e}function z(){var e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:f};return r.cookieTypes.forEach(function(t){e[t.id]=!!t.required}),e}function K(e,t){if(t){var n=[];if(r.cookieTypes.forEach(function(o){o.required||t[o.id]&&!e[o.id]&&n.push(o.id)}),n.length)document.cookie.split(";").map(function(e){return e.trim().split("=")[0]}).filter(Boolean).forEach(function(e){var t=u(e);if(t&&-1!==n.indexOf(t.category)){var o=location.hostname,c="."+o;document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/",document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT",document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+c,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+o,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; Secure",r.cookieDomain&&(document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+r.cookieDomain,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+r.cookieDomain+"; Secure");var a=o.split(".");if(a.length>2){var i="."+a.slice(1).join(".");document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+i,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+i+"; Secure"}}})}}function Q(e){return(f=e?e.toUpperCase():null)?r.regionRules.gdpr&&-1!==r.regionRules.gdpr.indexOf(f)?"gdpr":r.regionRules.ccpa&&-1!==r.regionRules.ccpa.indexOf(f)?"ccpa":"none":"gdpr"}function X(e){if(window.__ccGeo)return e(Q(window.__ccGeo));r.geoApi?fetch(r.geoApi).then(function(e){return e.json()}).then(function(t){var n=t.country_code||t.country||"";n?e(Q(n)):ee(e)}).catch(function(){ee(e)}):ee(e)}function ee(e){var t="";try{t=Intl.DateTimeFormat().resolvedOptions().timeZone||""}catch(e){}return 0===t.indexOf("Europe/")||"Atlantic/Reykjavik"===t?(f=null,e("gdpr")):0===t.indexOf("US/")||0===t.indexOf("America/")&&["New_York","Chicago","Denver","Los_Angeles","Phoenix","Anchorage","Boise","Detroit","Indianapolis","Louisville","Menominee","Nome","Adak","Juneau","Sitka","Yakutat","Metlakatla","Kentucky","Indiana","North_Dakota"].some(function(e){return-1!==t.indexOf(e)})||"Pacific/Honolulu"===t?(f="US",e("ccpa")):(f=null,void e("gdpr"))}function te(){"dark"===r.theme&&document.documentElement.classList.add("cc-dark"),"right"===r.iconPosition&&document.documentElement.classList.add("cc-icon-right")}function ne(){var e=r.text,t=document.createElement("div");t.id="cc-overlay",document.body.appendChild(t);var n=document.createElement("div");n.id="cc-banner",n.setAttribute("role","dialog"),n.setAttribute("aria-modal","true"),n.setAttribute("aria-label","Cookie consent"),n.setAttribute("tabindex","-1");var o=r.cookieTypes.map(function(t){var n=t.required?' <span class="cc-always-on">'+v(e.alwaysOnLabel)+"</span>":"";return'<div class="cc-cat"><div><div class="cc-cat-label">'+v(t.name)+n+'</div><div class="cc-cat-desc">'+v(t.description||"")+'</div></div><label class="cc-toggle"><input type="checkbox" id="cc-cb-'+v(t.id)+'" aria-label="'+v(t.name)+'"'+(t.required||t.defaultValue?" checked":"")+(t.required?" disabled":"")+'><span class="cc-slider"></span></label></div>'}).join("");n.innerHTML='<div class="cc-inner"><p class="cc-title">'+v(e.title)+'</p><p class="cc-text">'+v(e.description)+' <a href="'+v(r.privacyUrl)+'">Privacy Policy</a></p><div class="cc-buttons"><button class="cc-btn cc-btn-accept" id="cc-accept">'+v(e.acceptAllButton)+'</button><button class="cc-btn cc-btn-details" id="cc-details" aria-expanded="false">'+v(e.showDetailsButton)+'</button></div><div class="cc-categories" id="cc-cats">'+o+'</div><div class="cc-pref-buttons" id="cc-pref-buttons"><button class="cc-btn cc-btn-save" id="cc-save">'+v(e.saveButton)+'</button><button class="cc-btn cc-btn-decline" id="cc-decline">'+v(e.declineAllButton)+"</button></div></div>"+(r.showPoweredBy?'<div class="cc-powered"><a href="https://www.cookieflame.com" target="_blank" rel="noopener">Powered by CookieFlame</a></div>':""),document.body.appendChild(n);var c=document.createElement("button");c.id="cc-icon",c.setAttribute("aria-label","Cookie settings"),c.innerHTML='<svg width="24" height="24" viewBox="0 0 38 38" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.1 1.16c-.06-.42-.38-.77-.8-.83A11.8 11.8 0 0 0 13.28 1.2L7.5 4.3A11.8 11.8 0 0 0 3.95 7.98L1.09 13.9A11.8 11.8 0 0 0 .38 18.96l1.13 6.47a11.8 11.8 0 0 0 3.53 4.99l4.71 4.56a11.8 11.8 0 0 0 4.59 2.24l6.48.91a11.8 11.8 0 0 0 5.52-.89l5.78-3.09a11.8 11.8 0 0 0 3.55-3.69l2.87-5.9a11.8 11.8 0 0 0 .71-5.08c-.07-.41-.42-.73-.83-.79a14.8 14.8 0 0 1-8.16-7.61c-.14-.59-.63-1.05-1.23-1.14A14.8 14.8 0 0 1 19.1 1.16ZM15.25 10.25a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Zm-5 15a2.5 2.5 0 1 1 5 0 2.5 2.5 0 0 1-5 0Zm17.5-5a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Z" fill="currentColor"/></svg>',document.body.appendChild(c),document.getElementById("cc-accept").addEventListener("click",se),document.getElementById("cc-decline").addEventListener("click",de),document.getElementById("cc-save").addEventListener("click",ue),document.getElementById("cc-details").addEventListener("click",le),c.addEventListener("click",function(){re("gdpr")})}var oe=null;function ce(e){if("Tab"===e.key){var t=document.getElementById("cc-banner")||document.getElementById("cc-ccpa-banner");if(t&&t.classList.contains("cc-show")){for(var n=[],o=t.querySelectorAll('button, a[href], input:not([disabled]), select, textarea, [tabindex]:not([tabindex="-1"])'),c=0;c<o.length;c++){for(var r=o[c],a=!1,i=r.parentElement;i&&i!==t;){if(i.style&&"none"===window.getComputedStyle(i).display){a=!0;break}i=i.parentElement}a||n.push(r)}if(0!==n.length){var s=n[0],d=n[n.length-1];e.shiftKey?document.activeElement===s&&(e.preventDefault(),d.focus()):document.activeElement===d&&(e.preventDefault(),s.focus())}}}}function re(e){"ccpa"!==e?(oe=document.activeElement,requestAnimationFrame(function(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");if(e&&e.classList.add("cc-show"),t){t.classList.add("cc-show");var o=t.querySelector(".cc-btn-accept");o&&o.focus(),document.addEventListener("keydown",ce)}n&&n.classList.remove("cc-show")})):requestAnimationFrame(function(){var e=document.getElementById("cc-ccpa-banner");e&&(e.classList.add("cc-show"),oe=document.activeElement,e.focus(),document.addEventListener("keydown",ce))})}function ae(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");if(e&&e.classList.remove("cc-show"),t&&t.classList.remove("cc-show"),n&&"gdpr"===p&&n.classList.add("cc-show"),document.removeEventListener("keydown",ce),oe&&"function"==typeof oe.focus)try{oe.focus()}catch(e){}oe=null}function ie(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");e&&e.classList.remove("cc-show"),t&&t.classList.remove("cc-show"),n&&n.classList.remove("cc-show"),document.removeEventListener("keydown",ce)}function se(){F(Y(),"accept_all"),ae(),_("cc:accept-all"),_("cc:update")}function de(){F(z(),"decline_all"),ae(),_("cc:decline-all"),_("cc:update")}function ue(){var e;F((e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:f},r.cookieTypes.forEach(function(t){if(t.required)e[t.id]=!0;else{var n=document.getElementById("cc-cb-"+t.id);e[t.id]=!!n&&n.checked}}),e),"save_preferences"),ae(),_("cc:save"),_("cc:update")}function le(){var e=document.getElementById("cc-cats"),t=document.getElementById("cc-details"),n=document.getElementById("cc-pref-buttons"),o=e.classList.toggle("cc-open");t.textContent=o?r.text.hideDetailsButton:r.text.showDetailsButton,t.setAttribute("aria-expanded",o?"true":"false"),n&&(o?n.classList.add("cc-open"):n.classList.remove("cc-open"))}function pe(){var e=document.getElementById("cc-declaration");if(e){for(var t=k(),n={},o=document.cookie.split(";").map(function(e){return e.trim().split("=")[0]}).filter(Boolean),c=0;c<o.length;c++){var a=u(o[c]);a&&(n[o[c]]={name:o[c],vendor:a.vendor,category:a.category,purpose:a.purpose,expiry:a.expiry||"",active:!0})}for(var i=0;i<d.length;i++){var s=d[i];s.name&&s.vendor&&s.category&&"unclassified"!==s.category&&!n[s.name]&&(n[s.name]={name:s.name,vendor:s.vendor,category:s.category,purpose:s.purpose||"",expiry:s.expiry||"",active:!1})}for(var l=0;l<o.length;l++)n[o[l]]||(n[o[l]]={name:o[l],vendor:"",category:"unclassified",purpose:"",expiry:"",active:!0});var p=["necessary","preferences","analytics","marketing"],f={};r.cookieTypes.forEach(function(e){f[e.id]=e.name});var m={};p.forEach(function(e){m[e]=[]}),Object.keys(n).forEach(function(e){var t=n[e],o=t.category;m[o]||(m[o]=[]),m[o].push(t)}),p.forEach(function(e){m[e]&&m[e].sort(function(e,t){return e.name.localeCompare(t.name)})});var g="<div>";if(t.timestamp){var y=new Date(t.timestamp);g+="<p>"+v("Your consent was last updated on "+y.toLocaleDateString(void 0,{year:"numeric",month:"long",day:"numeric"})+" at "+y.toLocaleTimeString(void 0,{hour:"2-digit",minute:"2-digit"})+".")+"</p>"}else g+="<p>"+v("You have not yet made a cookie preference choice on this site.")+"</p>";for(var h=0;h<p.length;h++){var w=p[h],b=m[w];if(b&&b.length){var _,x=f[w]||w,E=r.cookieTypes.filter(function(e){return e.id===w})[0],A=E&&E.description||"";_=!!E&&E.required?"Always active":t[w]?"Active":"Inactive",g+="<div>",g+="<p><b>"+v(x)+"</b> ("+v(_)+")</p>",A&&(g+="<p>"+v(A)+"</p>"),g+="<table><thead><tr>",g+="<th>Name</th><th>Provider</th><th>Purpose</th><th>Expiry</th>",g+="</tr></thead><tbody>";for(var S=0;S<b.length;S++){var L=b[S];g+="<tr>",g+="<td><code>"+v(L.name)+"</code></td>",g+="<td>"+v(L.vendor||"Unknown")+"</td>",g+="<td>"+v(L.purpose||"Not specified")+"</td>",g+="<td>"+v(L.expiry||"—")+"</td>",g+="</tr>"}g+="</tbody></table></div>"}}g+="</div>",e.innerHTML=g}}window.__ccInternal={getResourceSnapshot:ye,scriptLoaded:function(e){for(var t=ge||ye(),n=0;n<t.allUrls.length;n++)if(-1!==t.allUrls[n].indexOf(e))return!0;return!1},scriptLoadedUrls:function(e){for(var t=ge||ye(),n=[],o=0;o<t.allUrls.length;o++)-1!==t.allUrls[o].indexOf(e)&&n.push(t.allUrls[o]);return n},hasCookie:function(e){return document.cookie.split(";").some(function(t){return t.trim().split("=")[0]===e})},hasCookiePrefix:function(e){return document.cookie.split(";").some(function(t){return 0===t.trim().split("=")[0].indexOf(e)})},setResourceSnapshot:function(e){ge=e},visitorCookies:function(e){for(var t=ye().thirdPartyDomains,n={},o=0;o<e.length;o++)we(e[o],t,he(e[o]))&&(n[e[o]]=!0);return n},facadeBridge:{getConfig:function(){return r},getConsentState:function(){return l},loadConsent:Z,saveConsent:function(e,t){F(e,t)},hideAllBanners:ie,registerRenderer:function(e){R=e,M=2,V()}}},window.CookieConsent={getState:k,getConfig:function(){return r},getComplianceMode:function(){return p},getCountry:function(){return f},show:function(){re("gdpr")},acceptAll:se,declineAll:de,getGPC:function(){return i},getConsentVersion:function(){return r.consentVersion},on:function(e,t){window.addEventListener(e,t)},off:function(e,t){window.removeEventListener(e,t)},VERSION:c},window.addEventListener("cc:ready",pe),window.addEventListener("cc:update",pe),function(){if(!window.__ccDefaultsSet){var e={wait_for_update:500};r.cookieTypes.forEach(function(t){t.consentMode&&t.consentMode.forEach(function(n){e[n]=t.required?"granted":"denied"})}),x("consent","default",e)}}(),function(){if(r.tcfEnabled){var e=window.__tcfapi&&window.__tcfapi.queue?window.__tcfapi.queue:[];window.__tcfapi=C,e.forEach(function(e){C.apply(null,e)}),S=!0,window===window.top&&window.addEventListener("message",function(e){var t;try{t="string"==typeof e.data?JSON.parse(e.data):e.data}catch(e){return}if(t&&t.__tcfapiCall){var n=t.__tcfapiCall;C(n.command,n.version,function(t,o){var c={__tcfapiReturn:{returnValue:t,success:o,callId:n.callId}};e.source&&e.source.postMessage("string"==typeof e.data?JSON.stringify(c):c,"*")},n.parameter)}})}}();var fe=Z();function me(){var e=window.__ccDiscovery&&window.__ccDiscovery.active;if(!e&&(window.__ccDNT||document.cookie.split(";").some(function(e){return 0===e.trim().indexOf("cookieflame_dnt=")})))return E(l=z()),K(l,Y()),J(),j(),p="dnt",te(),ne(),ie(),$(l),_("cc:ready"),void pe();if(e){E(l=Y()),T(l),J(),H(l,null),r.tcfEnabled&&B(l),window.dataLayer=window.dataLayer||[];for(var t=["consent_accepted_analytics","consent_accepted_marketing","consent_accepted_preferences","consent_accepted_necessary","consent_update","consent_given","cookie_consent_given","cookie_consent_update","consent_accepted"],n=0;n<t.length;n++)window.dataLayer.push({event:t[n]});return p="discovery",te(),ne(),ie(),_("cc:ready"),_("cc:update"),void pe()}var o=Z();if(o)if(i&&(o.marketing=!1),l=o,E(o),T(o),J(),j(),H(o,null),r.tcfEnabled&&B(o),te(),ne(),ie(),$(o),o.cc){if("gdpr"===(p=Q(o.cc))){var c=document.getElementById("cc-icon");c&&c.classList.add("cc-show")}_("cc:ready"),pe()}else X(function(e){if(p=e,"gdpr"===e){var t=document.getElementById("cc-icon");t&&t.classList.add("cc-show")}_("cc:ready"),pe()});else X(function(e){if(p=e,"none"===e)return J(),F(Y(),"auto_grant_non_eu"),_("cc:ready"),_("cc:update"),void pe();if("ccpa"===e){if(J(),i){var t=Y();t.marketing=!1,F(t,"ccpa_gpc_optout")}else F(Y(),"ccpa_auto_grant");return te(),n=r.text,(o=document.createElement("div")).id="cc-ccpa-banner",o.setAttribute("role","dialog"),o.setAttribute("aria-modal","true"),o.setAttribute("aria-label","Privacy notice"),o.setAttribute("tabindex","-1"),o.innerHTML='<div class="cc-ccpa-inner"><div class="cc-ccpa-text"><p>'+v(n.ccpaDescription)+'</p></div><div class="cc-ccpa-actions"><a href="'+v(r.ccpaUrl)+'" class="cc-ccpa-link">'+v(n.ccpaDnsmpiLink)+'</a><button class="cc-btn cc-btn-accept" id="cc-ccpa-ok">'+v(n.ccpaAcceptButton)+"</button></div></div>",document.body.appendChild(o),document.getElementById("cc-ccpa-ok").addEventListener("click",function(){F(Y(),"ccpa_acknowledge"),o.classList.remove("cc-show"),_("cc:update")}),re("ccpa"),_("cc:ready"),_("cc:update"),void pe()}var n,o;te(),J(),j(),ne(),re("gdpr"),_("cc:ready"),pe()})}fe&&(l=fe,E(fe)),function(){if(!g&&r.autoBlockPatterns&&r.autoBlockPatterns.length){g=!0;var e=document.createElement.bind(document),t=Object.getOwnPropertyDescriptor(HTMLScriptElement.prototype,"src");t&&t.set&&(document.createElement=function(){var n=e.apply(document,arguments);if("script"!==(arguments[0]||"").toLowerCase())return n;function o(e,t){if(t&&"string"==typeof t&&!e.getAttribute("data-cc")&&!e.getAttribute("data-cc-auto")&&-1===t.indexOf("cookieconsent")){var n=I(t);!n||l&&l[n]||(e.type="text/plain",e.setAttribute("data-cc",n),e.setAttribute("data-cc-auto","1"))}}Object.defineProperty(n,"src",{configurable:!0,enumerable:!0,get:function(){return t.get.call(this)},set:function(e){return o(this,e),t.set.call(this,e)}});var c=n.setAttribute.bind(n);return n.setAttribute=function(e,t){return"src"===e.toLowerCase()&&o(n,t),c(e,t)},n}),new MutationObserver(function(e){e.forEach(function(e){e.addedNodes.forEach(function(e){if(1===e.nodeType){var t=[];"SCRIPT"===e.tagName&&t.push(e),e.querySelectorAll&&e.querySelectorAll("script[src]").forEach(function(e){t.push(e)}),t.forEach(function(e){if(!(e.getAttribute("data-cc-auto")||e.getAttribute("data-cc")||e.src&&-1!==e.src.indexOf("cookieconsent"))){var t=I(e.src);t&&(l&&l[t]||(e.type="text/plain",e.setAttribute("data-cc",t),e.setAttribute("data-cc-auto","1")))}})}})})}).observe(document.documentElement,{childList:!0,subtree:!0})}}(),"loading"===document.readyState?document.addEventListener("DOMContentLoaded",me):me();var ge=null;function ye(){for(var e=[],t=[],n=[],o={},c={},r=document.querySelectorAll("script[src]"),a=0;a<r.length;a++)r[a].src&&e.push(r[a].src);for(var i=document.querySelectorAll("iframe[src]"),s=0;s<i.length;s++)i[s].src&&e.push(i[s].src);if(window.performance&&performance.getEntriesByType)for(var d=performance.getEntriesByType("resource"),u=0;u<d.length;u++){var l=d[u].name||"";if(l){-1===e.indexOf(l)&&e.push(l);var p=d[u].initiatorType||"";if("script"===p||"iframe"===p||"xmlhttprequest"===p||"fetch"===p||-1!==l.indexOf(".js"))try{var f=new URL(l),m=f.hostname;if(m===location.hostname||m==="www."+location.hostname||"www."+m===location.hostname){var g=f.pathname.match(/\/wp-content\/plugins\/([^\/]+)\//);g&&!c[g[1]]&&(c[g[1]]=!0,n.push({slug:g[1],url:l}))}else o[m]||(o[m]=!0,t.push(m))}catch(e){}}}return{allUrls:e,thirdPartyDomains:t,pluginScripts:n}}var ve={};function he(e){var t={set_by:"",set_by_plugin:""},n=window.__ccCookieSetters;if(!n||!Object.prototype.hasOwnProperty.call(n,e)||!n[e])return t;try{var o=new URL(String(n[e]).replace(/:\d+(:\d+)?$/,""));if(/^(chrome-extension|moz-extension|safari-web-extension|safari-extension):$/.test(o.protocol))return t.set_by="browser-extension",t;var c=o.hostname;if(c===location.hostname||c==="www."+location.hostname||"www."+c===location.hostname){t.set_by="first-party";var r=o.pathname.match(/\/wp-content\/(?:plugins|themes)\/([^\/]+)\//);r&&(t.set_by_plugin=r[1].toLowerCase())}else t.set_by=c.toLowerCase()}catch(e){}return t}function we(e,t,n){if("browser-extension"===n.set_by)return!0;var o=window.__ccVisitorCookieRules;if(!o||!o.tools)return!1;if(o.allow&&-1!==o.allow.indexOf(e))return!1;if(n.set_by)return!1;for(var c=0;c<o.tools.length;c++){for(var r=o.tools[c],a=-1!==(r.n||[]).indexOf(e),i=0;!a&&i<(r.p||[]).length;i++)0===e.indexOf(r.p[i])&&(a=!0);if(a){for(var s=0;s<t.length;s++)for(var d=0;d<(r.d||[]).length;d++){var u=String(t[s]).toLowerCase(),l=r.d[d];if(u===l||u.slice(-l.length-1)==="."+l)return!1}return!0}}return!1}function be(){var t=window.__ccClassified||[],n=window.__ccUnclassified||[],o=window.__ccBeaconUrl;if(o){var c,r={};for(c=0;c<t.length;c++)r[t[c]]=!0;for(c=0;c<n.length;c++)r[n[c]]=!0;var a=Object.keys(ve);for(c=0;c<a.length;c++)r[a[c]]=!0;var i=Object.keys(s);for(c=0;c<i.length;c++)r[i[c]]=!0;var d={},u=[],l=document.cookie.split(";");for(c=0;c<l.length;c++){var p=l[c].indexOf("="),f=(p>-1?l[c].substring(0,p):l[c]).trim(),m=p>-1?l[c].substring(p+1).trim():"";f&&(u.push(f),d[f]=m)}var g=[];for(c=0;c<u.length;c++)if(!r[u[c]]){for(var y=!1,v=Object.keys(s),h=0;h<v.length;h++)if(s[v[h]].prefix&&0===u[c].indexOf(v[h])){y=!0;break}y||g.push(u[c])}if(0!==g.length){for(var w=ye(),b=w.thirdPartyDomains,k=[],_=0;_<w.pluginScripts.length;_++)k.push(w.pluginScripts[_].slug);for(var x=location.pathname,E=0;E<g.length;E++){var A=g[E],S=!!e[A]&&!r[A],L=ke(d[A]||""),C=he(A);if(!we(A,b,C)||window.__ccDiscovery&&window.__ccDiscovery.active){var B=JSON.stringify({cookie_name:A,script_domains:b,plugin_scripts:k,page_path:x,pre_existing:S,value_shape:L,set_by:C.set_by,set_by_plugin:C.set_by_plugin});ve[A]=!0,navigator.sendBeacon&&navigator.sendBeacon(o,new Blob([B],{type:"application/json"}))}else ve[A]=!0}}}}function ke(e){if(!e||0===e.length)return"empty";if("true"===e||"false"===e||"1"===e||"0"===e)return"boolean";if(/^\d+$/.test(e))return e.length>12?"long-numeric":"numeric";if(/^\d+\.\d+$/.test(e))return"decimal";if(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(e))return"uuid";if(/^[A-Za-z0-9+\/]{20,}={0,2}$/.test(e))return"base64";if(/^(GA\d+\.\d+\.\d+\.\d+|G-[A-Z0-9]+)/.test(e))return"ga-id";try{if("object"==typeof JSON.parse(decodeURIComponent(e)))return"json"}catch(e){}return/^[a-f0-9]{24,}$/i.test(e)?"hex-id":/^\d{10,13}$/.test(e)?"timestamp":e.length<=20?"short-string":e.length<=100?"medium-string":"long-string"}setTimeout(be,3e3),setTimeout(be,15e3),setTimeout(be,45e3),window.addEventListener("cc:update",function(){setTimeout(be,3e3)}),window.addEventListener("pagehide",be)}();
+!function(){"use strict";var e={};try{for(var t=document.cookie.split(";"),n=0;n<t.length;n++){var c=t[n].trim().split("=")[0];c&&(e[c]=!0)}}catch(e){}var o="5.4.0",r={cookieName:"cc_consent",cookieExpiry:365,privacyUrl:"/privacy-policy",geoApi:"",logEndpoint:"",reconsentDays:365,cspSafe:!1,tcfEnabled:!1,cmpId:1,cmpVersion:1,vendorListVersion:2,storageMethod:"cookie",cookieDomain:"",shareSubdomains:!1,theme:"light",showPoweredBy:!1,iconPosition:"left",consentVersion:"",rejectFirstScreen:!1,visitorLogins:!1,autoBlockPatterns:[{pattern:"googletagmanager.com/gtag",category:"analytics"},{pattern:"google-analytics.com",category:"analytics"},{pattern:"analytics.google.com",category:"analytics"},{pattern:"hotjar.com",category:"analytics"},{pattern:"mixpanel.com",category:"analytics"},{pattern:"segment.com/analytics",category:"analytics"},{pattern:"segment.io",category:"analytics"},{pattern:"clarity.ms",category:"analytics"},{pattern:"plausible.io",category:"analytics"},{pattern:"js.hs-analytics.net",category:"analytics"},{pattern:"connect.facebook.net",category:"marketing"},{pattern:"snap.licdn.com",category:"marketing"},{pattern:"ads.linkedin.com",category:"marketing"},{pattern:"googleads.g.doubleclick.net",category:"marketing"},{pattern:"googlesyndication.com",category:"marketing"},{pattern:"googleadservices.com",category:"marketing"},{pattern:"ads-twitter.com",category:"marketing"},{pattern:"analytics.tiktok.com",category:"marketing"},{pattern:"pintrk",category:"marketing"},{pattern:"s.pinimg.com/ct",category:"marketing"},{pattern:"widget.intercom.io",category:"preferences"},{pattern:"js.intercomcdn.com",category:"preferences"}],regionRules:{gdpr:["AT","BE","BG","CY","CZ","DE","DK","EE","ES","FI","FR","GR","HR","HU","IE","IT","LT","LU","LV","MT","NL","PL","PT","RO","SE","SI","SK","IS","LI","NO","GB","GG","JE","IM","CH","BR","ZA"],ccpa:["US"]},text:{title:"We value your privacy",description:"We use cookies to improve your experience, analyse traffic and personalise content. You can choose which categories to allow.",acceptAllButton:"Accept All",rejectAllButton:"Decline All",declineAllButton:"Decline All",saveButton:"Save Preferences",showDetailsButton:"Manage preferences",hideDetailsButton:"Hide preferences",alwaysOnLabel:"(always on)",ccpaTitle:"Your Privacy Choices",ccpaDescription:"We use cookies and similar technologies. Under US state privacy laws, such as California's, you have the right to opt out of the sale or sharing of your personal information.",ccpaAcceptButton:"OK",ccpaDnsmpiLink:"Do Not Sell or Share My Personal Information",ccpaGpcNotice:"Your browser asked us not to sell or share your information. We're honouring that.",ccpaChoiceTitle:"Do Not Sell or Share My Personal Information",ccpaChoiceText:"Information about your visit may be used by advertising partners whose cookies run on this site. Under US state privacy laws that can count as selling or sharing. You can opt out in this browser.",ccpaOptOutButton:"Opt out",ccpaCancelButton:"Cancel",ccpaOptedOut:"You've opted out of the sale or sharing of your personal information in this browser.",ccpaGpcOptedOut:"Your browser's Global Privacy Control signal asked us not to sell or share your information, so you're opted out in this browser.",ccpaDoneButton:"Done",ccpaOptInButton:"Allow selling or sharing",ccpaOptInGpcNote:"Allowing it overrides your browser's Global Privacy Control signal on this site only.",ccpaMoreSettings:"More cookie settings",gpcPrefNote:"Your browser's Global Privacy Control signal is on, so Marketing stays off unless you switch it on here.",changePreferences:"Change cookie preferences",loginCookiesTitle:"If you log in",loginCookiesIntro:"These cookies are only set if you log in to an account on this site. They keep you signed in and remember your account settings. They're needed for logging in to work, so they don't ask for your consent."},cookieTypes:[{id:"necessary",name:"Necessary",description:"Required for the site to function. Cannot be disabled.",required:!0,consentMode:["security_storage","functionality_storage"],tcfPurposes:[1],onAccept:function(){}},{id:"preferences",name:"Preferences",description:"Remember your settings and personalisation choices.",required:!1,defaultValue:!1,consentMode:["functionality_storage","personalization_storage"],tcfPurposes:[2,3],onAccept:function(){},onReject:function(){}},{id:"analytics",name:"Analytics",description:"Help us understand how visitors use the site.",required:!1,defaultValue:!1,consentMode:["analytics_storage"],tcfPurposes:[4,5,6],onAccept:function(){},onReject:function(){}},{id:"marketing",name:"Marketing",description:"Used to deliver relevant ads and track campaigns.",required:!1,defaultValue:!1,consentMode:["ad_storage","ad_user_data","ad_personalization"],tcfPurposes:[7,8,9,10],onAccept:function(){},onReject:function(){}}]};if(window.__ccConfig&&"object"==typeof window.__ccConfig){var a=window.__ccConfig;["cookieName","cookieExpiry","privacyUrl","geoApi","logEndpoint","reconsentDays","cspSafe","tcfEnabled","cmpId","cmpVersion","vendorListVersion","storageMethod","cookieDomain","shareSubdomains","theme","showPoweredBy","iconPosition","consentVersion","rejectFirstScreen","visitorLogins"].forEach(function(e){void 0!==a[e]&&(r[e]=a[e])}),a.text&&"object"==typeof a.text&&Object.keys(a.text).forEach(function(e){r.text[e]=a.text[e]}),Array.isArray(a.cookieTypes)&&(r.cookieTypes=a.cookieTypes),Array.isArray(a.autoBlockPatterns)&&(r.autoBlockPatterns=a.autoBlockPatterns),a.regionRules&&(r.regionRules=a.regionRules)}window.__ccConsentVersion&&(r.consentVersion=window.__ccConsentVersion);var i=!!window.__ccGPC;function s(e){return i&&e&&!e.gpcOptIn&&(e.marketing=!1,e.gpc=1),e}window.__ccBlockRules&&Array.isArray(window.__ccBlockRules)&&window.__ccBlockRules.length&&(r.autoBlockPatterns=window.__ccBlockRules);var d={cc_consent:{vendor:"CookieFlame",category:"necessary",purpose:"Stores your consent preferences",expiry:"1 year"},cc_anon_id:{vendor:"CookieFlame",category:"necessary",purpose:"Anonymous ID for consent logging",expiry:"1 year"},cookieflame_dnt:{vendor:"CookieFlame",category:"necessary",purpose:"Do-not-track opt-out flag",expiry:"1 year"},PHPSESSID:{vendor:"PHP",category:"necessary",purpose:"Server-side session identifier",expiry:"Session"},"wp-settings-":{vendor:"WordPress",category:"necessary",purpose:"Remembers dashboard layout settings",prefix:!0,expiry:"1 year"},"wp-settings-time-":{vendor:"WordPress",category:"necessary",purpose:"Records when dashboard settings were last saved",prefix:!0,expiry:"1 year"},wordpress_logged_in_:{vendor:"WordPress",category:"necessary",purpose:"Keeps you logged in",prefix:!0,expiry:"Session, or 14 days with Remember Me"},wordpress_sec_:{vendor:"WordPress",category:"necessary",purpose:"Confirms your login when you open the dashboard",prefix:!0,expiry:"Session, or 14 days with Remember Me"},wordpress_rec_:{vendor:"WordPress",category:"necessary",purpose:"Recovery mode after a site error (administrators only)",prefix:!0,expiry:"1 week"},wordpress_test_cookie:{vendor:"WordPress",category:"necessary",purpose:"Checks your browser accepts cookies before you log in",expiry:"Session"},wp_lang:{vendor:"WordPress",category:"necessary",purpose:"Remembers the language picked on the login page",expiry:"Session"},comment_author_:{vendor:"WordPress",category:"necessary",purpose:"Remembers your name for comments, if you ask it to",prefix:!0,expiry:"1 year"},comment_author_email_:{vendor:"WordPress",category:"necessary",purpose:"Remembers your email for comments, if you ask it to",prefix:!0,expiry:"1 year"},comment_author_url_:{vendor:"WordPress",category:"necessary",purpose:"Remembers your website for comments, if you ask it to",prefix:!0,expiry:"1 year"},"wp-postpass_":{vendor:"WordPress",category:"necessary",purpose:"Remembers the password entered for a protected page",prefix:!0,expiry:"10 days"},woocommerce_cart_hash:{vendor:"WooCommerce",category:"necessary",purpose:"Shopping cart contents",expiry:"Session"},woocommerce_items_in_cart:{vendor:"WooCommerce",category:"necessary",purpose:"Cart item count",expiry:"Session"},wp_woocommerce_session_:{vendor:"WooCommerce",category:"necessary",purpose:"Shopping session",prefix:!0,expiry:"2 days"},_ga:{vendor:"Google Analytics",category:"analytics",purpose:"Distinguishes visitors",expiry:"2 years"},_ga_:{vendor:"Google Analytics",category:"analytics",purpose:"Stores session state",prefix:!0,expiry:"2 years"},_gid:{vendor:"Google Analytics",category:"analytics",purpose:"Distinguishes visitors (24h)",expiry:"24 hours"},_gat:{vendor:"Google Analytics",category:"analytics",purpose:"Throttles request rate",expiry:"1 minute"},wp_wk_ga_untrack_:{vendor:"Google Analytics",category:"analytics",purpose:"GA opt-out flag",prefix:!0,expiry:"Persistent"},_gcl_au:{vendor:"Google Ads",category:"marketing",purpose:"Conversion linker",expiry:"90 days"},_gcl_aw:{vendor:"Google Ads",category:"marketing",purpose:"Stores ad click info",expiry:"90 days"},_gac_:{vendor:"Google Ads",category:"marketing",purpose:"Campaign information",prefix:!0,expiry:"90 days"},IDE:{vendor:"Google DoubleClick",category:"marketing",purpose:"Ad serving and frequency",expiry:"1 year"},test_cookie:{vendor:"Google DoubleClick",category:"marketing",purpose:"Checks cookie support",expiry:"15 minutes"},NID:{vendor:"Google",category:"preferences",purpose:"Stores preferences",expiry:"6 months"}},u=window.__ccCustomCookies||[];function l(e){for(var t=0;t<u.length;t++){var n=u[t];if("exact"===n.match&&e===n.name)return n;if("prefix"===n.match&&0===e.indexOf(n.name))return n;if("contains"===n.match&&-1!==e.indexOf(n.name))return n}var c=d[e];if(c)return c;var o=0;return Object.keys(d).forEach(function(t){d[t].prefix&&t.length>o&&0===e.indexOf(t)&&(c=d[t],o=t.length)}),c||null}var p=/^(?:wordpress_(?:logged_in_|sec_|rec_|test_cookie$|[0-9a-f]{32}$)|wp-settings-|wp_lang$)/;function f(e){return p.test(e)}var g=null,m="none",y=null,v=null,h=!1,w=0;function b(e){return"string"!=typeof e&&(e=String(e)),e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}function k(e){if("localStorage"===r.storageMethod)try{return localStorage.getItem(e)}catch(e){return null}var t=document.cookie.match(new RegExp("(?:^|;\\s*)"+e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")+"=([^;]*)"));if(!t)return null;try{return decodeURIComponent(t[1])}catch(e){return null}}function _(e,t,n){if("localStorage"!==r.storageMethod){var c=new Date;c.setTime(c.getTime()+864e5*n);var o=e+"="+encodeURIComponent(t)+";expires="+c.toUTCString()+";path=/;SameSite=Lax;Secure";r.cookieDomain&&(o+=";domain="+r.cookieDomain),document.cookie=o}else try{localStorage.setItem(e,t)}catch(e){}}function x(){if(v)return v;var e=k("cc_anon_id");return e?(v=e,e):(_("cc_anon_id",v="cc_"+function(){if("undefined"!=typeof crypto&&"function"==typeof crypto.randomUUID)try{return crypto.randomUUID()}catch(e){}return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(e){var t=16*Math.random()|0;return("x"===e?t:3&t|8).toString(16)})}(),730),v)}function E(){var e={timestamp:g?g.ts:null,complianceMode:m,country:y,gpc:i,consentVersion:r.consentVersion};return r.cookieTypes.forEach(function(t){e[t.id]=g?!!g[t.id]:!!t.required}),e}function A(e,t){window.dispatchEvent(new CustomEvent(e,{detail:t||E()}))}function S(){window.dataLayer=window.dataLayer||[],window.dataLayer.push(arguments)}function C(e){var t={};r.cookieTypes.forEach(function(n){n.consentMode&&n.consentMode.forEach(function(c){t[c]=e[n.id]?"granted":"denied"})}),i&&!e.gpcOptIn&&(t.ad_storage="denied",t.ad_user_data="denied",t.ad_personalization="denied"),S("consent","update",t)}var I=new Map,L=!1;function B(e){var t={};return r.cookieTypes.forEach(function(n){n.tcfPurposes&&n.tcfPurposes.forEach(function(c){t[c]=!!e[n.id]})}),{tcString:"",tcfPolicyVersion:4,cmpId:r.cmpId,cmpVersion:r.cmpVersion,gdprApplies:"gdpr"===m,eventStatus:"useractioncomplete",cmpStatus:"loaded",listenerId:void 0,isServiceSpecific:!0,useNonStandardTexts:!1,publisherCC:"GB",purposeOneTreatment:!1,purpose:{consents:t,legitimateInterests:{}},vendor:{consents:{},legitimateInterests:{}},specialFeatureOptins:{},publisher:{consents:{},legitimateInterests:{},customPurpose:{consents:{},legitimateInterests:{}},restrictions:{}}}}function O(e,t,n,c){if("function"==typeof n)if("addEventListener"===e){var o=++w;if(I.set(o,n),g){var a=B(g);a.listenerId=o,n(a,!0)}}else"removeEventListener"===e?n({listenerId:c},I.delete(c)):"getTCData"===e?n(g?B(g):null,!!g):"ping"===e?n({gdprApplies:"gdpr"===m,cmpLoaded:L,cmpStatus:L?"loaded":"stub",displayStatus:"hidden",apiVersion:"2.2",cmpVersion:r.cmpVersion,cmpId:r.cmpId,gvlVersion:r.vendorListVersion,tcfPolicyVersion:4},!0):n(null,!1)}function T(e){I.forEach(function(t,n){var c=B(e);c.listenerId=n;try{t(c,!0)}catch(e){}})}function P(e){if(!e)return null;for(var t=e.toLowerCase(),n=0;n<r.autoBlockPatterns.length;n++){var c=r.autoBlockPatterns[n];if(c.pattern instanceof RegExp){if(c.pattern.test(t))return c.category}else if(-1!==t.indexOf(c.pattern.toLowerCase()))return c.category}return null}function D(e){document.querySelectorAll('script[type="text/plain"][data-cc]').forEach(function(t){var n=(t.getAttribute("data-cc")||"").toLowerCase();if(e[n]&&!t.getAttribute("data-cc-activated")){t.setAttribute("data-cc-activated","1");var c=document.createElement("script");c.isWPRocket=!0,Array.from(t.attributes).forEach(function(e){"type"!==e.name&&"data-cc"!==e.name&&"data-cc-activated"!==e.name&&"data-cc-auto"!==e.name&&c.setAttribute(e.name,e.value)}),!t.src&&t.textContent&&(c.textContent=t.textContent),t.parentNode.insertBefore(c,t.nextSibling),t.parentNode.removeChild(t)}}),["img","iframe","link"].forEach(function(t){document.querySelectorAll(t+"[data-cc][data-cc-src]").forEach(function(n){var c=(n.getAttribute("data-cc")||"").toLowerCase();e[c]&&!n.getAttribute("data-cc-activated")&&(n.setAttribute("data-cc-activated","1"),"link"===t?n.href=n.getAttribute("data-cc-src"):n.src=n.getAttribute("data-cc-src"))})})}var R=[{pattern:"youtube.com",category:"marketing"},{pattern:"youtube-nocookie.com",category:"marketing"},{pattern:"youtu.be",category:"marketing"},{pattern:"player.vimeo.com",category:"marketing"},{pattern:"vimeo.com",category:"marketing"},{pattern:"dailymotion.com",category:"marketing"},{pattern:"open.spotify.com",category:"preferences"},{pattern:"soundcloud.com",category:"preferences"},{pattern:"google.com/maps",category:"preferences"},{pattern:"maps.google.com",category:"preferences"},{pattern:"facebook.com/plugins",category:"marketing"},{pattern:"instagram.com",category:"marketing"},{pattern:"tiktok.com/embed",category:"marketing"},{pattern:"twitter.com",category:"marketing"},{pattern:"x.com",category:"marketing"}];function M(e,t){var n,c;try{var o=new URL(e,location.href);n=o.hostname.toLowerCase(),c=o.pathname.toLowerCase()}catch(e){return!1}var r=t.indexOf("/"),a=-1===r?t:t.slice(0,r),i=-1===r?"":t.slice(r);return(n===a||n.slice(-a.length-1)==="."+a)&&(!i||0===c.indexOf(i))}function N(e){if(!e)return null;for(var t=0;t<R.length;t++)if(M(e,R[t].pattern))return R[t].category;return null}function q(){return!(!document.body||!(document.body.classList.contains("elementor-editor-active")||document.body.classList.contains("fl-builder-edit")||document.body.classList.contains("et-fb-root-ancestor")))}var G=[],j=0,V=null,U=!1;function J(){if(V&&G.length){var e=G;G=[];try{V(e)}catch(e){}}}function W(){0!==G.length&&(2!==j?1!==j&&3!==j&&(j=1,function(){var e=window.__ccConfig&&window.__ccConfig.facadesUrl||null;if(!e)return void(j=3);var t=document.createElement("script");t.src=e,t.async=!0,t.onload=function(){j=2,J()},t.onerror=function(){j=3},(document.head||document.documentElement).appendChild(t)}()):J())}function F(e){var t=e.src||e.getAttribute("data-src")||"";if(t&&!e.getAttribute("data-cc-facade")&&!q()){var n=N(t);if(n){var c=g||ee();c&&c[n]||(e.setAttribute("data-cc-facade","1"),e.setAttribute("data-cc-iframe-cat",n),e.setAttribute("data-cc-original-src",t),e.removeAttribute("src"),e.style.display="none",G.push({type:"iframe",node:e,category:n,src:t}),W())}}}function H(e){if(!e.getAttribute("data-cc-facade")&&!q()){var t=e.getAttribute("data-settings");if(t){var n;try{n=JSON.parse(t)}catch(e){return}var c=n.youtube_url||n.vimeo_url||"";if(c){var o=c.toLowerCase(),r=null;if((-1!==o.indexOf("youtube")||-1!==o.indexOf("youtu.be")||-1!==o.indexOf("vimeo")||-1!==o.indexOf("dailymotion"))&&(r="marketing"),r&&(!g||!g[r])){if(!g){var a=ee();if(a&&a[r])return}e.setAttribute("data-cc-facade","1"),U=!0,G.push({type:"elementor",node:e,category:r,url:c}),W()}}}}}function $(){for(var e=document.querySelectorAll("iframe[src]"),t=0;t<e.length;t++)F(e[t]);for(var n=document.querySelectorAll(".elementor-widget-video"),c=0;c<n.length;c++)H(n[c]);for(var o=document.querySelectorAll(".wp-block-embed__wrapper iframe[src]"),r=0;r<o.length;r++)F(o[r])}function Y(){new MutationObserver(function(e){e.forEach(function(e){e.addedNodes.forEach(function(e){if(1===e.nodeType){if("IFRAME"===e.tagName&&F(e),e.querySelectorAll){for(var t=e.querySelectorAll("iframe[src]"),n=0;n<t.length;n++)F(t[n]);for(var c=e.querySelectorAll(".elementor-widget-video"),o=0;o<c.length;o++)H(c[o])}e.classList&&e.classList.contains("elementor-widget-video")&&H(e)}})})}).observe(document.documentElement,{childList:!0,subtree:!0})}function Z(){for(var e=document.querySelectorAll("iframe[src]"),t=0;t<e.length;t++){var n=e[t];if(!n.getAttribute("data-cc-facade")){var c=n.src||"";c&&N(c)&&(n.src=c)}}}function K(e,t){r.cookieTypes.forEach(function(n){var c=!!e[n.id];if((t?!!t[n.id]:null)!==c||null===t)if(c&&"function"==typeof n.onAccept)try{n.onAccept()}catch(e){console.warn("[CookieConsent] onAccept error for "+n.id,e)}else if(!c&&"function"==typeof n.onReject)try{n.onReject()}catch(e){console.warn("[CookieConsent] onReject error for "+n.id,e)}})}function z(e,t){if(r.logEndpoint){var n={};r.cookieTypes.forEach(function(e){n[e.id]=!!t[e.id]});var c={anonymousId:x(),timestamp:(new Date).toISOString(),action:e,consent:n,complianceMode:m,country:y,url:location.href,userAgent:navigator.userAgent,tcfEnabled:r.tcfEnabled,gpc:i,consentVersion:r.consentVersion,version:o};try{var a=JSON.stringify(c);navigator.sendBeacon?navigator.sendBeacon(r.logEndpoint,new Blob([a],{type:"application/json"})):fetch(r.logEndpoint,{method:"POST",body:a,headers:{"Content-Type":"application/json"},keepalive:!0})}catch(e){}}}function Q(e,t){var n=g;if(t&&0===t.indexOf("facade_accept_")||s(e),g=e,_(r.cookieName,JSON.stringify(e),r.cookieExpiry),C(e),U&&t)for(var c=document.querySelectorAll(".cc-iframe-facade[data-cc-elementor-widget]"),o=0;o<c.length;o++){var a=c[o].getAttribute("data-cc-iframe-cat");if(a&&e[a])return void window.location.reload()}ce(e,n),D(e),function(e){for(var t=document.querySelectorAll(".cc-iframe-facade"),n=0;n<t.length;n++)if(!t[n].getAttribute("data-cc-elementor-widget")&&e[t[n].getAttribute("data-cc-iframe-cat")]){var c=t[n].nextElementSibling;if(c&&"IFRAME"===c.tagName&&c.getAttribute("data-cc-facade")){var o=c.getAttribute("data-cc-original-src");o&&(c.src=o,c.style.display="",c.removeAttribute("data-cc-facade"))}t[n].parentNode.removeChild(t[n])}}(e),t&&"auto_grant_non_eu"!==t&&"ccpa_auto_grant"!==t&&setTimeout(Z,300),K(e,n),X(e),r.tcfEnabled&&T(e),t&&z(t,e)}function X(e){r.cookieTypes.forEach(function(t){if(!t.required){var n=document.getElementById("cc-cb-"+t.id);n&&(n.checked=!!e[t.id])}});var t=document.getElementById("cc-cats"),n=document.getElementById("cc-details"),c=document.getElementById("cc-pref-buttons");t&&t.classList.remove("cc-open"),n&&(n.textContent=r.text.showDetailsButton),c&&c.classList.remove("cc-open")}function ee(){var e=k(r.cookieName);if(!e)return null;try{var t=JSON.parse(e);if(!t||"object"!=typeof t||Array.isArray(t))return null;if(!t.ts||isNaN(new Date(t.ts).getTime()))return null;var n=Number(r.reconsentDays);return n>=1||(n=365),(Date.now()-new Date(t.ts).getTime())/864e5>n||r.consentVersion&&t.cv!==r.consentVersion?null:t}catch(e){return null}}function te(){var e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:y};return r.cookieTypes.forEach(function(t){e[t.id]=!0}),e}function ne(){var e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:y};return r.cookieTypes.forEach(function(t){e[t.id]=!!t.required}),e}function ce(e,t){if(t){var n=[];if(r.cookieTypes.forEach(function(c){c.required||t[c.id]&&!e[c.id]&&n.push(c.id)}),n.length)document.cookie.split(";").map(function(e){return e.trim().split("=")[0]}).filter(Boolean).forEach(function(e){var t=l(e);if(t&&-1!==n.indexOf(t.category)){var c=location.hostname,o="."+c;document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/",document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT",document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+o,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+c,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; Secure",r.cookieDomain&&(document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+r.cookieDomain,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+r.cookieDomain+"; Secure");var a=c.split(".");if(a.length>2){var i="."+a.slice(1).join(".");document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+i,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+i+"; Secure"}}})}}function oe(e){return(y=e?e.toUpperCase():null)?r.regionRules.gdpr&&-1!==r.regionRules.gdpr.indexOf(y)?"gdpr":r.regionRules.ccpa&&-1!==r.regionRules.ccpa.indexOf(y)?"ccpa":"none":"gdpr"}function re(e){if(window.__ccGeo)return e(oe(window.__ccGeo));r.geoApi?fetch(r.geoApi).then(function(e){return e.json()}).then(function(t){var n=t.country_code||t.country||"";n?e(oe(n)):ae(e)}).catch(function(){ae(e)}):ae(e)}function ae(e){var t="";try{t=Intl.DateTimeFormat().resolvedOptions().timeZone||""}catch(e){}return 0===t.indexOf("Europe/")||"Atlantic/Reykjavik"===t?(y=null,e("gdpr")):0===t.indexOf("US/")||0===t.indexOf("America/")&&["New_York","Chicago","Denver","Los_Angeles","Phoenix","Anchorage","Boise","Detroit","Indianapolis","Louisville","Menominee","Nome","Adak","Juneau","Sitka","Yakutat","Metlakatla","Kentucky","Indiana","North_Dakota"].some(function(e){return-1!==t.indexOf(e)})||"Pacific/Honolulu"===t?(y="US",e("ccpa")):(y=null,void e("gdpr"))}function ie(){"dark"===r.theme&&document.documentElement.classList.add("cc-dark"),"right"===r.iconPosition&&document.documentElement.classList.add("cc-icon-right")}function se(){var e=r.text,t=document.createElement("div");t.id="cc-overlay",document.body.appendChild(t);var n=document.createElement("div");n.id="cc-banner",n.setAttribute("role","dialog"),n.setAttribute("aria-modal","true"),n.setAttribute("aria-label","Cookie consent"),n.setAttribute("tabindex","-1");var c=r.cookieTypes.map(function(t){var n=t.required?' <span class="cc-always-on">'+b(e.alwaysOnLabel)+"</span>":"",c=i&&"marketing"===t.id?'<div class="cc-gpc-note">'+b(e.gpcPrefNote)+"</div>":"";return'<div class="cc-cat"><div><div class="cc-cat-label">'+b(t.name)+n+'</div><div class="cc-cat-desc">'+b(t.description||"")+"</div>"+c+'</div><label class="cc-toggle"><input type="checkbox" id="cc-cb-'+b(t.id)+'" aria-label="'+b(t.name)+'"'+(t.required||t.defaultValue?" checked":"")+(t.required?" disabled":"")+'><span class="cc-slider"></span></label></div>'}).join("");n.innerHTML='<div class="cc-inner"><p class="cc-title">'+b(e.title)+'</p><p class="cc-text">'+b(e.description)+' <a href="'+b(r.privacyUrl)+'">Privacy Policy</a></p><div class="cc-buttons"><button class="cc-btn cc-btn-accept" id="cc-accept">'+b(e.acceptAllButton)+"</button>"+(r.rejectFirstScreen?'<button class="cc-btn cc-btn-reject" id="cc-reject">'+b(e.rejectAllButton)+"</button>":"")+'<button class="cc-btn cc-btn-details" id="cc-details" aria-expanded="false">'+b(e.showDetailsButton)+'</button></div><div class="cc-categories" id="cc-cats">'+c+'</div><div class="cc-pref-buttons" id="cc-pref-buttons"><button class="cc-btn cc-btn-save" id="cc-save">'+b(e.saveButton)+'</button><button class="cc-btn cc-btn-decline" id="cc-decline">'+b(e.declineAllButton)+"</button></div></div>"+(r.showPoweredBy?'<div class="cc-powered"><a href="https://www.cookieflame.com" target="_blank" rel="noopener">Powered by CookieFlame</a></div>':""),document.body.appendChild(n);var o=document.createElement("button");o.id="cc-icon",o.setAttribute("aria-label","Cookie settings"),o.innerHTML='<svg width="24" height="24" viewBox="0 0 38 38" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.1 1.16c-.06-.42-.38-.77-.8-.83A11.8 11.8 0 0 0 13.28 1.2L7.5 4.3A11.8 11.8 0 0 0 3.95 7.98L1.09 13.9A11.8 11.8 0 0 0 .38 18.96l1.13 6.47a11.8 11.8 0 0 0 3.53 4.99l4.71 4.56a11.8 11.8 0 0 0 4.59 2.24l6.48.91a11.8 11.8 0 0 0 5.52-.89l5.78-3.09a11.8 11.8 0 0 0 3.55-3.69l2.87-5.9a11.8 11.8 0 0 0 .71-5.08c-.07-.41-.42-.73-.83-.79a14.8 14.8 0 0 1-8.16-7.61c-.14-.59-.63-1.05-1.23-1.14A14.8 14.8 0 0 1 19.1 1.16ZM15.25 10.25a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Zm-5 15a2.5 2.5 0 1 1 5 0 2.5 2.5 0 0 1-5 0Zm17.5-5a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Z" fill="currentColor"/></svg>',document.body.appendChild(o),document.getElementById("cc-accept").addEventListener("click",ke),document.getElementById("cc-decline").addEventListener("click",_e);var a=document.getElementById("cc-reject");a&&a.addEventListener("click",_e),document.getElementById("cc-save").addEventListener("click",xe),document.getElementById("cc-details").addEventListener("click",Ee),o.addEventListener("click",function(){he("gdpr")}),de("gdpr",n)}function de(e,t){A("cc:banner-rendered",{banner:e,element:t,state:E()})}function ue(){if(!document.getElementById("cc-ccpa-banner")){var e=r.text,t=document.createElement("div");t.id="cc-ccpa-banner",t.setAttribute("role","dialog"),t.setAttribute("aria-modal","true"),t.setAttribute("aria-label","Privacy notice"),t.setAttribute("tabindex","-1"),t.innerHTML='<div class="cc-ccpa-inner" id="cc-ccpa-notice"><div class="cc-ccpa-text"><p>'+b(e.ccpaDescription)+"</p>"+(i?'<p class="cc-ccpa-gpc">'+b(e.ccpaGpcNotice)+"</p>":"")+'</div><div class="cc-ccpa-actions"><a href="#" class="cc-ccpa-link" id="cc-ccpa-dns" role="button">'+b(e.ccpaDnsmpiLink)+'</a><button class="cc-btn cc-btn-accept" id="cc-ccpa-ok">'+b(e.ccpaAcceptButton)+'</button></div></div><div class="cc-ccpa-choice" id="cc-ccpa-choice"></div>'+(r.showPoweredBy?'<div class="cc-powered"><a href="https://www.cookieflame.com" target="_blank" rel="noopener">Powered by CookieFlame</a></div>':""),document.body.appendChild(t),document.getElementById("cc-ccpa-ok").addEventListener("click",function(){g&&z("ccpa_acknowledge",g),fe()}),document.getElementById("cc-ccpa-dns").addEventListener("click",function(e){e.preventDefault(),pe(!0)}),de("ccpa",t)}}function le(){var e=document.getElementById("cc-ccpa-choice");if(e){var t=r.text,n=!(g&&g.marketing),c='<div class="cc-ccpa-choice-inner"><p class="cc-ccpa-choice-title">'+b(t.ccpaChoiceTitle)+"</p>";c+=n?'<p class="cc-ccpa-choice-status">'+b(i?t.ccpaGpcOptedOut:t.ccpaOptedOut)+'</p><div class="cc-ccpa-choice-buttons"><button class="cc-btn cc-btn-accept" id="cc-ccpa-done">'+b(t.ccpaDoneButton)+'</button><button class="cc-btn cc-btn-decline" id="cc-ccpa-optin">'+b(t.ccpaOptInButton)+"</button></div>"+(i?'<p class="cc-ccpa-choice-note">'+b(t.ccpaOptInGpcNote)+"</p>":""):'<p class="cc-ccpa-choice-text">'+b(t.ccpaChoiceText)+'</p><div class="cc-ccpa-choice-buttons"><button class="cc-btn cc-btn-accept" id="cc-ccpa-optout">'+b(t.ccpaOptOutButton)+'</button><button class="cc-btn cc-btn-decline" id="cc-ccpa-cancel">'+b(t.ccpaCancelButton)+"</button></div>",c+='<button class="cc-btn cc-btn-details" id="cc-ccpa-more">'+b(t.ccpaMoreSettings)+"</button></div>",e.innerHTML=c;var o=function(e,t){var n=document.getElementById(e);n&&n.addEventListener("click",t)};o("cc-ccpa-done",fe),o("cc-ccpa-cancel",fe),o("cc-ccpa-optout",function(){var e=me(g);e.marketing=!1,Q(e,"ccpa_opt_out"),le(),ge("cc-ccpa-choice"),A("cc:update")}),o("cc-ccpa-optin",function(){var e=me(g);e.marketing=!0,i&&(e.gpcOptIn=1),delete e.gpc,Q(e,"ccpa_opt_in"),le(),ge("cc-ccpa-choice"),A("cc:update")}),o("cc-ccpa-more",function(){fe(),Ae()})}}function pe(e){var t=document.getElementById("cc-ccpa-notice"),n=document.getElementById("cc-ccpa-choice");t&&n&&(e&&le(),t.style.display=e?"none":"",n.classList.toggle("cc-open",!!e),e&&ge("cc-ccpa-choice"))}function fe(){var e=document.getElementById("cc-ccpa-banner");if(e&&e.classList.remove("cc-show"),pe(!1),document.removeEventListener("keydown",ve),ye&&"function"==typeof ye.focus)try{ye.focus()}catch(e){}ye=null}function ge(e){var t=document.getElementById(e),n=t&&t.querySelector("button");if(n)try{n.focus()}catch(e){}}function me(e){var t={ts:(new Date).toISOString(),cv:r.consentVersion,cc:y};return r.cookieTypes.forEach(function(n){t[n.id]=!e||!!e[n.id]}),e&&e.gpcOptIn&&(t.gpcOptIn=1),t}var ye=null;function ve(e){if("Tab"===e.key){var t=document.querySelector("#cc-banner.cc-show, #cc-ccpa-banner.cc-show");if(t){for(var n=[],c=t.querySelectorAll('button, a[href], input:not([disabled]), select, textarea, [tabindex]:not([tabindex="-1"])'),o=0;o<c.length;o++){for(var r=c[o],a=!1,i=r.parentElement;i&&i!==t;){if("none"===window.getComputedStyle(i).display){a=!0;break}i=i.parentElement}a||n.push(r)}if(0!==n.length){var s=n[0],d=n[n.length-1];e.shiftKey?document.activeElement===s&&(e.preventDefault(),d.focus()):document.activeElement===d&&(e.preventDefault(),s.focus())}}}}function he(e){if("ccpa"===e)return ye=document.activeElement,void requestAnimationFrame(function(){var e=document.getElementById("cc-ccpa-banner");if(e){e.classList.add("cc-show");var t=document.getElementById("cc-ccpa-choice");t&&t.classList.contains("cc-open")?ge("cc-ccpa-choice"):e.focus(),document.addEventListener("keydown",ve)}});ye=document.activeElement;var t=document.getElementById("cc-reject");t&&("gdpr"===m?t.style.removeProperty("display"):t.style.setProperty("display","none","important")),requestAnimationFrame(function(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");if(e&&e.classList.add("cc-show"),t){t.classList.add("cc-show");var c=t.querySelector(".cc-btn-accept");c&&c.focus(),document.addEventListener("keydown",ve)}n&&n.classList.remove("cc-show")})}function we(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");if(e&&e.classList.remove("cc-show"),t&&t.classList.remove("cc-show"),n&&"gdpr"===m&&n.classList.add("cc-show"),document.removeEventListener("keydown",ve),ye&&"function"==typeof ye.focus)try{ye.focus()}catch(e){}ye=null}function be(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");e&&e.classList.remove("cc-show"),t&&t.classList.remove("cc-show"),n&&n.classList.remove("cc-show"),document.removeEventListener("keydown",ve)}function ke(){var e=te();g&&g.gpcOptIn&&(e.gpcOptIn=1),Q(e,"accept_all"),we(),A("cc:accept-all"),A("cc:update")}function _e(){Q(ne(),"decline_all"),we(),A("cc:decline-all"),A("cc:update")}function xe(){var e=function(){var e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:y};return r.cookieTypes.forEach(function(t){if(t.required)e[t.id]=!0;else{var n=document.getElementById("cc-cb-"+t.id);e[t.id]=!!n&&n.checked}}),e}();e.marketing&&(i||g&&g.gpcOptIn)&&(e.gpcOptIn=1),Q(e,"save_preferences"),we(),A("cc:save"),A("cc:update")}function Ee(){var e=document.getElementById("cc-cats"),t=document.getElementById("cc-details"),n=document.getElementById("cc-pref-buttons"),c=e.classList.toggle("cc-open");t.textContent=c?r.text.hideDetailsButton:r.text.showDetailsButton,t.setAttribute("aria-expanded",c?"true":"false"),n&&(c?n.classList.add("cc-open"):n.classList.remove("cc-open"))}function Ae(){document.getElementById("cc-banner")||(ie(),se(),be(),g&&X(g)),he("gdpr")}function Se(){"ccpa"===m?(ie(),ue(),he("ccpa"),pe(!0)):Ae()}function Ce(){var e=document.getElementById("cc-declaration");if(e){var t=E(),n={},c=document.cookie.split(";").map(function(e){return e.trim().split("=")[0]}).filter(Boolean);c=c.filter(function(e){return!f(e)});for(var o=0;o<c.length;o++){var a=l(c[o]);a&&(n[c[o]]={name:c[o],vendor:a.vendor,category:a.category,purpose:a.purpose,expiry:a.expiry||"",active:!0})}for(var i=0;i<u.length;i++){var s=u[i];s.name&&s.vendor&&s.category&&"unclassified"!==s.category&&!n[s.name]&&!f(s.name)&&(n[s.name]={name:s.name,vendor:s.vendor,category:s.category,purpose:s.purpose||"",expiry:s.expiry||"",active:!1})}for(var d=0;d<c.length;d++)n[c[d]]||(n[c[d]]={name:c[d],vendor:"",category:"unclassified",purpose:"",expiry:"",active:!0});var p=["necessary","preferences","analytics","marketing"],g={};r.cookieTypes.forEach(function(e){g[e.id]=e.name});var m={};p.forEach(function(e){m[e]=[]}),Object.keys(n).forEach(function(e){var t=n[e],c=t.category;m[c]||(m[c]=[]),m[c].push(t)}),p.forEach(function(e){m[e]&&m[e].sort(function(e,t){return e.name.localeCompare(t.name)})});var y,v="<div>";if(t.timestamp){var h=new Date(t.timestamp);v+="<p>"+b("Your consent was last updated on "+h.toLocaleDateString(void 0,{year:"numeric",month:"long",day:"numeric"})+" at "+h.toLocaleTimeString(void 0,{hour:"2-digit",minute:"2-digit"})+".")+"</p>"}else v+="<p>"+b("You have not yet made a cookie preference choice on this site.")+"</p>";for(var w=0;w<p.length;w++){var k=p[w],_=m[k];if(_&&_.length){var x,A=g[k]||k,S=r.cookieTypes.filter(function(e){return e.id===k})[0],C=S&&S.description||"";x=!!S&&S.required?"Always active":t[k]?"Active":"Inactive",v+="<div>",v+="<p><b>"+b(A)+"</b> ("+b(x)+")</p>",C&&(v+="<p>"+b(C)+"</p>"),v+="<table><thead><tr>",v+="<th>Name</th><th>Provider</th><th>Purpose</th><th>Expiry</th>",v+="</tr></thead><tbody>";for(var I=0;I<_.length;I++){var L=_[I];v+="<tr>",v+="<td><code>"+b(L.name)+"</code></td>",v+="<td>"+b(L.vendor||"Unknown")+"</td>",v+="<td>"+b(L.purpose||"Not specified")+"</td>",v+="<td>"+b(L.expiry||"—")+"</td>",v+="</tr>"}v+="</tbody></table></div>"}}if(r.visitorLogins){var B=[{name:"wordpress_logged_in_[hash]",purpose:"Keeps you logged in",expiry:y="Session, or 14 days with Remember Me"},{name:"https:"===location.protocol?"wordpress_sec_[hash]":"wordpress_[hash]",purpose:"Confirms your login when you open your account dashboard",expiry:y},{name:"wordpress_test_cookie",purpose:"Checks your browser accepts cookies before you log in",expiry:"Session"},{name:"wp_lang",purpose:"Remembers the language you picked on the login page",expiry:"Session"},{name:"wp-settings-[user ID]",purpose:"Remembers your dashboard layout settings",expiry:"1 year"},{name:"wp-settings-time-[user ID]",purpose:"Records when your dashboard settings were last saved",expiry:"1 year"}];v+='<div class="cc-declaration-login">',v+="<p><b>"+b(r.text.loginCookiesTitle)+"</b></p>",v+="<p>"+b(r.text.loginCookiesIntro)+"</p>",v+="<table><thead><tr>",v+="<th>Name</th><th>Provider</th><th>Purpose</th><th>Expiry</th>",v+="</tr></thead><tbody>";for(var O=0;O<B.length;O++)v+="<tr>",v+="<td><code>"+b(B[O].name)+"</code></td>",v+="<td>WordPress</td>",v+="<td>"+b(B[O].purpose)+"</td>",v+="<td>"+b(B[O].expiry)+"</td>",v+="</tr>";v+="</tbody></table></div>"}v+='<p><button type="button" class="cc-open-settings cc-declaration-change">'+b(r.text.changePreferences)+"</button></p>",v+="</div>",e.innerHTML=v}}document.addEventListener("click",function(e){(e.target&&e.target.closest?e.target.closest(".cc-open-settings"):null)&&(e.preventDefault(),Se())}),window.__ccInternal={getResourceSnapshot:Oe,scriptLoaded:function(e){for(var t=Be||Oe(),n=0;n<t.allUrls.length;n++)if(-1!==t.allUrls[n].indexOf(e))return!0;return!1},scriptLoadedUrls:function(e){for(var t=Be||Oe(),n=[],c=0;c<t.allUrls.length;c++)-1!==t.allUrls[c].indexOf(e)&&n.push(t.allUrls[c]);return n},hasCookie:function(e){return document.cookie.split(";").some(function(t){return t.trim().split("=")[0]===e})},hasCookiePrefix:function(e){return document.cookie.split(";").some(function(t){return 0===t.trim().split("=")[0].indexOf(e)})},setResourceSnapshot:function(e){Be=e},visitorCookies:function(e){for(var t=Oe().thirdPartyDomains,n={},c=0;c<e.length;c++)De(e[c],t,Pe(e[c]))&&(n[e[c]]=!0);return n},facadeBridge:{getConfig:function(){return r},getConsentState:function(){return g},loadConsent:ee,saveConsent:function(e,t){Q(e,t)},hideAllBanners:be,registerRenderer:function(e){V=e,j=2,J()}}},window.CookieConsent={getState:E,getConfig:function(){return r},getComplianceMode:function(){return m},getCountry:function(){return y},show:Ae,showSettings:Se,acceptAll:ke,declineAll:_e,getGPC:function(){return i},getConsentVersion:function(){return r.consentVersion},on:function(e,t){window.addEventListener(e,t)},off:function(e,t){window.removeEventListener(e,t)},VERSION:o},window.addEventListener("cc:ready",Ce),window.addEventListener("cc:update",Ce),function(){if(!window.__ccDefaultsSet){var e={wait_for_update:500};r.cookieTypes.forEach(function(t){t.consentMode&&t.consentMode.forEach(function(n){e[n]=t.required?"granted":"denied"})}),S("consent","default",e)}}(),function(){if(r.tcfEnabled){var e=window.__tcfapi&&window.__tcfapi.queue?window.__tcfapi.queue:[];window.__tcfapi=O,e.forEach(function(e){O.apply(null,e)}),L=!0,window===window.top&&window.addEventListener("message",function(e){var t;try{t="string"==typeof e.data?JSON.parse(e.data):e.data}catch(e){return}if(t&&t.__tcfapiCall){var n=t.__tcfapiCall;O(n.command,n.version,function(t,c){var o={__tcfapiReturn:{returnValue:t,success:c,callId:n.callId}};e.source&&e.source.postMessage("string"==typeof e.data?JSON.stringify(o):o,"*")},n.parameter)}})}}();var Ie=ee();function Le(){var e=window.__ccDiscovery&&window.__ccDiscovery.active;if(!e&&(window.__ccDNT||document.cookie.split(";").some(function(e){return 0===e.trim().indexOf("cookieflame_dnt=")})))return C(g=ne()),ce(g,te()),Y(),$(),m="dnt",ie(),se(),be(),X(g),A("cc:ready"),void Ce();if(e){C(g=te()),D(g),Y(),K(g,null),r.tcfEnabled&&T(g),window.dataLayer=window.dataLayer||[];for(var t=["consent_accepted_analytics","consent_accepted_marketing","consent_accepted_preferences","consent_accepted_necessary","consent_update","consent_given","cookie_consent_given","cookie_consent_update","consent_accepted"],n=0;n<t.length;n++)window.dataLayer.push({event:t[n]});return m="discovery",ie(),se(),be(),A("cc:ready"),A("cc:update"),void Ce()}var c=ee(),o=!1;if(c)if(!i||c.gpcOptIn||!c.marketing&&c.gpc||(o=!!c.marketing,s(c),_(r.cookieName,JSON.stringify(c),r.cookieExpiry)),g=c,C(c),D(c),Y(),$(),K(c,null),r.tcfEnabled&&T(c),ie(),se(),be(),X(c),c.cc){if("gdpr"===(m=oe(c.cc))){var a=document.getElementById("cc-icon");a&&a.classList.add("cc-show")}o&&z("gpc_optout",c),A("cc:ready"),Ce()}else re(function(e){if(m=e,"gdpr"===e){var t=document.getElementById("cc-icon");t&&t.classList.add("cc-show")}o&&z("gpc_optout",c),A("cc:ready"),Ce()});else re(function(e){return m=e,"none"===e?(Y(),Q(te(),"auto_grant_non_eu"),A("cc:ready"),A("cc:update"),void Ce()):"ccpa"===e?(Y(),i?Q(s(te()),"ccpa_gpc_optout"):Q(te(),"ccpa_auto_grant"),ie(),ue(),he("ccpa"),A("cc:ready"),A("cc:update"),void Ce()):(ie(),Y(),$(),se(),he("gdpr"),A("cc:ready"),void Ce())})}Ie&&(i&&!Ie.gpcOptIn&&(Ie.marketing=!1),g=Ie,C(Ie)),function(){if(!h&&r.autoBlockPatterns&&r.autoBlockPatterns.length){h=!0;var e=document.createElement.bind(document),t=Object.getOwnPropertyDescriptor(HTMLScriptElement.prototype,"src");t&&t.set&&(document.createElement=function(){var n=e.apply(document,arguments);if("script"!==(arguments[0]||"").toLowerCase())return n;function c(e,t){if(t&&"string"==typeof t&&!e.getAttribute("data-cc")&&!e.getAttribute("data-cc-auto")&&-1===t.indexOf("cookieconsent")){var n=P(t);!n||g&&g[n]||(e.type="text/plain",e.setAttribute("data-cc",n),e.setAttribute("data-cc-auto","1"))}}Object.defineProperty(n,"src",{configurable:!0,enumerable:!0,get:function(){return t.get.call(this)},set:function(e){return c(this,e),t.set.call(this,e)}});var o=n.setAttribute.bind(n);return n.setAttribute=function(e,t){return"src"===e.toLowerCase()&&c(n,t),o(e,t)},n}),new MutationObserver(function(e){e.forEach(function(e){e.addedNodes.forEach(function(e){if(1===e.nodeType){var t=[];"SCRIPT"===e.tagName&&t.push(e),e.querySelectorAll&&e.querySelectorAll("script[src]").forEach(function(e){t.push(e)}),t.forEach(function(e){if(!(e.getAttribute("data-cc-auto")||e.getAttribute("data-cc")||e.src&&-1!==e.src.indexOf("cookieconsent"))){var t=P(e.src);t&&(g&&g[t]||(e.type="text/plain",e.setAttribute("data-cc",t),e.setAttribute("data-cc-auto","1")))}})}})})}).observe(document.documentElement,{childList:!0,subtree:!0})}}(),"loading"===document.readyState?document.addEventListener("DOMContentLoaded",Le):Le();var Be=null;function Oe(){for(var e=[],t=[],n=[],c={},o={},r=document.querySelectorAll("script[src]"),a=0;a<r.length;a++)r[a].src&&e.push(r[a].src);for(var i=document.querySelectorAll("iframe[src]"),s=0;s<i.length;s++)i[s].src&&e.push(i[s].src);if(window.performance&&performance.getEntriesByType)for(var d=performance.getEntriesByType("resource"),u=0;u<d.length;u++){var l=d[u].name||"";if(l){-1===e.indexOf(l)&&e.push(l);var p=d[u].initiatorType||"";if("script"===p||"iframe"===p||"xmlhttprequest"===p||"fetch"===p||-1!==l.indexOf(".js"))try{var f=new URL(l),g=f.hostname;if(g===location.hostname||g==="www."+location.hostname||"www."+g===location.hostname){var m=f.pathname.match(/\/wp-content\/plugins\/([^\/]+)\//);m&&!o[m[1]]&&(o[m[1]]=!0,n.push({slug:m[1],url:l}))}else c[g]||(c[g]=!0,t.push(g))}catch(e){}}}return{allUrls:e,thirdPartyDomains:t,pluginScripts:n}}var Te={};function Pe(e){var t={set_by:"",set_by_plugin:""},n=window.__ccCookieSetters;if(!n||!Object.prototype.hasOwnProperty.call(n,e)||!n[e])return t;try{var c=new URL(String(n[e]).replace(/:\d+(:\d+)?$/,""));if(/^(chrome-extension|moz-extension|safari-web-extension|safari-extension):$/.test(c.protocol))return t.set_by="browser-extension",t;var o=c.hostname;if(o===location.hostname||o==="www."+location.hostname||"www."+o===location.hostname){t.set_by="first-party";var r=c.pathname.match(/\/wp-content\/(?:plugins|themes)\/([^\/]+)\//);r&&(t.set_by_plugin=r[1].toLowerCase())}else t.set_by=o.toLowerCase()}catch(e){}return t}function De(e,t,n){if("browser-extension"===n.set_by)return!0;var c=window.__ccVisitorCookieRules;if(!c||!c.tools)return!1;if(c.allow&&-1!==c.allow.indexOf(e))return!1;if(n.set_by)return!1;for(var o=0;o<c.tools.length;o++){for(var r=c.tools[o],a=-1!==(r.n||[]).indexOf(e),i=0;!a&&i<(r.p||[]).length;i++)0===e.indexOf(r.p[i])&&(a=!0);if(a){for(var s=0;s<t.length;s++)for(var d=0;d<(r.d||[]).length;d++){var u=String(t[s]).toLowerCase(),l=r.d[d];if(u===l||u.slice(-l.length-1)==="."+l)return!1}return!0}}return!1}function Re(){var t=window.__ccClassified||[],n=window.__ccUnclassified||[],c=window.__ccBeaconUrl;if(c){var o,r={};for(o=0;o<t.length;o++)r[t[o]]=!0;for(o=0;o<n.length;o++)r[n[o]]=!0;var a=Object.keys(Te);for(o=0;o<a.length;o++)r[a[o]]=!0;var i=Object.keys(d);for(o=0;o<i.length;o++)r[i[o]]=!0;var s={},u=[],l=document.cookie.split(";");for(o=0;o<l.length;o++){var p=l[o].indexOf("="),f=(p>-1?l[o].substring(0,p):l[o]).trim(),g=p>-1?l[o].substring(p+1).trim():"";f&&(u.push(f),s[f]=g)}var m=[];for(o=0;o<u.length;o++)if(!r[u[o]]){for(var y=!1,v=Object.keys(d),h=0;h<v.length;h++)if(d[v[h]].prefix&&0===u[o].indexOf(v[h])){y=!0;break}y||m.push(u[o])}if(0!==m.length){for(var w=Oe(),b=w.thirdPartyDomains,k=[],_=0;_<w.pluginScripts.length;_++)k.push(w.pluginScripts[_].slug);for(var x=location.pathname,E=0;E<m.length;E++){var A=m[E],S=!!e[A]&&!r[A],C=Me(s[A]||""),I=Pe(A);if(!De(A,b,I)||window.__ccDiscovery&&window.__ccDiscovery.active){var L=JSON.stringify({cookie_name:A,script_domains:b,plugin_scripts:k,page_path:x,pre_existing:S,value_shape:C,set_by:I.set_by,set_by_plugin:I.set_by_plugin});Te[A]=!0,navigator.sendBeacon&&navigator.sendBeacon(c,new Blob([L],{type:"application/json"}))}else Te[A]=!0}}}}function Me(e){if(!e||0===e.length)return"empty";if("true"===e||"false"===e||"1"===e||"0"===e)return"boolean";if(/^\d+$/.test(e))return e.length>12?"long-numeric":"numeric";if(/^\d+\.\d+$/.test(e))return"decimal";if(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(e))return"uuid";if(/^[A-Za-z0-9+\/]{20,}={0,2}$/.test(e))return"base64";if(/^(GA\d+\.\d+\.\d+\.\d+|G-[A-Z0-9]+)/.test(e))return"ga-id";try{if("object"==typeof JSON.parse(decodeURIComponent(e)))return"json"}catch(e){}return/^[a-f0-9]{24,}$/i.test(e)?"hex-id":/^\d{10,13}$/.test(e)?"timestamp":e.length<=20?"short-string":e.length<=100?"medium-string":"long-string"}setTimeout(Re,3e3),setTimeout(Re,15e3),setTimeout(Re,45e3),window.addEventListener("cc:update",function(){setTimeout(Re,3e3)}),window.addEventListener("pagehide",Re)}();

