Title: Privatto
Author: Sergio Inglez
Published: <strong>2026 年 7 月 13 日</strong>
Last modified: 2026 年 7 月 13 日

---

搜尋外掛

![](https://ps.w.org/privatto/assets/banner-772x250.png?rev=3605989)

![](https://ps.w.org/privatto/assets/icon-256x256.png?rev=3605989)

# Privatto

 由 [Sergio Inglez](https://profiles.wordpress.org/sergioinglez/) 開發

[下載](https://downloads.wordpress.org/plugin/privatto.2.1.0.zip)

 * [詳細資料](https://tw.wordpress.org/plugins/privatto/#description)
 * [使用者評論](https://tw.wordpress.org/plugins/privatto/#reviews)
 *  [安裝方式](https://tw.wordpress.org/plugins/privatto/#installation)
 * [開發資訊](https://tw.wordpress.org/plugins/privatto/#developers)

 [技術支援](https://wordpress.org/support/plugin/privatto/)

## 外掛說明

Privatto is a self-hosted consent management platform (CMP) for WordPress, built
with Brazil’s LGPD and the GDPR in mind. It requires no external service.

**Main features:**

 * Granular consent banner with per-category preferences (necessary, analytics, 
   marketing, embeds).
 * Automatic blocking of third-party scripts and iframes via output buffering: matching`
   <script>` tags are switched to `type="text/plain"` before the page reaches the
   browser, so nothing runs before consent.
 * Google Consent Mode v2 injected with everything denied by default, updated when
   the visitor decides.
 * Proof of consent stored in your own database table: unique consent ID, action,
   categories (JSON), policy version, hashed IP (optional), country, user agent,
   page URL, and UTC timestamp. Exportable to CSV for audits.
 * LGPD document generator: privacy policy, terms of use, cookie policy, returns
   policy, and a plain-language summary, built from a guided form. Optional AI text
   refinement (Groq API) for the business description only — mandatory legal clauses
   never go through AI.
 * Data subject rights form (LGPD art. 18) with tracked protocols, 15-day response
   deadline monitoring, and an admin queue.
 * Simplified record of processing activities (ROPA) export, as required by ANPD
   Resolution CD/ANPD No. 2/2022, including for small-scale processing agents.
 * “Cookie preferences” reopen link so visitors can change or revoke consent at 
   any time.

**Important notice:** the generated documents are a structured starting point aligned
with the LGPD; they are not legal advice. Review by a lawyer is recommended, especially
for complex operations.

### External services

This plugin connects to one optional third-party service:

Groq API — used only if you paste a Groq API key in Privatto  LGPD Documents. It
is used to (1) rewrite, in more natural language, the free-text description of your
site/business that you typed into the document form, and (2) generate a plain-language
summary of your privacy policy for the same document. Only that free text (and the
derived facts needed to build the summary) is sent; the mandatory legal clauses 
are always generated locally and never sent to the API. This call happens only when
you click the “Refine with AI” / “Generate summary with AI” buttons — never automatically
and never on the public-facing site. If no key is configured, these buttons are 
disabled and everything works normally without any external call.
 Service: Groq(
https://groq.com ). Terms of Service: https://groq.com/terms-of-use · Privacy Policy:
https://groq.com/privacy-policy

Note: the plugin also ships a static reference catalog (service name, vendor, and
known script/domain signatures) used only to help the document generator recognize
and describe third-party services _that your own site may already be using_ (e.g.
Google Analytics, Meta Pixel, Stripe) when writing your cookie policy. This catalog
does not make any outbound request to those services — it is local, offline pattern-
matching against your own site’s HTML.

## 安裝方式

 1. Upload the plugin through Plugins  Add New  Upload Plugin, or copy the `privatto`
    folder to `/wp-content/plugins/`.
 2. Activate the plugin. The consent table and default options are created on activation.
 3. Follow the onboarding wizard, then fine-tune under **Privatto  Settings**.
 4. Generate your legal documents under **Privatto  LGPD Documents**.

## 常見問題集

### Does it depend on any external service?

No. Banner, blocking, consent records, and document generation all run on your own
site. The only optional external call is the Groq API, used exclusively to refine
free-text descriptions if you provide an API key.

### How does the tag blocking work?

The plugin buffers the full page output on `template_redirect`, injects Google Consent
Mode v2 (all denied) right after `<head>`, and rewrites any `<script>` whose `src`
or body matches the configured patterns. When the visitor consents, the allowed 
scripts are restored and executed.

### Where is the proof of consent stored?

In a dedicated table (`wp_pvto_consents`). Each decision records a UUID, action,
categories, policy version, optional irreversible IP hash, country, user agent, 
URL, and UTC date/time. You can view it under **Privatto  Logs** and export it to
CSV.

### Is uninstall data removal opt-in?

Yes. By default, uninstalling keeps the consent tables (they are your audit evidence)
and only removes settings. To delete everything, define `PVTO_DELETE_DATA` as `true`
in `wp-config.php` before removing the plugin.

## 使用者評論

這個外掛目前沒有任何使用者評論。

## 參與者及開發者

以下人員參與了開源軟體〈Privatto〉的開發相關工作。

參與者

 *   [ Sergio Inglez ](https://profiles.wordpress.org/sergioinglez/)

[將〈Privatto〉外掛本地化為台灣繁體中文版](https://translate.wordpress.org/projects/wp-plugins/privatto)

### 對開發相關資訊感興趣？

任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/privatto/)、查看
[SVN 存放庫](https://plugins.svn.wordpress.org/privatto/)，或透過 [RSS](https://plugins.trac.wordpress.org/log/privatto/?limit=100&mode=stop_on_copy&format=rss)
訂閱[開發記錄](https://plugins.trac.wordpress.org/log/privatto/)。

## 變更記錄

#### 1.4.0

 * Security hardening: prepared statements with the `%i` identifier placeholder,
   input unslashing/sanitization, output escaping.
 * Internationalization: translators comments and ordered placeholders.
 * Readme rewritten to WordPress.org standards.

## 中繼資料

 *  版本 **1.4.0**
 *  最後更新 **2 個月前**
 *  啟用安裝數 **少於 10 次**
 *  WordPress 版本需求 ** 6.2 或更新版本 **
 *  已測試相容的 WordPress 版本 **7.0.4**
 *  PHP 版本需求 ** 7.4 或更新版本 **
 *  語言
 * [English (US)](https://wordpress.org/plugins/privatto/)
 * 標籤:
 * [consent mode](https://tw.wordpress.org/plugins/tags/consent-mode/)[cookie consent](https://tw.wordpress.org/plugins/tags/cookie-consent/)
   [GDPR](https://tw.wordpress.org/plugins/tags/gdpr/)[lgpd](https://tw.wordpress.org/plugins/tags/lgpd/)
   [privacy](https://tw.wordpress.org/plugins/tags/privacy/)
 *  [進階檢視](https://tw.wordpress.org/plugins/privatto/advanced/)

## 評分

這個項目尚無任何評論記錄。

[撰寫評分](https://wordpress.org/support/plugin/privatto/reviews/#new-post)

[查看全部使用者評論](https://wordpress.org/support/plugin/privatto/reviews/)

## 參與者

 *   [ Sergio Inglez ](https://profiles.wordpress.org/sergioinglez/)

## 技術支援

使用者可在技術支援論壇提出意見反應或使用問題。

 [檢視技術支援論壇](https://wordpress.org/support/plugin/privatto/)