Setup is built around maintainability. Built-in presets cover the services most sites actually use: Google Analytics, Google Tag Manager, Meta Pixel, Hotjar, Microsoft Clarity, Google Fonts, YouTube, reCAPTCHA, and more. The site scanner detects external scripts and stylesheets already on your pages and suggests matching consent categories automatically. Unused categories stay hidden on the frontend, so visitors only see what is relevant to their session.

Under the hood, **NexusConsent **is engineered for modern Joomla. Scripts and styles are neutralized server-side before the browser touches them. Google Consent Mode v2 and Microsoft Clarity consent behavior are supported out of the box. Critical attributes like CSP nonces and integrity values are preserved throughout. An optional anonymized audit log with configurable retention and CSV export rounds out the compliance toolkit, keeping the technical foundation solid while leaving all configuration decisions in the hands of the site owner.

Highlights

• Granular consent categories: Analytics, Marketing, Functional, Preferences, with Necessary always enabled.
• Server-side blocking for external scripts, stylesheets, and common inline initializers before optional services can load.
• Pattern-based control for third-party services, using simple URL fragments per category.
• Quick-add preset library for common tools like Google Analytics, GTM, Meta Pixel, Hotjar, Clarity, Google Fonts, YouTube, reCAPTCHA, and more.
• Site scanner for Super Users to detect external scripts and stylesheets and add matching block patterns faster.
• Banner or full-screen require-decision modal with customizable text, theme, position, colors, and floating settings button.
• Automatic hiding of unused optional categories when no patterns are configured.
• Google Consent Mode v2 defaults set to denied, with instant updates when visitors accept, customize, or revoke consent.
• Microsoft Clarity consent support for synchronized analytics consent behavior.
• Revoke flow that clears optional cookies, resets consent signals, and lets visitors change their choices at any time.
• Optional anonymized audit trail with masked IP storage, CSV export, and configurable retention controls.
• First-party consent cookie with minimal stored data: version, timestamp, token, and selected categories.
• CSP-friendly unblocking that preserves attributes such as nonce, integrity, type, and module settings.
• Developer hooks for consent given and revoked events, so other Joomla extensions can react cleanly.
• Optional minimal TCF v2 stub for basic ad platform compatibility.

[1.3.3] - 2026-07-25

Fixed
- Google Consent Mode defaults are now emitted before Google tags load, so advertising consent is never
unset for the first measurement on a page.
- With full-page caching enabled, a page generated for one visitor could be served to another along with
that visitor's consent state. Consent state is now part of the page cache key.
- With full-page caching enabled, consent records could silently fail to be written to the consent log.
- The Config version setting now retires earlier consent decisions when increased. Previously it had no
effect.
- Visitor IP addresses are now resolved through Joomla's Behind Load Balancer setting, so sites behind a
proxy or CDN no longer treat every visitor as a single address.
- Scripts in categories the visitor accepted are no longer delayed when another category is denied.
- Failed consent-log writes are reported as failures instead of success.
- The "Powered by NexusConsent" link only appears when explicitly enabled.
- Categories with no patterns configured can no longer block inline scripts.

Added
- Rate limiting on the consent-save endpoint, with per-session and per-IP limits and a configurable window.
Enabled by default.
- Separate Texts and Patterns tabs in the plugin settings. Existing settings carry over unchanged.

Changed
- Licensing is now consistently GNU GPL version 3 or later across the manifest, source files, and bundled
licence.
- Installation package reduced by roughly two-thirds — documentation images are no longer bundled.
- Plugin configuration is built once per request instead of several times.

[1.3.2] - 2026-07-05

• Improved Google Consent Mode v2 revoke handling.
• Improved multilingual frontend text handling.
• German, French, and Dutch language files are now included in the installer.
• Consent banner/modal status messages and accessibility labels are now translatable.
• Improved blocking for common map, chat, and widget inline scripts.
• Improved admin help text and documentation for iframe blocking.
• Improved hardening for consent revoke requests.

[1.3.1] - 2026-03-05

Fixed

• Google Consent Mode v2 revoke path now explicitly denies all required keys (analytics_storage, ad_storage, ad_user_data, ad_personalization) before page reload.