cookieflame/tags/5.4.0/cookieflame.php

@@ -3 +3 @@
  * Plugin Name:       CookieFlame
  * Plugin URI:        https://cookieflame.com
- * Description:       A lightweight, self-hosted cookie consent manager with Google Consent Mode v2, IAB TCF v2.2, automatic script blocking, multi-region compliance (GDPR/CCPA/LGPD/POPIA), passive cookie monitoring, and server-side geo detection via Cloudflare.
- * Version:           5.3.0
+ * Description:       A lightweight, self-hosted cookie consent manager with Google Consent Mode v2, automatic script blocking, multi-region compliance (GDPR/CCPA/LGPD/POPIA), passive cookie monitoring, and server-side geo detection via Cloudflare.
+ * Version:           5.4.0
  * Requires at least: 6.0
  * Requires PHP:      8.0
@@ -19 +19 @@
 }
 
-define( 'COOKIEFLAME_VERSION', '5.3.0' );
+define( 'COOKIEFLAME_VERSION', '5.4.0' );
 define( 'COOKIEFLAME_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );
 define( 'COOKIEFLAME_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
@@ -27 +27 @@
 
 /* ═══════════════════════════════════════════════════════════
-   MONITORING INTERVAL BUCKETS (in minutes)
-   A single 'digest_interval' option drives both beacon
-   processing cadence and email digest cadence. Value 0 = off.
-   Free tier: off, daily, weekly.
-   Pro tier:  free buckets + 15m, 1h, 4h, monthly (added via the
-              cookieflame_interval_buckets filter by the Pro plugin).
+   COOKIE MONITORING SETTINGS (v5.4.0)
+   Two separate settings on the Cookie Monitoring tab:
+     - Watch for new cookies: On/Off. Visitors' browsers report
+       new cookies as they browse, processed straight away.
+       Stored as the inverse of 'monitoring_paused'.
+     - Email me about changes: 'weekly' (default), 'daily',
+       'instant' or 'off'. Stored as 'email_frequency'.
+   Before v5.4.0 a single 'digest_interval' (minutes, 0 = off)
+   drove both. cookieflame_migrate_monitoring_settings() converts
+   it once; until then the getters derive the same answer from it.
+
+   The cookieflame_interval_buckets filter is kept: a plugin that
+   adds a bucket shorter than a day (Pro 1.5.x adds 15 minutes)
+   makes "Instantly" emails possible, sent after that delay.
 ═══════════════════════════════════════════════════════════ */
 
@@ -53 +61 @@
  */
 function cookieflame_interval_buckets_free() {
+    // v5.4.0: the 15-minute, 1-hour and 4-hour entries are no longer
+    // declared here. Pro 1.5.x still contributes them through the filter.
     return array(
         array( 'minutes' => 0,     'tier' => 'free' ),
-        array( 'minutes' => 15,    'tier' => 'pro' ),
-        array( 'minutes' => 60,    'tier' => 'pro' ),
-        array( 'minutes' => 240,   'tier' => 'pro' ),
         array( 'minutes' => 1440,  'tier' => 'free' ),
         array( 'minutes' => 10080, 'tier' => 'free' ),
@@ -159 +166 @@
 
 /**
- * Return the currently configured monitoring interval in minutes,
- * normalised to a valid bucket for the current tier. Defaults to
- * daily (1440) on new installs with no value set.
+ * Delay before the next email summary, in minutes (0 = no email).
+ * Kept under its pre-5.4.0 name for any code that still calls it.
  */
 function cookieflame_current_interval_minutes() {
-    $settings = get_option( 'cookieflame_settings', array() );
-    $raw      = isset( $settings['digest_interval'] ) ? intval( $settings['digest_interval'] ) : 1440;
-    return cookieflame_normalise_interval( $raw );
-}
-
+    return cookieflame_email_delay_minutes();
+}
+
+/**
+ * Whether "Watch for new cookies" is off. Every beacon, queue and
+ * digest path gates on this, so turning it off silences them all.
+ */
 function cookieflame_monitoring_is_off() {
-    if ( cookieflame_monitoring_is_paused() ) {
-        return true;
-    }
-    return 0 === cookieflame_current_interval_minutes();
-}
-
-/**
- * Whether monitoring is currently paused. Paused is a temporary
- * suppression state — distinct from "Off" — that keeps the chosen
- * update interval configured but silences beacons and digests while
- * the admin does site surgery. Admin toggles this from the Cookie
- * Monitoring tab. cookieflame_monitoring_is_off() folds this into the same
- * gate so every downstream path inherits pause automatically.
+    return cookieflame_monitoring_is_paused();
+}
+
+/**
+ * Whether "Watch for new cookies" is off (stored as 'monitoring_paused',
+ * the flag behind the On/Off switch on the Cookie Monitoring tab). A
+ * pre-5.4.0 'digest_interval' of 0 also means off until migrated.
  */
 function cookieflame_monitoring_is_paused() {
     $settings = get_option( 'cookieflame_settings', array() );
-    return ! empty( $settings['monitoring_paused'] );
-}
+    if ( ! empty( $settings['monitoring_paused'] ) ) {
+        return true;
+    }
+    if ( ! isset( $settings['email_frequency'] ) && isset( $settings['digest_interval'] ) && intval( $settings['digest_interval'] ) <= 0 ) {
+        return true;
+    }
+    return false;
+}
+
+/**
+ * The saved "Email me about changes" choice: 'weekly', 'daily',
+ * 'instant' or 'off'. Sites not yet migrated get the answer their old
+ * 'digest_interval' maps to (15/60/240 minutes map to 'instant').
+ */
+function cookieflame_email_frequency() {
+    $settings = get_option( 'cookieflame_settings', array() );
+    if ( isset( $settings['email_frequency'] ) ) {
+        return cookieflame_sanitize_email_frequency( $settings['email_frequency'] );
+    }
+    if ( ! isset( $settings['digest_interval'] ) ) {
+        return 'weekly';
+    }
+    return cookieflame_email_frequency_from_interval( $settings['digest_interval'], true );
+}
+
+/**
+ * Map a pre-5.4.0 'digest_interval' to an email frequency. Intervals
+ * under a day become 'instant' when $instant_ok, otherwise 'daily'.
+ */
+function cookieflame_email_frequency_from_interval( $minutes, $instant_ok ) {
+    $minutes = intval( $minutes );
+    if ( $minutes <= 0 ) {
+        return 'off';
+    }
+    if ( 10080 === $minutes ) {
+        return 'weekly';
+    }
+    if ( $minutes < 1440 ) {
+        return $instant_ok ? 'instant' : 'daily';
+    }
+    return 'daily';
+}
+
+function cookieflame_sanitize_email_frequency( $value ) {
+    $value = is_string( $value ) ? $value : '';
+    return in_array( $value, array( 'weekly', 'daily', 'instant', 'off' ), true ) ? $value : 'weekly';
+}
+
+/**
+ * Shortest sub-daily bucket another plugin added through the
+ * cookieflame_interval_buckets filter, in minutes, or 0 when none.
+ */
+function cookieflame_instant_bucket_minutes() {
+    $shortest = 0;
+    foreach ( cookieflame_interval_buckets() as $bucket ) {
+        $minutes = intval( $bucket['minutes'] );
+        if ( $minutes > 0 && $minutes < 1440 && ( 0 === $shortest || $minutes < $shortest ) ) {
+            $shortest = $minutes;
+        }
+    }
+    return $shortest;
+}
+
+/**
+ * Whether "Instantly" can be chosen on this site: CookieFlame Pro is
+ * active and a plugin supplies a delay shorter than a day.
+ */
+function cookieflame_instant_email_available() {
+    return cookieflame_is_premium() && cookieflame_instant_bucket_minutes() > 0;
+}
+
+/**
+ * Minutes from the first new cookie to the email summary, or 0 when
+ * emails are off. 'instant' uses the shortest contributed bucket and
+ * falls back to daily when there is none.
+ *
+ * Filter: cookieflame_email_delay_minutes ( int $minutes, string $frequency ).
+ */
+function cookieflame_email_delay_minutes() {
+    $frequency = cookieflame_email_frequency();
+    $map       = array( 'off' => 0, 'daily' => 1440, 'weekly' => 10080 );
+    if ( 'instant' === $frequency ) {
+        $minutes = cookieflame_instant_bucket_minutes();
+        $minutes = $minutes > 0 ? $minutes : 1440;
+    } else {
+        $minutes = $map[ $frequency ];
+    }
+    return max( 0, intval( apply_filters( 'cookieflame_email_delay_minutes', $minutes, $frequency ) ) );
+}
+
+/**
+ * One-time conversion of the pre-5.4.0 'digest_interval' setting:
+ *   0             -> watch Off, email Off
+ *   daily, weekly -> watch On, email unchanged
+ *   15m, 1h, 4h   -> 'instant' when Pro is active, 'daily' otherwise
+ * 'digest_interval' itself is left in place.
+ */
+function cookieflame_migrate_monitoring_settings() {
+    $settings = get_option( 'cookieflame_settings', false );
+    if ( ! is_array( $settings ) || isset( $settings['email_frequency'] ) ) {
+        return;
+    }
+    if ( isset( $settings['digest_interval'] ) ) {
+        $minutes = intval( $settings['digest_interval'] );
+        $settings['email_frequency'] = cookieflame_email_frequency_from_interval( $minutes, $minutes > 0 && $minutes < 1440 && cookieflame_is_premium() );
+        if ( $minutes <= 0 ) {
+            $settings['monitoring_paused'] = 1;
+        }
+    } else {
+        $settings['email_frequency'] = 'weekly';
+    }
+    update_option( 'cookieflame_settings', $settings );
+}
+add_action( 'admin_init', 'cookieflame_migrate_monitoring_settings', 5 );
 
 /**
@@ -209 +323 @@
     $host      = is_string( $host ) ? strtolower( $host ) : '';
     return substr( sha1( $host . '|' . $page_path ), 0, 16 );
+}
+
+/**
+ * Version string for one of the plugin's own scripts or stylesheets: the
+ * plugin version plus the file's modification time, so a changed file
+ * always gets a new URL and no browser or CDN cache serves an old copy.
+ */
+function cookieflame_asset_version( $relative_path ) {
+    $file  = COOKIEFLAME_PLUGIN_DIR . $relative_path;
+    $mtime = file_exists( $file ) ? filemtime( $file ) : false;
+    return $mtime ? COOKIEFLAME_VERSION . '.' . $mtime : COOKIEFLAME_VERSION;
 }
 
@@ -337 +462 @@
 add_action( 'admin_post_cookieflame_save_notifications', 'cookieflame_save_notifications' );
 add_action( 'admin_post_cookieflame_toggle_pause',        'cookieflame_toggle_monitoring_pause' );
+add_action( 'admin_post_cookieflame_dismiss_upgrade_banner', 'cookieflame_dismiss_upgrade_banner' );
+
+/**
+ * Hide the "Upgrade to Pro" banner at the top of the CookieFlame tabs
+ * for the current user.
+ */
+function cookieflame_dismiss_upgrade_banner() {
+    if ( ! current_user_can( 'manage_options' ) ) {
+        wp_die( esc_html__( 'You do not have permission to do this.', 'cookieflame' ) );
+    }
+    check_admin_referer( 'cookieflame_dismiss_upgrade_banner' );
+    update_user_meta( get_current_user_id(), 'cookieflame_upgrade_banner_dismissed', time() );
+    $tab = sanitize_key( wp_unslash( $_POST['tab'] ?? 'cookies' ) );
+    wp_safe_redirect( add_query_arg( array( 'page' => 'cookieflame', 'tab' => $tab ? $tab : 'cookies' ), admin_url( 'admin.php' ) ) );
+    exit;
+}
 
 /**
@@ -1193 +1334 @@
     //   - The beacon carries a script_domain or plugin_script not yet
     //     recorded for this (URL, cookie) pair
-    //   - The configured update interval has elapsed since last_processed
+    //   - A day has passed since last_processed (heartbeat; this only
+    //     refreshes "last seen", which Tidy up relies on)
     //
     // Otherwise we silently drop the beacon.
     //
-    // Monitoring off (interval = 0) is handled at enqueue time — the
+    // Watch for new cookies Off is handled at enqueue time — the
     // beacon URL is not injected so nothing fires. We defensively drop
     // here too in case a stale page serves the URL from cache.
@@ -1208 +1350 @@
     $url_hash    = cookieflame_url_hash_for_path( $page_path );
     $now         = time();
-    $interval_s  = cookieflame_current_interval_minutes() * 60;
+    $interval_s  = DAY_IN_SECONDS; // Heartbeat: fixed daily since v5.4.0, independent of the email setting.
 
     // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- Custom plugin table; high-write-rate beacon storage where the object cache adds no value (writes invalidate cache on every visitor request, reads are admin-only and infrequent).
@@ -1404 +1546 @@
  */
 function cookieflame_queue_notification( $cookie_name, $script_domains, $page_path, $pre_existing = false, $value_shape = '' ) {
-    // Monitoring off -> do not queue and do not schedule a digest.
-    if ( cookieflame_monitoring_is_off() ) {
+    // Watching off, or emails off -> do not queue and do not schedule a digest.
+    if ( cookieflame_monitoring_is_off() || 0 === cookieflame_email_delay_minutes() ) {
         return;
     }
@@ -1422 +1564 @@
     update_option( 'cookieflame_notification_queue', $queue );
 
-    // Start digest timer if not already running. The same update_interval
-    // setting drives both beacon filtering and digest cadence.
+    // Start digest timer if not already running, from the
+    // "Email me about changes" setting.
     $scheduled = get_option( 'cookieflame_digest_scheduled', 0 );
     if ( empty( $scheduled ) ) {
-        $interval = cookieflame_current_interval_minutes() * 60;
+        $interval = cookieflame_email_delay_minutes() * 60;
         if ( $interval <= 0 ) {
             return;
@@ -1601 +1743 @@
     // invoking the hook directly. Silently clean up and return — the
     // queue is preserved for resume.
-    if ( cookieflame_monitoring_is_off() ) {
+    if ( cookieflame_monitoring_is_off() || 0 === cookieflame_email_delay_minutes() ) {
         delete_option( 'cookieflame_digest_scheduled' );
         return;
@@ -1685 +1827 @@
 
     // Header
-    $body  = "CookieFlame Cookie Discovery Report\n";
+    $body  = "CookieFlame: new cookies found by Watch for new cookies\n";
     $body .= $site_name . " (" . $site_url . ")\n";
     $body .= wp_date( 'j M Y, H:i' ) . "\n";
@@ -1813 +1955 @@
     $body .= "-- \n";
     $body .= "CookieFlame v" . COOKIEFLAME_VERSION . " on " . $site_name . "\n";
-    $body .= "You are receiving this because Cookie Monitoring is enabled.\n";
+    $body .= "You are receiving this because \"Email me about changes\" is on in Cookie Monitoring.\n";
     $body .= "Change settings: " . admin_url( 'admin.php?page=cookieflame&tab=notifications' ) . "\n";
 
-    wp_mail( $to, $subject, $body );
+    /**
+     * Filter the email summary before it is sent.
+     *
+     * Return an array with 'to', 'subject', 'body' and 'headers' to change
+     * the email, or false to skip sending it (the queue is still cleared).
+     *
+     * @param array $email      { to, subject, body, headers }.
+     * @param array $actionable Queue entries that need a decision.
+     * @param array $residual   Queue entries from plugins no longer active.
+     */
+    $email = apply_filters( 'cookieflame_digest_email', array(
+        'to'      => $to,
+        'subject' => $subject,
+        'body'    => $body,
+        'headers' => array(),
+    ), $actionable, $residual );
+
+    if ( is_array( $email ) && ! empty( $email['to'] ) ) {
+        wp_mail( $email['to'], (string) ( $email['subject'] ?? $subject ), (string) ( $email['body'] ?? $body ), $email['headers'] ?? array() );
+    }
 
     // Clear the queue and timer
@@ -2218 +2379 @@
         COOKIEFLAME_PLUGIN_URL . 'assets/css/admin.css',
         array(),
-        COOKIEFLAME_VERSION
+        cookieflame_asset_version( 'assets/css/admin.css' )
     );
     wp_enqueue_script(
@@ -2224 +2385 @@
         COOKIEFLAME_PLUGIN_URL . 'assets/js/admin.js',
         array(),
-        COOKIEFLAME_VERSION,
+        cookieflame_asset_version( 'assets/js/admin.js' ),
         true
     );
@@ -2253 +2414 @@
     $cookieflame_js_data = apply_filters( 'cookieflame_admin_js_data', $cookieflame_js_data );
     wp_localize_script( 'cookieflame-admin', 'cookieflameAdmin', $cookieflame_js_data );
+
+    // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Tab navigation, no data modification.
+    if ( isset( $_GET['tab'] ) && 'preview' === sanitize_key( wp_unslash( $_GET['tab'] ) ) ) {
+        wp_enqueue_script(
+            'cookieflame-admin-preview',
+            COOKIEFLAME_PLUGIN_URL . 'assets/js/admin-preview.js',
+            array(),
+            cookieflame_asset_version( 'assets/js/admin-preview.js' ),
+            true
+        );
+        wp_localize_script( 'cookieflame-admin-preview', 'cookieflamePreview', array(
+            'privacyUrl'        => $opts['privacy_url'] ?? '/privacy-policy',
+            'theme'             => $opts['theme'] ?? 'light',
+            'rejectFirstScreen' => ! empty( $opts['show_reject_first'] ),
+            'showPoweredBy'     => ! empty( $opts['show_powered_by'] ),
+        ) );
+    }
 }
 
@@ -2305 +2483 @@
 }
 
+/**
+ * [cookieflame_settings_link text="Cookie settings"]: a link that reopens
+ * the visitor's cookie choices (the US "Do Not Sell or Share" choice for
+ * US visitors). Any element with the class cc-open-settings does the same,
+ * for example a menu item.
+ */
+add_shortcode( 'cookieflame_settings_link', 'cookieflame_settings_link_shortcode' );
+
+function cookieflame_settings_link_shortcode( $atts ) {
+    $atts = shortcode_atts( array(
+        'text'  => __( 'Cookie settings', 'cookieflame' ),
+        'class' => '',
+    ), $atts, 'cookieflame_settings_link' );
+    $class = trim( 'cc-open-settings ' . implode( ' ', array_map( 'sanitize_html_class', preg_split( '/\s+/', (string) $atts['class'], -1, PREG_SPLIT_NO_EMPTY ) ) ) );
+    return '<a href="#" class="' . esc_attr( $class ) . '" role="button">' . esc_html( $atts['text'] ) . '</a>';
+}
+
 /* ═══════════════════════════════════════════════════════════
    REST API — GEO ENDPOINT
@@ -2339 +2534 @@
         update_option( 'cookieflame_settings', array(
             'privacy_url'    => '/privacy-policy',
-            'ccpa_url'       => '/privacy-policy#do-not-sell',
             'log_endpoint'   => '',
             'gtm_id'         => '',
@@ -2350 +2544 @@
             'track_logged_in' => 1,
             'extra_patterns' => '',
-            'digest_interval' => 1440, // daily
+            'email_frequency' => 'weekly',
             'monitoring_paused' => 0,
         ) );
@@ -2540 +2734 @@
         . "if(raw.cv!=={$cv_js})return;"
         . "var gpc=window.__ccGPC;"
-        . "var mkt=raw.marketing&&!gpc;"
+        . "var mkt=raw.marketing&&(!gpc||raw.gpcOptIn);"
         . "gtag('consent','update',{"
         . "analytics_storage:raw.analytics?'granted':'denied',"
@@ -2629 +2823 @@
     // blockable iframe or Elementor video widget is present on the
     // page). Versioned so cache busts cleanly on plugin update.
-    $overrides['facadesUrl'] = COOKIEFLAME_PLUGIN_URL . 'assets/js/cookieconsent-facades.min.js?ver=' . COOKIEFLAME_VERSION;
+    $overrides['facadesUrl'] = COOKIEFLAME_PLUGIN_URL . 'assets/js/cookieconsent-facades.min.js?ver=' . cookieflame_asset_version( 'assets/js/cookieconsent-facades.min.js' );
 
     if ( ! empty( $options['privacy_url'] ) )    $overrides['privacyUrl']    = $options['privacy_url'];
-    // CCPA "Do Not Sell" link points to the same privacy policy page with an anchor.
-    $cookieflame_privacy = ! empty( $options['privacy_url'] ) ? $options['privacy_url'] : '/privacy-policy';
-    $overrides['ccpaUrl'] = $cookieflame_privacy . '#do-not-sell';
     if ( ! empty( $options['log_endpoint'] ) )    $overrides['logEndpoint']   = $options['log_endpoint'];
     if ( ! empty( $options['storage_method'] ) )  $overrides['storageMethod'] = $options['storage_method'];
@@ -2648 +2839 @@
     $overrides['shareSubdomains'] = ! empty( $options['share_subdomains'] ) || ! empty( $options['cookie_domain'] );
     if ( isset( $options['reconsent_days'] ) && $options['reconsent_days'] !== '' ) {
-        $overrides['reconsentDays'] = intval( $options['reconsent_days'] );
+        $overrides['reconsentDays'] = cookieflame_reconsent_days( $options['reconsent_days'] );
+    }
+    if ( ! empty( $options['show_reject_first'] ) ) {
+        $overrides['rejectFirstScreen'] = true;
+    }
+    if ( ! empty( $options['visitor_logins'] ) ) {
+        $overrides['visitorLogins'] = true;
     }
     if ( ! empty( $options['show_powered_by'] ) ) {
@@ -2655 +2852 @@
     if ( ! empty( $options['icon_position'] ) && 'right' === $options['icon_position'] ) {
         $overrides['iconPosition'] = 'right';
+    }
+
+    /**
+     * Filter the banner configuration sent to the front end as
+     * window.__ccConfig. Keys the banner script knows are applied over
+     * its defaults; any other keys are left on window.__ccConfig for the
+     * code that added them.
+     *
+     * @param array $overrides Front-end config.
+     * @param array $options   The cookieflame_settings option.
+     */
+    $filtered = apply_filters( 'cookieflame_frontend_config', $overrides, $options );
+    if ( is_array( $filtered ) ) {
+        $overrides = $filtered;
     }
 
@@ -2797 +3008 @@
         COOKIEFLAME_PLUGIN_URL . 'assets/js/cookieconsent' . $suffix . '.js',
         array(),
-        COOKIEFLAME_VERSION,
+        cookieflame_asset_version( 'assets/js/cookieconsent' . $suffix . '.js' ),
         false // Load in head, not footer.
     );
@@ -2811 +3022 @@
             COOKIEFLAME_PLUGIN_URL . 'assets/js/cookieconsent-discovery' . $suffix . '.js',
             array( 'cookieflame-consent' ),
-            COOKIEFLAME_VERSION,
+            cookieflame_asset_version( 'assets/js/cookieconsent-discovery' . $suffix . '.js' ),
             true // Footer is fine -- discovery runs after DOM is ready.
         );
@@ -2847 +3058 @@
         COOKIEFLAME_PLUGIN_URL . 'assets/css/cookieconsent.css',
         array(),
-        COOKIEFLAME_VERSION
+        cookieflame_asset_version( 'assets/css/cookieconsent.css' )
     );
 }
@@ -3378 +3589 @@
         array( 'key' => 'privacy_url',
                'wp_default_page' => 'wp_page_for_privacy_policy',
-               'desc' => __( 'The page linked from the consent banner and the CCPA "Do Not Sell My Personal Information" notice. Defaults to the page set under Settings > Privacy. Add the [cookieflame_declaration] shortcode to this page to show visitors their consent choices.', 'cookieflame' ) ) );
+               'desc' => __( 'The page linked from the consent banner. Defaults to the page set under Settings > Privacy. Add the [cookieflame_declaration] shortcode to this page to show visitors their consent choices.', 'cookieflame' ) ) );
+
+    add_settings_field( 'cookieflame_visitor_logins', __( 'Visitor logins', 'cookieflame' ), 'cookieflame_field_checkbox', 'cookieflame', 'cookieflame_consent',
+        array( 'key' => 'visitor_logins',
+               'desc' => __( 'Visitors can log in to this site (for example, customer accounts or a members area)', 'cookieflame' ),
+               'help' => __( 'Tick this if people other than you and your team can log in, for example to see their orders, download purchases or read members-only pages. Your cookie declaration will then also list the cookies WordPress sets when someone logs in. Leave it unticked if only you and your team log in.', 'cookieflame' ) ) );
 
     add_settings_field( 'cookieflame_reconsent', __( 'Re-consent Period', 'cookieflame' ), 'cookieflame_field_number', 'cookieflame', 'cookieflame_consent',
@@ -3386 +3602 @@
     add_settings_field( 'cookieflame_theme', __( 'Banner Theme', 'cookieflame' ), 'cookieflame_field_theme', 'cookieflame', 'cookieflame_consent' );
 
+    add_settings_field( 'cookieflame_show_reject_first', __( 'Show "Decline all" on the first screen', 'cookieflame' ), 'cookieflame_field_checkbox', 'cookieflame', 'cookieflame_consent',
+        array( 'key' => 'show_reject_first',
+               'desc' => __( 'Adds a Decline All button next to Accept All on the banner for visitors in the UK, EU/EEA, Switzerland, Brazil and South Africa. Off by default: visitors can always decline everything under Manage preferences. Never shown on the US notice.', 'cookieflame' ) ) );
+
     add_settings_field( 'cookieflame_share_subdomains', __( 'Share consent across subdomains', 'cookieflame' ), 'cookieflame_field_checkbox', 'cookieflame', 'cookieflame_consent',
         array( 'key' => 'share_subdomains',
@@ -3428 +3648 @@
 }
 
+/**
+ * Re-consent period in days. Anything below 1 (blank, 0, negative or
+ * junk) means the default of 365, so consent never expires on load.
+ */
+function cookieflame_reconsent_days( $value ) {
+    $days = intval( $value );
+    return $days >= 1 ? $days : 365;
+}
+
 function cookieflame_sanitize_settings( $input ) {
-    // Handle the DNT device cookie (not stored in DB, stored as browser cookie)
-    cookieflame_handle_dnt_cookie( ! empty( $input['dnt_device'] ) );
+    $input = is_array( $input ) ? $input : array();
 
     // Preserve consent_bump from existing settings (managed by the
     // Force Re-consent button, not by this form)
     $existing = get_option( 'cookieflame_settings', array() );
-
-    return array(
-        'privacy_url'        => esc_url_raw( $input['privacy_url'] ?? '' ),
-        'ccpa_url'           => esc_url_raw( $input['ccpa_url'] ?? '' ),
-        'log_endpoint'       => esc_url_raw( $input['log_endpoint'] ?? '' ),
+    $existing = is_array( $existing ) ? $existing : array();
+
+    // The Settings tab form posts a '_form' marker. Other saves (the
+    // Cookie Monitoring and Tag Managers handlers, the pause switch, the
+    // migration) pass the whole stored array back through this callback,
+    // so an unticked checkbox there means "not in this form", not "off".
+    $main_form = ! empty( $input['_form'] );
+    $flag = function ( $key, $default = 0 ) use ( $input, $existing, $main_form ) {
+        if ( $main_form ) {
+            return ! empty( $input[ $key ] ) ? 1 : 0;
+        }
+        $source = array_key_exists( $key, $input ) ? $input : $existing;
+        return isset( $source[ $key ] ) ? ( ! empty( $source[ $key ] ) ? 1 : 0 ) : $default;
+    };
+
+    if ( $main_form ) {
+        // Handle the DNT device cookie (not stored in DB, stored as browser cookie)
+        cookieflame_handle_dnt_cookie( ! empty( $input['dnt_device'] ) );
+        $track_logged_in = empty( $input['exclude_staff'] ) ? 1 : 0;
+    } else {
+        $track_logged_in = $flag( 'track_logged_in', 1 );
+    }
+
+    $email_frequency = cookieflame_sanitize_email_frequency( $input['email_frequency'] ?? ( $existing['email_frequency'] ?? 'weekly' ) );
+
+    $clean = array(
+        'privacy_url'        => esc_url_raw( $input['privacy_url'] ?? ( $main_form ? '' : ( $existing['privacy_url'] ?? '' ) ) ),
+        'log_endpoint'       => esc_url_raw( $input['log_endpoint'] ?? ( $main_form ? '' : ( $existing['log_endpoint'] ?? '' ) ) ),
         'storage_method'     => 'cookie', // hardcoded — localStorage removed
-        'reconsent_days'     => intval( $input['reconsent_days'] ?? 365 ),
-        'cookie_domain'      => cookieflame_sanitize_cookie_domain( $input['cookie_domain'] ?? '' ),
-        'share_subdomains'   => ! empty( $input['share_subdomains'] ) ? 1 : 0,
-        'csp_safe'           => ! empty( $input['csp_safe'] ) ? 1 : 0,
-        'theme'              => in_array( $input['theme'] ?? '', array( 'light', 'dark' ), true ) ? $input['theme'] : 'light',
-        'show_powered_by'    => ! empty( $input['show_powered_by'] ) ? 1 : 0,
-        'icon_position'      => in_array( $input['icon_position'] ?? '', array( 'left', 'right' ), true ) ? $input['icon_position'] : 'left',
-        'track_logged_in'    => empty( $input['exclude_staff'] ) ? 1 : 0,
-        'extra_patterns'     => sanitize_textarea_field( $input['extra_patterns'] ?? '' ),
+        'reconsent_days'     => cookieflame_reconsent_days( $input['reconsent_days'] ?? ( $existing['reconsent_days'] ?? 365 ) ),
+        'cookie_domain'      => cookieflame_sanitize_cookie_domain( $input['cookie_domain'] ?? ( $existing['cookie_domain'] ?? '' ) ),
+        'share_subdomains'   => $flag( 'share_subdomains' ),
+        'csp_safe'           => $flag( 'csp_safe' ),
+        'theme'              => in_array( $input['theme'] ?? ( $existing['theme'] ?? '' ), array( 'light', 'dark' ), true ) ? ( $input['theme'] ?? $existing['theme'] ) : 'light',
+        'show_reject_first'  => $flag( 'show_reject_first' ),
+        'visitor_logins'     => $flag( 'visitor_logins' ),
+        'show_powered_by'    => $flag( 'show_powered_by' ),
+        'icon_position'      => in_array( $input['icon_position'] ?? ( $existing['icon_position'] ?? '' ), array( 'left', 'right' ), true ) ? ( $input['icon_position'] ?? $existing['icon_position'] ) : 'left',
+        'track_logged_in'    => $track_logged_in,
+        'extra_patterns'     => sanitize_textarea_field( $input['extra_patterns'] ?? ( $main_form ? '' : ( $existing['extra_patterns'] ?? '' ) ) ),
         'consent_bump'       => intval( $existing['consent_bump'] ?? 0 ),
-        'delete_on_uninstall' => ! empty( $input['delete_on_uninstall'] ) ? 1 : 0,
+        'delete_on_uninstall' => $flag( 'delete_on_uninstall' ),
         // Separate-tab fields: use $input if present (handler included it), else preserve $existing
         'gtm_id'             => isset( $input['gtm_id'] )             ? cookieflame_sanitize_gtm_id( $input['gtm_id'] )                : ( $existing['gtm_id'] ?? '' ),
         'uet_id'             => isset( $input['uet_id'] )             ? cookieflame_sanitize_uet_id( $input['uet_id'] )                : ( $existing['uet_id'] ?? '' ),
         'notification_email' => isset( $input['notification_email'] ) ? sanitize_email( $input['notification_email'] )           : ( $existing['notification_email'] ?? '' ),
-        'digest_interval'    => isset( $input['digest_interval'] )    ? cookieflame_normalise_interval( $input['digest_interval'] )    : cookieflame_normalise_interval( $existing['digest_interval'] ?? 1440 ),
-        // monitoring_paused is toggled only via the dedicated
-        // admin-post handler (cookieflame_toggle_monitoring_pause). When the
-        // handler's update_option() fires, the sanitize_option filter
-        // runs with $input containing the new value the handler wants
-        // to commit. When the main Settings tab saves, $input does not
-        // include this field, so we fall back to $existing to preserve
-        // whatever pause state was previously set.
+        'email_frequency'    => $email_frequency,
+        // "Watch for new cookies" Off. Toggled only via the dedicated
+        // admin-post handler (cookieflame_toggle_monitoring_pause) or
+        // the migration; the Settings tab preserves it.
         'monitoring_paused'  => isset( $input['monitoring_paused'] )  ? ( ! empty( $input['monitoring_paused'] ) ? 1 : 0 ) : ( ! empty( $existing['monitoring_paused'] ) ? 1 : 0 ),
     );
+    // Pre-5.4.0 setting, kept as-is so a downgrade still finds it.
+    if ( isset( $input['digest_interval'] ) || isset( $existing['digest_interval'] ) ) {
+        $clean['digest_interval'] = intval( $input['digest_interval'] ?? $existing['digest_interval'] );
+    }
+    return $clean;
 }
 
@@ -3532 +3786 @@
     check_admin_referer( 'cookieflame_save_notifications' );
 
-    $opts            = get_option( 'cookieflame_settings', array() );
-    $previous        = cookieflame_normalise_interval( $opts['digest_interval'] ?? 1440 );
+    $opts      = get_option( 'cookieflame_settings', array() );
+    $previous  = cookieflame_email_frequency();
+    $frequency = cookieflame_sanitize_email_frequency( sanitize_key( wp_unslash( $_POST['email_frequency'] ?? 'weekly' ) ) );
+    if ( 'instant' === $frequency && ! cookieflame_instant_email_available() ) {
+        $frequency = 'daily';
+    }
     $opts['notification_email'] = sanitize_email( wp_unslash( $_POST['notification_email'] ?? '' ) );
-    $opts['digest_interval']    = cookieflame_normalise_interval( intval( $_POST['digest_interval'] ?? 1440 ) );
+    $opts['email_frequency']    = $frequency;
     update_option( 'cookieflame_settings', $opts );
 
-    // If the interval changed, clear any pending single-event digest so
-    // the next queued cookie reschedules against the new cadence. If the
-    // admin has just turned monitoring off, drop any pending digest too.
-    if ( $previous !== $opts['digest_interval'] || 0 === $opts['digest_interval'] ) {
+    // If the frequency changed, clear any pending single-event digest so
+    // the next queued cookie reschedules against the new setting. Emails
+    // turned off also drops the waiting list, so nothing stale is sent
+    // when they are turned back on.
+    if ( $previous !== $frequency ) {
         wp_clear_scheduled_hook( 'cookieflame_send_digest' );
         delete_option( 'cookieflame_digest_scheduled' );
+        if ( 'off' === $frequency ) {
+            update_option( 'cookieflame_notification_queue', array() );
+        }
     }
 
@@ -3554 +3816 @@
 
 /**
- * Toggle the monitoring_paused flag from the Cookie Monitoring tab.
- * Pause suppresses beacons, beacon handling, digest queueing, and
+ * Toggle "Watch for new cookies" (the monitoring_paused flag) from the
+ * Cookie Monitoring tab. Off suppresses beacons, beacon handling, digest queueing, and
  * digest sending — all three paths gate on cookieflame_monitoring_is_off(),
  * which now returns true when paused. On pause we also clear any
@@ -3571 +3833 @@
 
     $opts       = get_option( 'cookieflame_settings', array() );
-    $was_paused = ! empty( $opts['monitoring_paused'] );
+    $was_paused = cookieflame_monitoring_is_paused();
     $now_paused = ! $was_paused;
 
@@ -3588 +3850 @@
         // next cadence window rather than immediately.
         $queue    = get_option( 'cookieflame_notification_queue', array() );
-        $interval = cookieflame_current_interval_minutes();
+        $interval = cookieflame_email_delay_minutes();
         if ( ! empty( $queue ) && $interval > 0 && ! wp_next_scheduled( 'cookieflame_send_digest' ) ) {
             wp_schedule_single_event( time() + ( $interval * MINUTE_IN_SECONDS ), 'cookieflame_send_digest' );
@@ -3930 +4192 @@
         esc_html( $a['desc'] ?? '' )
     );
+    if ( ! empty( $a['help'] ) ) {
+        printf( '<p class="description">%s</p>', esc_html( $a['help'] ) );
+    }
 }
 
@@ -4192 +4457 @@
         </div>
 
-        <?php if ( ! cookieflame_is_premium() ) : ?>
+        <?php if ( ! cookieflame_is_premium() && ! get_user_meta( get_current_user_id(), 'cookieflame_upgrade_banner_dismissed', true ) ) : ?>
         <div class="cf-admin-upgrade-banner">
             <div class="cf-admin-upgrade-banner-icon">&#x2728;</div>
@@ -4200 +4465 @@
             </div>
             <a href="https://cookieflame.com/pricing" target="_blank" class="cf-admin-btn-upgrade"><?php esc_html_e( 'Upgrade to Pro', 'cookieflame' ); ?> &rarr;</a>
+            <form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="cf-admin-upgrade-banner-dismiss">
+                <?php wp_nonce_field( 'cookieflame_dismiss_upgrade_banner' ); ?>
+                <input type="hidden" name="action" value="cookieflame_dismiss_upgrade_banner" />
+                <input type="hidden" name="tab" value="<?php echo esc_attr( $active_tab ); ?>" />
+                <button type="submit" class="cf-admin-upgrade-banner-close" aria-label="<?php esc_attr_e( 'Dismiss this message', 'cookieflame' ); ?>" title="<?php esc_attr_e( 'Dismiss this message', 'cookieflame' ); ?>">&times;</button>
+            </form>
         </div>
         <?php endif; ?>
@@ -4209 +4480 @@
             <p><?php esc_html_e( 'Add this shortcode to the page you have set as your Privacy Policy page (under Settings > Privacy). It shows visitors which cookie categories are active, what each cookie does, and a button to change their consent choices.', 'cookieflame' ); ?></p>
             <pre class="cf-admin-code-block">[cookieflame_declaration]</pre>
+            <h3><?php esc_html_e( 'Cookie Settings Link', 'cookieflame' ); ?></h3>
+            <p><?php esc_html_e( 'Put this shortcode in your footer or anywhere else to give visitors a "Cookie settings" link that reopens their choices. US visitors get the "Do Not Sell or Share My Personal Information" choice. You can change the wording with text="...". To use a menu item or your own button instead, give it the CSS class cc-open-settings.', 'cookieflame' ); ?></p>
+            <pre class="cf-admin-code-block">[cookieflame_settings_link]</pre>
         </div>
 
@@ -4255 +4529 @@
             <?php
             settings_fields( 'cookieflame_settings_group' );
+            ?>
+            <input type="hidden" name="cookieflame_settings[_form]" value="main" />
+            <?php
             do_settings_sections( 'cookieflame' );
             submit_button();
             ?>
         </form>
+
+        <?php
+        /**
+         * Fires on the Settings tab after the main settings form, so other
+         * plugins can add their own section (with its own form and option).
+         */
+        do_action( 'cookieflame_settings_sections' );
+        ?>
 
         <div class="cf-admin-card cf-admin-card-warning">
@@ -4454 +4739 @@
 
                 <h4 style="margin-top:16px;margin-bottom:8px;"><?php esc_html_e( 'How the scan works', 'cookieflame' ); ?></h4>
-                <p style="margin-bottom:12px;"><?php esc_html_e( 'The scan reads cookies from this browser, right now. It does not crawl your website or check other visitors. If a cookie does not exist in your browser at this moment, it will not appear in the scan. That means you need to visit your own website first and trigger all the scripts that set cookies.', 'cookieflame' ); ?></p>
+                <p style="margin-bottom:12px;"><?php esc_html_e( 'Cookie Discovery uses your own browser. It records the cookies your browser picks up while you browse your site with every cookie allowed. It does not crawl your website or check other visitors, so a cookie only appears if a page you visit sets it. Cookies your visitors pick up are found separately by Watch for new cookies on the Cookie Monitoring tab.', 'cookieflame' ); ?></p>
 
                 <h4 style="margin-bottom:8px;"><?php esc_html_e( 'Before you start', 'cookieflame' ); ?></h4>
-                <p style="margin-bottom:4px;color:#d63638;"><strong><?php esc_html_e( 'Check your tracking settings first.', 'cookieflame' ); ?></strong></p>
-                <p style="margin-bottom:12px;"><?php esc_html_e( 'Go to the Settings tab. Make sure "Track logged-in users" is checked and "Do not track this device" is unchecked. If either of these is blocking tracking, scripts will be suppressed for you even after you accept cookies, and no third-party cookies will appear in the scan. Save the settings and clear your site cache if you make changes. You can turn these back on after you have finished scanning.', 'cookieflame' ); ?></p>
+                <p style="margin-bottom:4px;"><strong><?php esc_html_e( 'Clear your page cache if you run one.', 'cookieflame' ); ?></strong></p>
+                <p style="margin-bottom:12px;"><?php esc_html_e( 'You do not need to change any CookieFlame settings. While Cookie Discovery runs, "Exclude staff from tracking" and "Do not track this device" are paused for your browser, and they are put back when you click Finish Discovery.', 'cookieflame' ); ?></p>
 
                 <h4 style="margin-bottom:8px;"><?php esc_html_e( 'Step by step', 'cookieflame' ); ?></h4>
@@ -4464 +4749 @@
                     <li>
                         <strong><?php esc_html_e( 'Start Cookie Discovery.', 'cookieflame' ); ?></strong>
-                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'When you click the Start Cookie Discovery button above, your website opens in this tab with all cookies temporarily accepted, so every tracking script can run and set its cookies. You need to be in the same browser you are using right now for wp-admin, because cookies are stored per browser.', 'cookieflame' ); ?></span>
+                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'Click Start Cookie Discovery above, then Open my site. Your site opens in this tab with every cookie allowed for your browser only, and a green bar at the top counts what is found. Use the browser you are using for wp-admin right now, because cookies are stored per browser.', 'cookieflame' ); ?></span>
                     </li>
                     <li>
-                        <strong><?php esc_html_e( 'Click "Accept All" on the consent banner.', 'cookieflame' ); ?></strong>
-                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'This is essential. The plugin blocks all tracking scripts until consent is given. If you only accept some categories, only those scripts will run. You need to accept everything so every script fires and every cookie gets created.', 'cookieflame' ); ?></span>
+                        <strong><?php esc_html_e( 'You will not see the consent banner.', 'cookieflame' ); ?></strong>
+                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'Cookie Discovery allows every cookie for your browser while it runs, so every script on your site can run and set its cookies. Your visitors still see the banner as normal.', 'cookieflame' ); ?></span>
                     </li>
                     <li>
@@ -4484 +4769 @@
                     </li>
                     <li>
-                        <strong><?php esc_html_e( 'Come back to this tab to see your results.', 'cookieflame' ); ?></strong>
-                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'The table will update with every cookie now sitting in your browser. Known cookies will have their details filled in automatically. Unknown cookies will be highlighted in yellow.', 'cookieflame' ); ?></span>
+                        <strong><?php esc_html_e( 'Click Finish Discovery on the green bar.', 'cookieflame' ); ?></strong>
+                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'You come back here, and the table lists every cookie found. Known cookies have their details filled in automatically. Unknown cookies are highlighted in yellow.', 'cookieflame' ); ?></span>
                     </li>
                     <li>
@@ -4500 +4785 @@
                     </li>
                     <li>
-                        <strong><?php esc_html_e( 'Re-enable your tracking protection.', 'cookieflame' ); ?></strong>
-                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'If you turned off "Do not track this device" in step 1, go back to the Settings tab and turn it back on. You can also click "Delete Non-Essential Cookies" on the Settings tab to clean up the tracking cookies that were just created during your scan.', 'cookieflame' ); ?></span>
+                        <strong><?php esc_html_e( 'Tidy up your browser if you like.', 'cookieflame' ); ?></strong>
+                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'Your tracking settings are put back automatically. To remove the tracking cookies your browser picked up during the scan, click "Delete Non-Essential Cookies from This Browser" on the Settings tab.', 'cookieflame' ); ?></span>
                     </li>
                 </ol>
@@ -4510 +4795 @@
                 <h4 style="margin-bottom:4px;"><?php esc_html_e( 'Why are some cookies not showing up?', 'cookieflame' ); ?></h4>
                 <ul style="margin:0 0 12px 20px;line-height:1.8;">
-                    <li><strong><?php esc_html_e( 'You did not click Accept All:', 'cookieflame' ); ?></strong> <?php esc_html_e( 'If you only accepted some categories, scripts in the other categories never ran. Their cookies do not exist. Go back and accept all categories.', 'cookieflame' ); ?></li>
-                    <li><strong><?php esc_html_e( 'Your tracking protection is still on:', 'cookieflame' ); ?></strong> <?php esc_html_e( 'If "Do not track this device" is enabled or "Track logged-in users" is unchecked on the Settings tab, tracking is suppressed for your browser even after you accept cookies. Temporarily disable these before scanning.', 'cookieflame' ); ?></li>
+                    <li><strong><?php esc_html_e( 'Your page cache served an old page:', 'cookieflame' ); ?></strong> <?php esc_html_e( 'Clear your page cache and run Cookie Discovery again.', 'cookieflame' ); ?></li>
                     <li><strong><?php esc_html_e( 'The cookie is page-specific:', 'cookieflame' ); ?></strong> <?php esc_html_e( 'Some cookies are only set on specific pages (e.g. Stripe only on checkout, a chat widget only on contact pages). Visit those pages before re-scanning.', 'cookieflame' ); ?></li>
                     <li><strong><?php esc_html_e( 'The cookie is on a subdomain:', 'cookieflame' ); ?></strong> <?php esc_html_e( 'If you have subdomains (like app.yoursite.com), cookies locked to that subdomain are invisible from your main site. Enable "Share consent across subdomains" in Settings to share cookies, or use the "Add Cookie Manually" section below to register them by name.', 'cookieflame' ); ?></li>
@@ -4587 +4871 @@
                 <div id="cf-admin-discovery-idle">
                     <div style="display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap;">
-                        <button type="button" id="cf-admin-discovery-start" class="cf-admin-btn-primary"><?php esc_html_e( 'Start Cookie Discovery', 'cookieflame' ); ?></button>
-                        <span style="font-size:13px;color:#50575e;flex:1;min-width:200px;"><?php esc_html_e( 'Temporarily disables tracking protection, opens your site in a new tab with all cookies accepted, and lets you browse a few pages. When you finish, it scans for cookies and restores your settings.', 'cookieflame' ); ?></span>
+                        <button type="button" id="cf-admin-discovery-start" class="cf-admin-btn-primary"><?php esc_html_e( 'Start Cookie Discovery (uses your own browser)', 'cookieflame' ); ?></button>
+                        <span style="font-size:13px;color:#50575e;flex:1;min-width:200px;"><?php esc_html_e( 'Cookie Discovery uses your own browser: it allows every cookie for you only while you browse a few pages of your site in this tab. When you finish, it lists the cookies found and puts your settings back.', 'cookieflame' ); ?></span>
                     </div>
                     <p style="font-size:12px;color:#646970;margin:10px 0 0;"><?php esc_html_e( 'If you notice cookies you cannot explain after scanning, try running discovery in an incognito or private browser window. Browser extensions can occasionally inject tracking cookies that do not belong to your site, and incognito mode disables them by default. This is uncommon.', 'cookieflame' ); ?></p>
@@ -5002 +5286 @@
             <?php if ( $cookieflame_paused ) : ?>
             <div class="notice notice-warning is-dismissible" style="margin:0 0 16px;">
-                <p><strong><?php esc_html_e( 'Monitoring is now Off.', 'cookieflame' ); ?></strong> <?php esc_html_e( 'Cookie beacons and alert emails are suppressed. Your update interval is preserved for when you switch monitoring back on.', 'cookieflame' ); ?></p>
+                <p><strong><?php esc_html_e( 'Watch for new cookies is now Off.', 'cookieflame' ); ?></strong> <?php esc_html_e( 'Visitors\' browsers no longer report new cookies, and no emails are sent. Your email setting is kept for when you turn it back on.', 'cookieflame' ); ?></p>
             </div>
             <?php endif; ?>
@@ -5008 +5292 @@
             <?php if ( $cookieflame_resumed ) : ?>
             <div class="notice notice-success is-dismissible" style="margin:0 0 16px;">
-                <p><strong><?php esc_html_e( 'Monitoring is now On.', 'cookieflame' ); ?></strong> <?php esc_html_e( 'New cookies will be detected on the cadence you have configured.', 'cookieflame' ); ?></p>
+                <p><strong><?php esc_html_e( 'Watch for new cookies is now On.', 'cookieflame' ); ?></strong> <?php esc_html_e( 'New cookies appear in the Cookie Manager as soon as a visitor\'s browser reports them.', 'cookieflame' ); ?></p>
             </div>
             <?php endif; ?>
 
-            <p class="cf-admin-tab-intro"><?php esc_html_e( 'Watch real visitor sessions in the background and surface new cookies as they appear.', 'cookieflame' ); ?></p>
+            <p class="cf-admin-tab-intro"><?php esc_html_e( 'Your visitors\' browsers report cookies as they browse your site, so new ones show up in the Cookie Manager without you scanning.', 'cookieflame' ); ?></p>
 
             <?php $cookieflame_is_paused = cookieflame_monitoring_is_paused(); ?>
             <div class="cf-admin-pause-card <?php echo $cookieflame_is_paused ? 'cf-admin-pause-card-paused' : 'cf-admin-pause-card-running'; ?>">
                 <div class="cf-admin-pause-card-body">
-                    <h3 class="cf-admin-pause-card-title"><?php esc_html_e( 'Visitor Monitoring', 'cookieflame' ); ?></h3>
-                    <p class="cf-admin-pause-card-desc"><?php esc_html_e( 'Pause during site surgery (plugin swaps, theme changes, migrations). Your update interval is preserved.', 'cookieflame' ); ?></p>
+                    <h3 class="cf-admin-pause-card-title"><?php esc_html_e( 'Watch for new cookies', 'cookieflame' ); ?></h3>
+                    <p class="cf-admin-pause-card-desc"><?php esc_html_e( 'Uses your visitors\' browsers. New cookies are recorded the moment a visitor\'s browser reports them. Turn it off for a while during big changes (plugin swaps, theme changes, migrations) if you prefer. Clear your page cache after switching, so cached pages pick up the change.', 'cookieflame' ); ?></p>
                 </div>
                 <form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="cf-admin-pause-card-action">
@@ -5027 +5311 @@
                         <span class="cf-admin-toggle-label"><?php
                             echo $cookieflame_is_paused
-                                ? esc_html__( 'Monitoring: Off', 'cookieflame' )
-                                : esc_html__( 'Monitoring: On', 'cookieflame' );
+                                ? esc_html__( 'Watch for new cookies: Off', 'cookieflame' )
+                                : esc_html__( 'Watch for new cookies: On', 'cookieflame' );
                         ?></span>
                     </button>
@@ -5035 +5319 @@
 
             <?php
-            $notif_opts   = get_option( 'cookieflame_settings', array() );
-            $notif_email  = $notif_opts['notification_email'] ?? '';
-            $current_mins = cookieflame_normalise_interval( $notif_opts['digest_interval'] ?? 1440 );
-            $buckets      = cookieflame_interval_buckets();
-            $bucket_label = array(
-                0     => __( 'Off', 'cookieflame' ),
-                15    => __( '15 minutes', 'cookieflame' ),
-                60    => __( '1 hour', 'cookieflame' ),
-                240   => __( '4 hours', 'cookieflame' ),
-                1440  => __( 'Daily', 'cookieflame' ),
-                10080 => __( 'Weekly', 'cookieflame' ),
+            $notif_opts        = get_option( 'cookieflame_settings', array() );
+            $notif_email       = $notif_opts['notification_email'] ?? '';
+            $cf_frequency      = cookieflame_email_frequency();
+            $cf_instant_ok     = cookieflame_instant_email_available();
+            $cf_is_premium     = cookieflame_is_premium();
+            if ( 'instant' === $cf_frequency && ! $cf_instant_ok ) {
+                $cf_frequency = 'daily'; // What the site actually gets without Pro.
+            }
+            $cf_frequencies = array(
+                'weekly'  => __( 'Weekly', 'cookieflame' ),
+                'daily'   => __( 'Daily', 'cookieflame' ),
+                'instant' => $cf_instant_ok ? __( 'Instantly', 'cookieflame' ) : __( 'Instantly (Pro)', 'cookieflame' ),
+                'off'     => __( 'Off', 'cookieflame' ),
             );
-            // Dropdown ordering: fastest at top, then slower cadences,
-            // with Off at the very bottom as the "I don't want this"
-            // answer rather than a cadence choice. Off is excluded from
-            // the ordered list and re-appended at the end.
-            $cf_dropdown_order = array( 15, 60, 240, 1440, 10080 );
-            $cf_ordered_buckets = array();
-            $cf_buckets_by_minutes = array();
-            foreach ( $buckets as $cf_b ) {
-                $cf_buckets_by_minutes[ $cf_b['minutes'] ] = $cf_b;
-            }
-            foreach ( $cf_dropdown_order as $cf_m ) {
-                if ( isset( $cf_buckets_by_minutes[ $cf_m ] ) ) {
-                    $cf_ordered_buckets[] = $cf_buckets_by_minutes[ $cf_m ];
-                }
-            }
-            if ( isset( $cf_buckets_by_minutes[ 0 ] ) ) {
-                $cf_ordered_buckets[] = $cf_buckets_by_minutes[ 0 ];
-            }
-            $cf_is_premium = cookieflame_is_premium();
             ?>
 
@@ -5075 +5342 @@
                     <tr>
                         <th scope="row">
-                            <label for="cf-admin-digest-interval" title="<?php esc_attr_e( 'How often CookieFlame refreshes the cookie list and sends digest alerts. Shorter cadences surface new cookies sooner; longer cadences group changes into a single summary.', 'cookieflame' ); ?>"><?php esc_html_e( 'Update interval', 'cookieflame' ); ?></label>
+                            <label for="cf-admin-email-frequency"><?php esc_html_e( 'Email me about changes', 'cookieflame' ); ?></label>
                         </th>
                         <td>
-                            <select id="cf-admin-digest-interval" name="digest_interval">
-                                <?php foreach ( $cf_ordered_buckets as $cf_b ) :
-                                    $cf_min   = intval( $cf_b['minutes'] );
-                                    $cf_tier  = (string) ( $cf_b['tier'] ?? 'free' );
-                                    $cf_label = $bucket_label[ $cf_min ] ?? ( $cf_min . ' min' );
-                                    $cf_is_pro_tier = ( 'pro' === $cf_tier );
-                                    $cf_disabled    = ( $cf_is_pro_tier && ! $cf_is_premium );
-                                    if ( $cf_is_pro_tier ) {
-                                        /* translators: %s: human-readable interval label, e.g. "15 minutes" */
-                                        $cf_label = sprintf( __( '%s (Pro)', 'cookieflame' ), $cf_label );
-                                    }
-                                    ?>
-                                    <option value="<?php echo esc_attr( $cf_min ); ?>"<?php
-                                        selected( $current_mins, $cf_min );
-                                        disabled( $cf_disabled, true );
+                            <select id="cf-admin-email-frequency" name="email_frequency">
+                                <?php foreach ( $cf_frequencies as $cf_value => $cf_label ) : ?>
+                                    <option value="<?php echo esc_attr( $cf_value ); ?>"<?php
+                                        selected( $cf_frequency, $cf_value );
+                                        disabled( 'instant' === $cf_value && ! $cf_instant_ok, true );
                                     ?>><?php echo esc_html( $cf_label ); ?></option>
                                 <?php endforeach; ?>
                             </select>
-                            <p class="description"><?php esc_html_e( 'Pro intervals are visible above so you can see what an upgrade adds. They unlock when CookieFlame Pro is active.', 'cookieflame' ); ?></p>
+                            <p class="description"><?php esc_html_e( 'One email lists every new cookie found since the last one. Nothing is sent when there is nothing new.', 'cookieflame' ); ?></p>
                             <?php if ( ! $cf_is_premium ) : ?>
-                            <p class="description"><a href="https://cookieflame.com/pricing" target="_blank"><?php esc_html_e( 'Upgrade to CookieFlame Pro', 'cookieflame' ); ?></a></p>
+                            <p class="description"><?php esc_html_e( 'Instant emails come with CookieFlame Pro.', 'cookieflame' ); ?> <a href="https://cookieflame.com/pricing" target="_blank"><?php esc_html_e( 'Upgrade to CookieFlame Pro', 'cookieflame' ); ?></a></p>
                             <?php endif; ?>
                         </td>
@@ -5113 +5370 @@
                 <p style="display:flex;align-items:center;gap:14px;flex-wrap:wrap;">
                     <?php submit_button( __( 'Save Cookie Monitoring Settings', 'cookieflame' ), 'primary', 'submit', false ); ?>
-                    <span class="description" style="margin:0;"><?php esc_html_e( 'Clear your page cache after saving so visitors pick up the new beacon configuration.', 'cookieflame' ); ?></span>
                 </p>
             </form>
@@ -5123 +5379 @@
             <div class="cf-admin-card">
                 <h2><?php esc_html_e( 'Banner Preview', 'cookieflame' ); ?></h2>
-                <p><?php esc_html_e( 'Preview how the consent banner appears to visitors in different regions. Select a region and theme to see the exact banner they would see.', 'cookieflame' ); ?></p>
+                <p><?php esc_html_e( 'Choose a region and theme to see the banner those visitors get.', 'cookieflame' ); ?></p>
 
                 <div style="display:flex;gap:16px;flex-wrap:wrap;margin:20px 0;">
                     <div>
                         <label style="font-size:12px;font-weight:600;text-transform:uppercase;letter-spacing:.5px;color:#50575e;display:block;margin-bottom:6px;"><?php esc_html_e( 'Region', 'cookieflame' ); ?></label>
-                        <select id="cf-admin-preview-region" style="min-width:200px;padding:8px 12px;border-radius:6px;border:1px solid #dcdcde;">
+                        <select id="cf-admin-preview-region" style="min-width:200px;padding:8px 36px 8px 12px;border-radius:6px;border:1px solid #dcdcde;">
                             <option value="gdpr"><?php esc_html_e( 'GDPR / Opt-in (EU, EEA, UK, Brazil, South Africa, Switzerland)', 'cookieflame' ); ?></option>
                             <option value="ccpa"><?php esc_html_e( 'CCPA / Opt-out (United States)', 'cookieflame' ); ?></option>
@@ -5136 +5392 @@
                     <div>
                         <label style="font-size:12px;font-weight:600;text-transform:uppercase;letter-spacing:.5px;color:#50575e;display:block;margin-bottom:6px;"><?php esc_html_e( 'Theme', 'cookieflame' ); ?></label>
-                        <select id="cf-admin-preview-theme" style="min-width:200px;padding:8px 12px;border-radius:6px;border:1px solid #dcdcde;">
+                        <select id="cf-admin-preview-theme" style="min-width:200px;padding:8px 36px 8px 12px;border-radius:6px;border:1px solid #dcdcde;">
                             <option value="light"><?php esc_html_e( 'Light', 'cookieflame' ); ?></option>
                             <option value="dark"><?php esc_html_e( 'Dark', 'cookieflame' ); ?></option>
                         </select>
                     </div>
+                    <div id="cf-admin-preview-reject-wrap" style="align-self:flex-end;padding-bottom:8px;">
+                        <label><input type="checkbox" id="cf-admin-preview-reject" /> <?php esc_html_e( 'Show "Decline all" on the first screen', 'cookieflame' ); ?></label>
+                    </div>
+                    <div id="cf-admin-preview-gpc-wrap" style="align-self:flex-end;padding-bottom:8px;display:none;">
+                        <label><input type="checkbox" id="cf-admin-preview-gpc" /> <?php esc_html_e( 'Visitor\'s browser sends Global Privacy Control', 'cookieflame' ); ?></label>
+                    </div>
                 </div>
-
-                <div style="margin-top:8px;font-size:12px;color:#888;line-height:1.8;">
-                    <strong><?php esc_html_e( 'GDPR / Opt-in:', 'cookieflame' ); ?></strong>
-                    <?php esc_html_e( 'Full consent banner with Accept All, Decline All, and Manage Preferences. Visitors must opt in before non-essential cookies are set.', 'cookieflame' ); ?><br />
-                    <span style="color:#aaa;"><?php esc_html_e( 'Countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden (EU); Iceland, Liechtenstein, Norway (EEA); United Kingdom, Guernsey, Jersey, Isle of Man (UK); Switzerland (revFADP); Brazil (LGPD); South Africa (POPIA).', 'cookieflame' ); ?></span><br /><br />
-                    <strong><?php esc_html_e( 'CCPA / Opt-out:', 'cookieflame' ); ?></strong>
-                    <?php esc_html_e( 'Compact notice bar with a "Do Not Sell My Personal Information" link. All cookies are granted by default. The visitor can opt out of the sale or sharing of personal data. If Global Privacy Control (GPC) is detected in the browser, marketing cookies are automatically suppressed.', 'cookieflame' ); ?><br />
-                    <span style="color:#aaa;"><?php esc_html_e( 'Countries: United States (CCPA/CPRA applies to California residents; GPC is legally binding in 12+ states including California, Colorado, Connecticut, Texas, Montana, Oregon, and others).', 'cookieflame' ); ?></span><br /><br />
-                    <strong><?php esc_html_e( 'No banner:', 'cookieflame' ); ?></strong>
-                    <?php esc_html_e( 'No consent banner is shown. All cookies are auto-granted. The cookie icon appears in the bottom-left corner so visitors can manage preferences if they choose. This applies to visitors in countries not covered by the regions above.', 'cookieflame' ); ?>
+                <p class="description" id="cf-admin-preview-reject-note" style="margin-top:-8px;"><?php esc_html_e( 'The "Decline all" box here only changes the preview. To change your banner, use the setting on the Settings tab.', 'cookieflame' ); ?></p>
+
+                <div id="cf-admin-preview-container" style="position:relative;border-radius:12px;overflow:hidden;margin-top:16px;"></div>
+
+                <div id="cf-admin-preview-notes" style="margin-top:16px;font-size:12px;color:#888;line-height:1.8;">
+                    <p data-region="gdpr" style="margin:0;"><strong><?php esc_html_e( 'GDPR / Opt-in:', 'cookieflame' ); ?></strong>
+                    <?php esc_html_e( 'Full consent banner with Accept All and Manage preferences. Decline All is under Manage preferences, and you can also show it next to Accept All with the setting on the Settings tab. Visitors must opt in before non-essential cookies are set.', 'cookieflame' ); ?><br />
+                    <span style="color:#aaa;"><?php esc_html_e( 'Countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden (EU); Iceland, Liechtenstein, Norway (EEA); United Kingdom, Guernsey, Jersey, Isle of Man (UK); Switzerland (revFADP); Brazil (LGPD); South Africa (POPIA).', 'cookieflame' ); ?></span></p>
+                    <p data-region="ccpa" style="margin:0;display:none;"><strong><?php esc_html_e( 'CCPA / Opt-out:', 'cookieflame' ); ?></strong>
+                    <?php esc_html_e( 'Compact notice with a "Do Not Sell or Share My Personal Information" link, which opens a real opt-out choice. Cookies are allowed by default. If the visitor\'s browser sends Global Privacy Control (GPC), they are opted out of selling and sharing straight away: Marketing stays off, the notice says the signal was honoured, and OK only closes the notice. They can opt back in only through a separate choice, and a later visit without GPC keeps the opt-out.', 'cookieflame' ); ?><br />
+                    <span style="color:#aaa;"><?php esc_html_e( 'Countries: United States. The same notice covers California (CCPA/CPRA) and the other states with similar laws.', 'cookieflame' ); ?></span></p>
+                    <p data-region="none" style="margin:0;display:none;"><strong><?php esc_html_e( 'No banner:', 'cookieflame' ); ?></strong>
+                    <?php esc_html_e( 'No consent banner is shown and all cookies are allowed. Visitors can still change their choices from a [cookieflame_settings_link] link or your [cookieflame_declaration] page. This applies to visitors in countries not covered by the regions above.', 'cookieflame' ); ?></p>
                 </div>
             </div>
-
-            <div id="cf-admin-preview-container" style="position:relative;border-radius:12px;overflow:hidden;min-height:400px;margin-top:4px;">
-            </div>
         </div>
 
-        <?php
-        $opts = get_option( 'cookieflame_settings', array() );
-        $preview_config = array(
-            'privacyUrl' => $opts['privacy_url'] ?? '/privacy-policy',
-            'ccpaUrl'    => ( $opts['privacy_url'] ?? '/privacy-policy' ) . '#do-not-sell',
-        );
-        $preview_cfg_json   = wp_json_encode( $preview_config );
-        $preview_theme_json = wp_json_encode( $opts['theme'] ?? 'light' );
-        $preview_js = <<<'JS'
-(function () {
-    var regionEl = document.getElementById("cf-admin-preview-region");
-    var themeEl  = document.getElementById("cf-admin-preview-theme");
-    var container = document.getElementById("cf-admin-preview-container");
-    if (!regionEl || !themeEl || !container) return;
-
-    var cfg = __COOKIEFLAME_PREVIEW_CFG__;
-
-    var txt = {
-        title: "We value your privacy",
-        description: "We use cookies to improve your experience, analyse traffic and personalise content. You can choose which categories to allow.",
-        acceptAll: "Accept All",
-        declineAll: "Decline All",
-        savePrefs: "Save Preferences",
-        managePrefs: "Manage preferences",
-        hidePrefs: "Hide preferences",
-        ccpaText: "We use cookies and similar technologies. Under California law, you have the right to opt out of the sale of your personal information.",
-        ccpaDnsmpi: "Do Not Sell My Personal Information",
-        ccpaOk: "OK"
-    };
-
-    var categories = [
-        { id: "necessary", name: "Necessary", desc: "Required for the site to function. Cannot be disabled.", required: true },
-        { id: "preferences", name: "Preferences", desc: "Remember your settings and personalisation choices.", required: false },
-        { id: "analytics", name: "Analytics", desc: "Help us understand how visitors use the site.", required: false },
-        { id: "marketing", name: "Marketing", desc: "Used to deliver relevant ads and track campaigns.", required: false }
-    ];
-
-    function esc(s) { var d = document.createElement("div"); d.textContent = s; return d.innerHTML; }
-
-    function render() {
-        var region = regionEl.value;
-        var theme  = themeEl.value;
-        var isDark = theme === "dark";
-        var bg = isDark ? "#121212" : "#f5f5f5";
-        var bannerBg = isDark ? "#1c1c1e" : "#fff";
-        var textColor = isDark ? "#f5f5f7" : "#1d1d1f";
-        var mutedColor = isDark ? "#98989d" : "#555";
-        var borderColor = isDark ? "#2c2c2e" : "#e8e8ed";
-        var catDescColor = isDark ? "#636366" : "#888";
-        var acceptBg = isDark ? "#0a84ff" : "#0071e3";
-        var declineBg = isDark ? "#2c2c2e" : "#e8e8ed";
-        var declineColor = isDark ? "#f5f5f7" : "#1d1d1f";
-        var saveBg = isDark ? "#30d158" : "#34c759";
-        var detailsColor = isDark ? "#636366" : "#888";
-        var linkColor = isDark ? "#2997ff" : "#0071e3";
-        var toggleBg = isDark ? "#3a3a3c" : "#ccc";
-        var toggleActiveBg = isDark ? "#0a84ff" : "#0071e3";
-        var sliderBg = isDark ? "#f5f5f7" : "#fff";
-        var poweredColor = isDark ? "#888" : "#ccc";
-
-        var html = '<div style="background:' + bg + ';padding:60px 20px 20px;min-height:400px;display:flex;align-items:flex-end;justify-content:center;border-radius:12px;">';
-
-        if (region === "none") {
-            html += '<div style="text-align:center;padding:40px;color:' + mutedColor + ';font-family:-apple-system,BlinkMacSystemFont,\'Segoe UI\',Roboto,sans-serif;font-size:14px;align-self:center;">';
-            html += '<div style="font-size:48px;margin-bottom:16px;">&#x1F30D;</div>';
-            html += '<div style="font-weight:700;font-size:16px;color:' + textColor + ';margin-bottom:8px;">No banner shown</div>';
-            html += '<div>Visitors outside the regulated regions (EU/EEA, UK, US,<br>Switzerland, Brazil, South Africa) see no consent banner.<br>All cookies are auto-granted. The cookie icon appears in the<br>bottom-left corner so they can manage preferences if they choose.</div>';
-            html += '<div style="margin-top:24px;width:48px;height:48px;border-radius:50%;background:' + (isDark ? "#f5f5f7" : "#1d1d1f") + ';display:inline-flex;align-items:center;justify-content:center;">';
-            html += '<svg width="24" height="24" viewBox="0 0 38 38" fill="none"><path d="M19.1 1.16c-.06-.42-.38-.77-.8-.83A11.8 11.8 0 0 0 13.28 1.2L7.5 4.3A11.8 11.8 0 0 0 3.95 7.98L1.09 13.9A11.8 11.8 0 0 0 .38 18.96l1.13 6.47a11.8 11.8 0 0 0 3.53 4.99l4.71 4.56a11.8 11.8 0 0 0 4.59 2.24l6.48.91a11.8 11.8 0 0 0 5.52-.89l5.78-3.09a11.8 11.8 0 0 0 3.55-3.69l2.87-5.9a11.8 11.8 0 0 0 .71-5.08c-.07-.41-.42-.73-.83-.79a14.8 14.8 0 0 1-8.16-7.61c-.14-.59-.63-1.05-1.23-1.14A14.8 14.8 0 0 1 19.1 1.16ZM15.25 10.25a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Zm-5 15a2.5 2.5 0 1 1 5 0 2.5 2.5 0 0 1-5 0Zm17.5-5a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Z" fill="' + (isDark ? "#1d1d1f" : "#fff") + '"/></svg>';
-            html += '</div>';
-            html += '</div>';
-            html += '</div>';
-            container.innerHTML = html;
-            return;
-        }
-
-        if (region === "ccpa") {
-            html += '<div style="position:relative;bottom:0;left:0;right:0;width:100%;background:' + bannerBg + ';box-shadow:0 -8px 40px rgba(0,0,0,.15);border-radius:20px 20px 0 0;font-family:-apple-system,BlinkMacSystemFont,\'Segoe UI\',Roboto,sans-serif;font-size:14px;color:' + textColor + ';">';
-            html += '<div style="max-width:720px;margin:0 auto;padding:20px 32px;display:flex;align-items:center;gap:20px;flex-wrap:wrap;">';
-            html += '<div style="flex:1;min-width:280px;"><p style="margin:0;color:' + mutedColor + ';">' + esc(txt.ccpaText) + '</p></div>';
-            html += '<div style="display:flex;gap:10px;align-items:center;flex-shrink:0;">';
-            html += '<a href="' + esc(cfg.ccpaUrl) + '" style="color:' + linkColor + ';text-decoration:underline;font-size:13px;font-weight:500;white-space:nowrap;">' + esc(txt.ccpaDnsmpi) + '</a>';
-            html += '<button style="display:inline-flex;align-items:center;justify-content:center;border-radius:12px;border:none;font-weight:700;cursor:pointer;background:' + acceptBg + ';color:#fff;font-size:15px;padding:14px 32px;box-shadow:0 2px 8px rgba(0,113,227,.3);">' + esc(txt.ccpaOk) + '</button>';
-            html += '</div></div>';
-            html += '<div style="text-align:center;padding:0 0 12px;font-size:11px;color:' + poweredColor + ';"><a href="https://www.cookieflame.com" target="_blank" rel="noopener" style="color:' + poweredColor + ';text-decoration:none;">Powered by CookieFlame</a></div>';
-            html += '</div>';
-            html += '</div>';
-            container.innerHTML = html;
-            return;
-        }
-
-        html += '<div style="position:relative;bottom:0;left:0;right:0;width:100%;background:' + bannerBg + ';box-shadow:0 -8px 40px rgba(0,0,0,.15);border-radius:20px 20px 0 0;font-family:-apple-system,BlinkMacSystemFont,\'Segoe UI\',Roboto,sans-serif;font-size:14px;color:' + textColor + ';">';
-        html += '<div style="max-width:720px;margin:0 auto;padding:32px 32px 20px;">';
-        html += '<p style="font-size:20px;font-weight:800;margin:0 0 8px;letter-spacing:-.3px;">' + esc(txt.title) + '</p>';
-        html += '<p style="margin:0 0 20px;color:' + mutedColor + ';font-size:14px;line-height:1.6;">' + esc(txt.description) + ' <a href="' + esc(cfg.privacyUrl) + '" style="color:' + linkColor + ';text-decoration:none;font-weight:500;">Privacy Policy</a></p>';
-
-        html += '<div style="display:flex;gap:10px;flex-wrap:wrap;align-items:center;margin-bottom:16px;">';
-        html += '<button style="display:inline-flex;align-items:center;justify-content:center;border-radius:12px;border:none;font-weight:700;cursor:pointer;background:' + acceptBg + ';color:#fff;font-size:15px;padding:14px 32px;box-shadow:0 2px 8px rgba(0,113,227,.3);">' + esc(txt.acceptAll) + '</button>';
-        html += '<button id="cf-admin-preview-manage" style="background:transparent;color:' + detailsColor + ';padding:11px 4px;font-weight:500;font-size:13px;border:none;cursor:pointer;">' + esc(txt.managePrefs) + '</button>';
-        html += '</div>';
-
-        html += '<div id="cf-admin-preview-cats" style="display:none;margin:0 0 16px;border:1px solid ' + borderColor + ';border-radius:14px;overflow:hidden;">';
-        for (var i = 0; i < categories.length; i++) {
-            var cat = categories[i];
-            var isLast = i === categories.length - 1;
-            var checkedAttr = cat.required ? " checked disabled" : "";
-            var alwaysOn = cat.required ? ' <span style="font-weight:400;font-size:11px;color:' + (isDark ? "#48484a" : "#aaa") + ';">(always on)</span>' : "";
-
-            html += '<div style="padding:16px 20px;' + (isLast ? "" : "border-bottom:1px solid " + borderColor + ";") + 'display:flex;justify-content:space-between;align-items:center;gap:16px;">';
-            html += '<div><div style="font-weight:700;font-size:14px;">' + esc(cat.name) + alwaysOn + '</div>';
-            html += '<div style="font-size:12px;color:' + catDescColor + ';margin-top:3px;">' + esc(cat.desc) + '</div></div>';
-            html += '<label style="position:relative;width:46px;height:26px;flex-shrink:0;display:block;">';
-            html += '<input type="checkbox"' + checkedAttr + ' style="opacity:0;width:0;height:0;position:absolute;" />';
-            html += '<span style="position:absolute;inset:0;background:' + (cat.required ? toggleActiveBg + ";opacity:.5" : toggleBg) + ';border-radius:26px;cursor:' + (cat.required ? "default" : "pointer") + ';transition:background .2s;"></span>';
-            html += '<span style="position:absolute;width:20px;height:20px;left:' + (cat.required ? "23px" : "3px") + ';bottom:3px;background:' + sliderBg + ';border-radius:50%;box-shadow:0 1px 3px rgba(0,0,0,.15);transition:transform .2s;"></span>';
-            html += '</label></div>';
-        }
-        html += '</div>';
-
-        html += '<div id="cf-admin-preview-pref-btns" style="display:none;gap:10px;flex-wrap:wrap;align-items:center;margin-bottom:8px;">';
-        html += '<button style="display:inline-flex;align-items:center;justify-content:center;border-radius:12px;border:none;font-weight:700;cursor:pointer;background:' + saveBg + ';color:#fff;font-size:14px;padding:13px 28px;box-shadow:0 2px 8px rgba(52,199,89,.3);">' + esc(txt.savePrefs) + '</button>';
-        html += '<button style="display:inline-flex;align-items:center;justify-content:center;border-radius:12px;border:none;font-weight:700;cursor:pointer;background:' + declineBg + ';color:' + declineColor + ';font-size:13px;padding:11px 22px;">' + esc(txt.declineAll) + '</button>';
-        html += '</div>';
-
-        html += '</div>';
-        html += '<div style="text-align:center;padding:0 0 16px;font-size:11px;color:' + poweredColor + ';"><a href="https://www.cookieflame.com" target="_blank" rel="noopener" style="color:' + poweredColor + ';text-decoration:none;">Powered by CookieFlame</a></div>';
-        html += '</div>';
-        html += '</div>';
-
-        container.innerHTML = html;
-
-        var manageBtn = document.getElementById("cf-admin-preview-manage");
-        var catsEl = document.getElementById("cf-admin-preview-cats");
-        var prefBtnsEl = document.getElementById("cf-admin-preview-pref-btns");
-        if (manageBtn && catsEl) {
-            manageBtn.addEventListener("click", function () {
-                var open = catsEl.style.display === "none";
-                catsEl.style.display = open ? "block" : "none";
-                if (prefBtnsEl) prefBtnsEl.style.display = open ? "flex" : "none";
-                manageBtn.textContent = open ? txt.hidePrefs : txt.managePrefs;
-            });
-        }
-    }
-
-    render();
-    regionEl.addEventListener("change", render);
-    themeEl.addEventListener("change", render);
-
-    themeEl.value = __COOKIEFLAME_PREVIEW_THEME__;
-    render();
-})();
-JS;
-        $preview_js = str_replace(
-            array( '__COOKIEFLAME_PREVIEW_CFG__', '__COOKIEFLAME_PREVIEW_THEME__' ),
-            array( $preview_cfg_json, $preview_theme_json ),
-            $preview_js
-        );
-        wp_print_inline_script_tag( $preview_js );
-        ?>
 
         <?php endif; ?>

cookieflame/tags/5.4.0/readme.txt

@@ -5 +5 @@
 Tested up to: 7.1
 Requires PHP: 8.0
-Stable tag: 5.3.0
+Stable tag: 5.4.0
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
-Cookie consent for WordPress that finds cookies automatically. Runs continuously, no external service, correct banner for GDPR, CCPA, LGPD, POPIA.
+Cookie consent for WordPress that finds cookies automatically. Self-hosted, with the right banner for GDPR, CCPA, LGPD and POPIA visitors.
 
 == Description ==
 
-CookieFlame is a cookie consent plugin for WordPress that does three things most other free plugins do not. It finds the cookies on your site automatically by watching real visitor sessions. It runs entirely on your own server with no outside connections. And it shows the right banner for each visitor based on where they are, rather than showing a single GDPR banner to the whole world.
+CookieFlame is a cookie consent plugin that finds your site's cookies for you, runs on your own server, and shows each visitor the banner their region requires. Full details are at [cookieflame.com](https://cookieflame.com).
 
-It is built by [Zoobu] and the full product site is at [cookieflame.com](https://cookieflame.com).
+= Finds cookies for you =
 
-= 🔍 Cookie discovery, continuously =
+* **Watch for new cookies:** your visitors' browsers report cookies as they browse, so a new plugin's or tag's cookies appear in the Cookie Manager without you scanning. Get an email about changes weekly, daily, or not at all.
+* **Cookie Discovery:** for a full list now, browse your own site with every cookie allowed for your browser only. It uses your own browser.
 
-Most consent plugins expect you to know which cookies your site sets. CookieFlame does not. A lightweight beacon watches real visitor sessions in the background and reports any cookies it has not seen before. New plugin installed? Its cookies surface automatically. Tracking tag changed? Picked up next time a visitor triggers it. No scheduled scans, no headless browsers, no external scanning service.
+= The right banner for each region =
 
-For a one-off inventory you can also run an on-demand Discovery scan from the admin. Browse your own site as logged in, watch the discovery bar accumulate cookies and detected services, click Finish when done.
+* UK, EU/EEA, Switzerland, Brazil and South Africa: an opt-in banner with Accept All and Manage preferences. You can also show Decline All on the first screen (off by default).
+* United States: a short notice with a "Do Not Sell or Share My Personal Information" link that opens a real opt-out choice.
+* Everywhere else: no banner.
 
-= 🌍 Correct behaviour per region =
+Country comes from CDN headers such as Cloudflare's, or a free MaxMind database you upload, with the time zone as a fallback. If none works, the opt-in banner is shown.
 
-CookieFlame detects visitor country and shows the banner that region actually requires:
+= Global Privacy Control =
 
-* EU, UK, EEA, Switzerland: full two-step GDPR opt-in banner with Accept, Manage Preferences, and Decline
-* California and other US states with similar laws: compact CCPA opt-out notice with a Do Not Sell link
-* Brazil (LGPD) and South Africa (POPIA): GDPR-style opt-in banner
-* Everywhere else: no banner, all cookies auto-granted
+A browser that sends Global Privacy Control (GPC) is opted out of selling and sharing straight away: marketing cookies stay off and Google's ad signals are denied. US visitors see that the signal was honoured, and OK only closes the notice. The opt-out is saved, so a later visit without GPC keeps it. A visitor can opt back in only through a separate, clear choice.
 
-Detection uses three layers in order: Cloudflare and other CDN country headers first (zero latency, works with every caching setup), then a local MaxMind GeoLite2 database if uploaded, then a browser timezone heuristic as a last-resort fallback. If all three fail, the plugin defaults to GDPR opt-in for safety rather than silently granting consent.
+= Blocks trackers before consent =
 
-= 🔒 No outside connections =
+Tracking scripts are rewritten on your server before the page is sent, so blocking works with WP Rocket, LiteSpeed, Cloudflare APO and other caches. Built-in patterns cover Google Analytics, Google Ads, Google Tag Manager, Microsoft Ads, Meta, X (Twitter), LinkedIn, Pinterest, Reddit and TikTok. Cookies you classify get matching rules automatically.
 
-CookieFlame does not load JavaScript from any content delivery network, does not call any geo API, does not phone home. Every part of the consent flow runs on your server and in the visitor's browser. The only optional outbound request is Google Tag Manager itself, if you enter a GTM container ID in the settings (see the External services section below).
+YouTube, Vimeo, Google Maps, Spotify, SoundCloud, Dailymotion and Elementor videos show a click-to-load placeholder until the visitor consents.
 
-This matters because a consent tool that itself sets third-party cookies is an awkward contradiction, and because self-hosted plugins keep working during outages of services you did not choose to depend on.
+= Google Consent Mode v2 =
 
-= 🚫 Server-side script blocking =
+All Google consent signals start as denied before any tag runs and update the moment a visitor chooses. Returning visitors' choices are restored before Google Tag Manager loads.
 
-When a visitor has not granted consent, CookieFlame rewrites tracking scripts in the HTML output so the browser does not execute them. This happens before the page leaves your server, which means it works with any caching stack: WP Rocket, LiteSpeed, Cloudflare APO, W3 Total Cache, and others all hold the correct pre-modified HTML. A lighter JavaScript layer handles scripts injected later by GTM or other plugins.
+= For developers =
 
-Known trackers are blocked from the moment you install the plugin. Ten services ship with built-in patterns: Google Analytics, Google Ads, Google Tag Manager, Microsoft Ads, Meta and Facebook, Twitter and X, LinkedIn, Pinterest, Reddit, TikTok. Anything else you classify in the Cookie Manager gets a matching block rule generated automatically.
+* Events: cc:ready, cc:update, cc:accept-all, cc:decline-all, cc:save and cc:banner-rendered.
+* JavaScript API: CookieConsent.getState(), show(), showSettings() and more.
+* [cookieflame_settings_link] shortcode, or the class cc-open-settings on any link, to reopen a visitor's choices.
+* CSS custom properties (--cc-accent, --cc-bg, --cc-radius, --cc-font and others) to restyle the banner.
+* Filters cookieflame_frontend_config and cookieflame_digest_email, and the action cookieflame_settings_sections.
+* An optional consent log endpoint for your own audit trail.
 
-= 🪟 Iframe facades =
+= CookieFlame Pro =
 
-YouTube, Vimeo, Google Maps, Spotify, SoundCloud, Dailymotion, and Elementor video widgets are replaced with click-to-accept placeholders until the visitor grants consent. The iframe source is stripped synchronously before the embed has a chance to contact its origin.
+Pro identifies and classifies cookies automatically, creates the blocking rules, and adds instant emails. See [cookieflame.com](https://cookieflame.com).
 
-= 📊 Google Consent Mode v2 =
+= Compliance note =
 
-All seven Google consent signals are managed automatically and set to denied by default before any tag runs. When a visitor grants consent, the correct signals update immediately. Returning visitors keep their stored choices, with the signals restored before GTM loads (so the first dataLayer push is already correct).
-
-Works with a GTM container ID you paste into the settings. No separate GTM consent template, no additional configuration. The plugin also injects the body noscript tag in the correct position.
-
-= 🛡️ Global Privacy Control =
-
-GPC is detected automatically and suppresses marketing consent for CCPA visitors. Required by California, Colorado, Connecticut, Texas, and nine other US states. Turning GPC off later restores the visitor's original stored choice rather than overwriting it.
-
-= 📜 IAB TCF v2.2 =
-
-A TCF v2.2 stub is registered on every page so ad-tech vendors that need TCF signals can read them.
-
-= 🚀 Lightweight and framework-free =
-
-The frontend JavaScript is a single 37 KB file (12 KB gzipped) with no jQuery and no framework dependencies. A separate facades bundle is only loaded on pages that actually contain a blockable embed. The Discovery bundle only loads for administrators during an active scan.
-
-= 👨‍💻 Developer-friendly =
-
-* Event API with CustomEvents: cc:ready, cc:update, cc:accept-all, cc:decline-all, cc:save
-* Public JavaScript API for reading consent state and showing the banner on demand
-* Per-category onAccept and onReject callbacks
-* Extension points via WordPress filters and actions
-* Optional consent log endpoint for audit trails
-
-= ✨ Want automatic classification? =
-
-CookieFlame Pro adds automatic cookie classification using a central database and AI. You click Auto-Identify All, and the plugin classifies every unclassified cookie with vendor, category, and purpose, then generates the blocking rules automatically. Flat annual pricing by number of sites, no pageview limits. Learn more at [cookieflame.com](https://cookieflame.com).
-
-= 📋 Compliance note =
-
-CookieFlame provides tools that help support compliance with GDPR, CCPA, LGPD, POPIA and similar regulations. Compliance itself is the site owner's responsibility and depends on how the plugin is configured. For legal advice, consult a qualified professional.
+CookieFlame helps with GDPR, CCPA, LGPD, POPIA and similar laws; how you set it up is your responsibility. For legal advice, ask a qualified professional.
 
 == Installation ==
 
-1. Upload the `cookieflame` folder to `/wp-content/plugins/`, or install via Plugins > Add New in the WordPress admin
-2. Activate the plugin through the Plugins menu
-3. Go to **CookieFlame** in the admin menu to review settings
+1. Install from Plugins > Add New, or upload the `cookieflame` folder to `/wp-content/plugins/`.
+2. Activate the plugin.
+3. Open **CookieFlame** in the admin menu to check the settings.
 
-That is it. The plugin works immediately with sensible defaults. The ten built-in tracking services are blocked before any visitor can trigger them, and the banner shows correctly for each region.
-
-For best geo detection, either run Cloudflare (the plugin reads the CF-IPCountry header automatically) or upload a free MaxMind GeoLite2 database on the Geo Detection tab. Neither is required.
+It works straight away. For the best country detection, use Cloudflare or upload a free MaxMind database on the Geo Detection tab.
 
 == Frequently Asked Questions ==
@@ -98 +71 @@
 = Do I need to know which cookies my site sets? =
 
-No. CookieFlame watches real visitor sessions and reports new cookies to the Cookie Manager automatically. You classify them when you are ready, and the plugin generates the blocking rules for you.
+No. Watch for new cookies lists them as your visitors' browsers report them, and Cookie Discovery finds them on demand. You classify them when you are ready.
 
-= Does this work with Google Tag Manager? =
+= Does it work with Google Tag Manager and caching plugins? =
 
-Yes. Enter your GTM container ID on the Tag Managers tab and the plugin injects both the head script and body noscript tag in the correct positions. All GTM tags that respect Google Consent Mode will see the denied state on load and wait for consent.
+Yes. Blocking happens in the HTML before it is cached. Turn off Cloudflare Rocket Loader; the plugin warns you if it is on.
 
-= Does this work with Cloudflare, WP Rocket, and other caching setups? =
+= What do US visitors see? =
 
-Yes. Script blocking runs server-side in the PHP output buffer, so the cached HTML already has the correct tags rewritten. Cloudflare is specifically supported for geo detection via the CF-IPCountry header on all plans including free.
+A short notice. Cookies are allowed by default because US laws use an opt-out model. The "Do Not Sell or Share My Personal Information" link opens a choice to opt out. Put [cookieflame_settings_link] in your footer so visitors can reach it again later.
 
-One exception: Cloudflare Rocket Loader rewrites scripts at the edge after PHP has run, which defeats the blocking layer. Rocket Loader must be disabled when using CookieFlame. The plugin detects this and shows a warning if it is active.
+= Can I show "Decline all" on the first screen? =
 
-= What happens for US visitors? =
+Yes. Turn on "Show 'Decline all' on the first screen" on the Settings tab. It appears only on the opt-in banner, never on the US notice.
 
-US visitors see a compact CCPA opt-out notice at the bottom of the page with a Do Not Sell My Personal Information link. Cookies are auto-granted by default because CCPA uses an opt-out model, and the visitor can revoke consent through the notice.
+= Can I change the banner text? =
 
-= What happens for visitors outside the regulated regions? =
-
-No banner is shown and all cookies are auto-granted. CookieFlame does not show GDPR banners to visitors whose region does not require them.
-
-= Does the plugin contact any external service? =
-
-By default, no. Geo detection reads CDN headers first, then a local MaxMind database if you have uploaded one, then the browser timezone as a last resort. No external geo API is called. The plugin does not load scripts from any CDN and does not phone home.
-
-The one optional external request is Google Tag Manager, but only if you have entered a GTM container ID in the settings. See the External services section for full details.
-
-= Does it handle Global Privacy Control (GPC)? =
-
-Yes. GPC is required by twelve US states and the plugin detects the browser signal automatically. For CCPA visitors with GPC active, marketing consent is suppressed before any tag runs. Turning GPC off later restores the visitor's original choice.
-
-= Can I customise the banner text and colours? =
-
-Yes. Every string shown to visitors is editable through the Settings tab, and the banner supports both light and dark themes. For per-language versions, use WPML or Polylang with the standard WordPress translation pipeline.
-
-= What is CookieFlame Pro? =
-
-Pro adds automatic cookie classification. Instead of classifying each cookie manually, you click Auto-Identify All and the plugin uses a central database of known cookies plus AI to classify them with vendor, category, and purpose. Pro also adds tighter monitoring intervals, a more detailed digest email, and automatic MaxMind database updates. Pricing is flat annual by site count with no pageview limits. See [cookieflame.com](https://cookieflame.com) for details.
+Not yet from the settings. The banner is in English, with light and dark themes. Developers can change the text and colours with the cookieflame_frontend_config filter and the --cc-* CSS properties.
 
 = Is my visitors' data safe? =
 
-CookieFlame does not collect visitor data. IP addresses are hashed for rate-limiting and never stored raw. Cookie values are never transmitted, only their name and a shape classification (uuid, timestamp, and similar) used for identification. The plugin stores consent decisions in a first-party cookie on the visitor's own browser.
+CookieFlame collects no visitor data. Cookie values are never sent, only names. IP addresses are hashed for rate limiting and never stored. Choices are kept in a first-party cookie in the visitor's browser.
 
 == External services ==
 
-CookieFlame is a self-hosted plugin. By default it does not contact any external service from the visitor's browser, and it does not phone home.
+CookieFlame does not phone home. These requests happen only in the cases described.
 
-There is one optional external interaction, only if the site owner configures it.
+**Google Tag Manager (optional).** If you enter a container ID on the Tag Managers tab, Google's script (https://www.googletagmanager.com/gtm.js) loads on every page, except for visitors you exclude from tracking. Tags inside it follow the visitor's Consent Mode choices. Sent: the container ID and the browser's standard request data (IP address, user agent, page URL). [Terms](https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/), [privacy policy](https://policies.google.com/privacy).
 
-**Google Tag Manager (optional)**
+**Microsoft UET (optional).** If you enter a UET tag ID, Microsoft's loader (https://bat.bing.com/bat.js) loads on every page, except for visitors you exclude from tracking. It records nothing until the visitor allows Marketing. Sent: the tag ID and the browser's standard request data. [Microsoft Advertising agreement](https://about.ads.microsoft.com/en/resources/policies/microsoft-advertising-agreement), [privacy statement](https://privacy.microsoft.com/en-gb/privacystatement).
 
-If the site owner enters a Google Tag Manager container ID on the CookieFlame Tag Managers settings tab, CookieFlame injects the standard Google Tag Manager script (https://www.googletagmanager.com/gtm.js) into the site front-end under the visitor's consent. This script is provided by Google and is loaded from Google's servers when the page is viewed.
+**YouTube thumbnails.** When a page has a YouTube embed that is waiting for consent, its placeholder shows the video's thumbnail from img.youtube.com. Sent: the video ID and the browser's standard request data. [YouTube terms](https://www.youtube.com/t/terms), [Google privacy policy](https://policies.google.com/privacy).
 
-* What is sent: standard Google Tag Manager request, including the container ID and whatever browser request data Google receives for any embed.
-* When: only if the admin has set a GTM container ID, and only when a visitor loads a page and has consented.
-* Google Tag Manager terms: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/
-* Google privacy policy: https://policies.google.com/privacy
+**Consent log endpoint (optional).** If you enter a URL in the Consent Log Endpoint setting, each consent choice is sent there from the visitor's browser as JSON: an anonymous ID, time, action, the choice per category, region, country code, page URL, user agent, the GPC flag, consent version and plugin version. No cookie values or IP address are in it. You choose the destination and are responsible for it.
 
-If no GTM container ID is set, no request is made.
-
-**Microsoft UET (Bing Ads tag, optional)**
-
-If the site owner enters a Microsoft UET tag ID on the CookieFlame Tag Managers settings tab, CookieFlame injects the standard Microsoft UET loader script (https://bat.bing.com/bat.js) into the site front-end. The loader is provided by Microsoft and is loaded from Microsoft's servers when the page is viewed.
-
-The UET runtime reads Microsoft Consent Mode v2 signals from the dataLayer that CookieFlame already manages, so the loader honours visitor consent internally: tracking events do not record until the visitor has granted Marketing consent. The loader script itself is fetched on every page load while a UET tag ID is configured.
-
-* What is sent: the UET tag ID, plus the standard browser request data Microsoft receives for any third-party script load (visitor IP, user agent, page URL, referer).
-* When: every page load while a UET tag ID is configured, except for visitors whose browser sends the Do Not Track header in which case CookieFlame suppresses the injection entirely.
-* Microsoft Advertising agreement: https://about.ads.microsoft.com/en/resources/policies/microsoft-advertising-agreement
-* Microsoft privacy statement: https://privacy.microsoft.com/en-gb/privacystatement
-
-If no UET tag ID is set, no request is made.
-
-**Consent log endpoint (optional, site-owner-nominated webhook)**
-
-If the site owner enters a URL in the Consent Log endpoint setting, CookieFlame sends a JSON record of each consent decision to that URL from the visitor's browser via navigator.sendBeacon (with a fetch fallback for browsers without sendBeacon). The default for this setting is empty, in which case nothing is sent. The destination URL is nominated by the site owner; terms and privacy obligations for that URL are the site owner's responsibility, not CookieFlame's.
-
-* What is sent: a JSON payload containing an anonymous ID, an ISO-8601 timestamp, the action that produced the record (accept-all, decline-all, save, or one of the region-based auto-grants), the per-category consent decision (necessary, preferences, analytics, marketing), the compliance mode (gdpr, ccpa, none), the visitor country code, the page URL, the user agent string, the TCF v2.2 flag, the Global Privacy Control flag, the consent policy version, and the plugin version. No cookie values are included. No IP address is included in the payload, although the receiving endpoint will of course see the visitor IP via the underlying HTTP request, the same as any other request.
-* When: every time the visitor's consent state is set. This includes banner actions (accept-all, decline-all, save) and region-based auto-grants for visitors outside GDPR regions and for CCPA opt-out visitors.
-
-If no Consent Log endpoint URL is set, no request is made.
-
-**Domain strings in the plugin code**
-
-The plugin code contains many third-party domain names (for example, connect.facebook.net, googletagmanager.com, and similar). These are pattern strings used for local matching only. They identify scripts that may already be present on the admin's site so CookieFlame can detect them, show them to the admin in the Cookie Manager, and block them until the visitor has given consent. CookieFlame does not fetch from these domains.
+Third-party domain names in the code (such as connect.facebook.net) are only used to recognise and block scripts; they are never contacted.
 
 == Screenshots ==
 
-1. GDPR consent banner with category toggles (two-step flow)
-2. CCPA opt-out notice for US visitors
-3. Cookie Manager showing discovered cookies with their origin
-4. Cookie Discovery in progress: the discovery bar accumulates services
-5. Admin Settings tab with theme and regional behaviour controls
-6. Geo Detection tab with CDN status and MaxMind upload
-7. Tag Managers tab for GTM and Microsoft UET
+1. Opt-in banner with category toggles
+2. US notice with the "Do Not Sell or Share" link
+3. Cookie Manager listing your site's cookies
+4. Cookie Discovery in progress
+5. Settings tab
+6. Geo Detection tab
+7. Tag Managers tab
 
 == Changelog ==
 
-= 5.3.0 =
-* Cookie monitoring now ignores cookies that come with a visitor's browser rather than from your site. Some browser extensions write the "already accepted" cookies of other consent tools (such as Complianz, CookieYes, Cookiebot, OneTrust or Didomi) onto every site they visit, and these were being reported as your site's cookies. A consent tool's cookie is now ignored when that tool doesn't run on your site: its plugin isn't active, its script isn't on the page, and no script on the page wrote the cookie.
-* Cookies written by a browser extension's own code are ignored too.
-* Cookies ignored this way go on the Permanently Ignored list with the reason, and the list now shows why each cookie was ignored. Restoring one keeps it monitored from then on.
-* The Cookie Manager and the Cookie Discovery count leave these cookies out too, including ones your own browser extensions add. Cookies that came with your browser during Cookie Discovery go on the Permanently Ignored list with the reason. Cookies on the Permanently Ignored list no longer show in the Cookie Manager just because they are in your own browser.
-* On update, other consent tools' cookies that were already reported are moved to the Permanently Ignored list. Cookies you classified yourself are left alone.
-* Fixed: the "consent plugin detected" conflict warning could be set off by CookieFlame's own list of cookie names rather than by another consent plugin on the page.
-* Cookie Manager: the last column is now "Status". Each cookie shows one label for where it stands (Known, Auto-Identified, Classified, Added by you, Changed by you, or Not identified yet), and cookies that aren't identified yet say where they came from: found by your scan, reported by visitors, or seen in your own browser.
-* Cookie Manager: Remove and Ignore permanently are now one "Remove…" link that asks why. "My site doesn't use it any more" takes the cookie off your list, and it comes back if it's seen again. "It's not from my site" puts it on the Permanently Ignored list for good.
-* Cookie Manager: with CookieFlame Pro, the padlock is now a "Lock as correct" button. A locked cookie keeps its vendor, category and purpose, even when you re-identify.
-* Cookie Manager: the small help buttons beside each link are gone. Each link explains itself when you hover over it, and the Status column's help button explains every label and action.
-* Improved: when another consent tool's code is on your pages, the warning now says so in plain words ("Cookiebot found on your pages"), names the page and the text to look for, and lists where such code usually lives (plugins, page builder custom code such as Elementor > Custom Code, the theme's header, or a header and footer scripts plugin). It used to say a plugin was installed even when the code came from somewhere else.
-
-= 5.2.0 =
-* Cookie monitoring now records which script first wrote each new cookie: a third-party script's domain, or the WordPress plugin or theme that set it. Previously only the full list of third-party scripts on the page was known. Cookie values are never read or sent.
-* Cookie monitoring now checks again later in the visit, a few seconds after the visitor changes their consent choice, and when they leave the page, so cookies set after consent or after the first few seconds are found.
-* Fixed: when a page reported several new cookies at the same moment, some could be lost, because the reports overwrote each other when saving. Reports are now saved one at a time, so every new cookie is kept.
-* The cookieflame_new_cookie_discovered action now fires after the cookie's details are saved and passes them as a fourth argument (pre-existing flag, value type, writer). Listeners using three arguments are unaffected.
-* Tested up to WordPress 7.1.
-
-= 5.1.1 =
-* Cookie declaration shortcode tag is now [cookieflame_declaration] (previously [cookieconsent_declaration]). If you embed the cookie declaration on your Privacy Policy page, update the shortcode tag.
-* URL fields on the Settings page (Privacy URL, CCPA URL, Consent log endpoint) now use esc_url_raw, the WordPress URL sanitiser, in place of sanitize_text_field.
-
-= 5.1.0 =
-* Cookie Monitoring tab redesigned for clarity. The page now leads with the two controls that matter (Monitoring on/off and Update interval) and trims the long-form intro and guidance copy that buried them.
-* New: the Update interval dropdown shows CookieFlame Pro intervals (15 minutes, 1 hour, 4 hours) inline as disabled options labelled "(Pro)", so you can see at a glance what an upgrade adds without leaving the page. They unlock when CookieFlame Pro is active.
-* Removed the Monthly interval. It was producing digests so far apart that newly discovered cookies were already weeks stale by the time the email arrived. Existing sites set to Monthly will move to Daily on update.
-* Removed the in-page "Clear monitoring history" button. The 30-day auto-purge handles staleness without intervention; for the rare support case where a full reset is needed, the new WP-CLI command "wp cookieflame purge-beacon-seen" replaces the button.
-* Filter contract change for developers extending the interval list: cookieflame_interval_buckets now passes tier-aware entries (each entry shaped ['minutes' => N, 'tier' => 'free'|'pro']). Plain integers from third-party filter contributors are still accepted and default to the free tier for back-compatibility.
-
-= 5.0.2 =
-* Fixed: Geo Detection now correctly recognises the Cloudflare CF-IPCountry header again. Sites fronted by Cloudflare without a MaxMind database installed were falling through to the GDPR opt-in safety default for every visitor, which meant CCPA-eligible US visitors saw the GDPR banner instead of the CCPA notice, and visitors in regions where no banner is required also saw the GDPR banner. The Geo Detection admin panel was reporting "Not configured" on Cloudflare-fronted sites for the same reason. No setting changes are required; geo detection resumes automatically on update.
-
-= 5.0.1 =
-* Hardened consent boot: the five wp_head injection hooks (consent defaults, config, frontend script, Google Tag Manager, Microsoft UET) now register at deep-negative priorities so other plugins cannot hook ahead of CookieFlame and push tags before consent signals are set.
-* Beacon endpoint refactored: the per-IP rate limit now runs as a REST permission_callback, rejecting bursts at the routing layer above the request handler. The same check still runs inside the handler as a belt-and-braces guard.
-* Defensive shutdown handler added for the output buffer: walks the buffer stack at end of request and flushes only CookieFlame's own buffer if it remains open, leaving any caching or optimisation plugin buffers above it untouched.
-* Database queries against the beacon-seen table reworked to inline the WordPress table prefix directly in each SQL literal, with rationale comments on the remaining advisory warnings.
-* wp_unslash applied consistently to display-only query parameters on the Cookie Monitoring tab.
-* Readme: added an Upgrade Notice section.
-
-= 5.0.0 =
-* Initial public release.
+= 5.4.0 =
+* New: an option to show "Decline All" on the banner's first screen, next to Accept All. Off by default, and only on the opt-in banner (UK, EU/EEA, Switzerland, Brazil, South Africa), never on the US notice.
+* Global Privacy Control now follows California's rules (§7025): OK only closes the US notice, the notice says the signal was honoured, the opt-out is saved, and visitors can opt back in only through a separate choice.
+* "Do Not Sell or Share My Personal Information" now opens a real opt-out choice on the page, instead of linking to your privacy page.
+* Cookie Monitoring is now two settings: "Watch for new cookies" On/Off, and "Email me about changes": Weekly (the default for new sites), Daily, Instantly (Pro) or Off. Your old setting carries over; 15 minutes, 1 hour and 4 hours become Instantly with Pro and Daily without it.
+* New: [cookieflame_settings_link] shortcode and a cc-open-settings class for a "Cookie settings" link. The cookie declaration now has a "Change cookie preferences" button.
+* New: "Visitor logins" setting. When ticked, the cookie declaration lists the WordPress login cookies under "If you log in". Otherwise they are left out, so every visitor sees the same declaration.
+* The upgrade message at the top of the CookieFlame pages can now be dismissed.
+* For developers: --cc-* CSS properties, two filters, an action and the cc:banner-rendered event (see For developers).
+* The IAB TCF placeholder, which never carried a consent string, is now off by default.
+* Fixed: a Re-consent Period below 1 day made the banner appear on every page. It now means the default of 365 days.
+* Fixed: the US notice could run off the screen on phones.
+* Fixed: the X (Twitter) embed placeholder also caught other sites whose names end in "x.com", such as netflix.com and box.com.
+* Fixed: the WordPress cookie list: login cookie expiry, comment and protected-page cookies, the wp-settings-time description, and PHP and WooCommerce cookies listed as WordPress core.
+* Fixed: saving Cookie Monitoring settings, or switching monitoring on or off, turned "Exclude staff from tracking" off.
+* Older changes: changelog.txt.
 
 == Upgrade Notice ==
 
-= 5.3.0 =
-Cookie monitoring now ignores other consent tools' cookies that visitors' browser extensions add, so they no longer appear as your site's cookies. The Cookie Manager's last column is tidier and easier to understand.
-
-= 5.2.0 =
-Better cookie detection: CookieFlame now records which script set each new cookie and keeps checking after consent is given.
-
-= 5.1.0 =
-Cookie Monitoring tab redesigned and the Monthly interval removed. If you were on Monthly, your setting will move to Daily on update. The "Clear monitoring history" button has been replaced with a WP-CLI command for the rare cases where it is needed.
-
-= 5.0.2 =
-Bug fix release. Restores Cloudflare CF-IPCountry geo detection on sites fronted by Cloudflare without MaxMind. Recommended for all users on Cloudflare.
-
-= 5.0.1 =
-Compatibility and hardening release. Refactors a public endpoint's permission check, hardens consent boot priority, and addresses static-analysis warnings. No setting or visitor-facing behaviour changes.
-
-= 5.0.0 =
-Initial public release.
+= 5.4.0 =
+Optional "Decline all" button, Global Privacy Control handled to California's rules, a real "Do Not Sell or Share" choice, and simpler Cookie Monitoring settings. Your settings carry over.

cookieflame/tags/5.4.0/uninstall.php

@@ -37 +37 @@
 delete_option( 'cookieflame_maxmind_last_error' );
 delete_option( 'cookieflame_beacon_seen_schema' );
+delete_metadata( 'user', 0, 'cookieflame_upgrade_banner_dismissed', '', true );
 
 // Drop the beacon-seen custom table (only on opt-in deletion).

cookieflame/trunk/assets/css/admin.css

@@ -625 +625 @@
   border: 1px solid #dcdcde;
   border-radius: 4px;
+}
+.cf-admin-manual-row select {
+  padding-right: 28px;
 }
 .cf-admin-manual-row .button-link-delete {
@@ -1017 +1020 @@
   color: #c2410c;
 }
+.cf-admin-upgrade-banner-dismiss {
+  margin: 0;
+  flex-shrink: 0;
+  align-self: flex-start;
+}
+.cf-admin-upgrade-banner-close {
+  background: none;
+  border: none;
+  color: #8c8f94;
+  font-size: 20px;
+  line-height: 1;
+  padding: 2px 4px;
+  cursor: pointer;
+  border-radius: 4px;
+}
+.cf-admin-upgrade-banner-close:hover,
+.cf-admin-upgrade-banner-close:focus {
+  color: #1d2327;
+  background: rgba(0, 0, 0, 0.05);
+}
 
 /* Licence tab Pro features card */
@@ -1475 +1498 @@
   transition: border-color .15s;
 }
+/* Room for WordPress's select arrow, drawn about 5-21px from the right edge. */
+.cf-admin-wrap .form-table select {
+  padding-right: 32px;
+}
 .cf-admin-wrap .form-table input:focus,
 .cf-admin-wrap .form-table select:focus,

cookieflame/trunk/assets/css/cookieconsent.css

@@ -1 +1 @@
 /**
- * CookieFlame v4.41.0 — Consent Banner Stylesheet
+ * CookieFlame v5.4.0 — Consent Banner Stylesheet
  * ─────────────────────────────────────────────────────────────
  * Loaded on every front-end page via cookieflame_enqueue_assets().
- * Before v4.41.0 these rules were injected inline by
- * cookieconsent.js at runtime; they are now an external
- * stylesheet so the main JS bundle is ~5.6 KB smaller and
- * the CSS can be cached independently by the browser.
  *
  * Dark mode: JS adds `.cc-dark` to <html> when theme=dark.
  * Icon position: JS adds `.cc-icon-right` to <html> when
  * iconPosition=right (default is left).
+ *
+ * Custom properties (v5.4.0): the banner's colours, corner radius and
+ * font come from the --cc-* properties below. Override them on :root
+ * (and :root.cc-dark for the dark theme) to restyle the banner.
  */
+
+:root{--cc-font:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;--cc-radius:20px;--cc-btn-radius:12px;--cc-bg:#fff;--cc-text:#1d1d1f;--cc-text-muted:#555;--cc-link:#0071e3;--cc-focus:#0071e3;--cc-banner-shadow:rgba(0,0,0,.15);--cc-accent:#0071e3;--cc-accent-hover:#005bb5;--cc-accent-text:#fff;--cc-accent-shadow:rgba(0,113,227,.3);--cc-accent-shadow-hover:rgba(0,113,227,.35);--cc-secondary-bg:#e8e8ed;--cc-secondary-hover:#d2d2d7;--cc-secondary-text:#1d1d1f;--cc-save-bg:#34c759;--cc-save-hover:#28a745;--cc-save-text:#fff;--cc-save-shadow:rgba(52,199,89,.3);--cc-save-shadow-hover:rgba(52,199,89,.35);--cc-details:#555;--cc-details-hover:#555;--cc-border:#e8e8ed;--cc-divider:#f0f0f2;--cc-cat-desc:#646970;--cc-always-on:#767676;--cc-toggle-off:#ccc;--cc-toggle-on:#0071e3;--cc-knob:#fff;--cc-powered:#999;--cc-powered-hover:#666;--cc-icon-bg:#1d1d1f;--cc-icon-text:#fff;--cc-icon-shadow:rgba(0,0,0,.25);--cc-icon-shadow-hover:rgba(0,0,0,.35)}
+:root.cc-dark{--cc-bg:#1c1c1e;--cc-text:#f5f5f7;--cc-text-muted:#98989d;--cc-link:#2997ff;--cc-banner-shadow:rgba(0,0,0,.5);--cc-accent:#0a84ff;--cc-accent-hover:#0071e3;--cc-accent-shadow:rgba(10,132,255,.35);--cc-accent-shadow-hover:rgba(10,132,255,.4);--cc-secondary-bg:#2c2c2e;--cc-secondary-hover:#3a3a3c;--cc-secondary-text:#f5f5f7;--cc-save-bg:#30d158;--cc-save-hover:#28a745;--cc-save-shadow:rgba(48,209,88,.3);--cc-save-shadow-hover:rgba(48,209,88,.35);--cc-details:#98989d;--cc-details-hover:#c7c7cc;--cc-border:#2c2c2e;--cc-divider:#2c2c2e;--cc-cat-desc:#8e8e93;--cc-always-on:#8e8e93;--cc-toggle-off:#3a3a3c;--cc-toggle-on:#0a84ff;--cc-knob:#f5f5f7;--cc-powered:#aaa;--cc-powered-hover:#ddd;--cc-icon-bg:#f5f5f7;--cc-icon-text:#1d1d1f;--cc-icon-shadow:rgba(255,255,255,.15);--cc-icon-shadow-hover:rgba(255,255,255,.25)}
 
 #cc-overlay{position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:999998;opacity:0;pointer-events:none;transition:opacity .3s;backdrop-filter:blur(2px);-webkit-backdrop-filter:blur(2px)}
 #cc-overlay.cc-show{opacity:1;pointer-events:auto}
-#cc-banner{position:fixed;bottom:0;left:0;right:0;z-index:999999;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;font-size:14px;line-height:1.5;color:#1d1d1f;background:#fff;box-shadow:0 -8px 40px rgba(0,0,0,.15);transform:translateY(100%);transition:transform .4s cubic-bezier(.4,0,.2,1);border-radius:20px 20px 0 0;max-height:90vh;overflow-y:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}
+#cc-banner{position:fixed;bottom:0;left:0;right:0;z-index:999999;font-family:var(--cc-font);font-size:14px;line-height:1.5;color:var(--cc-text);background:var(--cc-bg);box-shadow:0 -8px 40px var(--cc-banner-shadow);transform:translateY(100%);transition:transform .4s cubic-bezier(.4,0,.2,1);border-radius:var(--cc-radius) var(--cc-radius) 0 0;max-height:90vh;overflow-y:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}
 #cc-banner.cc-show{transform:translateY(0)}
 #cc-banner,#cc-banner *{box-sizing:border-box;-webkit-tap-highlight-color:transparent}
@@ -21 +24 @@
 .cc-inner{max-width:720px;margin:0 auto;padding:32px 32px 20px}
 .cc-title{font-size:20px !important;font-weight:800 !important;margin:0 0 8px !important;letter-spacing:-.3px;line-height:1.3 !important;color:inherit !important;background:none !important;border:none !important;padding:0 !important;text-transform:none !important}
-.cc-text{margin:0 0 20px !important;color:#555 !important;font-size:14px !important;font-weight:400 !important;line-height:1.6 !important;padding:0 !important;border:none !important;background:none !important;text-transform:none !important}
-.cc-text a{color:#0071e3 !important;text-decoration:none !important;font-weight:500 !important;background:none !important;border:none !important;box-shadow:none !important}
+.cc-text{margin:0 0 20px !important;color:var(--cc-text-muted) !important;font-size:14px !important;font-weight:400 !important;line-height:1.6 !important;padding:0 !important;border:none !important;background:none !important;text-transform:none !important}
+.cc-text a{color:var(--cc-link) !important;text-decoration:none !important;font-weight:500 !important;background:none !important;border:none !important;box-shadow:none !important}
 .cc-text a:hover{text-decoration:underline !important}
 .cc-buttons{display:flex;gap:10px;flex-wrap:wrap;align-items:center;margin-bottom:16px}
-.cc-btn{display:inline-flex !important;align-items:center !important;justify-content:center !important;border-radius:12px !important;border:none !important;font-weight:700 !important;cursor:pointer !important;letter-spacing:-.1px !important;text-transform:none !important;text-decoration:none !important;line-height:1 !important;white-space:nowrap !important;-webkit-appearance:none !important;appearance:none !important;outline:none !important;box-shadow:none !important;text-shadow:none !important;float:none !important;margin:0 !important}
-.cc-btn:focus{outline:2px solid #0071e3 !important;outline-offset:2px !important}
+.cc-btn{display:inline-flex !important;align-items:center !important;justify-content:center !important;border-radius:var(--cc-btn-radius) !important;border:none !important;font-weight:700 !important;cursor:pointer !important;letter-spacing:-.1px !important;text-transform:none !important;text-decoration:none !important;line-height:1 !important;white-space:nowrap !important;-webkit-appearance:none !important;appearance:none !important;outline:none !important;box-shadow:none !important;text-shadow:none !important;float:none !important;margin:0 !important}
+.cc-btn:focus{outline:2px solid var(--cc-focus) !important;outline-offset:2px !important}
 .cc-btn:active{transform:scale(.97) !important}
-.cc-btn-accept{background:#0071e3 !important;color:#fff !important;font-size:15px !important;padding:14px 32px !important;box-shadow:0 2px 8px rgba(0,113,227,.3) !important;transition:background .15s,box-shadow .15s,transform .1s !important}
-.cc-btn-accept:hover{background:#005bb5 !important;box-shadow:0 4px 16px rgba(0,113,227,.35) !important;color:#fff !important}
-.cc-btn-decline{background:#e8e8ed !important;color:#1d1d1f !important;font-size:13px !important;padding:11px 22px !important;box-shadow:none !important;transition:background .15s,transform .1s !important}
-.cc-btn-decline:hover{background:#d2d2d7 !important;color:#1d1d1f !important}
-.cc-btn-save{background:#34c759 !important;color:#fff !important;font-size:14px !important;padding:13px 28px !important;box-shadow:0 2px 8px rgba(52,199,89,.3) !important;transition:background .15s,box-shadow .15s,transform .1s !important}
-.cc-btn-save:hover{background:#28a745 !important;box-shadow:0 4px 16px rgba(52,199,89,.35) !important;color:#fff !important}
-.cc-btn-details{background:transparent !important;color:#555 !important;padding:11px 4px;font-weight:500;font-size:13px;text-decoration:none !important;border:none !important;box-shadow:none !important;cursor:pointer;transition:color .15s !important}
-.cc-btn-details:hover{color:#555 !important;text-decoration:none !important;background:transparent !important;box-shadow:none !important}
-.cc-categories{margin:0 0 16px !important;border:1px solid #e8e8ed !important;border-radius:14px !important;overflow:hidden !important;display:none}
+.cc-btn-accept{background:var(--cc-accent) !important;color:var(--cc-accent-text) !important;font-size:15px !important;padding:14px 32px !important;box-shadow:0 2px 8px var(--cc-accent-shadow) !important;transition:background .15s,box-shadow .15s,transform .1s !important}
+.cc-btn-accept:hover{background:var(--cc-accent-hover) !important;box-shadow:0 4px 16px var(--cc-accent-shadow-hover) !important;color:var(--cc-accent-text) !important}
+.cc-btn-decline{background:var(--cc-secondary-bg) !important;color:var(--cc-secondary-text) !important;font-size:13px !important;padding:11px 22px !important;box-shadow:none !important;transition:background .15s,transform .1s !important}
+.cc-btn-decline:hover{background:var(--cc-secondary-hover) !important;color:var(--cc-secondary-text) !important}
+.cc-btn-reject{background:var(--cc-secondary-bg) !important;color:var(--cc-secondary-text) !important;font-size:15px !important;padding:14px 32px !important;transition:background .15s,transform .1s !important}
+.cc-btn-reject:hover{background:var(--cc-secondary-hover) !important;color:var(--cc-secondary-text) !important}
+.cc-btn-save{background:var(--cc-save-bg) !important;color:var(--cc-save-text) !important;font-size:14px !important;padding:13px 28px !important;box-shadow:0 2px 8px var(--cc-save-shadow) !important;transition:background .15s,box-shadow .15s,transform .1s !important}
+.cc-btn-save:hover{background:var(--cc-save-hover) !important;box-shadow:0 4px 16px var(--cc-save-shadow-hover) !important;color:var(--cc-save-text) !important}
+.cc-btn-details{background:transparent !important;color:var(--cc-details) !important;padding:11px 4px;font-weight:500;font-size:13px;text-decoration:none !important;border:none !important;box-shadow:none !important;cursor:pointer;transition:color .15s !important}
+.cc-btn-details:hover{color:var(--cc-details-hover) !important;text-decoration:none !important;background:transparent !important;box-shadow:none !important}
+.cc-categories{margin:0 0 16px !important;border:1px solid var(--cc-border) !important;border-radius:14px !important;overflow:hidden !important;display:none}
 .cc-categories.cc-open{display:block !important}
-.cc-cat{padding:16px 20px !important;border-bottom:1px solid #f0f0f2 !important;display:flex !important;justify-content:space-between !important;align-items:center !important;gap:16px !important;background:none !important}
+.cc-cat{padding:16px 20px !important;border-bottom:1px solid var(--cc-divider) !important;display:flex !important;justify-content:space-between !important;align-items:center !important;gap:16px !important;background:none !important}
 .cc-cat:last-child{border-bottom:none !important}
 .cc-cat-label{font-weight:700 !important;font-size:14px !important;line-height:1.3 !important;color:inherit !important;text-transform:none !important}
-.cc-cat-desc{font-size:12px !important;color:#646970 !important;margin-top:3px !important;font-weight:400 !important;line-height:1.4 !important;text-transform:none !important}
-.cc-always-on{font-weight:400 !important;font-size:11px !important;color:#767676 !important}
+.cc-cat-desc{font-size:12px !important;color:var(--cc-cat-desc) !important;margin-top:3px !important;font-weight:400 !important;line-height:1.4 !important;text-transform:none !important}
+.cc-always-on{font-weight:400 !important;font-size:11px !important;color:var(--cc-always-on) !important}
+.cc-gpc-note{font-size:12px !important;color:var(--cc-text) !important;margin-top:6px !important;font-weight:600 !important;line-height:1.4 !important;text-transform:none !important}
 .cc-toggle{position:relative !important;width:46px !important;height:26px !important;flex-shrink:0 !important;display:block !important}
 .cc-toggle input{opacity:0 !important;width:0 !important;height:0 !important;position:absolute !important}
-.cc-toggle .cc-slider{position:absolute !important;inset:0 !important;background:#ccc !important;border-radius:26px !important;cursor:pointer !important;transition:background .2s !important;border:none !important;box-shadow:none !important}
-.cc-toggle .cc-slider:before{content:"" !important;position:absolute !important;width:20px !important;height:20px !important;left:3px !important;bottom:3px !important;background:#fff !important;border-radius:50% !important;transition:transform .2s !important;box-shadow:0 1px 3px rgba(0,0,0,.15) !important}
-.cc-toggle input:checked+.cc-slider{background:#0071e3 !important}
+.cc-toggle .cc-slider{position:absolute !important;inset:0 !important;background:var(--cc-toggle-off) !important;border-radius:26px !important;cursor:pointer !important;transition:background .2s !important;border:none !important;box-shadow:none !important}
+.cc-toggle .cc-slider:before{content:"" !important;position:absolute !important;width:20px !important;height:20px !important;left:3px !important;bottom:3px !important;background:var(--cc-knob) !important;border-radius:50% !important;transition:transform .2s !important;box-shadow:0 1px 3px rgba(0,0,0,.15) !important}
+.cc-toggle input:checked+.cc-slider{background:var(--cc-toggle-on) !important}
 .cc-toggle input:checked+.cc-slider:before{transform:translateX(20px) !important}
-.cc-toggle input:disabled+.cc-slider{background:#0071e3 !important;opacity:.5 !important;cursor:default !important}
-.cc-toggle input:focus-visible+.cc-slider{outline:2px solid #0071e3 !important;outline-offset:2px !important}
-.cc-powered{text-align:center !important;padding:0 0 16px !important;font-size:11px !important;color:#999 !important;font-weight:400 !important;background:none !important;border:none !important;margin:0 !important}
+.cc-toggle input:disabled+.cc-slider{background:var(--cc-toggle-on) !important;opacity:.5 !important;cursor:default !important}
+.cc-toggle input:focus-visible+.cc-slider{outline:2px solid var(--cc-focus) !important;outline-offset:2px !important}
+.cc-powered{text-align:center !important;padding:0 0 16px !important;font-size:11px !important;color:var(--cc-powered) !important;font-weight:400 !important;background:none !important;border:none !important;margin:0 !important}
 .cc-pref-buttons{display:none !important;gap:10px;flex-wrap:wrap;align-items:center;margin-bottom:8px}
 .cc-pref-buttons.cc-open{display:flex !important}
-.cc-powered a{color:#999 !important;text-decoration:none !important;font-weight:400 !important;background:none !important;border:none !important;box-shadow:none !important}
-.cc-powered a:hover{color:#666 !important;text-decoration:none !important}
-#cc-icon{position:fixed !important;bottom:18px !important;left:18px !important;z-index:999997 !important;width:48px !important;height:48px !important;border-radius:50% !important;background:#1d1d1f !important;color:#fff !important;border:none !important;cursor:pointer !important;box-shadow:0 2px 12px rgba(0,0,0,.25) !important;display:none;align-items:center !important;justify-content:center !important;padding:0 !important;transition:transform .15s,box-shadow .15s !important;-webkit-appearance:none !important;appearance:none !important;margin:0 !important;text-decoration:none !important;outline:none !important}
-#cc-icon:hover{transform:scale(1.1) !important;box-shadow:0 4px 20px rgba(0,0,0,.35) !important}
-#cc-icon:focus-visible{outline:2px solid #0071e3 !important;outline-offset:2px !important}
+.cc-powered a{color:var(--cc-powered) !important;text-decoration:none !important;font-weight:400 !important;background:none !important;border:none !important;box-shadow:none !important}
+.cc-powered a:hover{color:var(--cc-powered-hover) !important;text-decoration:none !important}
+#cc-icon{position:fixed !important;bottom:18px !important;left:18px !important;z-index:999997 !important;width:48px !important;height:48px !important;border-radius:50% !important;background:var(--cc-icon-bg) !important;color:var(--cc-icon-text) !important;border:none !important;cursor:pointer !important;box-shadow:0 2px 12px var(--cc-icon-shadow) !important;display:none;align-items:center !important;justify-content:center !important;padding:0 !important;transition:transform .15s,box-shadow .15s !important;-webkit-appearance:none !important;appearance:none !important;margin:0 !important;text-decoration:none !important;outline:none !important}
+#cc-icon:hover{transform:scale(1.1) !important;box-shadow:0 4px 20px var(--cc-icon-shadow-hover) !important}
+#cc-icon:focus-visible{outline:2px solid var(--cc-focus) !important;outline-offset:2px !important}
 #cc-icon.cc-show{display:flex !important}
 .cc-icon-right #cc-icon{left:auto !important;right:18px !important}
-#cc-ccpa-banner{position:fixed;bottom:0;left:0;right:0;z-index:999999;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;font-size:14px;line-height:1.5;color:#1d1d1f;background:#fff;box-shadow:0 -8px 40px rgba(0,0,0,.15);transform:translateY(100%);transition:transform .4s cubic-bezier(.4,0,.2,1);border-radius:20px 20px 0 0}
+#cc-ccpa-banner{position:fixed;bottom:0;left:0;right:0;z-index:999999;font-family:var(--cc-font);font-size:14px;line-height:1.5;color:var(--cc-text);background:var(--cc-bg);box-shadow:0 -8px 40px var(--cc-banner-shadow);transform:translateY(100%);transition:transform .4s cubic-bezier(.4,0,.2,1);border-radius:var(--cc-radius) var(--cc-radius) 0 0;max-height:90vh;overflow-y:auto}
 #cc-ccpa-banner.cc-show{transform:translateY(0)}
 #cc-ccpa-banner *{box-sizing:border-box}
 .cc-ccpa-inner{max-width:720px;margin:0 auto;padding:20px 32px;display:flex;align-items:center;gap:20px;flex-wrap:wrap}
 .cc-ccpa-text{flex:1;min-width:280px}
-.cc-ccpa-text p{margin:0;color:#555}
+.cc-ccpa-text p{margin:0;color:var(--cc-text-muted)}
+.cc-ccpa-text p.cc-ccpa-gpc{margin:8px 0 0;color:var(--cc-text);font-weight:600}
+.cc-ccpa-gpc:before{content:"\2713\00a0"}
 .cc-ccpa-actions{display:flex;gap:10px;align-items:center;flex-shrink:0}
-.cc-ccpa-link{color:#0071e3;text-decoration:underline;font-size:13px;font-weight:500;white-space:nowrap}
-.cc-dark #cc-banner,.cc-dark #cc-ccpa-banner{background:#1c1c1e !important;color:#f5f5f7 !important;box-shadow:0 -8px 40px rgba(0,0,0,.5) !important}
-.cc-dark .cc-text{color:#98989d !important}
-.cc-dark .cc-text a,.cc-dark .cc-ccpa-link{color:#2997ff !important}
-.cc-dark .cc-btn-details{color:#98989d !important}
-.cc-dark .cc-btn-details:hover{color:#c7c7cc !important}
-.cc-dark .cc-btn-decline{background:#2c2c2e !important;color:#f5f5f7 !important}
-.cc-dark .cc-btn-decline:hover{background:#3a3a3c !important;color:#f5f5f7 !important}
-.cc-dark .cc-categories{border-color:#2c2c2e !important}
-.cc-dark .cc-cat{border-bottom-color:#2c2c2e !important}
-.cc-dark .cc-cat-desc{color:#8e8e93 !important}
-.cc-dark .cc-always-on{color:#8e8e93 !important}
-.cc-dark .cc-toggle .cc-slider{background:#3a3a3c !important}
-.cc-dark .cc-toggle .cc-slider:before{background:#f5f5f7 !important}
-.cc-dark .cc-toggle input:checked+.cc-slider{background:#0a84ff !important}
-.cc-dark .cc-toggle input:disabled+.cc-slider{background:#0a84ff !important}
-.cc-dark .cc-btn-accept{background:#0a84ff !important;box-shadow:0 2px 8px rgba(10,132,255,.35) !important}
-.cc-dark .cc-btn-accept:hover{background:#0071e3 !important;box-shadow:0 4px 16px rgba(10,132,255,.4) !important}
-.cc-dark .cc-btn-save{background:#30d158 !important;box-shadow:0 2px 8px rgba(48,209,88,.3) !important}
-.cc-dark .cc-btn-save:hover{background:#28a745 !important;box-shadow:0 4px 16px rgba(48,209,88,.35) !important}
-.cc-dark .cc-ccpa-text p{color:#98989d !important}
-.cc-dark .cc-powered{color:#aaa !important}
-.cc-dark .cc-powered a{color:#aaa !important}
-.cc-dark .cc-powered a:hover{color:#ddd !important}
-.cc-dark .cc-cat-label{color:#f5f5f7 !important}
-.cc-dark .cc-title{color:#f5f5f7 !important}
-.cc-dark #cc-icon{background:#f5f5f7 !important;color:#1d1d1f !important;box-shadow:0 2px 12px rgba(255,255,255,.15) !important}
-.cc-dark #cc-icon:hover{box-shadow:0 4px 20px rgba(255,255,255,.25) !important}
-@media(max-width:480px){.cc-inner{padding:24px 20px 16px}.cc-title{font-size:18px}.cc-buttons{gap:8px}.cc-btn-accept{font-size:14px;padding:12px 24px}.cc-btn-decline{font-size:12px;padding:10px 18px}}
+.cc-ccpa-link{color:var(--cc-link);text-decoration:underline;font-size:13px;font-weight:500;white-space:nowrap}
+#cc-ccpa-banner .cc-btn-details{padding:11px 0}
+.cc-ccpa-choice{display:none}
+.cc-ccpa-choice.cc-open{display:block}
+.cc-ccpa-choice-inner{max-width:720px;margin:0 auto;padding:20px 32px}
+.cc-ccpa-choice-title{font-size:16px;font-weight:800;line-height:1.3;margin:0 0 6px;color:inherit}
+.cc-ccpa-choice-text,.cc-ccpa-choice-note{margin:0 0 14px;color:var(--cc-text-muted)}
+.cc-ccpa-choice-status{margin:0 0 14px;font-weight:600;color:var(--cc-text)}
+.cc-ccpa-choice-note{font-size:12px;margin:10px 0 0}
+.cc-ccpa-choice-buttons{display:flex;gap:10px;flex-wrap:wrap;align-items:center}
+@media(max-width:480px){.cc-inner{padding:24px 20px 16px}.cc-title{font-size:18px}.cc-buttons{gap:8px}.cc-btn-accept{font-size:14px;padding:12px 24px}.cc-btn-decline{font-size:12px;padding:10px 18px}.cc-ccpa-inner{padding:16px 20px;gap:12px}.cc-ccpa-text{min-width:0;flex:1 1 100%}.cc-ccpa-actions{flex-wrap:wrap;flex-shrink:1;width:100%;justify-content:space-between}.cc-ccpa-link{white-space:normal}.cc-ccpa-choice-inner{padding:16px 20px}}

cookieflame/trunk/assets/js/admin.js

@@ -10 +10 @@
     cc_anon_id:     { vendor: "CookieFlame",     category: "necessary",   purpose: "Anonymous ID for consent logging" },
     cookieflame_dnt:       { vendor: "CookieFlame",     category: "necessary",   purpose: "Do-not-track opt-out flag" },
-    "wp-settings-": { vendor: "WordPress",         category: "necessary",   purpose: "Admin interface preferences", prefix: true },
-    "wp-settings-time-": { vendor: "WordPress",    category: "necessary",   purpose: "Admin settings timestamp", prefix: true },
-    wordpress_logged_in_: { vendor: "WordPress",   category: "necessary",   purpose: "Login session", prefix: true },
-    wordpress_sec_: { vendor: "WordPress",         category: "necessary",   purpose: "Secure login session", prefix: true },
-    wordpress_test_cookie: { vendor: "WordPress",  category: "necessary",   purpose: "Checks cookie support" },
-    wp_lang:        { vendor: "WordPress",         category: "necessary",   purpose: "Language preference" },
+    "wp-settings-": { vendor: "WordPress",         category: "necessary",   purpose: "Remembers dashboard layout settings", prefix: true },
+    "wp-settings-time-": { vendor: "WordPress",    category: "necessary",   purpose: "Records when dashboard settings were last saved", prefix: true },
+    wordpress_logged_in_: { vendor: "WordPress",   category: "necessary",   purpose: "Keeps you logged in", prefix: true },
+    wordpress_sec_: { vendor: "WordPress",         category: "necessary",   purpose: "Confirms your login when you open the dashboard", prefix: true },
+    wordpress_rec_: { vendor: "WordPress",         category: "necessary",   purpose: "Recovery mode after a site error (administrators only)", prefix: true },
+    wordpress_test_cookie: { vendor: "WordPress",  category: "necessary",   purpose: "Checks your browser accepts cookies before you log in" },
+    wp_lang:        { vendor: "WordPress",         category: "necessary",   purpose: "Remembers the language picked on the login page" },
+    comment_author_: { vendor: "WordPress",        category: "necessary",   purpose: "Remembers your name for comments, if you ask it to", prefix: true },
+    comment_author_email_: { vendor: "WordPress",  category: "necessary",   purpose: "Remembers your email for comments, if you ask it to", prefix: true },
+    comment_author_url_: { vendor: "WordPress",    category: "necessary",   purpose: "Remembers your website for comments, if you ask it to", prefix: true },
+    "wp-postpass_": { vendor: "WordPress",         category: "necessary",   purpose: "Remembers the password entered for a protected page", prefix: true },
     woocommerce_cart_hash: { vendor: "WooCommerce", category: "necessary",  purpose: "Shopping cart contents" },
     woocommerce_items_in_cart: { vendor: "WooCommerce", category: "necessary", purpose: "Cart item count" },
@@ -181 +186 @@
   function identifyBuiltIn(name) {
     if (KNOWN[name]) return KNOWN[name];
-    var match = null;
+    // Longest prefix wins (wp-settings-time- over wp-settings-).
+    var match = null, matchLen = 0;
     var keys = Object.keys(KNOWN);
     for (var i = 0; i < keys.length; i++) {
-      if (KNOWN[keys[i]].prefix && name.indexOf(keys[i]) === 0) { match = KNOWN[keys[i]]; break; }
+      if (KNOWN[keys[i]].prefix && keys[i].length > matchLen && name.indexOf(keys[i]) === 0) { match = KNOWN[keys[i]]; matchLen = keys[i].length; }
     }
     return match;
@@ -320 +326 @@
   }
 
-  // WordPress core vendors that are always necessary
-  var WP_CORE_VENDORS = ["WordPress", "WooCommerce", "PHP"];
+  // Vendors listed under WordPress Core Cookies (PHP sessions and
+  // WooCommerce are not core, so they appear in the main table).
+  var WP_CORE_VENDORS = ["WordPress"];
   var PLUGIN_VENDOR = "CookieFlame";
 
@@ -2354 +2361 @@
     .then(function (data) {
       if (!data.success) {
-        if (startBtn) { startBtn.disabled = false; startBtn.textContent = "Start Cookie Discovery"; }
+        if (startBtn) { startBtn.disabled = false; startBtn.textContent = "Start Cookie Discovery (uses your own browser)"; }
         return;
       }
@@ -2405 +2412 @@
     })
     .catch(function (err) {
-      if (startBtn) { startBtn.disabled = false; startBtn.textContent = "Start Cookie Discovery"; }
+      if (startBtn) { startBtn.disabled = false; startBtn.textContent = "Start Cookie Discovery (uses your own browser)"; }
       cookieflameNotice("Error: " + err.message, "error");
     });

cookieflame/trunk/assets/js/cookieconsent.js

@@ -1 +1 @@
 /**
- * CookieFlame v5.3.0
+ * CookieFlame v5.4.0
  * ─────────────────────────────────────────────────────────────
  * Self-hosted cookie consent manager with Google Consent Mode v2,
- * IAB TCF v2.2, automatic script blocking, iframe facades with
+ * automatic script blocking, iframe facades with
  * thumbnails, Elementor video widget support, multi-region
  * compliance (GDPR/CCPA), and passive cookie monitoring.
@@ -40 +40 @@
   } catch (e) {}
 
-  var PLUGIN_VERSION = "5.3.0";
+  var PLUGIN_VERSION = "5.4.0";
 
   /* ═══════════════════════════════════════════
@@ -49 +49 @@
     cookieExpiry:   365,
     privacyUrl:     "/privacy-policy",
-    ccpaUrl:        "/privacy-policy#do-not-sell",
     geoApi:         "",
     logEndpoint:    "",
     reconsentDays:  365,
     cspSafe:        false,
-    tcfEnabled:     true,
+    // IAB TCF v2.2 stub. Off since v5.4.0 (it never carried a TC string);
+    // the code is kept and can be switched on through the
+    // cookieflame_frontend_config filter (tcfEnabled: true).
+    tcfEnabled:     false,
     cmpId:          1,
     cmpVersion:     1,
@@ -65 +67 @@
     iconPosition:   "left",
     consentVersion: "",
+    // Show "Decline All" next to "Accept All" on the GDPR banner's first
+    // screen (Settings > Show "Decline all" on the first screen).
+    rejectFirstScreen: false,
+    // List WordPress login cookies in the declaration under "If you log
+    // in" (Settings > Visitor logins). Login cookies are never listed
+    // with the others, so the declaration is the same for every visitor.
+    visitorLogins: false,
 
     autoBlockPatterns: [
@@ -122 +131 @@
       description:        'We use cookies to improve your experience, analyse traffic and personalise content. You can choose which categories to allow.',
       acceptAllButton:    "Accept All",
+      rejectAllButton:    "Decline All",
       declineAllButton:   "Decline All",
       saveButton:         "Save Preferences",
@@ -128 +138 @@
       alwaysOnLabel:      "(always on)",
       ccpaTitle:          "Your Privacy Choices",
-      ccpaDescription:    'We use cookies and similar technologies. Under California law, you have the right to opt out of the sale or sharing of your personal information.',
+      ccpaDescription:    "We use cookies and similar technologies. Under US state privacy laws, such as California's, you have the right to opt out of the sale or sharing of your personal information.",
       ccpaAcceptButton:   "OK",
-      ccpaDnsmpiLink:     "Do Not Sell My Personal Information"
+      ccpaDnsmpiLink:     "Do Not Sell or Share My Personal Information",
+      ccpaGpcNotice:      "Your browser asked us not to sell or share your information. We're honouring that.",
+      ccpaChoiceTitle:    "Do Not Sell or Share My Personal Information",
+      ccpaChoiceText:     "Information about your visit may be used by advertising partners whose cookies run on this site. Under US state privacy laws that can count as selling or sharing. You can opt out in this browser.",
+      ccpaOptOutButton:   "Opt out",
+      ccpaCancelButton:   "Cancel",
+      ccpaOptedOut:       "You've opted out of the sale or sharing of your personal information in this browser.",
+      ccpaGpcOptedOut:    "Your browser's Global Privacy Control signal asked us not to sell or share your information, so you're opted out in this browser.",
+      ccpaDoneButton:     "Done",
+      ccpaOptInButton:    "Allow selling or sharing",
+      ccpaOptInGpcNote:   "Allowing it overrides your browser's Global Privacy Control signal on this site only.",
+      ccpaMoreSettings:   "More cookie settings",
+      gpcPrefNote:        "Your browser's Global Privacy Control signal is on, so Marketing stays off unless you switch it on here.",
+      changePreferences:  "Change cookie preferences",
+      loginCookiesTitle:  "If you log in",
+      loginCookiesIntro:  "These cookies are only set if you log in to an account on this site. They keep you signed in and remember your account settings. They're needed for logging in to work, so they don't ask for your consent."
     },
 
@@ -181 +206 @@
     var ext = window.__ccConfig;
     // shallow merge top-level primitives
-    var keys = ["cookieName","cookieExpiry","privacyUrl","ccpaUrl","geoApi",
+    var keys = ["cookieName","cookieExpiry","privacyUrl","geoApi",
       "logEndpoint","reconsentDays","cspSafe","tcfEnabled","cmpId",
-      "cmpVersion","vendorListVersion","storageMethod","cookieDomain","shareSubdomains","theme","showPoweredBy","iconPosition","consentVersion"];
+      "cmpVersion","vendorListVersion","storageMethod","cookieDomain","shareSubdomains","theme","showPoweredBy","iconPosition","consentVersion",
+      "rejectFirstScreen","visitorLogins"];
     keys.forEach(function (k) {
       if (ext[k] !== undefined) CONFIG[k] = ext[k];
@@ -207 +233 @@
   // visitor's browser is sending the GPC signal.
   var gpcActive = !!window.__ccGPC;
+
+  /* GPC rules (Cal. Code Regs. tit. 11 §7025, applied in every region):
+     - A GPC signal is a valid opt-out of selling and sharing: Marketing
+       stays off and Google's ad signals are denied, with no extra steps.
+     - The opt-out is saved in the consent cookie (state.gpc), so a later
+       visit without GPC keeps it.
+     - The visitor can opt back in only through a separate choice: the
+       US notice's "Allow selling or sharing" button, or switching
+       Marketing on and saving in the preferences. That sets
+       state.gpcOptIn. OK and Accept All never opt back in. */
+  function applyGpc(state) {
+    if (gpcActive && state && !state.gpcOptIn) {
+      state.marketing = false;
+      state.gpc = 1;
+    }
+    return state;
+  }
 
   // Merged blocking rules from PHP (built-in defaults + auto-generated
@@ -227 +270 @@
     cc_anon_id:     { vendor: "CookieFlame",     category: "necessary",   purpose: "Anonymous ID for consent logging", expiry: "1 year" },
     cookieflame_dnt:       { vendor: "CookieFlame",     category: "necessary",   purpose: "Do-not-track opt-out flag", expiry: "1 year" },
+    // PHP sessions (started by some plugins and hosts, not by WordPress)
+    PHPSESSID:      { vendor: "PHP",              category: "necessary",   purpose: "Server-side session identifier", expiry: "Session" },
     // WordPress core
-    PHPSESSID:      { vendor: "PHP",              category: "necessary",   purpose: "Server-side session identifier", expiry: "Session" },
-    wp_settings_:   { vendor: "WordPress",         category: "necessary",   purpose: "Admin interface preferences", prefix: true, expiry: "1 year" },
-    "wp-settings-": { vendor: "WordPress",         category: "necessary",   purpose: "Admin interface preferences", prefix: true, expiry: "1 year" },
-    "wp-settings-time-": { vendor: "WordPress",    category: "necessary",   purpose: "Admin settings timestamp", prefix: true, expiry: "1 year" },
-    wordpress_logged_in_: { vendor: "WordPress",   category: "necessary",   purpose: "Login session", prefix: true, expiry: "Session" },
-    wordpress_sec_: { vendor: "WordPress",         category: "necessary",   purpose: "Secure login session", prefix: true, expiry: "Session" },
-    wordpress_test_cookie: { vendor: "WordPress",  category: "necessary",   purpose: "Checks cookie support", expiry: "Session" },
-    wp_lang:        { vendor: "WordPress",         category: "necessary",   purpose: "Language preference", expiry: "Session" },
+    "wp-settings-": { vendor: "WordPress",         category: "necessary",   purpose: "Remembers dashboard layout settings", prefix: true, expiry: "1 year" },
+    "wp-settings-time-": { vendor: "WordPress",    category: "necessary",   purpose: "Records when dashboard settings were last saved", prefix: true, expiry: "1 year" },
+    wordpress_logged_in_: { vendor: "WordPress",   category: "necessary",   purpose: "Keeps you logged in", prefix: true, expiry: "Session, or 14 days with Remember Me" },
+    wordpress_sec_: { vendor: "WordPress",         category: "necessary",   purpose: "Confirms your login when you open the dashboard", prefix: true, expiry: "Session, or 14 days with Remember Me" },
+    wordpress_rec_: { vendor: "WordPress",         category: "necessary",   purpose: "Recovery mode after a site error (administrators only)", prefix: true, expiry: "1 week" },
+    wordpress_test_cookie: { vendor: "WordPress",  category: "necessary",   purpose: "Checks your browser accepts cookies before you log in", expiry: "Session" },
+    wp_lang:        { vendor: "WordPress",         category: "necessary",   purpose: "Remembers the language picked on the login page", expiry: "Session" },
+    comment_author_: { vendor: "WordPress",        category: "necessary",   purpose: "Remembers your name for comments, if you ask it to", prefix: true, expiry: "1 year" },
+    comment_author_email_: { vendor: "WordPress",  category: "necessary",   purpose: "Remembers your email for comments, if you ask it to", prefix: true, expiry: "1 year" },
+    comment_author_url_: { vendor: "WordPress",    category: "necessary",   purpose: "Remembers your website for comments, if you ask it to", prefix: true, expiry: "1 year" },
+    "wp-postpass_": { vendor: "WordPress",         category: "necessary",   purpose: "Remembers the password entered for a protected page", prefix: true, expiry: "10 days" },
     // WooCommerce
     woocommerce_cart_hash: { vendor: "WooCommerce", category: "necessary",  purpose: "Shopping cart contents", expiry: "Session" },
@@ -272 +320 @@
     if (match) return match;
 
-    // Prefix match in built-in database
+    // Prefix match in built-in database: the longest prefix wins, so
+    // wp-settings-time-1 is not taken for a wp-settings- cookie.
+    var matchLen = 0;
     Object.keys(KNOWN_COOKIES).forEach(function (key) {
-      if (!match && KNOWN_COOKIES[key].prefix && name.indexOf(key) === 0) {
+      if (KNOWN_COOKIES[key].prefix && key.length > matchLen && name.indexOf(key) === 0) {
         match = KNOWN_COOKIES[key];
+        matchLen = key.length;
       }
     });
 
     return match || null;
+  }
+
+  // Cookies WordPress sets when someone logs in. The declaration never
+  // lists the ones in the viewer's own browser; with visitorLogins on it
+  // lists all of them under "If you log in" instead. wordpress_[hash] is
+  // the login cookie on sites without HTTPS, wordpress_rec_ is admin-only.
+  var LOGIN_COOKIE_RE = /^(?:wordpress_(?:logged_in_|sec_|rec_|test_cookie$|[0-9a-f]{32}$)|wp-settings-|wp_lang$)/;
+
+  function isLoginCookie(name) {
+    return LOGIN_COOKIE_RE.test(name);
+  }
+
+  function loginCookieRows() {
+    var keep = "Session, or 14 days with Remember Me";
+    return [
+      { name: "wordpress_logged_in_[hash]", purpose: "Keeps you logged in", expiry: keep },
+      { name: location.protocol === "https:" ? "wordpress_sec_[hash]" : "wordpress_[hash]", purpose: "Confirms your login when you open your account dashboard", expiry: keep },
+      { name: "wordpress_test_cookie", purpose: "Checks your browser accepts cookies before you log in", expiry: "Session" },
+      { name: "wp_lang", purpose: "Remembers the language you picked on the login page", expiry: "Session" },
+      { name: "wp-settings-[user ID]", purpose: "Remembers your dashboard layout settings", expiry: "1 year" },
+      { name: "wp-settings-time-[user ID]", purpose: "Records when your dashboard settings were last saved", expiry: "1 year" }
+    ];
   }
 
@@ -410 +483 @@
     // Connecticut, Montana, Oregon, Texas, Delaware, Iowa, Nebraska,
     // New Hampshire, New Jersey, Minnesota, plus others pending).
-    if (gpcActive) {
+    if (gpcActive && !state.gpcOptIn) {
       update.ad_storage = "denied";
       update.ad_user_data = "denied";
@@ -666 +739 @@
   ];
 
+  // Patterns match whole hostnames (the host itself or a subdomain of
+  // it), plus an optional path prefix: "x.com" matches x.com and
+  // www.x.com but not netflix.com or box.com.
+  function iframePatternMatches(src, pattern) {
+    var host, path;
+    try {
+      var u = new URL(src, location.href);
+      host = u.hostname.toLowerCase();
+      path = u.pathname.toLowerCase();
+    } catch (e) { return false; }
+    var slash = pattern.indexOf("/");
+    var pHost = slash === -1 ? pattern : pattern.slice(0, slash);
+    var pPath = slash === -1 ? "" : pattern.slice(slash);
+    if (host !== pHost && host.slice(-pHost.length - 1) !== "." + pHost) return false;
+    return !pPath || path.indexOf(pPath) === 0;
+  }
+
   function getIframeBlockCategory(src) {
     if (!src) return null;
-    var lower = src.toLowerCase();
     for (var i = 0; i < IFRAME_BLOCK_PATTERNS.length; i++) {
-      if (lower.indexOf(IFRAME_BLOCK_PATTERNS[i].pattern) !== -1) {
+      if (iframePatternMatches(src, IFRAME_BLOCK_PATTERNS[i].pattern)) {
         return IFRAME_BLOCK_PATTERNS[i].category;
       }
@@ -838 +927 @@
       var src = iframe.src || "";
       if (!src) continue;
-      for (var j = 0; j < IFRAME_BLOCK_PATTERNS.length; j++) {
-        if (src.indexOf(IFRAME_BLOCK_PATTERNS[j].pattern) !== -1) {
-          iframe.src = src;
-          break;
-        }
-      }
+      if (getIframeBlockCategory(src)) iframe.src = src;
     }
   }
@@ -896 +980 @@
   function saveState(state, action) {
     var prev = consentState;
+    // A click on an embed's placeholder loads that embed now; the GPC
+    // opt-out is saved again on the next page view (boot()).
+    if (!(action && action.indexOf("facade_accept_") === 0)) applyGpc(state);
     consentState = state;
     storageSet(CONFIG.cookieName, JSON.stringify(state), CONFIG.cookieExpiry);
@@ -958 +1045 @@
       if (!s || typeof s !== "object" || Array.isArray(s)) return null;
       if (!s.ts || isNaN(new Date(s.ts).getTime())) return null;
-      // Check re-consent expiry
+      // Check re-consent expiry. A period below 1 day means the default.
+      var days = Number(CONFIG.reconsentDays);
+      if (!(days >= 1)) days = 365;
       var age = (Date.now() - new Date(s.ts).getTime()) / 864e5;
-      if (age > CONFIG.reconsentDays) return null;
+      if (age > days) return null;
       // Consent version check: if the site owner has clicked
       // "Invalidate All Consent", the version string will not
@@ -1183 +1272 @@
       var alwaysOn = t.required
         ? ' <span class="cc-always-on">' + escHtml(txt.alwaysOnLabel) + '</span>' : "";
+      var gpcNote = gpcActive && t.id === "marketing"
+        ? '<div class="cc-gpc-note">' + escHtml(txt.gpcPrefNote) + '</div>' : "";
       return '<div class="cc-cat">' +
         '<div><div class="cc-cat-label">' + escHtml(t.name) + alwaysOn + '</div>' +
-        '<div class="cc-cat-desc">' + escHtml(t.description || "") + '</div></div>' +
+        '<div class="cc-cat-desc">' + escHtml(t.description || "") + '</div>' + gpcNote + '</div>' +
         '<label class="cc-toggle"><input type="checkbox" id="cc-cb-' + escHtml(t.id) + '"' +
           ' aria-label="' + escHtml(t.name) + '"' +
@@ -1200 +1291 @@
         '<div class="cc-buttons">' +
           '<button class="cc-btn cc-btn-accept" id="cc-accept">' + escHtml(txt.acceptAllButton) + '</button>' +
+          (CONFIG.rejectFirstScreen ? '<button class="cc-btn cc-btn-reject" id="cc-reject">' + escHtml(txt.rejectAllButton) + '</button>' : '') +
           '<button class="cc-btn cc-btn-details" id="cc-details" aria-expanded="false">' + escHtml(txt.showDetailsButton) + '</button>' +
         '</div>' +
@@ -1221 +1313 @@
     document.getElementById("cc-accept").addEventListener("click", acceptAll);
     document.getElementById("cc-decline").addEventListener("click", declineAll);
+    var rejectBtn = document.getElementById("cc-reject");
+    if (rejectBtn) rejectBtn.addEventListener("click", declineAll);
     document.getElementById("cc-save").addEventListener("click", savePrefs);
     document.getElementById("cc-details").addEventListener("click", toggleDetails);
     icon.addEventListener("click", function () { showBanner("gdpr"); });
     // No overlay click handler — banner must be dismissed via buttons only
+    emitRendered("gdpr", banner);
+  }
+
+  // cc:banner-rendered fires once each banner's markup is in the page
+  // (before it is shown), so other code can adjust it.
+  // detail: { banner: "gdpr" | "ccpa", element, state }
+  function emitRendered(type, el) {
+    emit("cc:banner-rendered", { banner: type, element: el, state: getPublicState() });
   }
 
@@ -1231 +1333 @@
   ═══════════════════════════════════════════ */
   function buildCcpaBanner() {
+    if (document.getElementById("cc-ccpa-banner")) return;
     var txt = CONFIG.text;
     var banner = document.createElement("div");
@@ -1240 +1343 @@
 
     banner.innerHTML =
-      '<div class="cc-ccpa-inner">' +
-        '<div class="cc-ccpa-text"><p>' + escHtml(txt.ccpaDescription) + '</p></div>' +
+      '<div class="cc-ccpa-inner" id="cc-ccpa-notice">' +
+        '<div class="cc-ccpa-text"><p>' + escHtml(txt.ccpaDescription) + '</p>' +
+          (gpcActive ? '<p class="cc-ccpa-gpc">' + escHtml(txt.ccpaGpcNotice) + '</p>' : '') +
+        '</div>' +
         '<div class="cc-ccpa-actions">' +
-          '<a href="' + escHtml(CONFIG.ccpaUrl) + '" class="cc-ccpa-link">' + escHtml(txt.ccpaDnsmpiLink) + '</a>' +
+          '<a href="#" class="cc-ccpa-link" id="cc-ccpa-dns" role="button">' + escHtml(txt.ccpaDnsmpiLink) + '</a>' +
           '<button class="cc-btn cc-btn-accept" id="cc-ccpa-ok">' + escHtml(txt.ccpaAcceptButton) + '</button>' +
         '</div>' +
-      '</div>';
+      '</div>' +
+      '<div class="cc-ccpa-choice" id="cc-ccpa-choice"></div>' +
+      (CONFIG.showPoweredBy ? '<div class="cc-powered"><a href="https://www.cookieflame.com" target="_blank" rel="noopener">Powered by CookieFlame</a></div>' : '');
 
     document.body.appendChild(banner);
 
+    // OK only closes the notice. It never changes the visitor's choices:
+    // US visitors start with everything allowed, and a GPC visitor's
+    // opt-out was saved before the notice appeared.
     document.getElementById("cc-ccpa-ok").addEventListener("click", function () {
-      var s = buildStateAllGranted();
-      saveState(s, "ccpa_acknowledge");
-      banner.classList.remove("cc-show");
+      if (consentState) logConsent("ccpa_acknowledge", consentState);
+      closeCcpaBanner();
+    });
+    document.getElementById("cc-ccpa-dns").addEventListener("click", function (e) {
+      e.preventDefault();
+      showCcpaChoice(true);
+    });
+    emitRendered("ccpa", banner);
+  }
+
+  // The "Do Not Sell or Share" choice, drawn from the current state.
+  function renderCcpaChoice() {
+    var el = document.getElementById("cc-ccpa-choice");
+    if (!el) return;
+    var txt = CONFIG.text;
+    var optedOut = !(consentState && consentState.marketing);
+    var html = '<div class="cc-ccpa-choice-inner">' +
+      '<p class="cc-ccpa-choice-title">' + escHtml(txt.ccpaChoiceTitle) + '</p>';
+    if (optedOut) {
+      html += '<p class="cc-ccpa-choice-status">' + escHtml(gpcActive ? txt.ccpaGpcOptedOut : txt.ccpaOptedOut) + '</p>' +
+        '<div class="cc-ccpa-choice-buttons">' +
+          '<button class="cc-btn cc-btn-accept" id="cc-ccpa-done">' + escHtml(txt.ccpaDoneButton) + '</button>' +
+          '<button class="cc-btn cc-btn-decline" id="cc-ccpa-optin">' + escHtml(txt.ccpaOptInButton) + '</button>' +
+        '</div>' +
+        (gpcActive ? '<p class="cc-ccpa-choice-note">' + escHtml(txt.ccpaOptInGpcNote) + '</p>' : '');
+    } else {
+      html += '<p class="cc-ccpa-choice-text">' + escHtml(txt.ccpaChoiceText) + '</p>' +
+        '<div class="cc-ccpa-choice-buttons">' +
+          '<button class="cc-btn cc-btn-accept" id="cc-ccpa-optout">' + escHtml(txt.ccpaOptOutButton) + '</button>' +
+          '<button class="cc-btn cc-btn-decline" id="cc-ccpa-cancel">' + escHtml(txt.ccpaCancelButton) + '</button>' +
+        '</div>';
+    }
+    html += '<button class="cc-btn cc-btn-details" id="cc-ccpa-more">' + escHtml(txt.ccpaMoreSettings) + '</button></div>';
+    el.innerHTML = html;
+
+    var bind = function (id, fn) { var b = document.getElementById(id); if (b) b.addEventListener("click", fn); };
+    bind("cc-ccpa-done", closeCcpaBanner);
+    bind("cc-ccpa-cancel", closeCcpaBanner);
+    bind("cc-ccpa-optout", function () {
+      var s = copyState(consentState);
+      s.marketing = false;
+      saveState(s, "ccpa_opt_out");
+      renderCcpaChoice();
+      focusFirst("cc-ccpa-choice");
       emit("cc:update");
     });
+    bind("cc-ccpa-optin", function () {
+      var s = copyState(consentState);
+      s.marketing = true;
+      if (gpcActive) s.gpcOptIn = 1;
+      delete s.gpc;
+      saveState(s, "ccpa_opt_in");
+      renderCcpaChoice();
+      focusFirst("cc-ccpa-choice");
+      emit("cc:update");
+    });
+    bind("cc-ccpa-more", function () {
+      closeCcpaBanner();
+      openPreferences();
+    });
+  }
+
+  function showCcpaChoice(open) {
+    var notice = document.getElementById("cc-ccpa-notice");
+    var choice = document.getElementById("cc-ccpa-choice");
+    if (!notice || !choice) return;
+    if (open) renderCcpaChoice();
+    notice.style.display = open ? "none" : "";
+    choice.classList.toggle("cc-open", !!open);
+    if (open) focusFirst("cc-ccpa-choice");
+  }
+
+  function closeCcpaBanner() {
+    var b = document.getElementById("cc-ccpa-banner");
+    if (b) b.classList.remove("cc-show");
+    showCcpaChoice(false);
+    document.removeEventListener("keydown", _trapFocus);
+    if (_preFocusEl && typeof _preFocusEl.focus === "function") {
+      try { _preFocusEl.focus(); } catch (e) {}
+    }
+    _preFocusEl = null;
+  }
+
+  function focusFirst(id) {
+    var el = document.getElementById(id);
+    var b = el && el.querySelector("button");
+    if (b) { try { b.focus(); } catch (e) {} }
+  }
+
+  // A fresh state with the same choices as src (everything allowed when
+  // there is none yet), keeping an earlier GPC opt-in.
+  function copyState(src) {
+    var s = { ts: new Date().toISOString(), cv: CONFIG.consentVersion, cc: detectedCountry };
+    CONFIG.cookieTypes.forEach(function (t) { s[t.id] = src ? !!src[t.id] : true; });
+    if (src && src.gpcOptIn) s.gpcOptIn = 1;
+    return s;
   }
 
@@ -1268 +1469 @@
   function _trapFocus(e) {
     if (e.key !== "Tab") return;
-    var banner = document.getElementById("cc-banner") || document.getElementById("cc-ccpa-banner");
-    if (!banner || !banner.classList.contains("cc-show")) return;
+    var banner = document.querySelector("#cc-banner.cc-show, #cc-ccpa-banner.cc-show");
+    if (!banner) return;
     var focusable = [];
     var all = banner.querySelectorAll('button, a[href], input:not([disabled]), select, textarea, [tabindex]:not([tabindex="-1"])');
@@ -1278 +1479 @@
       var p = el.parentElement;
       while (p && p !== banner) {
-        if (p.style && window.getComputedStyle(p).display === "none") { hidden = true; break; }
+        if (window.getComputedStyle(p).display === "none") { hidden = true; break; }
         p = p.parentElement;
       }
@@ -1295 +1496 @@
   function showBanner(mode) {
     if (mode === "ccpa") {
+      _preFocusEl = document.activeElement;
       requestAnimationFrame(function () {
         var b = document.getElementById("cc-ccpa-banner");
         if (b) {
           b.classList.add("cc-show");
-          _preFocusEl = document.activeElement;
-          b.focus();
+          var choice = document.getElementById("cc-ccpa-choice");
+          if (choice && choice.classList.contains("cc-open")) focusFirst("cc-ccpa-choice");
+          else b.focus();
           document.addEventListener("keydown", _trapFocus);
         }
@@ -1307 +1510 @@
     }
     _preFocusEl = document.activeElement;
+    // "Decline All" on the first screen is for the GDPR banner only, never
+    // when the preferences are opened by a US or other visitor.
+    var rj = document.getElementById("cc-reject");
+    if (rj) {
+      if (complianceMode === "gdpr") rj.style.removeProperty("display");
+      else rj.style.setProperty("display", "none", "important"); // beats .cc-btn's !important
+    }
     requestAnimationFrame(function () {
       var ov = document.getElementById("cc-overlay");
@@ -1354 +1564 @@
   ═══════════════════════════════════════════ */
   function acceptAll() {
-    saveState(buildStateAllGranted(), "accept_all");
+    var s = buildStateAllGranted();
+    if (consentState && consentState.gpcOptIn) s.gpcOptIn = 1;
+    saveState(s, "accept_all");
     closeBanner();
     emit("cc:accept-all"); emit("cc:update");
@@ -1366 +1578 @@
 
   function savePrefs() {
-    saveState(buildStateFromCheckboxes(), "save_preferences");
+    var s = buildStateFromCheckboxes();
+    // Switching Marketing on here is the separate choice that opts a GPC
+    // visitor back in.
+    if (s.marketing && (gpcActive || (consentState && consentState.gpcOptIn))) s.gpcOptIn = 1;
+    saveState(s, "save_preferences");
     closeBanner();
     emit("cc:save"); emit("cc:update");
@@ -1383 +1599 @@
     }
   }
+
+  /* ═══════════════════════════════════════════
+     COOKIE SETTINGS LINK
+     [cookieflame_settings_link], the declaration's button and any
+     element with the class cc-open-settings reopen the visitor's
+     choices: the "Do Not Sell or Share" choice for US visitors, the
+     preferences for everyone else.
+  ═══════════════════════════════════════════ */
+  function openPreferences() {
+    if (!document.getElementById("cc-banner")) {
+      applyThemeClasses();
+      buildGdprBanner();
+      hideAllBanners();
+      if (consentState) syncCheckboxes(consentState);
+    }
+    showBanner("gdpr");
+  }
+
+  function openUsChoices() {
+    applyThemeClasses();
+    buildCcpaBanner();
+    showBanner("ccpa");
+    showCcpaChoice(true);
+  }
+
+  function openSettings() {
+    if (complianceMode === "ccpa") openUsChoices();
+    else openPreferences();
+  }
+
+  document.addEventListener("click", function (e) {
+    var t = e.target && e.target.closest ? e.target.closest(".cc-open-settings") : null;
+    if (!t) return;
+    e.preventDefault();
+    openSettings();
+  });
 
   /* ═══════════════════════════════════════════
@@ -1435 +1687 @@
     getComplianceMode:  function () { return complianceMode; },
     getCountry:         function () { return detectedCountry; },
-    show:               function () { showBanner("gdpr"); }, // always open preference manager
+    show:               openPreferences, // always open preference manager
+    showSettings:       openSettings,    // what the Cookie settings link opens
     acceptAll:          acceptAll,
     declineAll:         declineAll,
@@ -1461 +1714 @@
     // Add browser cookies
     var browserCookies = document.cookie.split(";").map(function (c) { return c.trim().split("=")[0]; }).filter(Boolean);
+    browserCookies = browserCookies.filter(function (n) { return !isLoginCookie(n); });
     for (var b = 0; b < browserCookies.length; b++) {
       var bInfo = identifyCookie(browserCookies[b]);
@@ -1473 +1727 @@
     for (var c = 0; c < customCookies.length; c++) {
       var cc = customCookies[c];
-      if (cc.name && cc.vendor && cc.category && cc.category !== "unclassified" && !allCookies[cc.name]) {
+      if (cc.name && cc.vendor && cc.category && cc.category !== "unclassified" && !allCookies[cc.name] && !isLoginCookie(cc.name)) {
         allCookies[cc.name] = {
           name: cc.name, vendor: cc.vendor, category: cc.category,
@@ -1562 +1816 @@
     }
 
+    if (CONFIG.visitorLogins) {
+      var loginRows = loginCookieRows();
+      html += '<div class="cc-declaration-login">';
+      html += '<p><b>' + escHtml(CONFIG.text.loginCookiesTitle) + '</b></p>';
+      html += '<p>' + escHtml(CONFIG.text.loginCookiesIntro) + '</p>';
+      html += '<table><thead><tr>';
+      html += '<th>Name</th><th>Provider</th><th>Purpose</th><th>Expiry</th>';
+      html += '</tr></thead><tbody>';
+      for (var li = 0; li < loginRows.length; li++) {
+        html += '<tr>';
+        html += '<td><code>' + escHtml(loginRows[li].name) + '</code></td>';
+        html += '<td>WordPress</td>';
+        html += '<td>' + escHtml(loginRows[li].purpose) + '</td>';
+        html += '<td>' + escHtml(loginRows[li].expiry) + '</td>';
+        html += '</tr>';
+      }
+      html += '</tbody></table></div>';
+    }
+
+    html += '<p><button type="button" class="cc-open-settings cc-declaration-change">' + escHtml(CONFIG.text.changePreferences) + '</button></p>';
     html += '</div>';
     el.innerHTML = html;
@@ -1581 +1855 @@
   var preloadedConsent = loadState();
   if (preloadedConsent) {
+    // Marketing scripts created before boot() runs stay blocked for GPC.
+    if (gpcActive && !preloadedConsent.gpcOptIn) preloadedConsent.marketing = false;
     consentState = preloadedConsent;
     updateConsentMode(preloadedConsent);
@@ -1649 +1925 @@
     var existing = loadState();
 
+    var gpcNewOptOut = false;
     if (existing) {
-      // GPC override: when Global Privacy Control is active, suppress
-      // marketing consent in the effective state. The stored cookie
-      // is not modified — if the visitor later disables GPC, their
-      // original consent choice is restored. This ensures marketing
-      // scripts and ad signals stay blocked while GPC is active.
-      if (gpcActive) existing.marketing = false;
+      // GPC: a signal that arrives after the visitor's choice is
+      // processed as an opt-out and saved, so it holds on later visits
+      // without GPC (§7025(c)(5)). An earlier opt-in made while GPC was
+      // on (gpcOptIn) is kept.
+      if (gpcActive && !existing.gpcOptIn && (existing.marketing || !existing.gpc)) {
+        gpcNewOptOut = !!existing.marketing;
+        applyGpc(existing);
+        storageSet(CONFIG.cookieName, JSON.stringify(existing), CONFIG.cookieExpiry);
+      }
       consentState = existing;
       updateConsentMode(existing);
@@ -1681 +1961 @@
           if (ic) ic.classList.add("cc-show");
         }
+        if (gpcNewOptOut) logConsent("gpc_optout", existing);
         emit("cc:ready");
         renderDeclaration();
@@ -1691 +1972 @@
             if (ic) ic.classList.add("cc-show");
           }
+          if (gpcNewOptOut) logConsent("gpc_optout", existing);
           emit("cc:ready");
           renderDeclaration();
@@ -1714 +1996 @@
         startIframeObserver();
         if (gpcActive) {
-          // GPC active: grant analytics and preferences but deny marketing.
-          // This fulfills the CCPA/CPRA requirement to honor Global Privacy
-          // Control as a valid opt-out of the sale or sharing of personal
-          // information. Fines have been issued for ignoring GPC (Sephora
-          // $1.2M, DoorDash $375K, Tractor Supply $1.3M).
-          var gpcState = buildStateAllGranted();
-          gpcState.marketing = false;
-          saveState(gpcState, "ccpa_gpc_optout");
+          // GPC active: allow analytics and preferences but opt out of
+          // selling and sharing (Marketing off), saved before the notice
+          // appears. The notice says the signal was honoured.
+          saveState(applyGpc(buildStateAllGranted()), "ccpa_gpc_optout");
         } else {
           saveState(buildStateAllGranted(), "ccpa_auto_grant");

cookieflame/trunk/assets/js/cookieconsent.min.js

@@ -1 +1 @@
 /**
- * CookieFlame v5.3.0
+ * CookieFlame v5.4.0
  * ─────────────────────────────────────────────────────────────
  * Self-hosted cookie consent manager with Google Consent Mode v2,
- * IAB TCF v2.2, automatic script blocking, iframe facades with
+ * automatic script blocking, iframe facades with
  * thumbnails, Elementor video widget support, multi-region
  * compliance (GDPR/CCPA), and passive cookie monitoring.
@@ -17 +17 @@
  *   • Timezone-based geo heuristic with server-side fallback
  */
-!function(){"use strict";var e={};try{for(var t=document.cookie.split(";"),n=0;n<t.length;n++){var o=t[n].trim().split("=")[0];o&&(e[o]=!0)}}catch(e){}var c="5.3.0",r={cookieName:"cc_consent",cookieExpiry:365,privacyUrl:"/privacy-policy",ccpaUrl:"/privacy-policy#do-not-sell",geoApi:"",logEndpoint:"",reconsentDays:365,cspSafe:!1,tcfEnabled:!0,cmpId:1,cmpVersion:1,vendorListVersion:2,storageMethod:"cookie",cookieDomain:"",shareSubdomains:!1,theme:"light",showPoweredBy:!1,iconPosition:"left",consentVersion:"",autoBlockPatterns:[{pattern:"googletagmanager.com/gtag",category:"analytics"},{pattern:"google-analytics.com",category:"analytics"},{pattern:"analytics.google.com",category:"analytics"},{pattern:"hotjar.com",category:"analytics"},{pattern:"mixpanel.com",category:"analytics"},{pattern:"segment.com/analytics",category:"analytics"},{pattern:"segment.io",category:"analytics"},{pattern:"clarity.ms",category:"analytics"},{pattern:"plausible.io",category:"analytics"},{pattern:"js.hs-analytics.net",category:"analytics"},{pattern:"connect.facebook.net",category:"marketing"},{pattern:"snap.licdn.com",category:"marketing"},{pattern:"ads.linkedin.com",category:"marketing"},{pattern:"googleads.g.doubleclick.net",category:"marketing"},{pattern:"googlesyndication.com",category:"marketing"},{pattern:"googleadservices.com",category:"marketing"},{pattern:"ads-twitter.com",category:"marketing"},{pattern:"analytics.tiktok.com",category:"marketing"},{pattern:"pintrk",category:"marketing"},{pattern:"s.pinimg.com/ct",category:"marketing"},{pattern:"widget.intercom.io",category:"preferences"},{pattern:"js.intercomcdn.com",category:"preferences"}],regionRules:{gdpr:["AT","BE","BG","CY","CZ","DE","DK","EE","ES","FI","FR","GR","HR","HU","IE","IT","LT","LU","LV","MT","NL","PL","PT","RO","SE","SI","SK","IS","LI","NO","GB","GG","JE","IM","CH","BR","ZA"],ccpa:["US"]},text:{title:"We value your privacy",description:"We use cookies to improve your experience, analyse traffic and personalise content. You can choose which categories to allow.",acceptAllButton:"Accept All",declineAllButton:"Decline All",saveButton:"Save Preferences",showDetailsButton:"Manage preferences",hideDetailsButton:"Hide preferences",alwaysOnLabel:"(always on)",ccpaTitle:"Your Privacy Choices",ccpaDescription:"We use cookies and similar technologies. Under California law, you have the right to opt out of the sale or sharing of your personal information.",ccpaAcceptButton:"OK",ccpaDnsmpiLink:"Do Not Sell My Personal Information"},cookieTypes:[{id:"necessary",name:"Necessary",description:"Required for the site to function. Cannot be disabled.",required:!0,consentMode:["security_storage","functionality_storage"],tcfPurposes:[1],onAccept:function(){}},{id:"preferences",name:"Preferences",description:"Remember your settings and personalisation choices.",required:!1,defaultValue:!1,consentMode:["functionality_storage","personalization_storage"],tcfPurposes:[2,3],onAccept:function(){},onReject:function(){}},{id:"analytics",name:"Analytics",description:"Help us understand how visitors use the site.",required:!1,defaultValue:!1,consentMode:["analytics_storage"],tcfPurposes:[4,5,6],onAccept:function(){},onReject:function(){}},{id:"marketing",name:"Marketing",description:"Used to deliver relevant ads and track campaigns.",required:!1,defaultValue:!1,consentMode:["ad_storage","ad_user_data","ad_personalization"],tcfPurposes:[7,8,9,10],onAccept:function(){},onReject:function(){}}]};if(window.__ccConfig&&"object"==typeof window.__ccConfig){var a=window.__ccConfig;["cookieName","cookieExpiry","privacyUrl","ccpaUrl","geoApi","logEndpoint","reconsentDays","cspSafe","tcfEnabled","cmpId","cmpVersion","vendorListVersion","storageMethod","cookieDomain","shareSubdomains","theme","showPoweredBy","iconPosition","consentVersion"].forEach(function(e){void 0!==a[e]&&(r[e]=a[e])}),a.text&&"object"==typeof a.text&&Object.keys(a.text).forEach(function(e){r.text[e]=a.text[e]}),Array.isArray(a.cookieTypes)&&(r.cookieTypes=a.cookieTypes),Array.isArray(a.autoBlockPatterns)&&(r.autoBlockPatterns=a.autoBlockPatterns),a.regionRules&&(r.regionRules=a.regionRules)}window.__ccConsentVersion&&(r.consentVersion=window.__ccConsentVersion);var i=!!window.__ccGPC;window.__ccBlockRules&&Array.isArray(window.__ccBlockRules)&&window.__ccBlockRules.length&&(r.autoBlockPatterns=window.__ccBlockRules);var s={cc_consent:{vendor:"CookieFlame",category:"necessary",purpose:"Stores your consent preferences",expiry:"1 year"},cc_anon_id:{vendor:"CookieFlame",category:"necessary",purpose:"Anonymous ID for consent logging",expiry:"1 year"},cookieflame_dnt:{vendor:"CookieFlame",category:"necessary",purpose:"Do-not-track opt-out flag",expiry:"1 year"},PHPSESSID:{vendor:"PHP",category:"necessary",purpose:"Server-side session identifier",expiry:"Session"},wp_settings_:{vendor:"WordPress",category:"necessary",purpose:"Admin interface preferences",prefix:!0,expiry:"1 year"},"wp-settings-":{vendor:"WordPress",category:"necessary",purpose:"Admin interface preferences",prefix:!0,expiry:"1 year"},"wp-settings-time-":{vendor:"WordPress",category:"necessary",purpose:"Admin settings timestamp",prefix:!0,expiry:"1 year"},wordpress_logged_in_:{vendor:"WordPress",category:"necessary",purpose:"Login session",prefix:!0,expiry:"Session"},wordpress_sec_:{vendor:"WordPress",category:"necessary",purpose:"Secure login session",prefix:!0,expiry:"Session"},wordpress_test_cookie:{vendor:"WordPress",category:"necessary",purpose:"Checks cookie support",expiry:"Session"},wp_lang:{vendor:"WordPress",category:"necessary",purpose:"Language preference",expiry:"Session"},woocommerce_cart_hash:{vendor:"WooCommerce",category:"necessary",purpose:"Shopping cart contents",expiry:"Session"},woocommerce_items_in_cart:{vendor:"WooCommerce",category:"necessary",purpose:"Cart item count",expiry:"Session"},wp_woocommerce_session_:{vendor:"WooCommerce",category:"necessary",purpose:"Shopping session",prefix:!0,expiry:"2 days"},_ga:{vendor:"Google Analytics",category:"analytics",purpose:"Distinguishes visitors",expiry:"2 years"},_ga_:{vendor:"Google Analytics",category:"analytics",purpose:"Stores session state",prefix:!0,expiry:"2 years"},_gid:{vendor:"Google Analytics",category:"analytics",purpose:"Distinguishes visitors (24h)",expiry:"24 hours"},_gat:{vendor:"Google Analytics",category:"analytics",purpose:"Throttles request rate",expiry:"1 minute"},wp_wk_ga_untrack_:{vendor:"Google Analytics",category:"analytics",purpose:"GA opt-out flag",prefix:!0,expiry:"Persistent"},_gcl_au:{vendor:"Google Ads",category:"marketing",purpose:"Conversion linker",expiry:"90 days"},_gcl_aw:{vendor:"Google Ads",category:"marketing",purpose:"Stores ad click info",expiry:"90 days"},_gac_:{vendor:"Google Ads",category:"marketing",purpose:"Campaign information",prefix:!0,expiry:"90 days"},IDE:{vendor:"Google DoubleClick",category:"marketing",purpose:"Ad serving and frequency",expiry:"1 year"},test_cookie:{vendor:"Google DoubleClick",category:"marketing",purpose:"Checks cookie support",expiry:"15 minutes"},NID:{vendor:"Google",category:"preferences",purpose:"Stores preferences",expiry:"6 months"}},d=window.__ccCustomCookies||[];function u(e){for(var t=0;t<d.length;t++){var n=d[t];if("exact"===n.match&&e===n.name)return n;if("prefix"===n.match&&0===e.indexOf(n.name))return n;if("contains"===n.match&&-1!==e.indexOf(n.name))return n}var o=s[e];return o||(Object.keys(s).forEach(function(t){!o&&s[t].prefix&&0===e.indexOf(t)&&(o=s[t])}),o||null)}var l=null,p="none",f=null,m=null,g=!1,y=0;function v(e){return"string"!=typeof e&&(e=String(e)),e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}function h(e){if("localStorage"===r.storageMethod)try{return localStorage.getItem(e)}catch(e){return null}var t=document.cookie.match(new RegExp("(?:^|;\\s*)"+e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")+"=([^;]*)"));if(!t)return null;try{return decodeURIComponent(t[1])}catch(e){return null}}function w(e,t,n){if("localStorage"!==r.storageMethod){var o=new Date;o.setTime(o.getTime()+864e5*n);var c=e+"="+encodeURIComponent(t)+";expires="+o.toUTCString()+";path=/;SameSite=Lax;Secure";r.cookieDomain&&(c+=";domain="+r.cookieDomain),document.cookie=c}else try{localStorage.setItem(e,t)}catch(e){}}function b(){if(m)return m;var e=h("cc_anon_id");return e?(m=e,e):(w("cc_anon_id",m="cc_"+function(){if("undefined"!=typeof crypto&&"function"==typeof crypto.randomUUID)try{return crypto.randomUUID()}catch(e){}return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(e){var t=16*Math.random()|0;return("x"===e?t:3&t|8).toString(16)})}(),730),m)}function k(){var e={timestamp:l?l.ts:null,complianceMode:p,country:f,gpc:i,consentVersion:r.consentVersion};return r.cookieTypes.forEach(function(t){e[t.id]=l?!!l[t.id]:!!t.required}),e}function _(e,t){window.dispatchEvent(new CustomEvent(e,{detail:t||k()}))}function x(){window.dataLayer=window.dataLayer||[],window.dataLayer.push(arguments)}function E(e){var t={};r.cookieTypes.forEach(function(n){n.consentMode&&n.consentMode.forEach(function(o){t[o]=e[n.id]?"granted":"denied"})}),i&&(t.ad_storage="denied",t.ad_user_data="denied",t.ad_personalization="denied"),x("consent","update",t)}var A=new Map,S=!1;function L(e){var t={};return r.cookieTypes.forEach(function(n){n.tcfPurposes&&n.tcfPurposes.forEach(function(o){t[o]=!!e[n.id]})}),{tcString:"",tcfPolicyVersion:4,cmpId:r.cmpId,cmpVersion:r.cmpVersion,gdprApplies:"gdpr"===p,eventStatus:"useractioncomplete",cmpStatus:"loaded",listenerId:void 0,isServiceSpecific:!0,useNonStandardTexts:!1,publisherCC:"GB",purposeOneTreatment:!1,purpose:{consents:t,legitimateInterests:{}},vendor:{consents:{},legitimateInterests:{}},specialFeatureOptins:{},publisher:{consents:{},legitimateInterests:{},customPurpose:{consents:{},legitimateInterests:{}},restrictions:{}}}}function C(e,t,n,o){if("function"==typeof n)if("addEventListener"===e){var c=++y;if(A.set(c,n),l){var a=L(l);a.listenerId=c,n(a,!0)}}else"removeEventListener"===e?n({listenerId:o},A.delete(o)):"getTCData"===e?n(l?L(l):null,!!l):"ping"===e?n({gdprApplies:"gdpr"===p,cmpLoaded:S,cmpStatus:S?"loaded":"stub",displayStatus:"hidden",apiVersion:"2.2",cmpVersion:r.cmpVersion,cmpId:r.cmpId,gvlVersion:r.vendorListVersion,tcfPolicyVersion:4},!0):n(null,!1)}function B(e){A.forEach(function(t,n){var o=L(e);o.listenerId=n;try{t(o,!0)}catch(e){}})}function I(e){if(!e)return null;for(var t=e.toLowerCase(),n=0;n<r.autoBlockPatterns.length;n++){var o=r.autoBlockPatterns[n];if(o.pattern instanceof RegExp){if(o.pattern.test(t))return o.category}else if(-1!==t.indexOf(o.pattern.toLowerCase()))return o.category}return null}function T(e){document.querySelectorAll('script[type="text/plain"][data-cc]').forEach(function(t){var n=(t.getAttribute("data-cc")||"").toLowerCase();if(e[n]&&!t.getAttribute("data-cc-activated")){t.setAttribute("data-cc-activated","1");var o=document.createElement("script");o.isWPRocket=!0,Array.from(t.attributes).forEach(function(e){"type"!==e.name&&"data-cc"!==e.name&&"data-cc-activated"!==e.name&&"data-cc-auto"!==e.name&&o.setAttribute(e.name,e.value)}),!t.src&&t.textContent&&(o.textContent=t.textContent),t.parentNode.insertBefore(o,t.nextSibling),t.parentNode.removeChild(t)}}),["img","iframe","link"].forEach(function(t){document.querySelectorAll(t+"[data-cc][data-cc-src]").forEach(function(n){var o=(n.getAttribute("data-cc")||"").toLowerCase();e[o]&&!n.getAttribute("data-cc-activated")&&(n.setAttribute("data-cc-activated","1"),"link"===t?n.href=n.getAttribute("data-cc-src"):n.src=n.getAttribute("data-cc-src"))})})}var O=[{pattern:"youtube.com",category:"marketing"},{pattern:"youtube-nocookie.com",category:"marketing"},{pattern:"youtu.be",category:"marketing"},{pattern:"player.vimeo.com",category:"marketing"},{pattern:"vimeo.com",category:"marketing"},{pattern:"dailymotion.com",category:"marketing"},{pattern:"open.spotify.com",category:"preferences"},{pattern:"soundcloud.com",category:"preferences"},{pattern:"google.com/maps",category:"preferences"},{pattern:"maps.google.com",category:"preferences"},{pattern:"facebook.com/plugins",category:"marketing"},{pattern:"instagram.com",category:"marketing"},{pattern:"tiktok.com/embed",category:"marketing"},{pattern:"twitter.com",category:"marketing"},{pattern:"x.com",category:"marketing"}];function D(){return!(!document.body||!(document.body.classList.contains("elementor-editor-active")||document.body.classList.contains("fl-builder-edit")||document.body.classList.contains("et-fb-root-ancestor")))}var P=[],M=0,R=null,q=!1;function V(){if(R&&P.length){var e=P;P=[];try{R(e)}catch(e){}}}function N(){0!==P.length&&(2!==M?1!==M&&3!==M&&(M=1,function(){var e=window.__ccConfig&&window.__ccConfig.facadesUrl||null;if(!e)return void(M=3);var t=document.createElement("script");t.src=e,t.async=!0,t.onload=function(){M=2,V()},t.onerror=function(){M=3},(document.head||document.documentElement).appendChild(t)}()):V())}function U(e){var t=e.src||e.getAttribute("data-src")||"";if(t&&!e.getAttribute("data-cc-facade")&&!D()){var n=function(e){if(!e)return null;for(var t=e.toLowerCase(),n=0;n<O.length;n++)if(-1!==t.indexOf(O[n].pattern))return O[n].category;return null}(t);if(n){var o=l||Z();o&&o[n]||(e.setAttribute("data-cc-facade","1"),e.setAttribute("data-cc-iframe-cat",n),e.setAttribute("data-cc-original-src",t),e.removeAttribute("src"),e.style.display="none",P.push({type:"iframe",node:e,category:n,src:t}),N())}}}function G(e){if(!e.getAttribute("data-cc-facade")&&!D()){var t=e.getAttribute("data-settings");if(t){var n;try{n=JSON.parse(t)}catch(e){return}var o=n.youtube_url||n.vimeo_url||"";if(o){var c=o.toLowerCase(),r=null;if((-1!==c.indexOf("youtube")||-1!==c.indexOf("youtu.be")||-1!==c.indexOf("vimeo")||-1!==c.indexOf("dailymotion"))&&(r="marketing"),r&&(!l||!l[r])){if(!l){var a=Z();if(a&&a[r])return}e.setAttribute("data-cc-facade","1"),q=!0,P.push({type:"elementor",node:e,category:r,url:o}),N()}}}}}function j(){for(var e=document.querySelectorAll("iframe[src]"),t=0;t<e.length;t++)U(e[t]);for(var n=document.querySelectorAll(".elementor-widget-video"),o=0;o<n.length;o++)G(n[o]);for(var c=document.querySelectorAll(".wp-block-embed__wrapper iframe[src]"),r=0;r<c.length;r++)U(c[r])}function J(){new MutationObserver(function(e){e.forEach(function(e){e.addedNodes.forEach(function(e){if(1===e.nodeType){if("IFRAME"===e.tagName&&U(e),e.querySelectorAll){for(var t=e.querySelectorAll("iframe[src]"),n=0;n<t.length;n++)U(t[n]);for(var o=e.querySelectorAll(".elementor-widget-video"),c=0;c<o.length;c++)G(o[c])}e.classList&&e.classList.contains("elementor-widget-video")&&G(e)}})})}).observe(document.documentElement,{childList:!0,subtree:!0})}function W(){for(var e=document.querySelectorAll("iframe[src]"),t=0;t<e.length;t++){var n=e[t];if(!n.getAttribute("data-cc-facade")){var o=n.src||"";if(o)for(var c=0;c<O.length;c++)if(-1!==o.indexOf(O[c].pattern)){n.src=o;break}}}}function H(e,t){r.cookieTypes.forEach(function(n){var o=!!e[n.id];if((t?!!t[n.id]:null)!==o||null===t)if(o&&"function"==typeof n.onAccept)try{n.onAccept()}catch(e){console.warn("[CookieConsent] onAccept error for "+n.id,e)}else if(!o&&"function"==typeof n.onReject)try{n.onReject()}catch(e){console.warn("[CookieConsent] onReject error for "+n.id,e)}})}function F(e,t){var n=l;if(l=e,w(r.cookieName,JSON.stringify(e),r.cookieExpiry),E(e),q&&t)for(var o=document.querySelectorAll(".cc-iframe-facade[data-cc-elementor-widget]"),a=0;a<o.length;a++){var s=o[a].getAttribute("data-cc-iframe-cat");if(s&&e[s])return void window.location.reload()}K(e,n),T(e),function(e){for(var t=document.querySelectorAll(".cc-iframe-facade"),n=0;n<t.length;n++)if(!t[n].getAttribute("data-cc-elementor-widget")&&e[t[n].getAttribute("data-cc-iframe-cat")]){var o=t[n].nextElementSibling;if(o&&"IFRAME"===o.tagName&&o.getAttribute("data-cc-facade")){var c=o.getAttribute("data-cc-original-src");c&&(o.src=c,o.style.display="",o.removeAttribute("data-cc-facade"))}t[n].parentNode.removeChild(t[n])}}(e),t&&"auto_grant_non_eu"!==t&&"ccpa_auto_grant"!==t&&setTimeout(W,300),H(e,n),$(e),r.tcfEnabled&&B(e),t&&function(e,t){if(r.logEndpoint){var n={};r.cookieTypes.forEach(function(e){n[e.id]=!!t[e.id]});var o={anonymousId:b(),timestamp:(new Date).toISOString(),action:e,consent:n,complianceMode:p,country:f,url:location.href,userAgent:navigator.userAgent,tcfEnabled:r.tcfEnabled,gpc:i,consentVersion:r.consentVersion,version:c};try{var a=JSON.stringify(o);navigator.sendBeacon?navigator.sendBeacon(r.logEndpoint,new Blob([a],{type:"application/json"})):fetch(r.logEndpoint,{method:"POST",body:a,headers:{"Content-Type":"application/json"},keepalive:!0})}catch(e){}}}(t,e)}function $(e){r.cookieTypes.forEach(function(t){if(!t.required){var n=document.getElementById("cc-cb-"+t.id);n&&(n.checked=!!e[t.id])}});var t=document.getElementById("cc-cats"),n=document.getElementById("cc-details"),o=document.getElementById("cc-pref-buttons");t&&t.classList.remove("cc-open"),n&&(n.textContent=r.text.showDetailsButton),o&&o.classList.remove("cc-open")}function Z(){var e=h(r.cookieName);if(!e)return null;try{var t=JSON.parse(e);return!t||"object"!=typeof t||Array.isArray(t)||(!t.ts||isNaN(new Date(t.ts).getTime())||(Date.now()-new Date(t.ts).getTime())/864e5>r.reconsentDays||r.consentVersion&&t.cv!==r.consentVersion)?null:t}catch(e){return null}}function Y(){var e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:f};return r.cookieTypes.forEach(function(t){e[t.id]=!0}),e}function z(){var e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:f};return r.cookieTypes.forEach(function(t){e[t.id]=!!t.required}),e}function K(e,t){if(t){var n=[];if(r.cookieTypes.forEach(function(o){o.required||t[o.id]&&!e[o.id]&&n.push(o.id)}),n.length)document.cookie.split(";").map(function(e){return e.trim().split("=")[0]}).filter(Boolean).forEach(function(e){var t=u(e);if(t&&-1!==n.indexOf(t.category)){var o=location.hostname,c="."+o;document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/",document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT",document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+c,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+o,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; Secure",r.cookieDomain&&(document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+r.cookieDomain,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+r.cookieDomain+"; Secure");var a=o.split(".");if(a.length>2){var i="."+a.slice(1).join(".");document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+i,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+i+"; Secure"}}})}}function Q(e){return(f=e?e.toUpperCase():null)?r.regionRules.gdpr&&-1!==r.regionRules.gdpr.indexOf(f)?"gdpr":r.regionRules.ccpa&&-1!==r.regionRules.ccpa.indexOf(f)?"ccpa":"none":"gdpr"}function X(e){if(window.__ccGeo)return e(Q(window.__ccGeo));r.geoApi?fetch(r.geoApi).then(function(e){return e.json()}).then(function(t){var n=t.country_code||t.country||"";n?e(Q(n)):ee(e)}).catch(function(){ee(e)}):ee(e)}function ee(e){var t="";try{t=Intl.DateTimeFormat().resolvedOptions().timeZone||""}catch(e){}return 0===t.indexOf("Europe/")||"Atlantic/Reykjavik"===t?(f=null,e("gdpr")):0===t.indexOf("US/")||0===t.indexOf("America/")&&["New_York","Chicago","Denver","Los_Angeles","Phoenix","Anchorage","Boise","Detroit","Indianapolis","Louisville","Menominee","Nome","Adak","Juneau","Sitka","Yakutat","Metlakatla","Kentucky","Indiana","North_Dakota"].some(function(e){return-1!==t.indexOf(e)})||"Pacific/Honolulu"===t?(f="US",e("ccpa")):(f=null,void e("gdpr"))}function te(){"dark"===r.theme&&document.documentElement.classList.add("cc-dark"),"right"===r.iconPosition&&document.documentElement.classList.add("cc-icon-right")}function ne(){var e=r.text,t=document.createElement("div");t.id="cc-overlay",document.body.appendChild(t);var n=document.createElement("div");n.id="cc-banner",n.setAttribute("role","dialog"),n.setAttribute("aria-modal","true"),n.setAttribute("aria-label","Cookie consent"),n.setAttribute("tabindex","-1");var o=r.cookieTypes.map(function(t){var n=t.required?' <span class="cc-always-on">'+v(e.alwaysOnLabel)+"</span>":"";return'<div class="cc-cat"><div><div class="cc-cat-label">'+v(t.name)+n+'</div><div class="cc-cat-desc">'+v(t.description||"")+'</div></div><label class="cc-toggle"><input type="checkbox" id="cc-cb-'+v(t.id)+'" aria-label="'+v(t.name)+'"'+(t.required||t.defaultValue?" checked":"")+(t.required?" disabled":"")+'><span class="cc-slider"></span></label></div>'}).join("");n.innerHTML='<div class="cc-inner"><p class="cc-title">'+v(e.title)+'</p><p class="cc-text">'+v(e.description)+' <a href="'+v(r.privacyUrl)+'">Privacy Policy</a></p><div class="cc-buttons"><button class="cc-btn cc-btn-accept" id="cc-accept">'+v(e.acceptAllButton)+'</button><button class="cc-btn cc-btn-details" id="cc-details" aria-expanded="false">'+v(e.showDetailsButton)+'</button></div><div class="cc-categories" id="cc-cats">'+o+'</div><div class="cc-pref-buttons" id="cc-pref-buttons"><button class="cc-btn cc-btn-save" id="cc-save">'+v(e.saveButton)+'</button><button class="cc-btn cc-btn-decline" id="cc-decline">'+v(e.declineAllButton)+"</button></div></div>"+(r.showPoweredBy?'<div class="cc-powered"><a href="https://www.cookieflame.com" target="_blank" rel="noopener">Powered by CookieFlame</a></div>':""),document.body.appendChild(n);var c=document.createElement("button");c.id="cc-icon",c.setAttribute("aria-label","Cookie settings"),c.innerHTML='<svg width="24" height="24" viewBox="0 0 38 38" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.1 1.16c-.06-.42-.38-.77-.8-.83A11.8 11.8 0 0 0 13.28 1.2L7.5 4.3A11.8 11.8 0 0 0 3.95 7.98L1.09 13.9A11.8 11.8 0 0 0 .38 18.96l1.13 6.47a11.8 11.8 0 0 0 3.53 4.99l4.71 4.56a11.8 11.8 0 0 0 4.59 2.24l6.48.91a11.8 11.8 0 0 0 5.52-.89l5.78-3.09a11.8 11.8 0 0 0 3.55-3.69l2.87-5.9a11.8 11.8 0 0 0 .71-5.08c-.07-.41-.42-.73-.83-.79a14.8 14.8 0 0 1-8.16-7.61c-.14-.59-.63-1.05-1.23-1.14A14.8 14.8 0 0 1 19.1 1.16ZM15.25 10.25a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Zm-5 15a2.5 2.5 0 1 1 5 0 2.5 2.5 0 0 1-5 0Zm17.5-5a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Z" fill="currentColor"/></svg>',document.body.appendChild(c),document.getElementById("cc-accept").addEventListener("click",se),document.getElementById("cc-decline").addEventListener("click",de),document.getElementById("cc-save").addEventListener("click",ue),document.getElementById("cc-details").addEventListener("click",le),c.addEventListener("click",function(){re("gdpr")})}var oe=null;function ce(e){if("Tab"===e.key){var t=document.getElementById("cc-banner")||document.getElementById("cc-ccpa-banner");if(t&&t.classList.contains("cc-show")){for(var n=[],o=t.querySelectorAll('button, a[href], input:not([disabled]), select, textarea, [tabindex]:not([tabindex="-1"])'),c=0;c<o.length;c++){for(var r=o[c],a=!1,i=r.parentElement;i&&i!==t;){if(i.style&&"none"===window.getComputedStyle(i).display){a=!0;break}i=i.parentElement}a||n.push(r)}if(0!==n.length){var s=n[0],d=n[n.length-1];e.shiftKey?document.activeElement===s&&(e.preventDefault(),d.focus()):document.activeElement===d&&(e.preventDefault(),s.focus())}}}}function re(e){"ccpa"!==e?(oe=document.activeElement,requestAnimationFrame(function(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");if(e&&e.classList.add("cc-show"),t){t.classList.add("cc-show");var o=t.querySelector(".cc-btn-accept");o&&o.focus(),document.addEventListener("keydown",ce)}n&&n.classList.remove("cc-show")})):requestAnimationFrame(function(){var e=document.getElementById("cc-ccpa-banner");e&&(e.classList.add("cc-show"),oe=document.activeElement,e.focus(),document.addEventListener("keydown",ce))})}function ae(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");if(e&&e.classList.remove("cc-show"),t&&t.classList.remove("cc-show"),n&&"gdpr"===p&&n.classList.add("cc-show"),document.removeEventListener("keydown",ce),oe&&"function"==typeof oe.focus)try{oe.focus()}catch(e){}oe=null}function ie(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");e&&e.classList.remove("cc-show"),t&&t.classList.remove("cc-show"),n&&n.classList.remove("cc-show"),document.removeEventListener("keydown",ce)}function se(){F(Y(),"accept_all"),ae(),_("cc:accept-all"),_("cc:update")}function de(){F(z(),"decline_all"),ae(),_("cc:decline-all"),_("cc:update")}function ue(){var e;F((e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:f},r.cookieTypes.forEach(function(t){if(t.required)e[t.id]=!0;else{var n=document.getElementById("cc-cb-"+t.id);e[t.id]=!!n&&n.checked}}),e),"save_preferences"),ae(),_("cc:save"),_("cc:update")}function le(){var e=document.getElementById("cc-cats"),t=document.getElementById("cc-details"),n=document.getElementById("cc-pref-buttons"),o=e.classList.toggle("cc-open");t.textContent=o?r.text.hideDetailsButton:r.text.showDetailsButton,t.setAttribute("aria-expanded",o?"true":"false"),n&&(o?n.classList.add("cc-open"):n.classList.remove("cc-open"))}function pe(){var e=document.getElementById("cc-declaration");if(e){for(var t=k(),n={},o=document.cookie.split(";").map(function(e){return e.trim().split("=")[0]}).filter(Boolean),c=0;c<o.length;c++){var a=u(o[c]);a&&(n[o[c]]={name:o[c],vendor:a.vendor,category:a.category,purpose:a.purpose,expiry:a.expiry||"",active:!0})}for(var i=0;i<d.length;i++){var s=d[i];s.name&&s.vendor&&s.category&&"unclassified"!==s.category&&!n[s.name]&&(n[s.name]={name:s.name,vendor:s.vendor,category:s.category,purpose:s.purpose||"",expiry:s.expiry||"",active:!1})}for(var l=0;l<o.length;l++)n[o[l]]||(n[o[l]]={name:o[l],vendor:"",category:"unclassified",purpose:"",expiry:"",active:!0});var p=["necessary","preferences","analytics","marketing"],f={};r.cookieTypes.forEach(function(e){f[e.id]=e.name});var m={};p.forEach(function(e){m[e]=[]}),Object.keys(n).forEach(function(e){var t=n[e],o=t.category;m[o]||(m[o]=[]),m[o].push(t)}),p.forEach(function(e){m[e]&&m[e].sort(function(e,t){return e.name.localeCompare(t.name)})});var g="<div>";if(t.timestamp){var y=new Date(t.timestamp);g+="<p>"+v("Your consent was last updated on "+y.toLocaleDateString(void 0,{year:"numeric",month:"long",day:"numeric"})+" at "+y.toLocaleTimeString(void 0,{hour:"2-digit",minute:"2-digit"})+".")+"</p>"}else g+="<p>"+v("You have not yet made a cookie preference choice on this site.")+"</p>";for(var h=0;h<p.length;h++){var w=p[h],b=m[w];if(b&&b.length){var _,x=f[w]||w,E=r.cookieTypes.filter(function(e){return e.id===w})[0],A=E&&E.description||"";_=!!E&&E.required?"Always active":t[w]?"Active":"Inactive",g+="<div>",g+="<p><b>"+v(x)+"</b> ("+v(_)+")</p>",A&&(g+="<p>"+v(A)+"</p>"),g+="<table><thead><tr>",g+="<th>Name</th><th>Provider</th><th>Purpose</th><th>Expiry</th>",g+="</tr></thead><tbody>";for(var S=0;S<b.length;S++){var L=b[S];g+="<tr>",g+="<td><code>"+v(L.name)+"</code></td>",g+="<td>"+v(L.vendor||"Unknown")+"</td>",g+="<td>"+v(L.purpose||"Not specified")+"</td>",g+="<td>"+v(L.expiry||"—")+"</td>",g+="</tr>"}g+="</tbody></table></div>"}}g+="</div>",e.innerHTML=g}}window.__ccInternal={getResourceSnapshot:ye,scriptLoaded:function(e){for(var t=ge||ye(),n=0;n<t.allUrls.length;n++)if(-1!==t.allUrls[n].indexOf(e))return!0;return!1},scriptLoadedUrls:function(e){for(var t=ge||ye(),n=[],o=0;o<t.allUrls.length;o++)-1!==t.allUrls[o].indexOf(e)&&n.push(t.allUrls[o]);return n},hasCookie:function(e){return document.cookie.split(";").some(function(t){return t.trim().split("=")[0]===e})},hasCookiePrefix:function(e){return document.cookie.split(";").some(function(t){return 0===t.trim().split("=")[0].indexOf(e)})},setResourceSnapshot:function(e){ge=e},visitorCookies:function(e){for(var t=ye().thirdPartyDomains,n={},o=0;o<e.length;o++)we(e[o],t,he(e[o]))&&(n[e[o]]=!0);return n},facadeBridge:{getConfig:function(){return r},getConsentState:function(){return l},loadConsent:Z,saveConsent:function(e,t){F(e,t)},hideAllBanners:ie,registerRenderer:function(e){R=e,M=2,V()}}},window.CookieConsent={getState:k,getConfig:function(){return r},getComplianceMode:function(){return p},getCountry:function(){return f},show:function(){re("gdpr")},acceptAll:se,declineAll:de,getGPC:function(){return i},getConsentVersion:function(){return r.consentVersion},on:function(e,t){window.addEventListener(e,t)},off:function(e,t){window.removeEventListener(e,t)},VERSION:c},window.addEventListener("cc:ready",pe),window.addEventListener("cc:update",pe),function(){if(!window.__ccDefaultsSet){var e={wait_for_update:500};r.cookieTypes.forEach(function(t){t.consentMode&&t.consentMode.forEach(function(n){e[n]=t.required?"granted":"denied"})}),x("consent","default",e)}}(),function(){if(r.tcfEnabled){var e=window.__tcfapi&&window.__tcfapi.queue?window.__tcfapi.queue:[];window.__tcfapi=C,e.forEach(function(e){C.apply(null,e)}),S=!0,window===window.top&&window.addEventListener("message",function(e){var t;try{t="string"==typeof e.data?JSON.parse(e.data):e.data}catch(e){return}if(t&&t.__tcfapiCall){var n=t.__tcfapiCall;C(n.command,n.version,function(t,o){var c={__tcfapiReturn:{returnValue:t,success:o,callId:n.callId}};e.source&&e.source.postMessage("string"==typeof e.data?JSON.stringify(c):c,"*")},n.parameter)}})}}();var fe=Z();function me(){var e=window.__ccDiscovery&&window.__ccDiscovery.active;if(!e&&(window.__ccDNT||document.cookie.split(";").some(function(e){return 0===e.trim().indexOf("cookieflame_dnt=")})))return E(l=z()),K(l,Y()),J(),j(),p="dnt",te(),ne(),ie(),$(l),_("cc:ready"),void pe();if(e){E(l=Y()),T(l),J(),H(l,null),r.tcfEnabled&&B(l),window.dataLayer=window.dataLayer||[];for(var t=["consent_accepted_analytics","consent_accepted_marketing","consent_accepted_preferences","consent_accepted_necessary","consent_update","consent_given","cookie_consent_given","cookie_consent_update","consent_accepted"],n=0;n<t.length;n++)window.dataLayer.push({event:t[n]});return p="discovery",te(),ne(),ie(),_("cc:ready"),_("cc:update"),void pe()}var o=Z();if(o)if(i&&(o.marketing=!1),l=o,E(o),T(o),J(),j(),H(o,null),r.tcfEnabled&&B(o),te(),ne(),ie(),$(o),o.cc){if("gdpr"===(p=Q(o.cc))){var c=document.getElementById("cc-icon");c&&c.classList.add("cc-show")}_("cc:ready"),pe()}else X(function(e){if(p=e,"gdpr"===e){var t=document.getElementById("cc-icon");t&&t.classList.add("cc-show")}_("cc:ready"),pe()});else X(function(e){if(p=e,"none"===e)return J(),F(Y(),"auto_grant_non_eu"),_("cc:ready"),_("cc:update"),void pe();if("ccpa"===e){if(J(),i){var t=Y();t.marketing=!1,F(t,"ccpa_gpc_optout")}else F(Y(),"ccpa_auto_grant");return te(),n=r.text,(o=document.createElement("div")).id="cc-ccpa-banner",o.setAttribute("role","dialog"),o.setAttribute("aria-modal","true"),o.setAttribute("aria-label","Privacy notice"),o.setAttribute("tabindex","-1"),o.innerHTML='<div class="cc-ccpa-inner"><div class="cc-ccpa-text"><p>'+v(n.ccpaDescription)+'</p></div><div class="cc-ccpa-actions"><a href="'+v(r.ccpaUrl)+'" class="cc-ccpa-link">'+v(n.ccpaDnsmpiLink)+'</a><button class="cc-btn cc-btn-accept" id="cc-ccpa-ok">'+v(n.ccpaAcceptButton)+"</button></div></div>",document.body.appendChild(o),document.getElementById("cc-ccpa-ok").addEventListener("click",function(){F(Y(),"ccpa_acknowledge"),o.classList.remove("cc-show"),_("cc:update")}),re("ccpa"),_("cc:ready"),_("cc:update"),void pe()}var n,o;te(),J(),j(),ne(),re("gdpr"),_("cc:ready"),pe()})}fe&&(l=fe,E(fe)),function(){if(!g&&r.autoBlockPatterns&&r.autoBlockPatterns.length){g=!0;var e=document.createElement.bind(document),t=Object.getOwnPropertyDescriptor(HTMLScriptElement.prototype,"src");t&&t.set&&(document.createElement=function(){var n=e.apply(document,arguments);if("script"!==(arguments[0]||"").toLowerCase())return n;function o(e,t){if(t&&"string"==typeof t&&!e.getAttribute("data-cc")&&!e.getAttribute("data-cc-auto")&&-1===t.indexOf("cookieconsent")){var n=I(t);!n||l&&l[n]||(e.type="text/plain",e.setAttribute("data-cc",n),e.setAttribute("data-cc-auto","1"))}}Object.defineProperty(n,"src",{configurable:!0,enumerable:!0,get:function(){return t.get.call(this)},set:function(e){return o(this,e),t.set.call(this,e)}});var c=n.setAttribute.bind(n);return n.setAttribute=function(e,t){return"src"===e.toLowerCase()&&o(n,t),c(e,t)},n}),new MutationObserver(function(e){e.forEach(function(e){e.addedNodes.forEach(function(e){if(1===e.nodeType){var t=[];"SCRIPT"===e.tagName&&t.push(e),e.querySelectorAll&&e.querySelectorAll("script[src]").forEach(function(e){t.push(e)}),t.forEach(function(e){if(!(e.getAttribute("data-cc-auto")||e.getAttribute("data-cc")||e.src&&-1!==e.src.indexOf("cookieconsent"))){var t=I(e.src);t&&(l&&l[t]||(e.type="text/plain",e.setAttribute("data-cc",t),e.setAttribute("data-cc-auto","1")))}})}})})}).observe(document.documentElement,{childList:!0,subtree:!0})}}(),"loading"===document.readyState?document.addEventListener("DOMContentLoaded",me):me();var ge=null;function ye(){for(var e=[],t=[],n=[],o={},c={},r=document.querySelectorAll("script[src]"),a=0;a<r.length;a++)r[a].src&&e.push(r[a].src);for(var i=document.querySelectorAll("iframe[src]"),s=0;s<i.length;s++)i[s].src&&e.push(i[s].src);if(window.performance&&performance.getEntriesByType)for(var d=performance.getEntriesByType("resource"),u=0;u<d.length;u++){var l=d[u].name||"";if(l){-1===e.indexOf(l)&&e.push(l);var p=d[u].initiatorType||"";if("script"===p||"iframe"===p||"xmlhttprequest"===p||"fetch"===p||-1!==l.indexOf(".js"))try{var f=new URL(l),m=f.hostname;if(m===location.hostname||m==="www."+location.hostname||"www."+m===location.hostname){var g=f.pathname.match(/\/wp-content\/plugins\/([^\/]+)\//);g&&!c[g[1]]&&(c[g[1]]=!0,n.push({slug:g[1],url:l}))}else o[m]||(o[m]=!0,t.push(m))}catch(e){}}}return{allUrls:e,thirdPartyDomains:t,pluginScripts:n}}var ve={};function he(e){var t={set_by:"",set_by_plugin:""},n=window.__ccCookieSetters;if(!n||!Object.prototype.hasOwnProperty.call(n,e)||!n[e])return t;try{var o=new URL(String(n[e]).replace(/:\d+(:\d+)?$/,""));if(/^(chrome-extension|moz-extension|safari-web-extension|safari-extension):$/.test(o.protocol))return t.set_by="browser-extension",t;var c=o.hostname;if(c===location.hostname||c==="www."+location.hostname||"www."+c===location.hostname){t.set_by="first-party";var r=o.pathname.match(/\/wp-content\/(?:plugins|themes)\/([^\/]+)\//);r&&(t.set_by_plugin=r[1].toLowerCase())}else t.set_by=c.toLowerCase()}catch(e){}return t}function we(e,t,n){if("browser-extension"===n.set_by)return!0;var o=window.__ccVisitorCookieRules;if(!o||!o.tools)return!1;if(o.allow&&-1!==o.allow.indexOf(e))return!1;if(n.set_by)return!1;for(var c=0;c<o.tools.length;c++){for(var r=o.tools[c],a=-1!==(r.n||[]).indexOf(e),i=0;!a&&i<(r.p||[]).length;i++)0===e.indexOf(r.p[i])&&(a=!0);if(a){for(var s=0;s<t.length;s++)for(var d=0;d<(r.d||[]).length;d++){var u=String(t[s]).toLowerCase(),l=r.d[d];if(u===l||u.slice(-l.length-1)==="."+l)return!1}return!0}}return!1}function be(){var t=window.__ccClassified||[],n=window.__ccUnclassified||[],o=window.__ccBeaconUrl;if(o){var c,r={};for(c=0;c<t.length;c++)r[t[c]]=!0;for(c=0;c<n.length;c++)r[n[c]]=!0;var a=Object.keys(ve);for(c=0;c<a.length;c++)r[a[c]]=!0;var i=Object.keys(s);for(c=0;c<i.length;c++)r[i[c]]=!0;var d={},u=[],l=document.cookie.split(";");for(c=0;c<l.length;c++){var p=l[c].indexOf("="),f=(p>-1?l[c].substring(0,p):l[c]).trim(),m=p>-1?l[c].substring(p+1).trim():"";f&&(u.push(f),d[f]=m)}var g=[];for(c=0;c<u.length;c++)if(!r[u[c]]){for(var y=!1,v=Object.keys(s),h=0;h<v.length;h++)if(s[v[h]].prefix&&0===u[c].indexOf(v[h])){y=!0;break}y||g.push(u[c])}if(0!==g.length){for(var w=ye(),b=w.thirdPartyDomains,k=[],_=0;_<w.pluginScripts.length;_++)k.push(w.pluginScripts[_].slug);for(var x=location.pathname,E=0;E<g.length;E++){var A=g[E],S=!!e[A]&&!r[A],L=ke(d[A]||""),C=he(A);if(!we(A,b,C)||window.__ccDiscovery&&window.__ccDiscovery.active){var B=JSON.stringify({cookie_name:A,script_domains:b,plugin_scripts:k,page_path:x,pre_existing:S,value_shape:L,set_by:C.set_by,set_by_plugin:C.set_by_plugin});ve[A]=!0,navigator.sendBeacon&&navigator.sendBeacon(o,new Blob([B],{type:"application/json"}))}else ve[A]=!0}}}}function ke(e){if(!e||0===e.length)return"empty";if("true"===e||"false"===e||"1"===e||"0"===e)return"boolean";if(/^\d+$/.test(e))return e.length>12?"long-numeric":"numeric";if(/^\d+\.\d+$/.test(e))return"decimal";if(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(e))return"uuid";if(/^[A-Za-z0-9+\/]{20,}={0,2}$/.test(e))return"base64";if(/^(GA\d+\.\d+\.\d+\.\d+|G-[A-Z0-9]+)/.test(e))return"ga-id";try{if("object"==typeof JSON.parse(decodeURIComponent(e)))return"json"}catch(e){}return/^[a-f0-9]{24,}$/i.test(e)?"hex-id":/^\d{10,13}$/.test(e)?"timestamp":e.length<=20?"short-string":e.length<=100?"medium-string":"long-string"}setTimeout(be,3e3),setTimeout(be,15e3),setTimeout(be,45e3),window.addEventListener("cc:update",function(){setTimeout(be,3e3)}),window.addEventListener("pagehide",be)}();
+!function(){"use strict";var e={};try{for(var t=document.cookie.split(";"),n=0;n<t.length;n++){var c=t[n].trim().split("=")[0];c&&(e[c]=!0)}}catch(e){}var o="5.4.0",r={cookieName:"cc_consent",cookieExpiry:365,privacyUrl:"/privacy-policy",geoApi:"",logEndpoint:"",reconsentDays:365,cspSafe:!1,tcfEnabled:!1,cmpId:1,cmpVersion:1,vendorListVersion:2,storageMethod:"cookie",cookieDomain:"",shareSubdomains:!1,theme:"light",showPoweredBy:!1,iconPosition:"left",consentVersion:"",rejectFirstScreen:!1,visitorLogins:!1,autoBlockPatterns:[{pattern:"googletagmanager.com/gtag",category:"analytics"},{pattern:"google-analytics.com",category:"analytics"},{pattern:"analytics.google.com",category:"analytics"},{pattern:"hotjar.com",category:"analytics"},{pattern:"mixpanel.com",category:"analytics"},{pattern:"segment.com/analytics",category:"analytics"},{pattern:"segment.io",category:"analytics"},{pattern:"clarity.ms",category:"analytics"},{pattern:"plausible.io",category:"analytics"},{pattern:"js.hs-analytics.net",category:"analytics"},{pattern:"connect.facebook.net",category:"marketing"},{pattern:"snap.licdn.com",category:"marketing"},{pattern:"ads.linkedin.com",category:"marketing"},{pattern:"googleads.g.doubleclick.net",category:"marketing"},{pattern:"googlesyndication.com",category:"marketing"},{pattern:"googleadservices.com",category:"marketing"},{pattern:"ads-twitter.com",category:"marketing"},{pattern:"analytics.tiktok.com",category:"marketing"},{pattern:"pintrk",category:"marketing"},{pattern:"s.pinimg.com/ct",category:"marketing"},{pattern:"widget.intercom.io",category:"preferences"},{pattern:"js.intercomcdn.com",category:"preferences"}],regionRules:{gdpr:["AT","BE","BG","CY","CZ","DE","DK","EE","ES","FI","FR","GR","HR","HU","IE","IT","LT","LU","LV","MT","NL","PL","PT","RO","SE","SI","SK","IS","LI","NO","GB","GG","JE","IM","CH","BR","ZA"],ccpa:["US"]},text:{title:"We value your privacy",description:"We use cookies to improve your experience, analyse traffic and personalise content. You can choose which categories to allow.",acceptAllButton:"Accept All",rejectAllButton:"Decline All",declineAllButton:"Decline All",saveButton:"Save Preferences",showDetailsButton:"Manage preferences",hideDetailsButton:"Hide preferences",alwaysOnLabel:"(always on)",ccpaTitle:"Your Privacy Choices",ccpaDescription:"We use cookies and similar technologies. Under US state privacy laws, such as California's, you have the right to opt out of the sale or sharing of your personal information.",ccpaAcceptButton:"OK",ccpaDnsmpiLink:"Do Not Sell or Share My Personal Information",ccpaGpcNotice:"Your browser asked us not to sell or share your information. We're honouring that.",ccpaChoiceTitle:"Do Not Sell or Share My Personal Information",ccpaChoiceText:"Information about your visit may be used by advertising partners whose cookies run on this site. Under US state privacy laws that can count as selling or sharing. You can opt out in this browser.",ccpaOptOutButton:"Opt out",ccpaCancelButton:"Cancel",ccpaOptedOut:"You've opted out of the sale or sharing of your personal information in this browser.",ccpaGpcOptedOut:"Your browser's Global Privacy Control signal asked us not to sell or share your information, so you're opted out in this browser.",ccpaDoneButton:"Done",ccpaOptInButton:"Allow selling or sharing",ccpaOptInGpcNote:"Allowing it overrides your browser's Global Privacy Control signal on this site only.",ccpaMoreSettings:"More cookie settings",gpcPrefNote:"Your browser's Global Privacy Control signal is on, so Marketing stays off unless you switch it on here.",changePreferences:"Change cookie preferences",loginCookiesTitle:"If you log in",loginCookiesIntro:"These cookies are only set if you log in to an account on this site. They keep you signed in and remember your account settings. They're needed for logging in to work, so they don't ask for your consent."},cookieTypes:[{id:"necessary",name:"Necessary",description:"Required for the site to function. Cannot be disabled.",required:!0,consentMode:["security_storage","functionality_storage"],tcfPurposes:[1],onAccept:function(){}},{id:"preferences",name:"Preferences",description:"Remember your settings and personalisation choices.",required:!1,defaultValue:!1,consentMode:["functionality_storage","personalization_storage"],tcfPurposes:[2,3],onAccept:function(){},onReject:function(){}},{id:"analytics",name:"Analytics",description:"Help us understand how visitors use the site.",required:!1,defaultValue:!1,consentMode:["analytics_storage"],tcfPurposes:[4,5,6],onAccept:function(){},onReject:function(){}},{id:"marketing",name:"Marketing",description:"Used to deliver relevant ads and track campaigns.",required:!1,defaultValue:!1,consentMode:["ad_storage","ad_user_data","ad_personalization"],tcfPurposes:[7,8,9,10],onAccept:function(){},onReject:function(){}}]};if(window.__ccConfig&&"object"==typeof window.__ccConfig){var a=window.__ccConfig;["cookieName","cookieExpiry","privacyUrl","geoApi","logEndpoint","reconsentDays","cspSafe","tcfEnabled","cmpId","cmpVersion","vendorListVersion","storageMethod","cookieDomain","shareSubdomains","theme","showPoweredBy","iconPosition","consentVersion","rejectFirstScreen","visitorLogins"].forEach(function(e){void 0!==a[e]&&(r[e]=a[e])}),a.text&&"object"==typeof a.text&&Object.keys(a.text).forEach(function(e){r.text[e]=a.text[e]}),Array.isArray(a.cookieTypes)&&(r.cookieTypes=a.cookieTypes),Array.isArray(a.autoBlockPatterns)&&(r.autoBlockPatterns=a.autoBlockPatterns),a.regionRules&&(r.regionRules=a.regionRules)}window.__ccConsentVersion&&(r.consentVersion=window.__ccConsentVersion);var i=!!window.__ccGPC;function s(e){return i&&e&&!e.gpcOptIn&&(e.marketing=!1,e.gpc=1),e}window.__ccBlockRules&&Array.isArray(window.__ccBlockRules)&&window.__ccBlockRules.length&&(r.autoBlockPatterns=window.__ccBlockRules);var d={cc_consent:{vendor:"CookieFlame",category:"necessary",purpose:"Stores your consent preferences",expiry:"1 year"},cc_anon_id:{vendor:"CookieFlame",category:"necessary",purpose:"Anonymous ID for consent logging",expiry:"1 year"},cookieflame_dnt:{vendor:"CookieFlame",category:"necessary",purpose:"Do-not-track opt-out flag",expiry:"1 year"},PHPSESSID:{vendor:"PHP",category:"necessary",purpose:"Server-side session identifier",expiry:"Session"},"wp-settings-":{vendor:"WordPress",category:"necessary",purpose:"Remembers dashboard layout settings",prefix:!0,expiry:"1 year"},"wp-settings-time-":{vendor:"WordPress",category:"necessary",purpose:"Records when dashboard settings were last saved",prefix:!0,expiry:"1 year"},wordpress_logged_in_:{vendor:"WordPress",category:"necessary",purpose:"Keeps you logged in",prefix:!0,expiry:"Session, or 14 days with Remember Me"},wordpress_sec_:{vendor:"WordPress",category:"necessary",purpose:"Confirms your login when you open the dashboard",prefix:!0,expiry:"Session, or 14 days with Remember Me"},wordpress_rec_:{vendor:"WordPress",category:"necessary",purpose:"Recovery mode after a site error (administrators only)",prefix:!0,expiry:"1 week"},wordpress_test_cookie:{vendor:"WordPress",category:"necessary",purpose:"Checks your browser accepts cookies before you log in",expiry:"Session"},wp_lang:{vendor:"WordPress",category:"necessary",purpose:"Remembers the language picked on the login page",expiry:"Session"},comment_author_:{vendor:"WordPress",category:"necessary",purpose:"Remembers your name for comments, if you ask it to",prefix:!0,expiry:"1 year"},comment_author_email_:{vendor:"WordPress",category:"necessary",purpose:"Remembers your email for comments, if you ask it to",prefix:!0,expiry:"1 year"},comment_author_url_:{vendor:"WordPress",category:"necessary",purpose:"Remembers your website for comments, if you ask it to",prefix:!0,expiry:"1 year"},"wp-postpass_":{vendor:"WordPress",category:"necessary",purpose:"Remembers the password entered for a protected page",prefix:!0,expiry:"10 days"},woocommerce_cart_hash:{vendor:"WooCommerce",category:"necessary",purpose:"Shopping cart contents",expiry:"Session"},woocommerce_items_in_cart:{vendor:"WooCommerce",category:"necessary",purpose:"Cart item count",expiry:"Session"},wp_woocommerce_session_:{vendor:"WooCommerce",category:"necessary",purpose:"Shopping session",prefix:!0,expiry:"2 days"},_ga:{vendor:"Google Analytics",category:"analytics",purpose:"Distinguishes visitors",expiry:"2 years"},_ga_:{vendor:"Google Analytics",category:"analytics",purpose:"Stores session state",prefix:!0,expiry:"2 years"},_gid:{vendor:"Google Analytics",category:"analytics",purpose:"Distinguishes visitors (24h)",expiry:"24 hours"},_gat:{vendor:"Google Analytics",category:"analytics",purpose:"Throttles request rate",expiry:"1 minute"},wp_wk_ga_untrack_:{vendor:"Google Analytics",category:"analytics",purpose:"GA opt-out flag",prefix:!0,expiry:"Persistent"},_gcl_au:{vendor:"Google Ads",category:"marketing",purpose:"Conversion linker",expiry:"90 days"},_gcl_aw:{vendor:"Google Ads",category:"marketing",purpose:"Stores ad click info",expiry:"90 days"},_gac_:{vendor:"Google Ads",category:"marketing",purpose:"Campaign information",prefix:!0,expiry:"90 days"},IDE:{vendor:"Google DoubleClick",category:"marketing",purpose:"Ad serving and frequency",expiry:"1 year"},test_cookie:{vendor:"Google DoubleClick",category:"marketing",purpose:"Checks cookie support",expiry:"15 minutes"},NID:{vendor:"Google",category:"preferences",purpose:"Stores preferences",expiry:"6 months"}},u=window.__ccCustomCookies||[];function l(e){for(var t=0;t<u.length;t++){var n=u[t];if("exact"===n.match&&e===n.name)return n;if("prefix"===n.match&&0===e.indexOf(n.name))return n;if("contains"===n.match&&-1!==e.indexOf(n.name))return n}var c=d[e];if(c)return c;var o=0;return Object.keys(d).forEach(function(t){d[t].prefix&&t.length>o&&0===e.indexOf(t)&&(c=d[t],o=t.length)}),c||null}var p=/^(?:wordpress_(?:logged_in_|sec_|rec_|test_cookie$|[0-9a-f]{32}$)|wp-settings-|wp_lang$)/;function f(e){return p.test(e)}var g=null,m="none",y=null,v=null,h=!1,w=0;function b(e){return"string"!=typeof e&&(e=String(e)),e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}function k(e){if("localStorage"===r.storageMethod)try{return localStorage.getItem(e)}catch(e){return null}var t=document.cookie.match(new RegExp("(?:^|;\\s*)"+e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")+"=([^;]*)"));if(!t)return null;try{return decodeURIComponent(t[1])}catch(e){return null}}function _(e,t,n){if("localStorage"!==r.storageMethod){var c=new Date;c.setTime(c.getTime()+864e5*n);var o=e+"="+encodeURIComponent(t)+";expires="+c.toUTCString()+";path=/;SameSite=Lax;Secure";r.cookieDomain&&(o+=";domain="+r.cookieDomain),document.cookie=o}else try{localStorage.setItem(e,t)}catch(e){}}function x(){if(v)return v;var e=k("cc_anon_id");return e?(v=e,e):(_("cc_anon_id",v="cc_"+function(){if("undefined"!=typeof crypto&&"function"==typeof crypto.randomUUID)try{return crypto.randomUUID()}catch(e){}return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(e){var t=16*Math.random()|0;return("x"===e?t:3&t|8).toString(16)})}(),730),v)}function E(){var e={timestamp:g?g.ts:null,complianceMode:m,country:y,gpc:i,consentVersion:r.consentVersion};return r.cookieTypes.forEach(function(t){e[t.id]=g?!!g[t.id]:!!t.required}),e}function A(e,t){window.dispatchEvent(new CustomEvent(e,{detail:t||E()}))}function S(){window.dataLayer=window.dataLayer||[],window.dataLayer.push(arguments)}function C(e){var t={};r.cookieTypes.forEach(function(n){n.consentMode&&n.consentMode.forEach(function(c){t[c]=e[n.id]?"granted":"denied"})}),i&&!e.gpcOptIn&&(t.ad_storage="denied",t.ad_user_data="denied",t.ad_personalization="denied"),S("consent","update",t)}var I=new Map,L=!1;function B(e){var t={};return r.cookieTypes.forEach(function(n){n.tcfPurposes&&n.tcfPurposes.forEach(function(c){t[c]=!!e[n.id]})}),{tcString:"",tcfPolicyVersion:4,cmpId:r.cmpId,cmpVersion:r.cmpVersion,gdprApplies:"gdpr"===m,eventStatus:"useractioncomplete",cmpStatus:"loaded",listenerId:void 0,isServiceSpecific:!0,useNonStandardTexts:!1,publisherCC:"GB",purposeOneTreatment:!1,purpose:{consents:t,legitimateInterests:{}},vendor:{consents:{},legitimateInterests:{}},specialFeatureOptins:{},publisher:{consents:{},legitimateInterests:{},customPurpose:{consents:{},legitimateInterests:{}},restrictions:{}}}}function O(e,t,n,c){if("function"==typeof n)if("addEventListener"===e){var o=++w;if(I.set(o,n),g){var a=B(g);a.listenerId=o,n(a,!0)}}else"removeEventListener"===e?n({listenerId:c},I.delete(c)):"getTCData"===e?n(g?B(g):null,!!g):"ping"===e?n({gdprApplies:"gdpr"===m,cmpLoaded:L,cmpStatus:L?"loaded":"stub",displayStatus:"hidden",apiVersion:"2.2",cmpVersion:r.cmpVersion,cmpId:r.cmpId,gvlVersion:r.vendorListVersion,tcfPolicyVersion:4},!0):n(null,!1)}function T(e){I.forEach(function(t,n){var c=B(e);c.listenerId=n;try{t(c,!0)}catch(e){}})}function P(e){if(!e)return null;for(var t=e.toLowerCase(),n=0;n<r.autoBlockPatterns.length;n++){var c=r.autoBlockPatterns[n];if(c.pattern instanceof RegExp){if(c.pattern.test(t))return c.category}else if(-1!==t.indexOf(c.pattern.toLowerCase()))return c.category}return null}function D(e){document.querySelectorAll('script[type="text/plain"][data-cc]').forEach(function(t){var n=(t.getAttribute("data-cc")||"").toLowerCase();if(e[n]&&!t.getAttribute("data-cc-activated")){t.setAttribute("data-cc-activated","1");var c=document.createElement("script");c.isWPRocket=!0,Array.from(t.attributes).forEach(function(e){"type"!==e.name&&"data-cc"!==e.name&&"data-cc-activated"!==e.name&&"data-cc-auto"!==e.name&&c.setAttribute(e.name,e.value)}),!t.src&&t.textContent&&(c.textContent=t.textContent),t.parentNode.insertBefore(c,t.nextSibling),t.parentNode.removeChild(t)}}),["img","iframe","link"].forEach(function(t){document.querySelectorAll(t+"[data-cc][data-cc-src]").forEach(function(n){var c=(n.getAttribute("data-cc")||"").toLowerCase();e[c]&&!n.getAttribute("data-cc-activated")&&(n.setAttribute("data-cc-activated","1"),"link"===t?n.href=n.getAttribute("data-cc-src"):n.src=n.getAttribute("data-cc-src"))})})}var R=[{pattern:"youtube.com",category:"marketing"},{pattern:"youtube-nocookie.com",category:"marketing"},{pattern:"youtu.be",category:"marketing"},{pattern:"player.vimeo.com",category:"marketing"},{pattern:"vimeo.com",category:"marketing"},{pattern:"dailymotion.com",category:"marketing"},{pattern:"open.spotify.com",category:"preferences"},{pattern:"soundcloud.com",category:"preferences"},{pattern:"google.com/maps",category:"preferences"},{pattern:"maps.google.com",category:"preferences"},{pattern:"facebook.com/plugins",category:"marketing"},{pattern:"instagram.com",category:"marketing"},{pattern:"tiktok.com/embed",category:"marketing"},{pattern:"twitter.com",category:"marketing"},{pattern:"x.com",category:"marketing"}];function M(e,t){var n,c;try{var o=new URL(e,location.href);n=o.hostname.toLowerCase(),c=o.pathname.toLowerCase()}catch(e){return!1}var r=t.indexOf("/"),a=-1===r?t:t.slice(0,r),i=-1===r?"":t.slice(r);return(n===a||n.slice(-a.length-1)==="."+a)&&(!i||0===c.indexOf(i))}function N(e){if(!e)return null;for(var t=0;t<R.length;t++)if(M(e,R[t].pattern))return R[t].category;return null}function q(){return!(!document.body||!(document.body.classList.contains("elementor-editor-active")||document.body.classList.contains("fl-builder-edit")||document.body.classList.contains("et-fb-root-ancestor")))}var G=[],j=0,V=null,U=!1;function J(){if(V&&G.length){var e=G;G=[];try{V(e)}catch(e){}}}function W(){0!==G.length&&(2!==j?1!==j&&3!==j&&(j=1,function(){var e=window.__ccConfig&&window.__ccConfig.facadesUrl||null;if(!e)return void(j=3);var t=document.createElement("script");t.src=e,t.async=!0,t.onload=function(){j=2,J()},t.onerror=function(){j=3},(document.head||document.documentElement).appendChild(t)}()):J())}function F(e){var t=e.src||e.getAttribute("data-src")||"";if(t&&!e.getAttribute("data-cc-facade")&&!q()){var n=N(t);if(n){var c=g||ee();c&&c[n]||(e.setAttribute("data-cc-facade","1"),e.setAttribute("data-cc-iframe-cat",n),e.setAttribute("data-cc-original-src",t),e.removeAttribute("src"),e.style.display="none",G.push({type:"iframe",node:e,category:n,src:t}),W())}}}function H(e){if(!e.getAttribute("data-cc-facade")&&!q()){var t=e.getAttribute("data-settings");if(t){var n;try{n=JSON.parse(t)}catch(e){return}var c=n.youtube_url||n.vimeo_url||"";if(c){var o=c.toLowerCase(),r=null;if((-1!==o.indexOf("youtube")||-1!==o.indexOf("youtu.be")||-1!==o.indexOf("vimeo")||-1!==o.indexOf("dailymotion"))&&(r="marketing"),r&&(!g||!g[r])){if(!g){var a=ee();if(a&&a[r])return}e.setAttribute("data-cc-facade","1"),U=!0,G.push({type:"elementor",node:e,category:r,url:c}),W()}}}}}function $(){for(var e=document.querySelectorAll("iframe[src]"),t=0;t<e.length;t++)F(e[t]);for(var n=document.querySelectorAll(".elementor-widget-video"),c=0;c<n.length;c++)H(n[c]);for(var o=document.querySelectorAll(".wp-block-embed__wrapper iframe[src]"),r=0;r<o.length;r++)F(o[r])}function Y(){new MutationObserver(function(e){e.forEach(function(e){e.addedNodes.forEach(function(e){if(1===e.nodeType){if("IFRAME"===e.tagName&&F(e),e.querySelectorAll){for(var t=e.querySelectorAll("iframe[src]"),n=0;n<t.length;n++)F(t[n]);for(var c=e.querySelectorAll(".elementor-widget-video"),o=0;o<c.length;o++)H(c[o])}e.classList&&e.classList.contains("elementor-widget-video")&&H(e)}})})}).observe(document.documentElement,{childList:!0,subtree:!0})}function Z(){for(var e=document.querySelectorAll("iframe[src]"),t=0;t<e.length;t++){var n=e[t];if(!n.getAttribute("data-cc-facade")){var c=n.src||"";c&&N(c)&&(n.src=c)}}}function K(e,t){r.cookieTypes.forEach(function(n){var c=!!e[n.id];if((t?!!t[n.id]:null)!==c||null===t)if(c&&"function"==typeof n.onAccept)try{n.onAccept()}catch(e){console.warn("[CookieConsent] onAccept error for "+n.id,e)}else if(!c&&"function"==typeof n.onReject)try{n.onReject()}catch(e){console.warn("[CookieConsent] onReject error for "+n.id,e)}})}function z(e,t){if(r.logEndpoint){var n={};r.cookieTypes.forEach(function(e){n[e.id]=!!t[e.id]});var c={anonymousId:x(),timestamp:(new Date).toISOString(),action:e,consent:n,complianceMode:m,country:y,url:location.href,userAgent:navigator.userAgent,tcfEnabled:r.tcfEnabled,gpc:i,consentVersion:r.consentVersion,version:o};try{var a=JSON.stringify(c);navigator.sendBeacon?navigator.sendBeacon(r.logEndpoint,new Blob([a],{type:"application/json"})):fetch(r.logEndpoint,{method:"POST",body:a,headers:{"Content-Type":"application/json"},keepalive:!0})}catch(e){}}}function Q(e,t){var n=g;if(t&&0===t.indexOf("facade_accept_")||s(e),g=e,_(r.cookieName,JSON.stringify(e),r.cookieExpiry),C(e),U&&t)for(var c=document.querySelectorAll(".cc-iframe-facade[data-cc-elementor-widget]"),o=0;o<c.length;o++){var a=c[o].getAttribute("data-cc-iframe-cat");if(a&&e[a])return void window.location.reload()}ce(e,n),D(e),function(e){for(var t=document.querySelectorAll(".cc-iframe-facade"),n=0;n<t.length;n++)if(!t[n].getAttribute("data-cc-elementor-widget")&&e[t[n].getAttribute("data-cc-iframe-cat")]){var c=t[n].nextElementSibling;if(c&&"IFRAME"===c.tagName&&c.getAttribute("data-cc-facade")){var o=c.getAttribute("data-cc-original-src");o&&(c.src=o,c.style.display="",c.removeAttribute("data-cc-facade"))}t[n].parentNode.removeChild(t[n])}}(e),t&&"auto_grant_non_eu"!==t&&"ccpa_auto_grant"!==t&&setTimeout(Z,300),K(e,n),X(e),r.tcfEnabled&&T(e),t&&z(t,e)}function X(e){r.cookieTypes.forEach(function(t){if(!t.required){var n=document.getElementById("cc-cb-"+t.id);n&&(n.checked=!!e[t.id])}});var t=document.getElementById("cc-cats"),n=document.getElementById("cc-details"),c=document.getElementById("cc-pref-buttons");t&&t.classList.remove("cc-open"),n&&(n.textContent=r.text.showDetailsButton),c&&c.classList.remove("cc-open")}function ee(){var e=k(r.cookieName);if(!e)return null;try{var t=JSON.parse(e);if(!t||"object"!=typeof t||Array.isArray(t))return null;if(!t.ts||isNaN(new Date(t.ts).getTime()))return null;var n=Number(r.reconsentDays);return n>=1||(n=365),(Date.now()-new Date(t.ts).getTime())/864e5>n||r.consentVersion&&t.cv!==r.consentVersion?null:t}catch(e){return null}}function te(){var e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:y};return r.cookieTypes.forEach(function(t){e[t.id]=!0}),e}function ne(){var e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:y};return r.cookieTypes.forEach(function(t){e[t.id]=!!t.required}),e}function ce(e,t){if(t){var n=[];if(r.cookieTypes.forEach(function(c){c.required||t[c.id]&&!e[c.id]&&n.push(c.id)}),n.length)document.cookie.split(";").map(function(e){return e.trim().split("=")[0]}).filter(Boolean).forEach(function(e){var t=l(e);if(t&&-1!==n.indexOf(t.category)){var c=location.hostname,o="."+c;document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/",document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT",document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+o,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+c,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; Secure",r.cookieDomain&&(document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+r.cookieDomain,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+r.cookieDomain+"; Secure");var a=c.split(".");if(a.length>2){var i="."+a.slice(1).join(".");document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+i,document.cookie=e+"=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain="+i+"; Secure"}}})}}function oe(e){return(y=e?e.toUpperCase():null)?r.regionRules.gdpr&&-1!==r.regionRules.gdpr.indexOf(y)?"gdpr":r.regionRules.ccpa&&-1!==r.regionRules.ccpa.indexOf(y)?"ccpa":"none":"gdpr"}function re(e){if(window.__ccGeo)return e(oe(window.__ccGeo));r.geoApi?fetch(r.geoApi).then(function(e){return e.json()}).then(function(t){var n=t.country_code||t.country||"";n?e(oe(n)):ae(e)}).catch(function(){ae(e)}):ae(e)}function ae(e){var t="";try{t=Intl.DateTimeFormat().resolvedOptions().timeZone||""}catch(e){}return 0===t.indexOf("Europe/")||"Atlantic/Reykjavik"===t?(y=null,e("gdpr")):0===t.indexOf("US/")||0===t.indexOf("America/")&&["New_York","Chicago","Denver","Los_Angeles","Phoenix","Anchorage","Boise","Detroit","Indianapolis","Louisville","Menominee","Nome","Adak","Juneau","Sitka","Yakutat","Metlakatla","Kentucky","Indiana","North_Dakota"].some(function(e){return-1!==t.indexOf(e)})||"Pacific/Honolulu"===t?(y="US",e("ccpa")):(y=null,void e("gdpr"))}function ie(){"dark"===r.theme&&document.documentElement.classList.add("cc-dark"),"right"===r.iconPosition&&document.documentElement.classList.add("cc-icon-right")}function se(){var e=r.text,t=document.createElement("div");t.id="cc-overlay",document.body.appendChild(t);var n=document.createElement("div");n.id="cc-banner",n.setAttribute("role","dialog"),n.setAttribute("aria-modal","true"),n.setAttribute("aria-label","Cookie consent"),n.setAttribute("tabindex","-1");var c=r.cookieTypes.map(function(t){var n=t.required?' <span class="cc-always-on">'+b(e.alwaysOnLabel)+"</span>":"",c=i&&"marketing"===t.id?'<div class="cc-gpc-note">'+b(e.gpcPrefNote)+"</div>":"";return'<div class="cc-cat"><div><div class="cc-cat-label">'+b(t.name)+n+'</div><div class="cc-cat-desc">'+b(t.description||"")+"</div>"+c+'</div><label class="cc-toggle"><input type="checkbox" id="cc-cb-'+b(t.id)+'" aria-label="'+b(t.name)+'"'+(t.required||t.defaultValue?" checked":"")+(t.required?" disabled":"")+'><span class="cc-slider"></span></label></div>'}).join("");n.innerHTML='<div class="cc-inner"><p class="cc-title">'+b(e.title)+'</p><p class="cc-text">'+b(e.description)+' <a href="'+b(r.privacyUrl)+'">Privacy Policy</a></p><div class="cc-buttons"><button class="cc-btn cc-btn-accept" id="cc-accept">'+b(e.acceptAllButton)+"</button>"+(r.rejectFirstScreen?'<button class="cc-btn cc-btn-reject" id="cc-reject">'+b(e.rejectAllButton)+"</button>":"")+'<button class="cc-btn cc-btn-details" id="cc-details" aria-expanded="false">'+b(e.showDetailsButton)+'</button></div><div class="cc-categories" id="cc-cats">'+c+'</div><div class="cc-pref-buttons" id="cc-pref-buttons"><button class="cc-btn cc-btn-save" id="cc-save">'+b(e.saveButton)+'</button><button class="cc-btn cc-btn-decline" id="cc-decline">'+b(e.declineAllButton)+"</button></div></div>"+(r.showPoweredBy?'<div class="cc-powered"><a href="https://www.cookieflame.com" target="_blank" rel="noopener">Powered by CookieFlame</a></div>':""),document.body.appendChild(n);var o=document.createElement("button");o.id="cc-icon",o.setAttribute("aria-label","Cookie settings"),o.innerHTML='<svg width="24" height="24" viewBox="0 0 38 38" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M19.1 1.16c-.06-.42-.38-.77-.8-.83A11.8 11.8 0 0 0 13.28 1.2L7.5 4.3A11.8 11.8 0 0 0 3.95 7.98L1.09 13.9A11.8 11.8 0 0 0 .38 18.96l1.13 6.47a11.8 11.8 0 0 0 3.53 4.99l4.71 4.56a11.8 11.8 0 0 0 4.59 2.24l6.48.91a11.8 11.8 0 0 0 5.52-.89l5.78-3.09a11.8 11.8 0 0 0 3.55-3.69l2.87-5.9a11.8 11.8 0 0 0 .71-5.08c-.07-.41-.42-.73-.83-.79a14.8 14.8 0 0 1-8.16-7.61c-.14-.59-.63-1.05-1.23-1.14A14.8 14.8 0 0 1 19.1 1.16ZM15.25 10.25a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Zm-5 15a2.5 2.5 0 1 1 5 0 2.5 2.5 0 0 1-5 0Zm17.5-5a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Z" fill="currentColor"/></svg>',document.body.appendChild(o),document.getElementById("cc-accept").addEventListener("click",ke),document.getElementById("cc-decline").addEventListener("click",_e);var a=document.getElementById("cc-reject");a&&a.addEventListener("click",_e),document.getElementById("cc-save").addEventListener("click",xe),document.getElementById("cc-details").addEventListener("click",Ee),o.addEventListener("click",function(){he("gdpr")}),de("gdpr",n)}function de(e,t){A("cc:banner-rendered",{banner:e,element:t,state:E()})}function ue(){if(!document.getElementById("cc-ccpa-banner")){var e=r.text,t=document.createElement("div");t.id="cc-ccpa-banner",t.setAttribute("role","dialog"),t.setAttribute("aria-modal","true"),t.setAttribute("aria-label","Privacy notice"),t.setAttribute("tabindex","-1"),t.innerHTML='<div class="cc-ccpa-inner" id="cc-ccpa-notice"><div class="cc-ccpa-text"><p>'+b(e.ccpaDescription)+"</p>"+(i?'<p class="cc-ccpa-gpc">'+b(e.ccpaGpcNotice)+"</p>":"")+'</div><div class="cc-ccpa-actions"><a href="#" class="cc-ccpa-link" id="cc-ccpa-dns" role="button">'+b(e.ccpaDnsmpiLink)+'</a><button class="cc-btn cc-btn-accept" id="cc-ccpa-ok">'+b(e.ccpaAcceptButton)+'</button></div></div><div class="cc-ccpa-choice" id="cc-ccpa-choice"></div>'+(r.showPoweredBy?'<div class="cc-powered"><a href="https://www.cookieflame.com" target="_blank" rel="noopener">Powered by CookieFlame</a></div>':""),document.body.appendChild(t),document.getElementById("cc-ccpa-ok").addEventListener("click",function(){g&&z("ccpa_acknowledge",g),fe()}),document.getElementById("cc-ccpa-dns").addEventListener("click",function(e){e.preventDefault(),pe(!0)}),de("ccpa",t)}}function le(){var e=document.getElementById("cc-ccpa-choice");if(e){var t=r.text,n=!(g&&g.marketing),c='<div class="cc-ccpa-choice-inner"><p class="cc-ccpa-choice-title">'+b(t.ccpaChoiceTitle)+"</p>";c+=n?'<p class="cc-ccpa-choice-status">'+b(i?t.ccpaGpcOptedOut:t.ccpaOptedOut)+'</p><div class="cc-ccpa-choice-buttons"><button class="cc-btn cc-btn-accept" id="cc-ccpa-done">'+b(t.ccpaDoneButton)+'</button><button class="cc-btn cc-btn-decline" id="cc-ccpa-optin">'+b(t.ccpaOptInButton)+"</button></div>"+(i?'<p class="cc-ccpa-choice-note">'+b(t.ccpaOptInGpcNote)+"</p>":""):'<p class="cc-ccpa-choice-text">'+b(t.ccpaChoiceText)+'</p><div class="cc-ccpa-choice-buttons"><button class="cc-btn cc-btn-accept" id="cc-ccpa-optout">'+b(t.ccpaOptOutButton)+'</button><button class="cc-btn cc-btn-decline" id="cc-ccpa-cancel">'+b(t.ccpaCancelButton)+"</button></div>",c+='<button class="cc-btn cc-btn-details" id="cc-ccpa-more">'+b(t.ccpaMoreSettings)+"</button></div>",e.innerHTML=c;var o=function(e,t){var n=document.getElementById(e);n&&n.addEventListener("click",t)};o("cc-ccpa-done",fe),o("cc-ccpa-cancel",fe),o("cc-ccpa-optout",function(){var e=me(g);e.marketing=!1,Q(e,"ccpa_opt_out"),le(),ge("cc-ccpa-choice"),A("cc:update")}),o("cc-ccpa-optin",function(){var e=me(g);e.marketing=!0,i&&(e.gpcOptIn=1),delete e.gpc,Q(e,"ccpa_opt_in"),le(),ge("cc-ccpa-choice"),A("cc:update")}),o("cc-ccpa-more",function(){fe(),Ae()})}}function pe(e){var t=document.getElementById("cc-ccpa-notice"),n=document.getElementById("cc-ccpa-choice");t&&n&&(e&&le(),t.style.display=e?"none":"",n.classList.toggle("cc-open",!!e),e&&ge("cc-ccpa-choice"))}function fe(){var e=document.getElementById("cc-ccpa-banner");if(e&&e.classList.remove("cc-show"),pe(!1),document.removeEventListener("keydown",ve),ye&&"function"==typeof ye.focus)try{ye.focus()}catch(e){}ye=null}function ge(e){var t=document.getElementById(e),n=t&&t.querySelector("button");if(n)try{n.focus()}catch(e){}}function me(e){var t={ts:(new Date).toISOString(),cv:r.consentVersion,cc:y};return r.cookieTypes.forEach(function(n){t[n.id]=!e||!!e[n.id]}),e&&e.gpcOptIn&&(t.gpcOptIn=1),t}var ye=null;function ve(e){if("Tab"===e.key){var t=document.querySelector("#cc-banner.cc-show, #cc-ccpa-banner.cc-show");if(t){for(var n=[],c=t.querySelectorAll('button, a[href], input:not([disabled]), select, textarea, [tabindex]:not([tabindex="-1"])'),o=0;o<c.length;o++){for(var r=c[o],a=!1,i=r.parentElement;i&&i!==t;){if("none"===window.getComputedStyle(i).display){a=!0;break}i=i.parentElement}a||n.push(r)}if(0!==n.length){var s=n[0],d=n[n.length-1];e.shiftKey?document.activeElement===s&&(e.preventDefault(),d.focus()):document.activeElement===d&&(e.preventDefault(),s.focus())}}}}function he(e){if("ccpa"===e)return ye=document.activeElement,void requestAnimationFrame(function(){var e=document.getElementById("cc-ccpa-banner");if(e){e.classList.add("cc-show");var t=document.getElementById("cc-ccpa-choice");t&&t.classList.contains("cc-open")?ge("cc-ccpa-choice"):e.focus(),document.addEventListener("keydown",ve)}});ye=document.activeElement;var t=document.getElementById("cc-reject");t&&("gdpr"===m?t.style.removeProperty("display"):t.style.setProperty("display","none","important")),requestAnimationFrame(function(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");if(e&&e.classList.add("cc-show"),t){t.classList.add("cc-show");var c=t.querySelector(".cc-btn-accept");c&&c.focus(),document.addEventListener("keydown",ve)}n&&n.classList.remove("cc-show")})}function we(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");if(e&&e.classList.remove("cc-show"),t&&t.classList.remove("cc-show"),n&&"gdpr"===m&&n.classList.add("cc-show"),document.removeEventListener("keydown",ve),ye&&"function"==typeof ye.focus)try{ye.focus()}catch(e){}ye=null}function be(){var e=document.getElementById("cc-overlay"),t=document.getElementById("cc-banner"),n=document.getElementById("cc-icon");e&&e.classList.remove("cc-show"),t&&t.classList.remove("cc-show"),n&&n.classList.remove("cc-show"),document.removeEventListener("keydown",ve)}function ke(){var e=te();g&&g.gpcOptIn&&(e.gpcOptIn=1),Q(e,"accept_all"),we(),A("cc:accept-all"),A("cc:update")}function _e(){Q(ne(),"decline_all"),we(),A("cc:decline-all"),A("cc:update")}function xe(){var e=function(){var e={ts:(new Date).toISOString(),cv:r.consentVersion,cc:y};return r.cookieTypes.forEach(function(t){if(t.required)e[t.id]=!0;else{var n=document.getElementById("cc-cb-"+t.id);e[t.id]=!!n&&n.checked}}),e}();e.marketing&&(i||g&&g.gpcOptIn)&&(e.gpcOptIn=1),Q(e,"save_preferences"),we(),A("cc:save"),A("cc:update")}function Ee(){var e=document.getElementById("cc-cats"),t=document.getElementById("cc-details"),n=document.getElementById("cc-pref-buttons"),c=e.classList.toggle("cc-open");t.textContent=c?r.text.hideDetailsButton:r.text.showDetailsButton,t.setAttribute("aria-expanded",c?"true":"false"),n&&(c?n.classList.add("cc-open"):n.classList.remove("cc-open"))}function Ae(){document.getElementById("cc-banner")||(ie(),se(),be(),g&&X(g)),he("gdpr")}function Se(){"ccpa"===m?(ie(),ue(),he("ccpa"),pe(!0)):Ae()}function Ce(){var e=document.getElementById("cc-declaration");if(e){var t=E(),n={},c=document.cookie.split(";").map(function(e){return e.trim().split("=")[0]}).filter(Boolean);c=c.filter(function(e){return!f(e)});for(var o=0;o<c.length;o++){var a=l(c[o]);a&&(n[c[o]]={name:c[o],vendor:a.vendor,category:a.category,purpose:a.purpose,expiry:a.expiry||"",active:!0})}for(var i=0;i<u.length;i++){var s=u[i];s.name&&s.vendor&&s.category&&"unclassified"!==s.category&&!n[s.name]&&!f(s.name)&&(n[s.name]={name:s.name,vendor:s.vendor,category:s.category,purpose:s.purpose||"",expiry:s.expiry||"",active:!1})}for(var d=0;d<c.length;d++)n[c[d]]||(n[c[d]]={name:c[d],vendor:"",category:"unclassified",purpose:"",expiry:"",active:!0});var p=["necessary","preferences","analytics","marketing"],g={};r.cookieTypes.forEach(function(e){g[e.id]=e.name});var m={};p.forEach(function(e){m[e]=[]}),Object.keys(n).forEach(function(e){var t=n[e],c=t.category;m[c]||(m[c]=[]),m[c].push(t)}),p.forEach(function(e){m[e]&&m[e].sort(function(e,t){return e.name.localeCompare(t.name)})});var y,v="<div>";if(t.timestamp){var h=new Date(t.timestamp);v+="<p>"+b("Your consent was last updated on "+h.toLocaleDateString(void 0,{year:"numeric",month:"long",day:"numeric"})+" at "+h.toLocaleTimeString(void 0,{hour:"2-digit",minute:"2-digit"})+".")+"</p>"}else v+="<p>"+b("You have not yet made a cookie preference choice on this site.")+"</p>";for(var w=0;w<p.length;w++){var k=p[w],_=m[k];if(_&&_.length){var x,A=g[k]||k,S=r.cookieTypes.filter(function(e){return e.id===k})[0],C=S&&S.description||"";x=!!S&&S.required?"Always active":t[k]?"Active":"Inactive",v+="<div>",v+="<p><b>"+b(A)+"</b> ("+b(x)+")</p>",C&&(v+="<p>"+b(C)+"</p>"),v+="<table><thead><tr>",v+="<th>Name</th><th>Provider</th><th>Purpose</th><th>Expiry</th>",v+="</tr></thead><tbody>";for(var I=0;I<_.length;I++){var L=_[I];v+="<tr>",v+="<td><code>"+b(L.name)+"</code></td>",v+="<td>"+b(L.vendor||"Unknown")+"</td>",v+="<td>"+b(L.purpose||"Not specified")+"</td>",v+="<td>"+b(L.expiry||"—")+"</td>",v+="</tr>"}v+="</tbody></table></div>"}}if(r.visitorLogins){var B=[{name:"wordpress_logged_in_[hash]",purpose:"Keeps you logged in",expiry:y="Session, or 14 days with Remember Me"},{name:"https:"===location.protocol?"wordpress_sec_[hash]":"wordpress_[hash]",purpose:"Confirms your login when you open your account dashboard",expiry:y},{name:"wordpress_test_cookie",purpose:"Checks your browser accepts cookies before you log in",expiry:"Session"},{name:"wp_lang",purpose:"Remembers the language you picked on the login page",expiry:"Session"},{name:"wp-settings-[user ID]",purpose:"Remembers your dashboard layout settings",expiry:"1 year"},{name:"wp-settings-time-[user ID]",purpose:"Records when your dashboard settings were last saved",expiry:"1 year"}];v+='<div class="cc-declaration-login">',v+="<p><b>"+b(r.text.loginCookiesTitle)+"</b></p>",v+="<p>"+b(r.text.loginCookiesIntro)+"</p>",v+="<table><thead><tr>",v+="<th>Name</th><th>Provider</th><th>Purpose</th><th>Expiry</th>",v+="</tr></thead><tbody>";for(var O=0;O<B.length;O++)v+="<tr>",v+="<td><code>"+b(B[O].name)+"</code></td>",v+="<td>WordPress</td>",v+="<td>"+b(B[O].purpose)+"</td>",v+="<td>"+b(B[O].expiry)+"</td>",v+="</tr>";v+="</tbody></table></div>"}v+='<p><button type="button" class="cc-open-settings cc-declaration-change">'+b(r.text.changePreferences)+"</button></p>",v+="</div>",e.innerHTML=v}}document.addEventListener("click",function(e){(e.target&&e.target.closest?e.target.closest(".cc-open-settings"):null)&&(e.preventDefault(),Se())}),window.__ccInternal={getResourceSnapshot:Oe,scriptLoaded:function(e){for(var t=Be||Oe(),n=0;n<t.allUrls.length;n++)if(-1!==t.allUrls[n].indexOf(e))return!0;return!1},scriptLoadedUrls:function(e){for(var t=Be||Oe(),n=[],c=0;c<t.allUrls.length;c++)-1!==t.allUrls[c].indexOf(e)&&n.push(t.allUrls[c]);return n},hasCookie:function(e){return document.cookie.split(";").some(function(t){return t.trim().split("=")[0]===e})},hasCookiePrefix:function(e){return document.cookie.split(";").some(function(t){return 0===t.trim().split("=")[0].indexOf(e)})},setResourceSnapshot:function(e){Be=e},visitorCookies:function(e){for(var t=Oe().thirdPartyDomains,n={},c=0;c<e.length;c++)De(e[c],t,Pe(e[c]))&&(n[e[c]]=!0);return n},facadeBridge:{getConfig:function(){return r},getConsentState:function(){return g},loadConsent:ee,saveConsent:function(e,t){Q(e,t)},hideAllBanners:be,registerRenderer:function(e){V=e,j=2,J()}}},window.CookieConsent={getState:E,getConfig:function(){return r},getComplianceMode:function(){return m},getCountry:function(){return y},show:Ae,showSettings:Se,acceptAll:ke,declineAll:_e,getGPC:function(){return i},getConsentVersion:function(){return r.consentVersion},on:function(e,t){window.addEventListener(e,t)},off:function(e,t){window.removeEventListener(e,t)},VERSION:o},window.addEventListener("cc:ready",Ce),window.addEventListener("cc:update",Ce),function(){if(!window.__ccDefaultsSet){var e={wait_for_update:500};r.cookieTypes.forEach(function(t){t.consentMode&&t.consentMode.forEach(function(n){e[n]=t.required?"granted":"denied"})}),S("consent","default",e)}}(),function(){if(r.tcfEnabled){var e=window.__tcfapi&&window.__tcfapi.queue?window.__tcfapi.queue:[];window.__tcfapi=O,e.forEach(function(e){O.apply(null,e)}),L=!0,window===window.top&&window.addEventListener("message",function(e){var t;try{t="string"==typeof e.data?JSON.parse(e.data):e.data}catch(e){return}if(t&&t.__tcfapiCall){var n=t.__tcfapiCall;O(n.command,n.version,function(t,c){var o={__tcfapiReturn:{returnValue:t,success:c,callId:n.callId}};e.source&&e.source.postMessage("string"==typeof e.data?JSON.stringify(o):o,"*")},n.parameter)}})}}();var Ie=ee();function Le(){var e=window.__ccDiscovery&&window.__ccDiscovery.active;if(!e&&(window.__ccDNT||document.cookie.split(";").some(function(e){return 0===e.trim().indexOf("cookieflame_dnt=")})))return C(g=ne()),ce(g,te()),Y(),$(),m="dnt",ie(),se(),be(),X(g),A("cc:ready"),void Ce();if(e){C(g=te()),D(g),Y(),K(g,null),r.tcfEnabled&&T(g),window.dataLayer=window.dataLayer||[];for(var t=["consent_accepted_analytics","consent_accepted_marketing","consent_accepted_preferences","consent_accepted_necessary","consent_update","consent_given","cookie_consent_given","cookie_consent_update","consent_accepted"],n=0;n<t.length;n++)window.dataLayer.push({event:t[n]});return m="discovery",ie(),se(),be(),A("cc:ready"),A("cc:update"),void Ce()}var c=ee(),o=!1;if(c)if(!i||c.gpcOptIn||!c.marketing&&c.gpc||(o=!!c.marketing,s(c),_(r.cookieName,JSON.stringify(c),r.cookieExpiry)),g=c,C(c),D(c),Y(),$(),K(c,null),r.tcfEnabled&&T(c),ie(),se(),be(),X(c),c.cc){if("gdpr"===(m=oe(c.cc))){var a=document.getElementById("cc-icon");a&&a.classList.add("cc-show")}o&&z("gpc_optout",c),A("cc:ready"),Ce()}else re(function(e){if(m=e,"gdpr"===e){var t=document.getElementById("cc-icon");t&&t.classList.add("cc-show")}o&&z("gpc_optout",c),A("cc:ready"),Ce()});else re(function(e){return m=e,"none"===e?(Y(),Q(te(),"auto_grant_non_eu"),A("cc:ready"),A("cc:update"),void Ce()):"ccpa"===e?(Y(),i?Q(s(te()),"ccpa_gpc_optout"):Q(te(),"ccpa_auto_grant"),ie(),ue(),he("ccpa"),A("cc:ready"),A("cc:update"),void Ce()):(ie(),Y(),$(),se(),he("gdpr"),A("cc:ready"),void Ce())})}Ie&&(i&&!Ie.gpcOptIn&&(Ie.marketing=!1),g=Ie,C(Ie)),function(){if(!h&&r.autoBlockPatterns&&r.autoBlockPatterns.length){h=!0;var e=document.createElement.bind(document),t=Object.getOwnPropertyDescriptor(HTMLScriptElement.prototype,"src");t&&t.set&&(document.createElement=function(){var n=e.apply(document,arguments);if("script"!==(arguments[0]||"").toLowerCase())return n;function c(e,t){if(t&&"string"==typeof t&&!e.getAttribute("data-cc")&&!e.getAttribute("data-cc-auto")&&-1===t.indexOf("cookieconsent")){var n=P(t);!n||g&&g[n]||(e.type="text/plain",e.setAttribute("data-cc",n),e.setAttribute("data-cc-auto","1"))}}Object.defineProperty(n,"src",{configurable:!0,enumerable:!0,get:function(){return t.get.call(this)},set:function(e){return c(this,e),t.set.call(this,e)}});var o=n.setAttribute.bind(n);return n.setAttribute=function(e,t){return"src"===e.toLowerCase()&&c(n,t),o(e,t)},n}),new MutationObserver(function(e){e.forEach(function(e){e.addedNodes.forEach(function(e){if(1===e.nodeType){var t=[];"SCRIPT"===e.tagName&&t.push(e),e.querySelectorAll&&e.querySelectorAll("script[src]").forEach(function(e){t.push(e)}),t.forEach(function(e){if(!(e.getAttribute("data-cc-auto")||e.getAttribute("data-cc")||e.src&&-1!==e.src.indexOf("cookieconsent"))){var t=P(e.src);t&&(g&&g[t]||(e.type="text/plain",e.setAttribute("data-cc",t),e.setAttribute("data-cc-auto","1")))}})}})})}).observe(document.documentElement,{childList:!0,subtree:!0})}}(),"loading"===document.readyState?document.addEventListener("DOMContentLoaded",Le):Le();var Be=null;function Oe(){for(var e=[],t=[],n=[],c={},o={},r=document.querySelectorAll("script[src]"),a=0;a<r.length;a++)r[a].src&&e.push(r[a].src);for(var i=document.querySelectorAll("iframe[src]"),s=0;s<i.length;s++)i[s].src&&e.push(i[s].src);if(window.performance&&performance.getEntriesByType)for(var d=performance.getEntriesByType("resource"),u=0;u<d.length;u++){var l=d[u].name||"";if(l){-1===e.indexOf(l)&&e.push(l);var p=d[u].initiatorType||"";if("script"===p||"iframe"===p||"xmlhttprequest"===p||"fetch"===p||-1!==l.indexOf(".js"))try{var f=new URL(l),g=f.hostname;if(g===location.hostname||g==="www."+location.hostname||"www."+g===location.hostname){var m=f.pathname.match(/\/wp-content\/plugins\/([^\/]+)\//);m&&!o[m[1]]&&(o[m[1]]=!0,n.push({slug:m[1],url:l}))}else c[g]||(c[g]=!0,t.push(g))}catch(e){}}}return{allUrls:e,thirdPartyDomains:t,pluginScripts:n}}var Te={};function Pe(e){var t={set_by:"",set_by_plugin:""},n=window.__ccCookieSetters;if(!n||!Object.prototype.hasOwnProperty.call(n,e)||!n[e])return t;try{var c=new URL(String(n[e]).replace(/:\d+(:\d+)?$/,""));if(/^(chrome-extension|moz-extension|safari-web-extension|safari-extension):$/.test(c.protocol))return t.set_by="browser-extension",t;var o=c.hostname;if(o===location.hostname||o==="www."+location.hostname||"www."+o===location.hostname){t.set_by="first-party";var r=c.pathname.match(/\/wp-content\/(?:plugins|themes)\/([^\/]+)\//);r&&(t.set_by_plugin=r[1].toLowerCase())}else t.set_by=o.toLowerCase()}catch(e){}return t}function De(e,t,n){if("browser-extension"===n.set_by)return!0;var c=window.__ccVisitorCookieRules;if(!c||!c.tools)return!1;if(c.allow&&-1!==c.allow.indexOf(e))return!1;if(n.set_by)return!1;for(var o=0;o<c.tools.length;o++){for(var r=c.tools[o],a=-1!==(r.n||[]).indexOf(e),i=0;!a&&i<(r.p||[]).length;i++)0===e.indexOf(r.p[i])&&(a=!0);if(a){for(var s=0;s<t.length;s++)for(var d=0;d<(r.d||[]).length;d++){var u=String(t[s]).toLowerCase(),l=r.d[d];if(u===l||u.slice(-l.length-1)==="."+l)return!1}return!0}}return!1}function Re(){var t=window.__ccClassified||[],n=window.__ccUnclassified||[],c=window.__ccBeaconUrl;if(c){var o,r={};for(o=0;o<t.length;o++)r[t[o]]=!0;for(o=0;o<n.length;o++)r[n[o]]=!0;var a=Object.keys(Te);for(o=0;o<a.length;o++)r[a[o]]=!0;var i=Object.keys(d);for(o=0;o<i.length;o++)r[i[o]]=!0;var s={},u=[],l=document.cookie.split(";");for(o=0;o<l.length;o++){var p=l[o].indexOf("="),f=(p>-1?l[o].substring(0,p):l[o]).trim(),g=p>-1?l[o].substring(p+1).trim():"";f&&(u.push(f),s[f]=g)}var m=[];for(o=0;o<u.length;o++)if(!r[u[o]]){for(var y=!1,v=Object.keys(d),h=0;h<v.length;h++)if(d[v[h]].prefix&&0===u[o].indexOf(v[h])){y=!0;break}y||m.push(u[o])}if(0!==m.length){for(var w=Oe(),b=w.thirdPartyDomains,k=[],_=0;_<w.pluginScripts.length;_++)k.push(w.pluginScripts[_].slug);for(var x=location.pathname,E=0;E<m.length;E++){var A=m[E],S=!!e[A]&&!r[A],C=Me(s[A]||""),I=Pe(A);if(!De(A,b,I)||window.__ccDiscovery&&window.__ccDiscovery.active){var L=JSON.stringify({cookie_name:A,script_domains:b,plugin_scripts:k,page_path:x,pre_existing:S,value_shape:C,set_by:I.set_by,set_by_plugin:I.set_by_plugin});Te[A]=!0,navigator.sendBeacon&&navigator.sendBeacon(c,new Blob([L],{type:"application/json"}))}else Te[A]=!0}}}}function Me(e){if(!e||0===e.length)return"empty";if("true"===e||"false"===e||"1"===e||"0"===e)return"boolean";if(/^\d+$/.test(e))return e.length>12?"long-numeric":"numeric";if(/^\d+\.\d+$/.test(e))return"decimal";if(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(e))return"uuid";if(/^[A-Za-z0-9+\/]{20,}={0,2}$/.test(e))return"base64";if(/^(GA\d+\.\d+\.\d+\.\d+|G-[A-Z0-9]+)/.test(e))return"ga-id";try{if("object"==typeof JSON.parse(decodeURIComponent(e)))return"json"}catch(e){}return/^[a-f0-9]{24,}$/i.test(e)?"hex-id":/^\d{10,13}$/.test(e)?"timestamp":e.length<=20?"short-string":e.length<=100?"medium-string":"long-string"}setTimeout(Re,3e3),setTimeout(Re,15e3),setTimeout(Re,45e3),window.addEventListener("cc:update",function(){setTimeout(Re,3e3)}),window.addEventListener("pagehide",Re)}();

cookieflame/trunk/cookieflame.php

@@ -3 +3 @@
  * Plugin Name:       CookieFlame
  * Plugin URI:        https://cookieflame.com
- * Description:       A lightweight, self-hosted cookie consent manager with Google Consent Mode v2, IAB TCF v2.2, automatic script blocking, multi-region compliance (GDPR/CCPA/LGPD/POPIA), passive cookie monitoring, and server-side geo detection via Cloudflare.
- * Version:           5.3.0
+ * Description:       A lightweight, self-hosted cookie consent manager with Google Consent Mode v2, automatic script blocking, multi-region compliance (GDPR/CCPA/LGPD/POPIA), passive cookie monitoring, and server-side geo detection via Cloudflare.
+ * Version:           5.4.0
  * Requires at least: 6.0
  * Requires PHP:      8.0
@@ -19 +19 @@
 }
 
-define( 'COOKIEFLAME_VERSION', '5.3.0' );
+define( 'COOKIEFLAME_VERSION', '5.4.0' );
 define( 'COOKIEFLAME_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );
 define( 'COOKIEFLAME_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
@@ -27 +27 @@
 
 /* ═══════════════════════════════════════════════════════════
-   MONITORING INTERVAL BUCKETS (in minutes)
-   A single 'digest_interval' option drives both beacon
-   processing cadence and email digest cadence. Value 0 = off.
-   Free tier: off, daily, weekly.
-   Pro tier:  free buckets + 15m, 1h, 4h, monthly (added via the
-              cookieflame_interval_buckets filter by the Pro plugin).
+   COOKIE MONITORING SETTINGS (v5.4.0)
+   Two separate settings on the Cookie Monitoring tab:
+     - Watch for new cookies: On/Off. Visitors' browsers report
+       new cookies as they browse, processed straight away.
+       Stored as the inverse of 'monitoring_paused'.
+     - Email me about changes: 'weekly' (default), 'daily',
+       'instant' or 'off'. Stored as 'email_frequency'.
+   Before v5.4.0 a single 'digest_interval' (minutes, 0 = off)
+   drove both. cookieflame_migrate_monitoring_settings() converts
+   it once; until then the getters derive the same answer from it.
+
+   The cookieflame_interval_buckets filter is kept: a plugin that
+   adds a bucket shorter than a day (Pro 1.5.x adds 15 minutes)
+   makes "Instantly" emails possible, sent after that delay.
 ═══════════════════════════════════════════════════════════ */
 
@@ -53 +61 @@
  */
 function cookieflame_interval_buckets_free() {
+    // v5.4.0: the 15-minute, 1-hour and 4-hour entries are no longer
+    // declared here. Pro 1.5.x still contributes them through the filter.
     return array(
         array( 'minutes' => 0,     'tier' => 'free' ),
-        array( 'minutes' => 15,    'tier' => 'pro' ),
-        array( 'minutes' => 60,    'tier' => 'pro' ),
-        array( 'minutes' => 240,   'tier' => 'pro' ),
         array( 'minutes' => 1440,  'tier' => 'free' ),
         array( 'minutes' => 10080, 'tier' => 'free' ),
@@ -159 +166 @@
 
 /**
- * Return the currently configured monitoring interval in minutes,
- * normalised to a valid bucket for the current tier. Defaults to
- * daily (1440) on new installs with no value set.
+ * Delay before the next email summary, in minutes (0 = no email).
+ * Kept under its pre-5.4.0 name for any code that still calls it.
  */
 function cookieflame_current_interval_minutes() {
-    $settings = get_option( 'cookieflame_settings', array() );
-    $raw      = isset( $settings['digest_interval'] ) ? intval( $settings['digest_interval'] ) : 1440;
-    return cookieflame_normalise_interval( $raw );
-}
-
+    return cookieflame_email_delay_minutes();
+}
+
+/**
+ * Whether "Watch for new cookies" is off. Every beacon, queue and
+ * digest path gates on this, so turning it off silences them all.
+ */
 function cookieflame_monitoring_is_off() {
-    if ( cookieflame_monitoring_is_paused() ) {
-        return true;
-    }
-    return 0 === cookieflame_current_interval_minutes();
-}
-
-/**
- * Whether monitoring is currently paused. Paused is a temporary
- * suppression state — distinct from "Off" — that keeps the chosen
- * update interval configured but silences beacons and digests while
- * the admin does site surgery. Admin toggles this from the Cookie
- * Monitoring tab. cookieflame_monitoring_is_off() folds this into the same
- * gate so every downstream path inherits pause automatically.
+    return cookieflame_monitoring_is_paused();
+}
+
+/**
+ * Whether "Watch for new cookies" is off (stored as 'monitoring_paused',
+ * the flag behind the On/Off switch on the Cookie Monitoring tab). A
+ * pre-5.4.0 'digest_interval' of 0 also means off until migrated.
  */
 function cookieflame_monitoring_is_paused() {
     $settings = get_option( 'cookieflame_settings', array() );
-    return ! empty( $settings['monitoring_paused'] );
-}
+    if ( ! empty( $settings['monitoring_paused'] ) ) {
+        return true;
+    }
+    if ( ! isset( $settings['email_frequency'] ) && isset( $settings['digest_interval'] ) && intval( $settings['digest_interval'] ) <= 0 ) {
+        return true;
+    }
+    return false;
+}
+
+/**
+ * The saved "Email me about changes" choice: 'weekly', 'daily',
+ * 'instant' or 'off'. Sites not yet migrated get the answer their old
+ * 'digest_interval' maps to (15/60/240 minutes map to 'instant').
+ */
+function cookieflame_email_frequency() {
+    $settings = get_option( 'cookieflame_settings', array() );
+    if ( isset( $settings['email_frequency'] ) ) {
+        return cookieflame_sanitize_email_frequency( $settings['email_frequency'] );
+    }
+    if ( ! isset( $settings['digest_interval'] ) ) {
+        return 'weekly';
+    }
+    return cookieflame_email_frequency_from_interval( $settings['digest_interval'], true );
+}
+
+/**
+ * Map a pre-5.4.0 'digest_interval' to an email frequency. Intervals
+ * under a day become 'instant' when $instant_ok, otherwise 'daily'.
+ */
+function cookieflame_email_frequency_from_interval( $minutes, $instant_ok ) {
+    $minutes = intval( $minutes );
+    if ( $minutes <= 0 ) {
+        return 'off';
+    }
+    if ( 10080 === $minutes ) {
+        return 'weekly';
+    }
+    if ( $minutes < 1440 ) {
+        return $instant_ok ? 'instant' : 'daily';
+    }
+    return 'daily';
+}
+
+function cookieflame_sanitize_email_frequency( $value ) {
+    $value = is_string( $value ) ? $value : '';
+    return in_array( $value, array( 'weekly', 'daily', 'instant', 'off' ), true ) ? $value : 'weekly';
+}
+
+/**
+ * Shortest sub-daily bucket another plugin added through the
+ * cookieflame_interval_buckets filter, in minutes, or 0 when none.
+ */
+function cookieflame_instant_bucket_minutes() {
+    $shortest = 0;
+    foreach ( cookieflame_interval_buckets() as $bucket ) {
+        $minutes = intval( $bucket['minutes'] );
+        if ( $minutes > 0 && $minutes < 1440 && ( 0 === $shortest || $minutes < $shortest ) ) {
+            $shortest = $minutes;
+        }
+    }
+    return $shortest;
+}
+
+/**
+ * Whether "Instantly" can be chosen on this site: CookieFlame Pro is
+ * active and a plugin supplies a delay shorter than a day.
+ */
+function cookieflame_instant_email_available() {
+    return cookieflame_is_premium() && cookieflame_instant_bucket_minutes() > 0;
+}
+
+/**
+ * Minutes from the first new cookie to the email summary, or 0 when
+ * emails are off. 'instant' uses the shortest contributed bucket and
+ * falls back to daily when there is none.
+ *
+ * Filter: cookieflame_email_delay_minutes ( int $minutes, string $frequency ).
+ */
+function cookieflame_email_delay_minutes() {
+    $frequency = cookieflame_email_frequency();
+    $map       = array( 'off' => 0, 'daily' => 1440, 'weekly' => 10080 );
+    if ( 'instant' === $frequency ) {
+        $minutes = cookieflame_instant_bucket_minutes();
+        $minutes = $minutes > 0 ? $minutes : 1440;
+    } else {
+        $minutes = $map[ $frequency ];
+    }
+    return max( 0, intval( apply_filters( 'cookieflame_email_delay_minutes', $minutes, $frequency ) ) );
+}
+
+/**
+ * One-time conversion of the pre-5.4.0 'digest_interval' setting:
+ *   0             -> watch Off, email Off
+ *   daily, weekly -> watch On, email unchanged
+ *   15m, 1h, 4h   -> 'instant' when Pro is active, 'daily' otherwise
+ * 'digest_interval' itself is left in place.
+ */
+function cookieflame_migrate_monitoring_settings() {
+    $settings = get_option( 'cookieflame_settings', false );
+    if ( ! is_array( $settings ) || isset( $settings['email_frequency'] ) ) {
+        return;
+    }
+    if ( isset( $settings['digest_interval'] ) ) {
+        $minutes = intval( $settings['digest_interval'] );
+        $settings['email_frequency'] = cookieflame_email_frequency_from_interval( $minutes, $minutes > 0 && $minutes < 1440 && cookieflame_is_premium() );
+        if ( $minutes <= 0 ) {
+            $settings['monitoring_paused'] = 1;
+        }
+    } else {
+        $settings['email_frequency'] = 'weekly';
+    }
+    update_option( 'cookieflame_settings', $settings );
+}
+add_action( 'admin_init', 'cookieflame_migrate_monitoring_settings', 5 );
 
 /**
@@ -209 +323 @@
     $host      = is_string( $host ) ? strtolower( $host ) : '';
     return substr( sha1( $host . '|' . $page_path ), 0, 16 );
+}
+
+/**
+ * Version string for one of the plugin's own scripts or stylesheets: the
+ * plugin version plus the file's modification time, so a changed file
+ * always gets a new URL and no browser or CDN cache serves an old copy.
+ */
+function cookieflame_asset_version( $relative_path ) {
+    $file  = COOKIEFLAME_PLUGIN_DIR . $relative_path;
+    $mtime = file_exists( $file ) ? filemtime( $file ) : false;
+    return $mtime ? COOKIEFLAME_VERSION . '.' . $mtime : COOKIEFLAME_VERSION;
 }
 
@@ -337 +462 @@
 add_action( 'admin_post_cookieflame_save_notifications', 'cookieflame_save_notifications' );
 add_action( 'admin_post_cookieflame_toggle_pause',        'cookieflame_toggle_monitoring_pause' );
+add_action( 'admin_post_cookieflame_dismiss_upgrade_banner', 'cookieflame_dismiss_upgrade_banner' );
+
+/**
+ * Hide the "Upgrade to Pro" banner at the top of the CookieFlame tabs
+ * for the current user.
+ */
+function cookieflame_dismiss_upgrade_banner() {
+    if ( ! current_user_can( 'manage_options' ) ) {
+        wp_die( esc_html__( 'You do not have permission to do this.', 'cookieflame' ) );
+    }
+    check_admin_referer( 'cookieflame_dismiss_upgrade_banner' );
+    update_user_meta( get_current_user_id(), 'cookieflame_upgrade_banner_dismissed', time() );
+    $tab = sanitize_key( wp_unslash( $_POST['tab'] ?? 'cookies' ) );
+    wp_safe_redirect( add_query_arg( array( 'page' => 'cookieflame', 'tab' => $tab ? $tab : 'cookies' ), admin_url( 'admin.php' ) ) );
+    exit;
+}
 
 /**
@@ -1193 +1334 @@
     //   - The beacon carries a script_domain or plugin_script not yet
     //     recorded for this (URL, cookie) pair
-    //   - The configured update interval has elapsed since last_processed
+    //   - A day has passed since last_processed (heartbeat; this only
+    //     refreshes "last seen", which Tidy up relies on)
     //
     // Otherwise we silently drop the beacon.
     //
-    // Monitoring off (interval = 0) is handled at enqueue time — the
+    // Watch for new cookies Off is handled at enqueue time — the
     // beacon URL is not injected so nothing fires. We defensively drop
     // here too in case a stale page serves the URL from cache.
@@ -1208 +1350 @@
     $url_hash    = cookieflame_url_hash_for_path( $page_path );
     $now         = time();
-    $interval_s  = cookieflame_current_interval_minutes() * 60;
+    $interval_s  = DAY_IN_SECONDS; // Heartbeat: fixed daily since v5.4.0, independent of the email setting.
 
     // phpcs:ignore WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching -- Custom plugin table; high-write-rate beacon storage where the object cache adds no value (writes invalidate cache on every visitor request, reads are admin-only and infrequent).
@@ -1404 +1546 @@
  */
 function cookieflame_queue_notification( $cookie_name, $script_domains, $page_path, $pre_existing = false, $value_shape = '' ) {
-    // Monitoring off -> do not queue and do not schedule a digest.
-    if ( cookieflame_monitoring_is_off() ) {
+    // Watching off, or emails off -> do not queue and do not schedule a digest.
+    if ( cookieflame_monitoring_is_off() || 0 === cookieflame_email_delay_minutes() ) {
         return;
     }
@@ -1422 +1564 @@
     update_option( 'cookieflame_notification_queue', $queue );
 
-    // Start digest timer if not already running. The same update_interval
-    // setting drives both beacon filtering and digest cadence.
+    // Start digest timer if not already running, from the
+    // "Email me about changes" setting.
     $scheduled = get_option( 'cookieflame_digest_scheduled', 0 );
     if ( empty( $scheduled ) ) {
-        $interval = cookieflame_current_interval_minutes() * 60;
+        $interval = cookieflame_email_delay_minutes() * 60;
         if ( $interval <= 0 ) {
             return;
@@ -1601 +1743 @@
     // invoking the hook directly. Silently clean up and return — the
     // queue is preserved for resume.
-    if ( cookieflame_monitoring_is_off() ) {
+    if ( cookieflame_monitoring_is_off() || 0 === cookieflame_email_delay_minutes() ) {
         delete_option( 'cookieflame_digest_scheduled' );
         return;
@@ -1685 +1827 @@
 
     // Header
-    $body  = "CookieFlame Cookie Discovery Report\n";
+    $body  = "CookieFlame: new cookies found by Watch for new cookies\n";
     $body .= $site_name . " (" . $site_url . ")\n";
     $body .= wp_date( 'j M Y, H:i' ) . "\n";
@@ -1813 +1955 @@
     $body .= "-- \n";
     $body .= "CookieFlame v" . COOKIEFLAME_VERSION . " on " . $site_name . "\n";
-    $body .= "You are receiving this because Cookie Monitoring is enabled.\n";
+    $body .= "You are receiving this because \"Email me about changes\" is on in Cookie Monitoring.\n";
     $body .= "Change settings: " . admin_url( 'admin.php?page=cookieflame&tab=notifications' ) . "\n";
 
-    wp_mail( $to, $subject, $body );
+    /**
+     * Filter the email summary before it is sent.
+     *
+     * Return an array with 'to', 'subject', 'body' and 'headers' to change
+     * the email, or false to skip sending it (the queue is still cleared).
+     *
+     * @param array $email      { to, subject, body, headers }.
+     * @param array $actionable Queue entries that need a decision.
+     * @param array $residual   Queue entries from plugins no longer active.
+     */
+    $email = apply_filters( 'cookieflame_digest_email', array(
+        'to'      => $to,
+        'subject' => $subject,
+        'body'    => $body,
+        'headers' => array(),
+    ), $actionable, $residual );
+
+    if ( is_array( $email ) && ! empty( $email['to'] ) ) {
+        wp_mail( $email['to'], (string) ( $email['subject'] ?? $subject ), (string) ( $email['body'] ?? $body ), $email['headers'] ?? array() );
+    }
 
     // Clear the queue and timer
@@ -2218 +2379 @@
         COOKIEFLAME_PLUGIN_URL . 'assets/css/admin.css',
         array(),
-        COOKIEFLAME_VERSION
+        cookieflame_asset_version( 'assets/css/admin.css' )
     );
     wp_enqueue_script(
@@ -2224 +2385 @@
         COOKIEFLAME_PLUGIN_URL . 'assets/js/admin.js',
         array(),
-        COOKIEFLAME_VERSION,
+        cookieflame_asset_version( 'assets/js/admin.js' ),
         true
     );
@@ -2253 +2414 @@
     $cookieflame_js_data = apply_filters( 'cookieflame_admin_js_data', $cookieflame_js_data );
     wp_localize_script( 'cookieflame-admin', 'cookieflameAdmin', $cookieflame_js_data );
+
+    // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- Tab navigation, no data modification.
+    if ( isset( $_GET['tab'] ) && 'preview' === sanitize_key( wp_unslash( $_GET['tab'] ) ) ) {
+        wp_enqueue_script(
+            'cookieflame-admin-preview',
+            COOKIEFLAME_PLUGIN_URL . 'assets/js/admin-preview.js',
+            array(),
+            cookieflame_asset_version( 'assets/js/admin-preview.js' ),
+            true
+        );
+        wp_localize_script( 'cookieflame-admin-preview', 'cookieflamePreview', array(
+            'privacyUrl'        => $opts['privacy_url'] ?? '/privacy-policy',
+            'theme'             => $opts['theme'] ?? 'light',
+            'rejectFirstScreen' => ! empty( $opts['show_reject_first'] ),
+            'showPoweredBy'     => ! empty( $opts['show_powered_by'] ),
+        ) );
+    }
 }
 
@@ -2305 +2483 @@
 }
 
+/**
+ * [cookieflame_settings_link text="Cookie settings"]: a link that reopens
+ * the visitor's cookie choices (the US "Do Not Sell or Share" choice for
+ * US visitors). Any element with the class cc-open-settings does the same,
+ * for example a menu item.
+ */
+add_shortcode( 'cookieflame_settings_link', 'cookieflame_settings_link_shortcode' );
+
+function cookieflame_settings_link_shortcode( $atts ) {
+    $atts = shortcode_atts( array(
+        'text'  => __( 'Cookie settings', 'cookieflame' ),
+        'class' => '',
+    ), $atts, 'cookieflame_settings_link' );
+    $class = trim( 'cc-open-settings ' . implode( ' ', array_map( 'sanitize_html_class', preg_split( '/\s+/', (string) $atts['class'], -1, PREG_SPLIT_NO_EMPTY ) ) ) );
+    return '<a href="#" class="' . esc_attr( $class ) . '" role="button">' . esc_html( $atts['text'] ) . '</a>';
+}
+
 /* ═══════════════════════════════════════════════════════════
    REST API — GEO ENDPOINT
@@ -2339 +2534 @@
         update_option( 'cookieflame_settings', array(
             'privacy_url'    => '/privacy-policy',
-            'ccpa_url'       => '/privacy-policy#do-not-sell',
             'log_endpoint'   => '',
             'gtm_id'         => '',
@@ -2350 +2544 @@
             'track_logged_in' => 1,
             'extra_patterns' => '',
-            'digest_interval' => 1440, // daily
+            'email_frequency' => 'weekly',
             'monitoring_paused' => 0,
         ) );
@@ -2540 +2734 @@
         . "if(raw.cv!=={$cv_js})return;"
         . "var gpc=window.__ccGPC;"
-        . "var mkt=raw.marketing&&!gpc;"
+        . "var mkt=raw.marketing&&(!gpc||raw.gpcOptIn);"
         . "gtag('consent','update',{"
         . "analytics_storage:raw.analytics?'granted':'denied',"
@@ -2629 +2823 @@
     // blockable iframe or Elementor video widget is present on the
     // page). Versioned so cache busts cleanly on plugin update.
-    $overrides['facadesUrl'] = COOKIEFLAME_PLUGIN_URL . 'assets/js/cookieconsent-facades.min.js?ver=' . COOKIEFLAME_VERSION;
+    $overrides['facadesUrl'] = COOKIEFLAME_PLUGIN_URL . 'assets/js/cookieconsent-facades.min.js?ver=' . cookieflame_asset_version( 'assets/js/cookieconsent-facades.min.js' );
 
     if ( ! empty( $options['privacy_url'] ) )    $overrides['privacyUrl']    = $options['privacy_url'];
-    // CCPA "Do Not Sell" link points to the same privacy policy page with an anchor.
-    $cookieflame_privacy = ! empty( $options['privacy_url'] ) ? $options['privacy_url'] : '/privacy-policy';
-    $overrides['ccpaUrl'] = $cookieflame_privacy . '#do-not-sell';
     if ( ! empty( $options['log_endpoint'] ) )    $overrides['logEndpoint']   = $options['log_endpoint'];
     if ( ! empty( $options['storage_method'] ) )  $overrides['storageMethod'] = $options['storage_method'];
@@ -2648 +2839 @@
     $overrides['shareSubdomains'] = ! empty( $options['share_subdomains'] ) || ! empty( $options['cookie_domain'] );
     if ( isset( $options['reconsent_days'] ) && $options['reconsent_days'] !== '' ) {
-        $overrides['reconsentDays'] = intval( $options['reconsent_days'] );
+        $overrides['reconsentDays'] = cookieflame_reconsent_days( $options['reconsent_days'] );
+    }
+    if ( ! empty( $options['show_reject_first'] ) ) {
+        $overrides['rejectFirstScreen'] = true;
+    }
+    if ( ! empty( $options['visitor_logins'] ) ) {
+        $overrides['visitorLogins'] = true;
     }
     if ( ! empty( $options['show_powered_by'] ) ) {
@@ -2655 +2852 @@
     if ( ! empty( $options['icon_position'] ) && 'right' === $options['icon_position'] ) {
         $overrides['iconPosition'] = 'right';
+    }
+
+    /**
+     * Filter the banner configuration sent to the front end as
+     * window.__ccConfig. Keys the banner script knows are applied over
+     * its defaults; any other keys are left on window.__ccConfig for the
+     * code that added them.
+     *
+     * @param array $overrides Front-end config.
+     * @param array $options   The cookieflame_settings option.
+     */
+    $filtered = apply_filters( 'cookieflame_frontend_config', $overrides, $options );
+    if ( is_array( $filtered ) ) {
+        $overrides = $filtered;
     }
 
@@ -2797 +3008 @@
         COOKIEFLAME_PLUGIN_URL . 'assets/js/cookieconsent' . $suffix . '.js',
         array(),
-        COOKIEFLAME_VERSION,
+        cookieflame_asset_version( 'assets/js/cookieconsent' . $suffix . '.js' ),
         false // Load in head, not footer.
     );
@@ -2811 +3022 @@
             COOKIEFLAME_PLUGIN_URL . 'assets/js/cookieconsent-discovery' . $suffix . '.js',
             array( 'cookieflame-consent' ),
-            COOKIEFLAME_VERSION,
+            cookieflame_asset_version( 'assets/js/cookieconsent-discovery' . $suffix . '.js' ),
             true // Footer is fine -- discovery runs after DOM is ready.
         );
@@ -2847 +3058 @@
         COOKIEFLAME_PLUGIN_URL . 'assets/css/cookieconsent.css',
         array(),
-        COOKIEFLAME_VERSION
+        cookieflame_asset_version( 'assets/css/cookieconsent.css' )
     );
 }
@@ -3378 +3589 @@
         array( 'key' => 'privacy_url',
                'wp_default_page' => 'wp_page_for_privacy_policy',
-               'desc' => __( 'The page linked from the consent banner and the CCPA "Do Not Sell My Personal Information" notice. Defaults to the page set under Settings > Privacy. Add the [cookieflame_declaration] shortcode to this page to show visitors their consent choices.', 'cookieflame' ) ) );
+               'desc' => __( 'The page linked from the consent banner. Defaults to the page set under Settings > Privacy. Add the [cookieflame_declaration] shortcode to this page to show visitors their consent choices.', 'cookieflame' ) ) );
+
+    add_settings_field( 'cookieflame_visitor_logins', __( 'Visitor logins', 'cookieflame' ), 'cookieflame_field_checkbox', 'cookieflame', 'cookieflame_consent',
+        array( 'key' => 'visitor_logins',
+               'desc' => __( 'Visitors can log in to this site (for example, customer accounts or a members area)', 'cookieflame' ),
+               'help' => __( 'Tick this if people other than you and your team can log in, for example to see their orders, download purchases or read members-only pages. Your cookie declaration will then also list the cookies WordPress sets when someone logs in. Leave it unticked if only you and your team log in.', 'cookieflame' ) ) );
 
     add_settings_field( 'cookieflame_reconsent', __( 'Re-consent Period', 'cookieflame' ), 'cookieflame_field_number', 'cookieflame', 'cookieflame_consent',
@@ -3386 +3602 @@
     add_settings_field( 'cookieflame_theme', __( 'Banner Theme', 'cookieflame' ), 'cookieflame_field_theme', 'cookieflame', 'cookieflame_consent' );
 
+    add_settings_field( 'cookieflame_show_reject_first', __( 'Show "Decline all" on the first screen', 'cookieflame' ), 'cookieflame_field_checkbox', 'cookieflame', 'cookieflame_consent',
+        array( 'key' => 'show_reject_first',
+               'desc' => __( 'Adds a Decline All button next to Accept All on the banner for visitors in the UK, EU/EEA, Switzerland, Brazil and South Africa. Off by default: visitors can always decline everything under Manage preferences. Never shown on the US notice.', 'cookieflame' ) ) );
+
     add_settings_field( 'cookieflame_share_subdomains', __( 'Share consent across subdomains', 'cookieflame' ), 'cookieflame_field_checkbox', 'cookieflame', 'cookieflame_consent',
         array( 'key' => 'share_subdomains',
@@ -3428 +3648 @@
 }
 
+/**
+ * Re-consent period in days. Anything below 1 (blank, 0, negative or
+ * junk) means the default of 365, so consent never expires on load.
+ */
+function cookieflame_reconsent_days( $value ) {
+    $days = intval( $value );
+    return $days >= 1 ? $days : 365;
+}
+
 function cookieflame_sanitize_settings( $input ) {
-    // Handle the DNT device cookie (not stored in DB, stored as browser cookie)
-    cookieflame_handle_dnt_cookie( ! empty( $input['dnt_device'] ) );
+    $input = is_array( $input ) ? $input : array();
 
     // Preserve consent_bump from existing settings (managed by the
     // Force Re-consent button, not by this form)
     $existing = get_option( 'cookieflame_settings', array() );
-
-    return array(
-        'privacy_url'        => esc_url_raw( $input['privacy_url'] ?? '' ),
-        'ccpa_url'           => esc_url_raw( $input['ccpa_url'] ?? '' ),
-        'log_endpoint'       => esc_url_raw( $input['log_endpoint'] ?? '' ),
+    $existing = is_array( $existing ) ? $existing : array();
+
+    // The Settings tab form posts a '_form' marker. Other saves (the
+    // Cookie Monitoring and Tag Managers handlers, the pause switch, the
+    // migration) pass the whole stored array back through this callback,
+    // so an unticked checkbox there means "not in this form", not "off".
+    $main_form = ! empty( $input['_form'] );
+    $flag = function ( $key, $default = 0 ) use ( $input, $existing, $main_form ) {
+        if ( $main_form ) {
+            return ! empty( $input[ $key ] ) ? 1 : 0;
+        }
+        $source = array_key_exists( $key, $input ) ? $input : $existing;
+        return isset( $source[ $key ] ) ? ( ! empty( $source[ $key ] ) ? 1 : 0 ) : $default;
+    };
+
+    if ( $main_form ) {
+        // Handle the DNT device cookie (not stored in DB, stored as browser cookie)
+        cookieflame_handle_dnt_cookie( ! empty( $input['dnt_device'] ) );
+        $track_logged_in = empty( $input['exclude_staff'] ) ? 1 : 0;
+    } else {
+        $track_logged_in = $flag( 'track_logged_in', 1 );
+    }
+
+    $email_frequency = cookieflame_sanitize_email_frequency( $input['email_frequency'] ?? ( $existing['email_frequency'] ?? 'weekly' ) );
+
+    $clean = array(
+        'privacy_url'        => esc_url_raw( $input['privacy_url'] ?? ( $main_form ? '' : ( $existing['privacy_url'] ?? '' ) ) ),
+        'log_endpoint'       => esc_url_raw( $input['log_endpoint'] ?? ( $main_form ? '' : ( $existing['log_endpoint'] ?? '' ) ) ),
         'storage_method'     => 'cookie', // hardcoded — localStorage removed
-        'reconsent_days'     => intval( $input['reconsent_days'] ?? 365 ),
-        'cookie_domain'      => cookieflame_sanitize_cookie_domain( $input['cookie_domain'] ?? '' ),
-        'share_subdomains'   => ! empty( $input['share_subdomains'] ) ? 1 : 0,
-        'csp_safe'           => ! empty( $input['csp_safe'] ) ? 1 : 0,
-        'theme'              => in_array( $input['theme'] ?? '', array( 'light', 'dark' ), true ) ? $input['theme'] : 'light',
-        'show_powered_by'    => ! empty( $input['show_powered_by'] ) ? 1 : 0,
-        'icon_position'      => in_array( $input['icon_position'] ?? '', array( 'left', 'right' ), true ) ? $input['icon_position'] : 'left',
-        'track_logged_in'    => empty( $input['exclude_staff'] ) ? 1 : 0,
-        'extra_patterns'     => sanitize_textarea_field( $input['extra_patterns'] ?? '' ),
+        'reconsent_days'     => cookieflame_reconsent_days( $input['reconsent_days'] ?? ( $existing['reconsent_days'] ?? 365 ) ),
+        'cookie_domain'      => cookieflame_sanitize_cookie_domain( $input['cookie_domain'] ?? ( $existing['cookie_domain'] ?? '' ) ),
+        'share_subdomains'   => $flag( 'share_subdomains' ),
+        'csp_safe'           => $flag( 'csp_safe' ),
+        'theme'              => in_array( $input['theme'] ?? ( $existing['theme'] ?? '' ), array( 'light', 'dark' ), true ) ? ( $input['theme'] ?? $existing['theme'] ) : 'light',
+        'show_reject_first'  => $flag( 'show_reject_first' ),
+        'visitor_logins'     => $flag( 'visitor_logins' ),
+        'show_powered_by'    => $flag( 'show_powered_by' ),
+        'icon_position'      => in_array( $input['icon_position'] ?? ( $existing['icon_position'] ?? '' ), array( 'left', 'right' ), true ) ? ( $input['icon_position'] ?? $existing['icon_position'] ) : 'left',
+        'track_logged_in'    => $track_logged_in,
+        'extra_patterns'     => sanitize_textarea_field( $input['extra_patterns'] ?? ( $main_form ? '' : ( $existing['extra_patterns'] ?? '' ) ) ),
         'consent_bump'       => intval( $existing['consent_bump'] ?? 0 ),
-        'delete_on_uninstall' => ! empty( $input['delete_on_uninstall'] ) ? 1 : 0,
+        'delete_on_uninstall' => $flag( 'delete_on_uninstall' ),
         // Separate-tab fields: use $input if present (handler included it), else preserve $existing
         'gtm_id'             => isset( $input['gtm_id'] )             ? cookieflame_sanitize_gtm_id( $input['gtm_id'] )                : ( $existing['gtm_id'] ?? '' ),
         'uet_id'             => isset( $input['uet_id'] )             ? cookieflame_sanitize_uet_id( $input['uet_id'] )                : ( $existing['uet_id'] ?? '' ),
         'notification_email' => isset( $input['notification_email'] ) ? sanitize_email( $input['notification_email'] )           : ( $existing['notification_email'] ?? '' ),
-        'digest_interval'    => isset( $input['digest_interval'] )    ? cookieflame_normalise_interval( $input['digest_interval'] )    : cookieflame_normalise_interval( $existing['digest_interval'] ?? 1440 ),
-        // monitoring_paused is toggled only via the dedicated
-        // admin-post handler (cookieflame_toggle_monitoring_pause). When the
-        // handler's update_option() fires, the sanitize_option filter
-        // runs with $input containing the new value the handler wants
-        // to commit. When the main Settings tab saves, $input does not
-        // include this field, so we fall back to $existing to preserve
-        // whatever pause state was previously set.
+        'email_frequency'    => $email_frequency,
+        // "Watch for new cookies" Off. Toggled only via the dedicated
+        // admin-post handler (cookieflame_toggle_monitoring_pause) or
+        // the migration; the Settings tab preserves it.
         'monitoring_paused'  => isset( $input['monitoring_paused'] )  ? ( ! empty( $input['monitoring_paused'] ) ? 1 : 0 ) : ( ! empty( $existing['monitoring_paused'] ) ? 1 : 0 ),
     );
+    // Pre-5.4.0 setting, kept as-is so a downgrade still finds it.
+    if ( isset( $input['digest_interval'] ) || isset( $existing['digest_interval'] ) ) {
+        $clean['digest_interval'] = intval( $input['digest_interval'] ?? $existing['digest_interval'] );
+    }
+    return $clean;
 }
 
@@ -3532 +3786 @@
     check_admin_referer( 'cookieflame_save_notifications' );
 
-    $opts            = get_option( 'cookieflame_settings', array() );
-    $previous        = cookieflame_normalise_interval( $opts['digest_interval'] ?? 1440 );
+    $opts      = get_option( 'cookieflame_settings', array() );
+    $previous  = cookieflame_email_frequency();
+    $frequency = cookieflame_sanitize_email_frequency( sanitize_key( wp_unslash( $_POST['email_frequency'] ?? 'weekly' ) ) );
+    if ( 'instant' === $frequency && ! cookieflame_instant_email_available() ) {
+        $frequency = 'daily';
+    }
     $opts['notification_email'] = sanitize_email( wp_unslash( $_POST['notification_email'] ?? '' ) );
-    $opts['digest_interval']    = cookieflame_normalise_interval( intval( $_POST['digest_interval'] ?? 1440 ) );
+    $opts['email_frequency']    = $frequency;
     update_option( 'cookieflame_settings', $opts );
 
-    // If the interval changed, clear any pending single-event digest so
-    // the next queued cookie reschedules against the new cadence. If the
-    // admin has just turned monitoring off, drop any pending digest too.
-    if ( $previous !== $opts['digest_interval'] || 0 === $opts['digest_interval'] ) {
+    // If the frequency changed, clear any pending single-event digest so
+    // the next queued cookie reschedules against the new setting. Emails
+    // turned off also drops the waiting list, so nothing stale is sent
+    // when they are turned back on.
+    if ( $previous !== $frequency ) {
         wp_clear_scheduled_hook( 'cookieflame_send_digest' );
         delete_option( 'cookieflame_digest_scheduled' );
+        if ( 'off' === $frequency ) {
+            update_option( 'cookieflame_notification_queue', array() );
+        }
     }
 
@@ -3554 +3816 @@
 
 /**
- * Toggle the monitoring_paused flag from the Cookie Monitoring tab.
- * Pause suppresses beacons, beacon handling, digest queueing, and
+ * Toggle "Watch for new cookies" (the monitoring_paused flag) from the
+ * Cookie Monitoring tab. Off suppresses beacons, beacon handling, digest queueing, and
  * digest sending — all three paths gate on cookieflame_monitoring_is_off(),
  * which now returns true when paused. On pause we also clear any
@@ -3571 +3833 @@
 
     $opts       = get_option( 'cookieflame_settings', array() );
-    $was_paused = ! empty( $opts['monitoring_paused'] );
+    $was_paused = cookieflame_monitoring_is_paused();
     $now_paused = ! $was_paused;
 
@@ -3588 +3850 @@
         // next cadence window rather than immediately.
         $queue    = get_option( 'cookieflame_notification_queue', array() );
-        $interval = cookieflame_current_interval_minutes();
+        $interval = cookieflame_email_delay_minutes();
         if ( ! empty( $queue ) && $interval > 0 && ! wp_next_scheduled( 'cookieflame_send_digest' ) ) {
             wp_schedule_single_event( time() + ( $interval * MINUTE_IN_SECONDS ), 'cookieflame_send_digest' );
@@ -3930 +4192 @@
         esc_html( $a['desc'] ?? '' )
     );
+    if ( ! empty( $a['help'] ) ) {
+        printf( '<p class="description">%s</p>', esc_html( $a['help'] ) );
+    }
 }
 
@@ -4192 +4457 @@
         </div>
 
-        <?php if ( ! cookieflame_is_premium() ) : ?>
+        <?php if ( ! cookieflame_is_premium() && ! get_user_meta( get_current_user_id(), 'cookieflame_upgrade_banner_dismissed', true ) ) : ?>
         <div class="cf-admin-upgrade-banner">
             <div class="cf-admin-upgrade-banner-icon">&#x2728;</div>
@@ -4200 +4465 @@
             </div>
             <a href="https://cookieflame.com/pricing" target="_blank" class="cf-admin-btn-upgrade"><?php esc_html_e( 'Upgrade to Pro', 'cookieflame' ); ?> &rarr;</a>
+            <form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="cf-admin-upgrade-banner-dismiss">
+                <?php wp_nonce_field( 'cookieflame_dismiss_upgrade_banner' ); ?>
+                <input type="hidden" name="action" value="cookieflame_dismiss_upgrade_banner" />
+                <input type="hidden" name="tab" value="<?php echo esc_attr( $active_tab ); ?>" />
+                <button type="submit" class="cf-admin-upgrade-banner-close" aria-label="<?php esc_attr_e( 'Dismiss this message', 'cookieflame' ); ?>" title="<?php esc_attr_e( 'Dismiss this message', 'cookieflame' ); ?>">&times;</button>
+            </form>
         </div>
         <?php endif; ?>
@@ -4209 +4480 @@
             <p><?php esc_html_e( 'Add this shortcode to the page you have set as your Privacy Policy page (under Settings > Privacy). It shows visitors which cookie categories are active, what each cookie does, and a button to change their consent choices.', 'cookieflame' ); ?></p>
             <pre class="cf-admin-code-block">[cookieflame_declaration]</pre>
+            <h3><?php esc_html_e( 'Cookie Settings Link', 'cookieflame' ); ?></h3>
+            <p><?php esc_html_e( 'Put this shortcode in your footer or anywhere else to give visitors a "Cookie settings" link that reopens their choices. US visitors get the "Do Not Sell or Share My Personal Information" choice. You can change the wording with text="...". To use a menu item or your own button instead, give it the CSS class cc-open-settings.', 'cookieflame' ); ?></p>
+            <pre class="cf-admin-code-block">[cookieflame_settings_link]</pre>
         </div>
 
@@ -4255 +4529 @@
             <?php
             settings_fields( 'cookieflame_settings_group' );
+            ?>
+            <input type="hidden" name="cookieflame_settings[_form]" value="main" />
+            <?php
             do_settings_sections( 'cookieflame' );
             submit_button();
             ?>
         </form>
+
+        <?php
+        /**
+         * Fires on the Settings tab after the main settings form, so other
+         * plugins can add their own section (with its own form and option).
+         */
+        do_action( 'cookieflame_settings_sections' );
+        ?>
 
         <div class="cf-admin-card cf-admin-card-warning">
@@ -4454 +4739 @@
 
                 <h4 style="margin-top:16px;margin-bottom:8px;"><?php esc_html_e( 'How the scan works', 'cookieflame' ); ?></h4>
-                <p style="margin-bottom:12px;"><?php esc_html_e( 'The scan reads cookies from this browser, right now. It does not crawl your website or check other visitors. If a cookie does not exist in your browser at this moment, it will not appear in the scan. That means you need to visit your own website first and trigger all the scripts that set cookies.', 'cookieflame' ); ?></p>
+                <p style="margin-bottom:12px;"><?php esc_html_e( 'Cookie Discovery uses your own browser. It records the cookies your browser picks up while you browse your site with every cookie allowed. It does not crawl your website or check other visitors, so a cookie only appears if a page you visit sets it. Cookies your visitors pick up are found separately by Watch for new cookies on the Cookie Monitoring tab.', 'cookieflame' ); ?></p>
 
                 <h4 style="margin-bottom:8px;"><?php esc_html_e( 'Before you start', 'cookieflame' ); ?></h4>
-                <p style="margin-bottom:4px;color:#d63638;"><strong><?php esc_html_e( 'Check your tracking settings first.', 'cookieflame' ); ?></strong></p>
-                <p style="margin-bottom:12px;"><?php esc_html_e( 'Go to the Settings tab. Make sure "Track logged-in users" is checked and "Do not track this device" is unchecked. If either of these is blocking tracking, scripts will be suppressed for you even after you accept cookies, and no third-party cookies will appear in the scan. Save the settings and clear your site cache if you make changes. You can turn these back on after you have finished scanning.', 'cookieflame' ); ?></p>
+                <p style="margin-bottom:4px;"><strong><?php esc_html_e( 'Clear your page cache if you run one.', 'cookieflame' ); ?></strong></p>
+                <p style="margin-bottom:12px;"><?php esc_html_e( 'You do not need to change any CookieFlame settings. While Cookie Discovery runs, "Exclude staff from tracking" and "Do not track this device" are paused for your browser, and they are put back when you click Finish Discovery.', 'cookieflame' ); ?></p>
 
                 <h4 style="margin-bottom:8px;"><?php esc_html_e( 'Step by step', 'cookieflame' ); ?></h4>
@@ -4464 +4749 @@
                     <li>
                         <strong><?php esc_html_e( 'Start Cookie Discovery.', 'cookieflame' ); ?></strong>
-                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'When you click the Start Cookie Discovery button above, your website opens in this tab with all cookies temporarily accepted, so every tracking script can run and set its cookies. You need to be in the same browser you are using right now for wp-admin, because cookies are stored per browser.', 'cookieflame' ); ?></span>
+                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'Click Start Cookie Discovery above, then Open my site. Your site opens in this tab with every cookie allowed for your browser only, and a green bar at the top counts what is found. Use the browser you are using for wp-admin right now, because cookies are stored per browser.', 'cookieflame' ); ?></span>
                     </li>
                     <li>
-                        <strong><?php esc_html_e( 'Click "Accept All" on the consent banner.', 'cookieflame' ); ?></strong>
-                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'This is essential. The plugin blocks all tracking scripts until consent is given. If you only accept some categories, only those scripts will run. You need to accept everything so every script fires and every cookie gets created.', 'cookieflame' ); ?></span>
+                        <strong><?php esc_html_e( 'You will not see the consent banner.', 'cookieflame' ); ?></strong>
+                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'Cookie Discovery allows every cookie for your browser while it runs, so every script on your site can run and set its cookies. Your visitors still see the banner as normal.', 'cookieflame' ); ?></span>
                     </li>
                     <li>
@@ -4484 +4769 @@
                     </li>
                     <li>
-                        <strong><?php esc_html_e( 'Come back to this tab to see your results.', 'cookieflame' ); ?></strong>
-                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'The table will update with every cookie now sitting in your browser. Known cookies will have their details filled in automatically. Unknown cookies will be highlighted in yellow.', 'cookieflame' ); ?></span>
+                        <strong><?php esc_html_e( 'Click Finish Discovery on the green bar.', 'cookieflame' ); ?></strong>
+                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'You come back here, and the table lists every cookie found. Known cookies have their details filled in automatically. Unknown cookies are highlighted in yellow.', 'cookieflame' ); ?></span>
                     </li>
                     <li>
@@ -4500 +4785 @@
                     </li>
                     <li>
-                        <strong><?php esc_html_e( 'Re-enable your tracking protection.', 'cookieflame' ); ?></strong>
-                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'If you turned off "Do not track this device" in step 1, go back to the Settings tab and turn it back on. You can also click "Delete Non-Essential Cookies" on the Settings tab to clean up the tracking cookies that were just created during your scan.', 'cookieflame' ); ?></span>
+                        <strong><?php esc_html_e( 'Tidy up your browser if you like.', 'cookieflame' ); ?></strong>
+                        <br /><span style="color:#666;font-size:13px;"><?php esc_html_e( 'Your tracking settings are put back automatically. To remove the tracking cookies your browser picked up during the scan, click "Delete Non-Essential Cookies from This Browser" on the Settings tab.', 'cookieflame' ); ?></span>
                     </li>
                 </ol>
@@ -4510 +4795 @@
                 <h4 style="margin-bottom:4px;"><?php esc_html_e( 'Why are some cookies not showing up?', 'cookieflame' ); ?></h4>
                 <ul style="margin:0 0 12px 20px;line-height:1.8;">
-                    <li><strong><?php esc_html_e( 'You did not click Accept All:', 'cookieflame' ); ?></strong> <?php esc_html_e( 'If you only accepted some categories, scripts in the other categories never ran. Their cookies do not exist. Go back and accept all categories.', 'cookieflame' ); ?></li>
-                    <li><strong><?php esc_html_e( 'Your tracking protection is still on:', 'cookieflame' ); ?></strong> <?php esc_html_e( 'If "Do not track this device" is enabled or "Track logged-in users" is unchecked on the Settings tab, tracking is suppressed for your browser even after you accept cookies. Temporarily disable these before scanning.', 'cookieflame' ); ?></li>
+                    <li><strong><?php esc_html_e( 'Your page cache served an old page:', 'cookieflame' ); ?></strong> <?php esc_html_e( 'Clear your page cache and run Cookie Discovery again.', 'cookieflame' ); ?></li>
                     <li><strong><?php esc_html_e( 'The cookie is page-specific:', 'cookieflame' ); ?></strong> <?php esc_html_e( 'Some cookies are only set on specific pages (e.g. Stripe only on checkout, a chat widget only on contact pages). Visit those pages before re-scanning.', 'cookieflame' ); ?></li>
                     <li><strong><?php esc_html_e( 'The cookie is on a subdomain:', 'cookieflame' ); ?></strong> <?php esc_html_e( 'If you have subdomains (like app.yoursite.com), cookies locked to that subdomain are invisible from your main site. Enable "Share consent across subdomains" in Settings to share cookies, or use the "Add Cookie Manually" section below to register them by name.', 'cookieflame' ); ?></li>
@@ -4587 +4871 @@
                 <div id="cf-admin-discovery-idle">
                     <div style="display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap;">
-                        <button type="button" id="cf-admin-discovery-start" class="cf-admin-btn-primary"><?php esc_html_e( 'Start Cookie Discovery', 'cookieflame' ); ?></button>
-                        <span style="font-size:13px;color:#50575e;flex:1;min-width:200px;"><?php esc_html_e( 'Temporarily disables tracking protection, opens your site in a new tab with all cookies accepted, and lets you browse a few pages. When you finish, it scans for cookies and restores your settings.', 'cookieflame' ); ?></span>
+                        <button type="button" id="cf-admin-discovery-start" class="cf-admin-btn-primary"><?php esc_html_e( 'Start Cookie Discovery (uses your own browser)', 'cookieflame' ); ?></button>
+                        <span style="font-size:13px;color:#50575e;flex:1;min-width:200px;"><?php esc_html_e( 'Cookie Discovery uses your own browser: it allows every cookie for you only while you browse a few pages of your site in this tab. When you finish, it lists the cookies found and puts your settings back.', 'cookieflame' ); ?></span>
                     </div>
                     <p style="font-size:12px;color:#646970;margin:10px 0 0;"><?php esc_html_e( 'If you notice cookies you cannot explain after scanning, try running discovery in an incognito or private browser window. Browser extensions can occasionally inject tracking cookies that do not belong to your site, and incognito mode disables them by default. This is uncommon.', 'cookieflame' ); ?></p>
@@ -5002 +5286 @@
             <?php if ( $cookieflame_paused ) : ?>
             <div class="notice notice-warning is-dismissible" style="margin:0 0 16px;">
-                <p><strong><?php esc_html_e( 'Monitoring is now Off.', 'cookieflame' ); ?></strong> <?php esc_html_e( 'Cookie beacons and alert emails are suppressed. Your update interval is preserved for when you switch monitoring back on.', 'cookieflame' ); ?></p>
+                <p><strong><?php esc_html_e( 'Watch for new cookies is now Off.', 'cookieflame' ); ?></strong> <?php esc_html_e( 'Visitors\' browsers no longer report new cookies, and no emails are sent. Your email setting is kept for when you turn it back on.', 'cookieflame' ); ?></p>
             </div>
             <?php endif; ?>
@@ -5008 +5292 @@
             <?php if ( $cookieflame_resumed ) : ?>
             <div class="notice notice-success is-dismissible" style="margin:0 0 16px;">
-                <p><strong><?php esc_html_e( 'Monitoring is now On.', 'cookieflame' ); ?></strong> <?php esc_html_e( 'New cookies will be detected on the cadence you have configured.', 'cookieflame' ); ?></p>
+                <p><strong><?php esc_html_e( 'Watch for new cookies is now On.', 'cookieflame' ); ?></strong> <?php esc_html_e( 'New cookies appear in the Cookie Manager as soon as a visitor\'s browser reports them.', 'cookieflame' ); ?></p>
             </div>
             <?php endif; ?>
 
-            <p class="cf-admin-tab-intro"><?php esc_html_e( 'Watch real visitor sessions in the background and surface new cookies as they appear.', 'cookieflame' ); ?></p>
+            <p class="cf-admin-tab-intro"><?php esc_html_e( 'Your visitors\' browsers report cookies as they browse your site, so new ones show up in the Cookie Manager without you scanning.', 'cookieflame' ); ?></p>
 
             <?php $cookieflame_is_paused = cookieflame_monitoring_is_paused(); ?>
             <div class="cf-admin-pause-card <?php echo $cookieflame_is_paused ? 'cf-admin-pause-card-paused' : 'cf-admin-pause-card-running'; ?>">
                 <div class="cf-admin-pause-card-body">
-                    <h3 class="cf-admin-pause-card-title"><?php esc_html_e( 'Visitor Monitoring', 'cookieflame' ); ?></h3>
-                    <p class="cf-admin-pause-card-desc"><?php esc_html_e( 'Pause during site surgery (plugin swaps, theme changes, migrations). Your update interval is preserved.', 'cookieflame' ); ?></p>
+                    <h3 class="cf-admin-pause-card-title"><?php esc_html_e( 'Watch for new cookies', 'cookieflame' ); ?></h3>
+                    <p class="cf-admin-pause-card-desc"><?php esc_html_e( 'Uses your visitors\' browsers. New cookies are recorded the moment a visitor\'s browser reports them. Turn it off for a while during big changes (plugin swaps, theme changes, migrations) if you prefer. Clear your page cache after switching, so cached pages pick up the change.', 'cookieflame' ); ?></p>
                 </div>
                 <form method="post" action="<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>" class="cf-admin-pause-card-action">
@@ -5027 +5311 @@
                         <span class="cf-admin-toggle-label"><?php
                             echo $cookieflame_is_paused
-                                ? esc_html__( 'Monitoring: Off', 'cookieflame' )
-                                : esc_html__( 'Monitoring: On', 'cookieflame' );
+                                ? esc_html__( 'Watch for new cookies: Off', 'cookieflame' )
+                                : esc_html__( 'Watch for new cookies: On', 'cookieflame' );
                         ?></span>
                     </button>
@@ -5035 +5319 @@
 
             <?php
-            $notif_opts   = get_option( 'cookieflame_settings', array() );
-            $notif_email  = $notif_opts['notification_email'] ?? '';
-            $current_mins = cookieflame_normalise_interval( $notif_opts['digest_interval'] ?? 1440 );
-            $buckets      = cookieflame_interval_buckets();
-            $bucket_label = array(
-                0     => __( 'Off', 'cookieflame' ),
-                15    => __( '15 minutes', 'cookieflame' ),
-                60    => __( '1 hour', 'cookieflame' ),
-                240   => __( '4 hours', 'cookieflame' ),
-                1440  => __( 'Daily', 'cookieflame' ),
-                10080 => __( 'Weekly', 'cookieflame' ),
+            $notif_opts        = get_option( 'cookieflame_settings', array() );
+            $notif_email       = $notif_opts['notification_email'] ?? '';
+            $cf_frequency      = cookieflame_email_frequency();
+            $cf_instant_ok     = cookieflame_instant_email_available();
+            $cf_is_premium     = cookieflame_is_premium();
+            if ( 'instant' === $cf_frequency && ! $cf_instant_ok ) {
+                $cf_frequency = 'daily'; // What the site actually gets without Pro.
+            }
+            $cf_frequencies = array(
+                'weekly'  => __( 'Weekly', 'cookieflame' ),
+                'daily'   => __( 'Daily', 'cookieflame' ),
+                'instant' => $cf_instant_ok ? __( 'Instantly', 'cookieflame' ) : __( 'Instantly (Pro)', 'cookieflame' ),
+                'off'     => __( 'Off', 'cookieflame' ),
             );
-            // Dropdown ordering: fastest at top, then slower cadences,
-            // with Off at the very bottom as the "I don't want this"
-            // answer rather than a cadence choice. Off is excluded from
-            // the ordered list and re-appended at the end.
-            $cf_dropdown_order = array( 15, 60, 240, 1440, 10080 );
-            $cf_ordered_buckets = array();
-            $cf_buckets_by_minutes = array();
-            foreach ( $buckets as $cf_b ) {
-                $cf_buckets_by_minutes[ $cf_b['minutes'] ] = $cf_b;
-            }
-            foreach ( $cf_dropdown_order as $cf_m ) {
-                if ( isset( $cf_buckets_by_minutes[ $cf_m ] ) ) {
-                    $cf_ordered_buckets[] = $cf_buckets_by_minutes[ $cf_m ];
-                }
-            }
-            if ( isset( $cf_buckets_by_minutes[ 0 ] ) ) {
-                $cf_ordered_buckets[] = $cf_buckets_by_minutes[ 0 ];
-            }
-            $cf_is_premium = cookieflame_is_premium();
             ?>
 
@@ -5075 +5342 @@
                     <tr>
                         <th scope="row">
-                            <label for="cf-admin-digest-interval" title="<?php esc_attr_e( 'How often CookieFlame refreshes the cookie list and sends digest alerts. Shorter cadences surface new cookies sooner; longer cadences group changes into a single summary.', 'cookieflame' ); ?>"><?php esc_html_e( 'Update interval', 'cookieflame' ); ?></label>
+                            <label for="cf-admin-email-frequency"><?php esc_html_e( 'Email me about changes', 'cookieflame' ); ?></label>
                         </th>
                         <td>
-                            <select id="cf-admin-digest-interval" name="digest_interval">
-                                <?php foreach ( $cf_ordered_buckets as $cf_b ) :
-                                    $cf_min   = intval( $cf_b['minutes'] );
-                                    $cf_tier  = (string) ( $cf_b['tier'] ?? 'free' );
-                                    $cf_label = $bucket_label[ $cf_min ] ?? ( $cf_min . ' min' );
-                                    $cf_is_pro_tier = ( 'pro' === $cf_tier );
-                                    $cf_disabled    = ( $cf_is_pro_tier && ! $cf_is_premium );
-                                    if ( $cf_is_pro_tier ) {
-                                        /* translators: %s: human-readable interval label, e.g. "15 minutes" */
-                                        $cf_label = sprintf( __( '%s (Pro)', 'cookieflame' ), $cf_label );
-                                    }
-                                    ?>
-                                    <option value="<?php echo esc_attr( $cf_min ); ?>"<?php
-                                        selected( $current_mins, $cf_min );
-                                        disabled( $cf_disabled, true );
+                            <select id="cf-admin-email-frequency" name="email_frequency">
+                                <?php foreach ( $cf_frequencies as $cf_value => $cf_label ) : ?>
+                                    <option value="<?php echo esc_attr( $cf_value ); ?>"<?php
+                                        selected( $cf_frequency, $cf_value );
+                                        disabled( 'instant' === $cf_value && ! $cf_instant_ok, true );
                                     ?>><?php echo esc_html( $cf_label ); ?></option>
                                 <?php endforeach; ?>
                             </select>
-                            <p class="description"><?php esc_html_e( 'Pro intervals are visible above so you can see what an upgrade adds. They unlock when CookieFlame Pro is active.', 'cookieflame' ); ?></p>
+                            <p class="description"><?php esc_html_e( 'One email lists every new cookie found since the last one. Nothing is sent when there is nothing new.', 'cookieflame' ); ?></p>
                             <?php if ( ! $cf_is_premium ) : ?>
-                            <p class="description"><a href="https://cookieflame.com/pricing" target="_blank"><?php esc_html_e( 'Upgrade to CookieFlame Pro', 'cookieflame' ); ?></a></p>
+                            <p class="description"><?php esc_html_e( 'Instant emails come with CookieFlame Pro.', 'cookieflame' ); ?> <a href="https://cookieflame.com/pricing" target="_blank"><?php esc_html_e( 'Upgrade to CookieFlame Pro', 'cookieflame' ); ?></a></p>
                             <?php endif; ?>
                         </td>
@@ -5113 +5370 @@
                 <p style="display:flex;align-items:center;gap:14px;flex-wrap:wrap;">
                     <?php submit_button( __( 'Save Cookie Monitoring Settings', 'cookieflame' ), 'primary', 'submit', false ); ?>
-                    <span class="description" style="margin:0;"><?php esc_html_e( 'Clear your page cache after saving so visitors pick up the new beacon configuration.', 'cookieflame' ); ?></span>
                 </p>
             </form>
@@ -5123 +5379 @@
             <div class="cf-admin-card">
                 <h2><?php esc_html_e( 'Banner Preview', 'cookieflame' ); ?></h2>
-                <p><?php esc_html_e( 'Preview how the consent banner appears to visitors in different regions. Select a region and theme to see the exact banner they would see.', 'cookieflame' ); ?></p>
+                <p><?php esc_html_e( 'Choose a region and theme to see the banner those visitors get.', 'cookieflame' ); ?></p>
 
                 <div style="display:flex;gap:16px;flex-wrap:wrap;margin:20px 0;">
                     <div>
                         <label style="font-size:12px;font-weight:600;text-transform:uppercase;letter-spacing:.5px;color:#50575e;display:block;margin-bottom:6px;"><?php esc_html_e( 'Region', 'cookieflame' ); ?></label>
-                        <select id="cf-admin-preview-region" style="min-width:200px;padding:8px 12px;border-radius:6px;border:1px solid #dcdcde;">
+                        <select id="cf-admin-preview-region" style="min-width:200px;padding:8px 36px 8px 12px;border-radius:6px;border:1px solid #dcdcde;">
                             <option value="gdpr"><?php esc_html_e( 'GDPR / Opt-in (EU, EEA, UK, Brazil, South Africa, Switzerland)', 'cookieflame' ); ?></option>
                             <option value="ccpa"><?php esc_html_e( 'CCPA / Opt-out (United States)', 'cookieflame' ); ?></option>
@@ -5136 +5392 @@
                     <div>
                         <label style="font-size:12px;font-weight:600;text-transform:uppercase;letter-spacing:.5px;color:#50575e;display:block;margin-bottom:6px;"><?php esc_html_e( 'Theme', 'cookieflame' ); ?></label>
-                        <select id="cf-admin-preview-theme" style="min-width:200px;padding:8px 12px;border-radius:6px;border:1px solid #dcdcde;">
+                        <select id="cf-admin-preview-theme" style="min-width:200px;padding:8px 36px 8px 12px;border-radius:6px;border:1px solid #dcdcde;">
                             <option value="light"><?php esc_html_e( 'Light', 'cookieflame' ); ?></option>
                             <option value="dark"><?php esc_html_e( 'Dark', 'cookieflame' ); ?></option>
                         </select>
                     </div>
+                    <div id="cf-admin-preview-reject-wrap" style="align-self:flex-end;padding-bottom:8px;">
+                        <label><input type="checkbox" id="cf-admin-preview-reject" /> <?php esc_html_e( 'Show "Decline all" on the first screen', 'cookieflame' ); ?></label>
+                    </div>
+                    <div id="cf-admin-preview-gpc-wrap" style="align-self:flex-end;padding-bottom:8px;display:none;">
+                        <label><input type="checkbox" id="cf-admin-preview-gpc" /> <?php esc_html_e( 'Visitor\'s browser sends Global Privacy Control', 'cookieflame' ); ?></label>
+                    </div>
                 </div>
-
-                <div style="margin-top:8px;font-size:12px;color:#888;line-height:1.8;">
-                    <strong><?php esc_html_e( 'GDPR / Opt-in:', 'cookieflame' ); ?></strong>
-                    <?php esc_html_e( 'Full consent banner with Accept All, Decline All, and Manage Preferences. Visitors must opt in before non-essential cookies are set.', 'cookieflame' ); ?><br />
-                    <span style="color:#aaa;"><?php esc_html_e( 'Countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden (EU); Iceland, Liechtenstein, Norway (EEA); United Kingdom, Guernsey, Jersey, Isle of Man (UK); Switzerland (revFADP); Brazil (LGPD); South Africa (POPIA).', 'cookieflame' ); ?></span><br /><br />
-                    <strong><?php esc_html_e( 'CCPA / Opt-out:', 'cookieflame' ); ?></strong>
-                    <?php esc_html_e( 'Compact notice bar with a "Do Not Sell My Personal Information" link. All cookies are granted by default. The visitor can opt out of the sale or sharing of personal data. If Global Privacy Control (GPC) is detected in the browser, marketing cookies are automatically suppressed.', 'cookieflame' ); ?><br />
-                    <span style="color:#aaa;"><?php esc_html_e( 'Countries: United States (CCPA/CPRA applies to California residents; GPC is legally binding in 12+ states including California, Colorado, Connecticut, Texas, Montana, Oregon, and others).', 'cookieflame' ); ?></span><br /><br />
-                    <strong><?php esc_html_e( 'No banner:', 'cookieflame' ); ?></strong>
-                    <?php esc_html_e( 'No consent banner is shown. All cookies are auto-granted. The cookie icon appears in the bottom-left corner so visitors can manage preferences if they choose. This applies to visitors in countries not covered by the regions above.', 'cookieflame' ); ?>
+                <p class="description" id="cf-admin-preview-reject-note" style="margin-top:-8px;"><?php esc_html_e( 'The "Decline all" box here only changes the preview. To change your banner, use the setting on the Settings tab.', 'cookieflame' ); ?></p>
+
+                <div id="cf-admin-preview-container" style="position:relative;border-radius:12px;overflow:hidden;margin-top:16px;"></div>
+
+                <div id="cf-admin-preview-notes" style="margin-top:16px;font-size:12px;color:#888;line-height:1.8;">
+                    <p data-region="gdpr" style="margin:0;"><strong><?php esc_html_e( 'GDPR / Opt-in:', 'cookieflame' ); ?></strong>
+                    <?php esc_html_e( 'Full consent banner with Accept All and Manage preferences. Decline All is under Manage preferences, and you can also show it next to Accept All with the setting on the Settings tab. Visitors must opt in before non-essential cookies are set.', 'cookieflame' ); ?><br />
+                    <span style="color:#aaa;"><?php esc_html_e( 'Countries: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden (EU); Iceland, Liechtenstein, Norway (EEA); United Kingdom, Guernsey, Jersey, Isle of Man (UK); Switzerland (revFADP); Brazil (LGPD); South Africa (POPIA).', 'cookieflame' ); ?></span></p>
+                    <p data-region="ccpa" style="margin:0;display:none;"><strong><?php esc_html_e( 'CCPA / Opt-out:', 'cookieflame' ); ?></strong>
+                    <?php esc_html_e( 'Compact notice with a "Do Not Sell or Share My Personal Information" link, which opens a real opt-out choice. Cookies are allowed by default. If the visitor\'s browser sends Global Privacy Control (GPC), they are opted out of selling and sharing straight away: Marketing stays off, the notice says the signal was honoured, and OK only closes the notice. They can opt back in only through a separate choice, and a later visit without GPC keeps the opt-out.', 'cookieflame' ); ?><br />
+                    <span style="color:#aaa;"><?php esc_html_e( 'Countries: United States. The same notice covers California (CCPA/CPRA) and the other states with similar laws.', 'cookieflame' ); ?></span></p>
+                    <p data-region="none" style="margin:0;display:none;"><strong><?php esc_html_e( 'No banner:', 'cookieflame' ); ?></strong>
+                    <?php esc_html_e( 'No consent banner is shown and all cookies are allowed. Visitors can still change their choices from a [cookieflame_settings_link] link or your [cookieflame_declaration] page. This applies to visitors in countries not covered by the regions above.', 'cookieflame' ); ?></p>
                 </div>
             </div>
-
-            <div id="cf-admin-preview-container" style="position:relative;border-radius:12px;overflow:hidden;min-height:400px;margin-top:4px;">
-            </div>
         </div>
 
-        <?php
-        $opts = get_option( 'cookieflame_settings', array() );
-        $preview_config = array(
-            'privacyUrl' => $opts['privacy_url'] ?? '/privacy-policy',
-            'ccpaUrl'    => ( $opts['privacy_url'] ?? '/privacy-policy' ) . '#do-not-sell',
-        );
-        $preview_cfg_json   = wp_json_encode( $preview_config );
-        $preview_theme_json = wp_json_encode( $opts['theme'] ?? 'light' );
-        $preview_js = <<<'JS'
-(function () {
-    var regionEl = document.getElementById("cf-admin-preview-region");
-    var themeEl  = document.getElementById("cf-admin-preview-theme");
-    var container = document.getElementById("cf-admin-preview-container");
-    if (!regionEl || !themeEl || !container) return;
-
-    var cfg = __COOKIEFLAME_PREVIEW_CFG__;
-
-    var txt = {
-        title: "We value your privacy",
-        description: "We use cookies to improve your experience, analyse traffic and personalise content. You can choose which categories to allow.",
-        acceptAll: "Accept All",
-        declineAll: "Decline All",
-        savePrefs: "Save Preferences",
-        managePrefs: "Manage preferences",
-        hidePrefs: "Hide preferences",
-        ccpaText: "We use cookies and similar technologies. Under California law, you have the right to opt out of the sale of your personal information.",
-        ccpaDnsmpi: "Do Not Sell My Personal Information",
-        ccpaOk: "OK"
-    };
-
-    var categories = [
-        { id: "necessary", name: "Necessary", desc: "Required for the site to function. Cannot be disabled.", required: true },
-        { id: "preferences", name: "Preferences", desc: "Remember your settings and personalisation choices.", required: false },
-        { id: "analytics", name: "Analytics", desc: "Help us understand how visitors use the site.", required: false },
-        { id: "marketing", name: "Marketing", desc: "Used to deliver relevant ads and track campaigns.", required: false }
-    ];
-
-    function esc(s) { var d = document.createElement("div"); d.textContent = s; return d.innerHTML; }
-
-    function render() {
-        var region = regionEl.value;
-        var theme  = themeEl.value;
-        var isDark = theme === "dark";
-        var bg = isDark ? "#121212" : "#f5f5f5";
-        var bannerBg = isDark ? "#1c1c1e" : "#fff";
-        var textColor = isDark ? "#f5f5f7" : "#1d1d1f";
-        var mutedColor = isDark ? "#98989d" : "#555";
-        var borderColor = isDark ? "#2c2c2e" : "#e8e8ed";
-        var catDescColor = isDark ? "#636366" : "#888";
-        var acceptBg = isDark ? "#0a84ff" : "#0071e3";
-        var declineBg = isDark ? "#2c2c2e" : "#e8e8ed";
-        var declineColor = isDark ? "#f5f5f7" : "#1d1d1f";
-        var saveBg = isDark ? "#30d158" : "#34c759";
-        var detailsColor = isDark ? "#636366" : "#888";
-        var linkColor = isDark ? "#2997ff" : "#0071e3";
-        var toggleBg = isDark ? "#3a3a3c" : "#ccc";
-        var toggleActiveBg = isDark ? "#0a84ff" : "#0071e3";
-        var sliderBg = isDark ? "#f5f5f7" : "#fff";
-        var poweredColor = isDark ? "#888" : "#ccc";
-
-        var html = '<div style="background:' + bg + ';padding:60px 20px 20px;min-height:400px;display:flex;align-items:flex-end;justify-content:center;border-radius:12px;">';
-
-        if (region === "none") {
-            html += '<div style="text-align:center;padding:40px;color:' + mutedColor + ';font-family:-apple-system,BlinkMacSystemFont,\'Segoe UI\',Roboto,sans-serif;font-size:14px;align-self:center;">';
-            html += '<div style="font-size:48px;margin-bottom:16px;">&#x1F30D;</div>';
-            html += '<div style="font-weight:700;font-size:16px;color:' + textColor + ';margin-bottom:8px;">No banner shown</div>';
-            html += '<div>Visitors outside the regulated regions (EU/EEA, UK, US,<br>Switzerland, Brazil, South Africa) see no consent banner.<br>All cookies are auto-granted. The cookie icon appears in the<br>bottom-left corner so they can manage preferences if they choose.</div>';
-            html += '<div style="margin-top:24px;width:48px;height:48px;border-radius:50%;background:' + (isDark ? "#f5f5f7" : "#1d1d1f") + ';display:inline-flex;align-items:center;justify-content:center;">';
-            html += '<svg width="24" height="24" viewBox="0 0 38 38" fill="none"><path d="M19.1 1.16c-.06-.42-.38-.77-.8-.83A11.8 11.8 0 0 0 13.28 1.2L7.5 4.3A11.8 11.8 0 0 0 3.95 7.98L1.09 13.9A11.8 11.8 0 0 0 .38 18.96l1.13 6.47a11.8 11.8 0 0 0 3.53 4.99l4.71 4.56a11.8 11.8 0 0 0 4.59 2.24l6.48.91a11.8 11.8 0 0 0 5.52-.89l5.78-3.09a11.8 11.8 0 0 0 3.55-3.69l2.87-5.9a11.8 11.8 0 0 0 .71-5.08c-.07-.41-.42-.73-.83-.79a14.8 14.8 0 0 1-8.16-7.61c-.14-.59-.63-1.05-1.23-1.14A14.8 14.8 0 0 1 19.1 1.16ZM15.25 10.25a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Zm-5 15a2.5 2.5 0 1 1 5 0 2.5 2.5 0 0 1-5 0Zm17.5-5a2.5 2.5 0 1 1 0 5 2.5 2.5 0 0 1 0-5Z" fill="' + (isDark ? "#1d1d1f" : "#fff") + '"/></svg>';
-            html += '</div>';
-            html += '</div>';
-            html += '</div>';
-            container.innerHTML = html;
-            return;
-        }
-
-        if (region === "ccpa") {
-            html += '<div style="position:relative;bottom:0;left:0;right:0;width:100%;background:' + bannerBg + ';box-shadow:0 -8px 40px rgba(0,0,0,.15);border-radius:20px 20px 0 0;font-family:-apple-system,BlinkMacSystemFont,\'Segoe UI\',Roboto,sans-serif;font-size:14px;color:' + textColor + ';">';
-            html += '<div style="max-width:720px;margin:0 auto;padding:20px 32px;display:flex;align-items:center;gap:20px;flex-wrap:wrap;">';
-            html += '<div style="flex:1;min-width:280px;"><p style="margin:0;color:' + mutedColor + ';">' + esc(txt.ccpaText) + '</p></div>';
-            html += '<div style="display:flex;gap:10px;align-items:center;flex-shrink:0;">';
-            html += '<a href="' + esc(cfg.ccpaUrl) + '" style="color:' + linkColor + ';text-decoration:underline;font-size:13px;font-weight:500;white-space:nowrap;">' + esc(txt.ccpaDnsmpi) + '</a>';
-            html += '<button style="display:inline-flex;align-items:center;justify-content:center;border-radius:12px;border:none;font-weight:700;cursor:pointer;background:' + acceptBg + ';color:#fff;font-size:15px;padding:14px 32px;box-shadow:0 2px 8px rgba(0,113,227,.3);">' + esc(txt.ccpaOk) + '</button>';
-            html += '</div></div>';
-            html += '<div style="text-align:center;padding:0 0 12px;font-size:11px;color:' + poweredColor + ';"><a href="https://www.cookieflame.com" target="_blank" rel="noopener" style="color:' + poweredColor + ';text-decoration:none;">Powered by CookieFlame</a></div>';
-            html += '</div>';
-            html += '</div>';
-            container.innerHTML = html;
-            return;
-        }
-
-        html += '<div style="position:relative;bottom:0;left:0;right:0;width:100%;background:' + bannerBg + ';box-shadow:0 -8px 40px rgba(0,0,0,.15);border-radius:20px 20px 0 0;font-family:-apple-system,BlinkMacSystemFont,\'Segoe UI\',Roboto,sans-serif;font-size:14px;color:' + textColor + ';">';
-        html += '<div style="max-width:720px;margin:0 auto;padding:32px 32px 20px;">';
-        html += '<p style="font-size:20px;font-weight:800;margin:0 0 8px;letter-spacing:-.3px;">' + esc(txt.title) + '</p>';
-        html += '<p style="margin:0 0 20px;color:' + mutedColor + ';font-size:14px;line-height:1.6;">' + esc(txt.description) + ' <a href="' + esc(cfg.privacyUrl) + '" style="color:' + linkColor + ';text-decoration:none;font-weight:500;">Privacy Policy</a></p>';
-
-        html += '<div style="display:flex;gap:10px;flex-wrap:wrap;align-items:center;margin-bottom:16px;">';
-        html += '<button style="display:inline-flex;align-items:center;justify-content:center;border-radius:12px;border:none;font-weight:700;cursor:pointer;background:' + acceptBg + ';color:#fff;font-size:15px;padding:14px 32px;box-shadow:0 2px 8px rgba(0,113,227,.3);">' + esc(txt.acceptAll) + '</button>';
-        html += '<button id="cf-admin-preview-manage" style="background:transparent;color:' + detailsColor + ';padding:11px 4px;font-weight:500;font-size:13px;border:none;cursor:pointer;">' + esc(txt.managePrefs) + '</button>';
-        html += '</div>';
-
-        html += '<div id="cf-admin-preview-cats" style="display:none;margin:0 0 16px;border:1px solid ' + borderColor + ';border-radius:14px;overflow:hidden;">';
-        for (var i = 0; i < categories.length; i++) {
-            var cat = categories[i];
-            var isLast = i === categories.length - 1;
-            var checkedAttr = cat.required ? " checked disabled" : "";
-            var alwaysOn = cat.required ? ' <span style="font-weight:400;font-size:11px;color:' + (isDark ? "#48484a" : "#aaa") + ';">(always on)</span>' : "";
-
-            html += '<div style="padding:16px 20px;' + (isLast ? "" : "border-bottom:1px solid " + borderColor + ";") + 'display:flex;justify-content:space-between;align-items:center;gap:16px;">';
-            html += '<div><div style="font-weight:700;font-size:14px;">' + esc(cat.name) + alwaysOn + '</div>';
-            html += '<div style="font-size:12px;color:' + catDescColor + ';margin-top:3px;">' + esc(cat.desc) + '</div></div>';
-            html += '<label style="position:relative;width:46px;height:26px;flex-shrink:0;display:block;">';
-            html += '<input type="checkbox"' + checkedAttr + ' style="opacity:0;width:0;height:0;position:absolute;" />';
-            html += '<span style="position:absolute;inset:0;background:' + (cat.required ? toggleActiveBg + ";opacity:.5" : toggleBg) + ';border-radius:26px;cursor:' + (cat.required ? "default" : "pointer") + ';transition:background .2s;"></span>';
-            html += '<span style="position:absolute;width:20px;height:20px;left:' + (cat.required ? "23px" : "3px") + ';bottom:3px;background:' + sliderBg + ';border-radius:50%;box-shadow:0 1px 3px rgba(0,0,0,.15);transition:transform .2s;"></span>';
-            html += '</label></div>';
-        }
-        html += '</div>';
-
-        html += '<div id="cf-admin-preview-pref-btns" style="display:none;gap:10px;flex-wrap:wrap;align-items:center;margin-bottom:8px;">';
-        html += '<button style="display:inline-flex;align-items:center;justify-content:center;border-radius:12px;border:none;font-weight:700;cursor:pointer;background:' + saveBg + ';color:#fff;font-size:14px;padding:13px 28px;box-shadow:0 2px 8px rgba(52,199,89,.3);">' + esc(txt.savePrefs) + '</button>';
-        html += '<button style="display:inline-flex;align-items:center;justify-content:center;border-radius:12px;border:none;font-weight:700;cursor:pointer;background:' + declineBg + ';color:' + declineColor + ';font-size:13px;padding:11px 22px;">' + esc(txt.declineAll) + '</button>';
-        html += '</div>';
-
-        html += '</div>';
-        html += '<div style="text-align:center;padding:0 0 16px;font-size:11px;color:' + poweredColor + ';"><a href="https://www.cookieflame.com" target="_blank" rel="noopener" style="color:' + poweredColor + ';text-decoration:none;">Powered by CookieFlame</a></div>';
-        html += '</div>';
-        html += '</div>';
-
-        container.innerHTML = html;
-
-        var manageBtn = document.getElementById("cf-admin-preview-manage");
-        var catsEl = document.getElementById("cf-admin-preview-cats");
-        var prefBtnsEl = document.getElementById("cf-admin-preview-pref-btns");
-        if (manageBtn && catsEl) {
-            manageBtn.addEventListener("click", function () {
-                var open = catsEl.style.display === "none";
-                catsEl.style.display = open ? "block" : "none";
-                if (prefBtnsEl) prefBtnsEl.style.display = open ? "flex" : "none";
-                manageBtn.textContent = open ? txt.hidePrefs : txt.managePrefs;
-            });
-        }
-    }
-
-    render();
-    regionEl.addEventListener("change", render);
-    themeEl.addEventListener("change", render);
-
-    themeEl.value = __COOKIEFLAME_PREVIEW_THEME__;
-    render();
-})();
-JS;
-        $preview_js = str_replace(
-            array( '__COOKIEFLAME_PREVIEW_CFG__', '__COOKIEFLAME_PREVIEW_THEME__' ),
-            array( $preview_cfg_json, $preview_theme_json ),
-            $preview_js
-        );
-        wp_print_inline_script_tag( $preview_js );
-        ?>
 
         <?php endif; ?>

cookieflame/trunk/readme.txt

@@ -5 +5 @@
 Tested up to: 7.1
 Requires PHP: 8.0
-Stable tag: 5.3.0
+Stable tag: 5.4.0
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
-Cookie consent for WordPress that finds cookies automatically. Runs continuously, no external service, correct banner for GDPR, CCPA, LGPD, POPIA.
+Cookie consent for WordPress that finds cookies automatically. Self-hosted, with the right banner for GDPR, CCPA, LGPD and POPIA visitors.
 
 == Description ==
 
-CookieFlame is a cookie consent plugin for WordPress that does three things most other free plugins do not. It finds the cookies on your site automatically by watching real visitor sessions. It runs entirely on your own server with no outside connections. And it shows the right banner for each visitor based on where they are, rather than showing a single GDPR banner to the whole world.
+CookieFlame is a cookie consent plugin that finds your site's cookies for you, runs on your own server, and shows each visitor the banner their region requires. Full details are at [cookieflame.com](https://cookieflame.com).
 
-It is built by [Zoobu] and the full product site is at [cookieflame.com](https://cookieflame.com).
+= Finds cookies for you =
 
-= 🔍 Cookie discovery, continuously =
+* **Watch for new cookies:** your visitors' browsers report cookies as they browse, so a new plugin's or tag's cookies appear in the Cookie Manager without you scanning. Get an email about changes weekly, daily, or not at all.
+* **Cookie Discovery:** for a full list now, browse your own site with every cookie allowed for your browser only. It uses your own browser.
 
-Most consent plugins expect you to know which cookies your site sets. CookieFlame does not. A lightweight beacon watches real visitor sessions in the background and reports any cookies it has not seen before. New plugin installed? Its cookies surface automatically. Tracking tag changed? Picked up next time a visitor triggers it. No scheduled scans, no headless browsers, no external scanning service.
+= The right banner for each region =
 
-For a one-off inventory you can also run an on-demand Discovery scan from the admin. Browse your own site as logged in, watch the discovery bar accumulate cookies and detected services, click Finish when done.
+* UK, EU/EEA, Switzerland, Brazil and South Africa: an opt-in banner with Accept All and Manage preferences. You can also show Decline All on the first screen (off by default).
+* United States: a short notice with a "Do Not Sell or Share My Personal Information" link that opens a real opt-out choice.
+* Everywhere else: no banner.
 
-= 🌍 Correct behaviour per region =
+Country comes from CDN headers such as Cloudflare's, or a free MaxMind database you upload, with the time zone as a fallback. If none works, the opt-in banner is shown.
 
-CookieFlame detects visitor country and shows the banner that region actually requires:
+= Global Privacy Control =
 
-* EU, UK, EEA, Switzerland: full two-step GDPR opt-in banner with Accept, Manage Preferences, and Decline
-* California and other US states with similar laws: compact CCPA opt-out notice with a Do Not Sell link
-* Brazil (LGPD) and South Africa (POPIA): GDPR-style opt-in banner
-* Everywhere else: no banner, all cookies auto-granted
+A browser that sends Global Privacy Control (GPC) is opted out of selling and sharing straight away: marketing cookies stay off and Google's ad signals are denied. US visitors see that the signal was honoured, and OK only closes the notice. The opt-out is saved, so a later visit without GPC keeps it. A visitor can opt back in only through a separate, clear choice.
 
-Detection uses three layers in order: Cloudflare and other CDN country headers first (zero latency, works with every caching setup), then a local MaxMind GeoLite2 database if uploaded, then a browser timezone heuristic as a last-resort fallback. If all three fail, the plugin defaults to GDPR opt-in for safety rather than silently granting consent.
+= Blocks trackers before consent =
 
-= 🔒 No outside connections =
+Tracking scripts are rewritten on your server before the page is sent, so blocking works with WP Rocket, LiteSpeed, Cloudflare APO and other caches. Built-in patterns cover Google Analytics, Google Ads, Google Tag Manager, Microsoft Ads, Meta, X (Twitter), LinkedIn, Pinterest, Reddit and TikTok. Cookies you classify get matching rules automatically.
 
-CookieFlame does not load JavaScript from any content delivery network, does not call any geo API, does not phone home. Every part of the consent flow runs on your server and in the visitor's browser. The only optional outbound request is Google Tag Manager itself, if you enter a GTM container ID in the settings (see the External services section below).
+YouTube, Vimeo, Google Maps, Spotify, SoundCloud, Dailymotion and Elementor videos show a click-to-load placeholder until the visitor consents.
 
-This matters because a consent tool that itself sets third-party cookies is an awkward contradiction, and because self-hosted plugins keep working during outages of services you did not choose to depend on.
+= Google Consent Mode v2 =
 
-= 🚫 Server-side script blocking =
+All Google consent signals start as denied before any tag runs and update the moment a visitor chooses. Returning visitors' choices are restored before Google Tag Manager loads.
 
-When a visitor has not granted consent, CookieFlame rewrites tracking scripts in the HTML output so the browser does not execute them. This happens before the page leaves your server, which means it works with any caching stack: WP Rocket, LiteSpeed, Cloudflare APO, W3 Total Cache, and others all hold the correct pre-modified HTML. A lighter JavaScript layer handles scripts injected later by GTM or other plugins.
+= For developers =
 
-Known trackers are blocked from the moment you install the plugin. Ten services ship with built-in patterns: Google Analytics, Google Ads, Google Tag Manager, Microsoft Ads, Meta and Facebook, Twitter and X, LinkedIn, Pinterest, Reddit, TikTok. Anything else you classify in the Cookie Manager gets a matching block rule generated automatically.
+* Events: cc:ready, cc:update, cc:accept-all, cc:decline-all, cc:save and cc:banner-rendered.
+* JavaScript API: CookieConsent.getState(), show(), showSettings() and more.
+* [cookieflame_settings_link] shortcode, or the class cc-open-settings on any link, to reopen a visitor's choices.
+* CSS custom properties (--cc-accent, --cc-bg, --cc-radius, --cc-font and others) to restyle the banner.
+* Filters cookieflame_frontend_config and cookieflame_digest_email, and the action cookieflame_settings_sections.
+* An optional consent log endpoint for your own audit trail.
 
-= 🪟 Iframe facades =
+= CookieFlame Pro =
 
-YouTube, Vimeo, Google Maps, Spotify, SoundCloud, Dailymotion, and Elementor video widgets are replaced with click-to-accept placeholders until the visitor grants consent. The iframe source is stripped synchronously before the embed has a chance to contact its origin.
+Pro identifies and classifies cookies automatically, creates the blocking rules, and adds instant emails. See [cookieflame.com](https://cookieflame.com).
 
-= 📊 Google Consent Mode v2 =
+= Compliance note =
 
-All seven Google consent signals are managed automatically and set to denied by default before any tag runs. When a visitor grants consent, the correct signals update immediately. Returning visitors keep their stored choices, with the signals restored before GTM loads (so the first dataLayer push is already correct).
-
-Works with a GTM container ID you paste into the settings. No separate GTM consent template, no additional configuration. The plugin also injects the body noscript tag in the correct position.
-
-= 🛡️ Global Privacy Control =
-
-GPC is detected automatically and suppresses marketing consent for CCPA visitors. Required by California, Colorado, Connecticut, Texas, and nine other US states. Turning GPC off later restores the visitor's original stored choice rather than overwriting it.
-
-= 📜 IAB TCF v2.2 =
-
-A TCF v2.2 stub is registered on every page so ad-tech vendors that need TCF signals can read them.
-
-= 🚀 Lightweight and framework-free =
-
-The frontend JavaScript is a single 37 KB file (12 KB gzipped) with no jQuery and no framework dependencies. A separate facades bundle is only loaded on pages that actually contain a blockable embed. The Discovery bundle only loads for administrators during an active scan.
-
-= 👨‍💻 Developer-friendly =
-
-* Event API with CustomEvents: cc:ready, cc:update, cc:accept-all, cc:decline-all, cc:save
-* Public JavaScript API for reading consent state and showing the banner on demand
-* Per-category onAccept and onReject callbacks
-* Extension points via WordPress filters and actions
-* Optional consent log endpoint for audit trails
-
-= ✨ Want automatic classification? =
-
-CookieFlame Pro adds automatic cookie classification using a central database and AI. You click Auto-Identify All, and the plugin classifies every unclassified cookie with vendor, category, and purpose, then generates the blocking rules automatically. Flat annual pricing by number of sites, no pageview limits. Learn more at [cookieflame.com](https://cookieflame.com).
-
-= 📋 Compliance note =
-
-CookieFlame provides tools that help support compliance with GDPR, CCPA, LGPD, POPIA and similar regulations. Compliance itself is the site owner's responsibility and depends on how the plugin is configured. For legal advice, consult a qualified professional.
+CookieFlame helps with GDPR, CCPA, LGPD, POPIA and similar laws; how you set it up is your responsibility. For legal advice, ask a qualified professional.
 
 == Installation ==
 
-1. Upload the `cookieflame` folder to `/wp-content/plugins/`, or install via Plugins > Add New in the WordPress admin
-2. Activate the plugin through the Plugins menu
-3. Go to **CookieFlame** in the admin menu to review settings
+1. Install from Plugins > Add New, or upload the `cookieflame` folder to `/wp-content/plugins/`.
+2. Activate the plugin.
+3. Open **CookieFlame** in the admin menu to check the settings.
 
-That is it. The plugin works immediately with sensible defaults. The ten built-in tracking services are blocked before any visitor can trigger them, and the banner shows correctly for each region.
-
-For best geo detection, either run Cloudflare (the plugin reads the CF-IPCountry header automatically) or upload a free MaxMind GeoLite2 database on the Geo Detection tab. Neither is required.
+It works straight away. For the best country detection, use Cloudflare or upload a free MaxMind database on the Geo Detection tab.
 
 == Frequently Asked Questions ==
@@ -98 +71 @@
 = Do I need to know which cookies my site sets? =
 
-No. CookieFlame watches real visitor sessions and reports new cookies to the Cookie Manager automatically. You classify them when you are ready, and the plugin generates the blocking rules for you.
+No. Watch for new cookies lists them as your visitors' browsers report them, and Cookie Discovery finds them on demand. You classify them when you are ready.
 
-= Does this work with Google Tag Manager? =
+= Does it work with Google Tag Manager and caching plugins? =
 
-Yes. Enter your GTM container ID on the Tag Managers tab and the plugin injects both the head script and body noscript tag in the correct positions. All GTM tags that respect Google Consent Mode will see the denied state on load and wait for consent.
+Yes. Blocking happens in the HTML before it is cached. Turn off Cloudflare Rocket Loader; the plugin warns you if it is on.
 
-= Does this work with Cloudflare, WP Rocket, and other caching setups? =
+= What do US visitors see? =
 
-Yes. Script blocking runs server-side in the PHP output buffer, so the cached HTML already has the correct tags rewritten. Cloudflare is specifically supported for geo detection via the CF-IPCountry header on all plans including free.
+A short notice. Cookies are allowed by default because US laws use an opt-out model. The "Do Not Sell or Share My Personal Information" link opens a choice to opt out. Put [cookieflame_settings_link] in your footer so visitors can reach it again later.
 
-One exception: Cloudflare Rocket Loader rewrites scripts at the edge after PHP has run, which defeats the blocking layer. Rocket Loader must be disabled when using CookieFlame. The plugin detects this and shows a warning if it is active.
+= Can I show "Decline all" on the first screen? =
 
-= What happens for US visitors? =
+Yes. Turn on "Show 'Decline all' on the first screen" on the Settings tab. It appears only on the opt-in banner, never on the US notice.
 
-US visitors see a compact CCPA opt-out notice at the bottom of the page with a Do Not Sell My Personal Information link. Cookies are auto-granted by default because CCPA uses an opt-out model, and the visitor can revoke consent through the notice.
+= Can I change the banner text? =
 
-= What happens for visitors outside the regulated regions? =
-
-No banner is shown and all cookies are auto-granted. CookieFlame does not show GDPR banners to visitors whose region does not require them.
-
-= Does the plugin contact any external service? =
-
-By default, no. Geo detection reads CDN headers first, then a local MaxMind database if you have uploaded one, then the browser timezone as a last resort. No external geo API is called. The plugin does not load scripts from any CDN and does not phone home.
-
-The one optional external request is Google Tag Manager, but only if you have entered a GTM container ID in the settings. See the External services section for full details.
-
-= Does it handle Global Privacy Control (GPC)? =
-
-Yes. GPC is required by twelve US states and the plugin detects the browser signal automatically. For CCPA visitors with GPC active, marketing consent is suppressed before any tag runs. Turning GPC off later restores the visitor's original choice.
-
-= Can I customise the banner text and colours? =
-
-Yes. Every string shown to visitors is editable through the Settings tab, and the banner supports both light and dark themes. For per-language versions, use WPML or Polylang with the standard WordPress translation pipeline.
-
-= What is CookieFlame Pro? =
-
-Pro adds automatic cookie classification. Instead of classifying each cookie manually, you click Auto-Identify All and the plugin uses a central database of known cookies plus AI to classify them with vendor, category, and purpose. Pro also adds tighter monitoring intervals, a more detailed digest email, and automatic MaxMind database updates. Pricing is flat annual by site count with no pageview limits. See [cookieflame.com](https://cookieflame.com) for details.
+Not yet from the settings. The banner is in English, with light and dark themes. Developers can change the text and colours with the cookieflame_frontend_config filter and the --cc-* CSS properties.
 
 = Is my visitors' data safe? =
 
-CookieFlame does not collect visitor data. IP addresses are hashed for rate-limiting and never stored raw. Cookie values are never transmitted, only their name and a shape classification (uuid, timestamp, and similar) used for identification. The plugin stores consent decisions in a first-party cookie on the visitor's own browser.
+CookieFlame collects no visitor data. Cookie values are never sent, only names. IP addresses are hashed for rate limiting and never stored. Choices are kept in a first-party cookie in the visitor's browser.
 
 == External services ==
 
-CookieFlame is a self-hosted plugin. By default it does not contact any external service from the visitor's browser, and it does not phone home.
+CookieFlame does not phone home. These requests happen only in the cases described.
 
-There is one optional external interaction, only if the site owner configures it.
+**Google Tag Manager (optional).** If you enter a container ID on the Tag Managers tab, Google's script (https://www.googletagmanager.com/gtm.js) loads on every page, except for visitors you exclude from tracking. Tags inside it follow the visitor's Consent Mode choices. Sent: the container ID and the browser's standard request data (IP address, user agent, page URL). [Terms](https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/), [privacy policy](https://policies.google.com/privacy).
 
-**Google Tag Manager (optional)**
+**Microsoft UET (optional).** If you enter a UET tag ID, Microsoft's loader (https://bat.bing.com/bat.js) loads on every page, except for visitors you exclude from tracking. It records nothing until the visitor allows Marketing. Sent: the tag ID and the browser's standard request data. [Microsoft Advertising agreement](https://about.ads.microsoft.com/en/resources/policies/microsoft-advertising-agreement), [privacy statement](https://privacy.microsoft.com/en-gb/privacystatement).
 
-If the site owner enters a Google Tag Manager container ID on the CookieFlame Tag Managers settings tab, CookieFlame injects the standard Google Tag Manager script (https://www.googletagmanager.com/gtm.js) into the site front-end under the visitor's consent. This script is provided by Google and is loaded from Google's servers when the page is viewed.
+**YouTube thumbnails.** When a page has a YouTube embed that is waiting for consent, its placeholder shows the video's thumbnail from img.youtube.com. Sent: the video ID and the browser's standard request data. [YouTube terms](https://www.youtube.com/t/terms), [Google privacy policy](https://policies.google.com/privacy).
 
-* What is sent: standard Google Tag Manager request, including the container ID and whatever browser request data Google receives for any embed.
-* When: only if the admin has set a GTM container ID, and only when a visitor loads a page and has consented.
-* Google Tag Manager terms: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/
-* Google privacy policy: https://policies.google.com/privacy
+**Consent log endpoint (optional).** If you enter a URL in the Consent Log Endpoint setting, each consent choice is sent there from the visitor's browser as JSON: an anonymous ID, time, action, the choice per category, region, country code, page URL, user agent, the GPC flag, consent version and plugin version. No cookie values or IP address are in it. You choose the destination and are responsible for it.
 
-If no GTM container ID is set, no request is made.
-
-**Microsoft UET (Bing Ads tag, optional)**
-
-If the site owner enters a Microsoft UET tag ID on the CookieFlame Tag Managers settings tab, CookieFlame injects the standard Microsoft UET loader script (https://bat.bing.com/bat.js) into the site front-end. The loader is provided by Microsoft and is loaded from Microsoft's servers when the page is viewed.
-
-The UET runtime reads Microsoft Consent Mode v2 signals from the dataLayer that CookieFlame already manages, so the loader honours visitor consent internally: tracking events do not record until the visitor has granted Marketing consent. The loader script itself is fetched on every page load while a UET tag ID is configured.
-
-* What is sent: the UET tag ID, plus the standard browser request data Microsoft receives for any third-party script load (visitor IP, user agent, page URL, referer).
-* When: every page load while a UET tag ID is configured, except for visitors whose browser sends the Do Not Track header in which case CookieFlame suppresses the injection entirely.
-* Microsoft Advertising agreement: https://about.ads.microsoft.com/en/resources/policies/microsoft-advertising-agreement
-* Microsoft privacy statement: https://privacy.microsoft.com/en-gb/privacystatement
-
-If no UET tag ID is set, no request is made.
-
-**Consent log endpoint (optional, site-owner-nominated webhook)**
-
-If the site owner enters a URL in the Consent Log endpoint setting, CookieFlame sends a JSON record of each consent decision to that URL from the visitor's browser via navigator.sendBeacon (with a fetch fallback for browsers without sendBeacon). The default for this setting is empty, in which case nothing is sent. The destination URL is nominated by the site owner; terms and privacy obligations for that URL are the site owner's responsibility, not CookieFlame's.
-
-* What is sent: a JSON payload containing an anonymous ID, an ISO-8601 timestamp, the action that produced the record (accept-all, decline-all, save, or one of the region-based auto-grants), the per-category consent decision (necessary, preferences, analytics, marketing), the compliance mode (gdpr, ccpa, none), the visitor country code, the page URL, the user agent string, the TCF v2.2 flag, the Global Privacy Control flag, the consent policy version, and the plugin version. No cookie values are included. No IP address is included in the payload, although the receiving endpoint will of course see the visitor IP via the underlying HTTP request, the same as any other request.
-* When: every time the visitor's consent state is set. This includes banner actions (accept-all, decline-all, save) and region-based auto-grants for visitors outside GDPR regions and for CCPA opt-out visitors.
-
-If no Consent Log endpoint URL is set, no request is made.
-
-**Domain strings in the plugin code**
-
-The plugin code contains many third-party domain names (for example, connect.facebook.net, googletagmanager.com, and similar). These are pattern strings used for local matching only. They identify scripts that may already be present on the admin's site so CookieFlame can detect them, show them to the admin in the Cookie Manager, and block them until the visitor has given consent. CookieFlame does not fetch from these domains.
+Third-party domain names in the code (such as connect.facebook.net) are only used to recognise and block scripts; they are never contacted.
 
 == Screenshots ==
 
-1. GDPR consent banner with category toggles (two-step flow)
-2. CCPA opt-out notice for US visitors
-3. Cookie Manager showing discovered cookies with their origin
-4. Cookie Discovery in progress: the discovery bar accumulates services
-5. Admin Settings tab with theme and regional behaviour controls
-6. Geo Detection tab with CDN status and MaxMind upload
-7. Tag Managers tab for GTM and Microsoft UET
+1. Opt-in banner with category toggles
+2. US notice with the "Do Not Sell or Share" link
+3. Cookie Manager listing your site's cookies
+4. Cookie Discovery in progress
+5. Settings tab
+6. Geo Detection tab
+7. Tag Managers tab
 
 == Changelog ==
 
-= 5.3.0 =
-* Cookie monitoring now ignores cookies that come with a visitor's browser rather than from your site. Some browser extensions write the "already accepted" cookies of other consent tools (such as Complianz, CookieYes, Cookiebot, OneTrust or Didomi) onto every site they visit, and these were being reported as your site's cookies. A consent tool's cookie is now ignored when that tool doesn't run on your site: its plugin isn't active, its script isn't on the page, and no script on the page wrote the cookie.
-* Cookies written by a browser extension's own code are ignored too.
-* Cookies ignored this way go on the Permanently Ignored list with the reason, and the list now shows why each cookie was ignored. Restoring one keeps it monitored from then on.
-* The Cookie Manager and the Cookie Discovery count leave these cookies out too, including ones your own browser extensions add. Cookies that came with your browser during Cookie Discovery go on the Permanently Ignored list with the reason. Cookies on the Permanently Ignored list no longer show in the Cookie Manager just because they are in your own browser.
-* On update, other consent tools' cookies that were already reported are moved to the Permanently Ignored list. Cookies you classified yourself are left alone.
-* Fixed: the "consent plugin detected" conflict warning could be set off by CookieFlame's own list of cookie names rather than by another consent plugin on the page.
-* Cookie Manager: the last column is now "Status". Each cookie shows one label for where it stands (Known, Auto-Identified, Classified, Added by you, Changed by you, or Not identified yet), and cookies that aren't identified yet say where they came from: found by your scan, reported by visitors, or seen in your own browser.
-* Cookie Manager: Remove and Ignore permanently are now one "Remove…" link that asks why. "My site doesn't use it any more" takes the cookie off your list, and it comes back if it's seen again. "It's not from my site" puts it on the Permanently Ignored list for good.
-* Cookie Manager: with CookieFlame Pro, the padlock is now a "Lock as correct" button. A locked cookie keeps its vendor, category and purpose, even when you re-identify.
-* Cookie Manager: the small help buttons beside each link are gone. Each link explains itself when you hover over it, and the Status column's help button explains every label and action.
-* Improved: when another consent tool's code is on your pages, the warning now says so in plain words ("Cookiebot found on your pages"), names the page and the text to look for, and lists where such code usually lives (plugins, page builder custom code such as Elementor > Custom Code, the theme's header, or a header and footer scripts plugin). It used to say a plugin was installed even when the code came from somewhere else.
-
-= 5.2.0 =
-* Cookie monitoring now records which script first wrote each new cookie: a third-party script's domain, or the WordPress plugin or theme that set it. Previously only the full list of third-party scripts on the page was known. Cookie values are never read or sent.
-* Cookie monitoring now checks again later in the visit, a few seconds after the visitor changes their consent choice, and when they leave the page, so cookies set after consent or after the first few seconds are found.
-* Fixed: when a page reported several new cookies at the same moment, some could be lost, because the reports overwrote each other when saving. Reports are now saved one at a time, so every new cookie is kept.
-* The cookieflame_new_cookie_discovered action now fires after the cookie's details are saved and passes them as a fourth argument (pre-existing flag, value type, writer). Listeners using three arguments are unaffected.
-* Tested up to WordPress 7.1.
-
-= 5.1.1 =
-* Cookie declaration shortcode tag is now [cookieflame_declaration] (previously [cookieconsent_declaration]). If you embed the cookie declaration on your Privacy Policy page, update the shortcode tag.
-* URL fields on the Settings page (Privacy URL, CCPA URL, Consent log endpoint) now use esc_url_raw, the WordPress URL sanitiser, in place of sanitize_text_field.
-
-= 5.1.0 =
-* Cookie Monitoring tab redesigned for clarity. The page now leads with the two controls that matter (Monitoring on/off and Update interval) and trims the long-form intro and guidance copy that buried them.
-* New: the Update interval dropdown shows CookieFlame Pro intervals (15 minutes, 1 hour, 4 hours) inline as disabled options labelled "(Pro)", so you can see at a glance what an upgrade adds without leaving the page. They unlock when CookieFlame Pro is active.
-* Removed the Monthly interval. It was producing digests so far apart that newly discovered cookies were already weeks stale by the time the email arrived. Existing sites set to Monthly will move to Daily on update.
-* Removed the in-page "Clear monitoring history" button. The 30-day auto-purge handles staleness without intervention; for the rare support case where a full reset is needed, the new WP-CLI command "wp cookieflame purge-beacon-seen" replaces the button.
-* Filter contract change for developers extending the interval list: cookieflame_interval_buckets now passes tier-aware entries (each entry shaped ['minutes' => N, 'tier' => 'free'|'pro']). Plain integers from third-party filter contributors are still accepted and default to the free tier for back-compatibility.
-
-= 5.0.2 =
-* Fixed: Geo Detection now correctly recognises the Cloudflare CF-IPCountry header again. Sites fronted by Cloudflare without a MaxMind database installed were falling through to the GDPR opt-in safety default for every visitor, which meant CCPA-eligible US visitors saw the GDPR banner instead of the CCPA notice, and visitors in regions where no banner is required also saw the GDPR banner. The Geo Detection admin panel was reporting "Not configured" on Cloudflare-fronted sites for the same reason. No setting changes are required; geo detection resumes automatically on update.
-
-= 5.0.1 =
-* Hardened consent boot: the five wp_head injection hooks (consent defaults, config, frontend script, Google Tag Manager, Microsoft UET) now register at deep-negative priorities so other plugins cannot hook ahead of CookieFlame and push tags before consent signals are set.
-* Beacon endpoint refactored: the per-IP rate limit now runs as a REST permission_callback, rejecting bursts at the routing layer above the request handler. The same check still runs inside the handler as a belt-and-braces guard.
-* Defensive shutdown handler added for the output buffer: walks the buffer stack at end of request and flushes only CookieFlame's own buffer if it remains open, leaving any caching or optimisation plugin buffers above it untouched.
-* Database queries against the beacon-seen table reworked to inline the WordPress table prefix directly in each SQL literal, with rationale comments on the remaining advisory warnings.
-* wp_unslash applied consistently to display-only query parameters on the Cookie Monitoring tab.
-* Readme: added an Upgrade Notice section.
-
-= 5.0.0 =
-* Initial public release.
+= 5.4.0 =
+* New: an option to show "Decline All" on the banner's first screen, next to Accept All. Off by default, and only on the opt-in banner (UK, EU/EEA, Switzerland, Brazil, South Africa), never on the US notice.
+* Global Privacy Control now follows California's rules (§7025): OK only closes the US notice, the notice says the signal was honoured, the opt-out is saved, and visitors can opt back in only through a separate choice.
+* "Do Not Sell or Share My Personal Information" now opens a real opt-out choice on the page, instead of linking to your privacy page.
+* Cookie Monitoring is now two settings: "Watch for new cookies" On/Off, and "Email me about changes": Weekly (the default for new sites), Daily, Instantly (Pro) or Off. Your old setting carries over; 15 minutes, 1 hour and 4 hours become Instantly with Pro and Daily without it.
+* New: [cookieflame_settings_link] shortcode and a cc-open-settings class for a "Cookie settings" link. The cookie declaration now has a "Change cookie preferences" button.
+* New: "Visitor logins" setting. When ticked, the cookie declaration lists the WordPress login cookies under "If you log in". Otherwise they are left out, so every visitor sees the same declaration.
+* The upgrade message at the top of the CookieFlame pages can now be dismissed.
+* For developers: --cc-* CSS properties, two filters, an action and the cc:banner-rendered event (see For developers).
+* The IAB TCF placeholder, which never carried a consent string, is now off by default.
+* Fixed: a Re-consent Period below 1 day made the banner appear on every page. It now means the default of 365 days.
+* Fixed: the US notice could run off the screen on phones.
+* Fixed: the X (Twitter) embed placeholder also caught other sites whose names end in "x.com", such as netflix.com and box.com.
+* Fixed: the WordPress cookie list: login cookie expiry, comment and protected-page cookies, the wp-settings-time description, and PHP and WooCommerce cookies listed as WordPress core.
+* Fixed: saving Cookie Monitoring settings, or switching monitoring on or off, turned "Exclude staff from tracking" off.
+* Older changes: changelog.txt.
 
 == Upgrade Notice ==
 
-= 5.3.0 =
-Cookie monitoring now ignores other consent tools' cookies that visitors' browser extensions add, so they no longer appear as your site's cookies. The Cookie Manager's last column is tidier and easier to understand.
-
-= 5.2.0 =
-Better cookie detection: CookieFlame now records which script set each new cookie and keeps checking after consent is given.
-
-= 5.1.0 =
-Cookie Monitoring tab redesigned and the Monthly interval removed. If you were on Monthly, your setting will move to Daily on update. The "Clear monitoring history" button has been replaced with a WP-CLI command for the rare cases where it is needed.
-
-= 5.0.2 =
-Bug fix release. Restores Cloudflare CF-IPCountry geo detection on sites fronted by Cloudflare without MaxMind. Recommended for all users on Cloudflare.
-
-= 5.0.1 =
-Compatibility and hardening release. Refactors a public endpoint's permission check, hardens consent boot priority, and addresses static-analysis warnings. No setting or visitor-facing behaviour changes.
-
-= 5.0.0 =
-Initial public release.
+= 5.4.0 =
+Optional "Decline all" button, Global Privacy Control handled to California's rules, a real "Do Not Sell or Share" choice, and simpler Cookie Monitoring settings. Your settings carry over.

cookieflame/trunk/uninstall.php

@@ -37 +37 @@
 delete_option( 'cookieflame_maxmind_last_error' );
 delete_option( 'cookieflame_beacon_seen_schema' );
+delete_metadata( 'user', 0, 'cookieflame_upgrade_banner_dismissed', '', true );
 
 // Drop the beacon-seen custom table (only on opt-in deletion).