How to integrate Complianz for WordPress CMP with Matomo

This guide provides general technical implementation advice. It does not constitute legal advice. Consult with a qualified privacy professional to ensure full compliance with applicable laws.

Website owners are responsible for their website’s compliance with privacy laws. This includes responsibility for collecting and retaining a log of their visitors’ valid tracking consents where required.

Complianz – GDPR/CCPA Cookie Consent is a WordPress plugin that supports third party blocking, auto-detection/configuration of plugins and handles consent requirements for different countries based on visitor geolocation. The consent manager includes a step-by-step setup wizard that makes configuration quick and easy and it offers built-in support for Matomo and Matomo Tag Manager (MTM). The Tag Manager method is covered in a separate guide.

This guide focuses on three integration methods using Matomo.

Each method is based on different regulatory requirements, so it is important to consider your organisation’s legal obligations and tracking needs when integrating the CMP:

  1. Consent-based Tracking: For websites targeting users in countries that require prior consent for use of cookies and similar technologies for analytics and marketing (for example, most or EU and EEA countries), enable cookieless or cookie-based Matomo tracking only after obtaining visitor consent.

  2. Opt-out Tracking for CNIL Exemption: For organisations relying on the CNIL consent exemption for website analytics, limited tracking is permitted, provided that conditions of exemption are strictly met and users are offered a clear opt-out mechanism. CNIL exemption is strict and if any conditions of the CNIL exemption are not met, consent is also required.

  3. Adaptive Tracking: For websites operating outside the EU/UK/EEA, in countries where prior consent is either not required or only required when the analytics processes personal data, you can enable cookie-based tracking with consent and fallback to cookieless tracking if consent is not given (unless the visitor opts out of all tracking).

Before you start

Install the Matomo plugin

Matomo is compatible with the Connect Matomo plugin and Matomo for WordPress plugin.

  1. Open WordPress to install and activate the preferred Matomo plugin.
  2. For the Connect Matomo (WP-Matomo) plugin:
    • Click on the plugin’s Settings and go to the Enable Tracking tab.
    • From the Add tracking code drop-down, choose Disabled.
    • Save the changes.
  3. For the Matomo for WordPress plugin:
    • Click on the Matomo Analytics menu > Settings.
    • For the Tracking mode, choose Disabled.
    • Save the changes.
  1. Open WordPress > Plugins > Add Plugin > search for Complianz and install; OR
  2. Download the Complianz – GDPR/CCPA Cookie Consent plugin.
  3. Open WordPress > Plugins > Add Plugin > Upload Plugin and select the plugin you downloaded from WordPress.
  4. Once installed, click Activate.

The tracking configuration for each consent method is described below.

In regions with strict privacy and ePrivacy laws, such as the EU or UK, websites must obtain explicit consent before collecting analytics data. Consent-based tracking ensures that no tracking occurs until a website visitor actively provides consent.

This method can operate in either cookieless (JavaScript-based) or cookie-based mode, but tracking is only activated after the visitor gives consent. When consent is revoked or denied, any existing Matomo cookies are removed from the visitor’s browser and tracking stops.

  1. Once the Complianz GDPR/CCPA Cookie Consent plugin is installed, navigate to WordPress > Plugins > Installed Plugins.
  2. Ensure the Complianz plugin is activated and click Settings.
  3. From the Complianz Dashboard, open the Wizard tab (or click the Continue Wizard button) to go through the configuration steps.
  4. Follow each step and configure according to your privacy laws and requirements.
  5. In the section, Consent > Statistics, select the following options:
    • Do you compile statistics of this website? – choose Yes, with Matomo.
    • Do you want to use cookieless tracking with Matomo? – choose No. This prevents any tracking before consent is granted.
      integrate complianz with matomo
  6. Continue to the next step, Statistics Configuration and select the following option:
    • Do you want Complianz to add Matomo to your website? – choose Yes.
    • Provide your Matomo instance URL and site ID (for Matomo Cloud or On-Premise). If you are using the Matomo for WordPress plugin, then the URL for your Matomo installation will be: your-domain.com/wp-content/plugins/matomo/app
      configure complianz for matomo
  7. Continue through the wizard to the Cookie descriptions and Service descriptions steps, where you should see auto-configured entries for Matomo.

Remove/disable Matomo tracking

Remove or disable any existing Matomo tracking code from your WordPress site.

  1. If you manually added the tracking code to your WordPress site, it must be removed.
  2. If you are using the Matomo for WordPress plugin or the WP-Matomo (Connect Matomo) plugin, go to Installed Plugins and open the plugin settings.
  3. For the Enable Tracking option, ensure tracking is disabled.
  4. Save your settings.
  5. Do not deactivate the Matomo plugin.

Validate the integration

Once you have installed the Matomo tracking code and added the consent handling script to your website, you can test the tracking behaviour for different regions to validate your privacy compliance setup.

  1. To simulate different locations, use a VPN during testing.
  2. Open your website and use the CMP widget to decline tracking consent.
  3. In your Matomo instance, select the Visits in Real-time report, and check that no tracking requests are sent.
  4. Next, grant consent and verify that tracking starts in your Matomo instance.
  5. If using cookie-based tracking, open the browser’s developer tools and view the Application or Storage > Cookies tab to confirm cookies were set.
  6. Revoke consent and confirm the Matomo tracking cookies are deleted from the browser.
  7. Perform some test actions and check your activity was not recorded in the Visits in Real-time report.

This simple test confirms that the integration correctly respects regional privacy requirements and only activates tracking after consent is granted.

Method 2: Opt-out Tracking (CNIL Exemption)

The French supervisory authority, the Commission nationale de l’informatique et des libertés (CNIL) allows specific configuration of Matomo Analytics to be used without prior consent, provided that strict conditions are met. This is commonly referred to as CNIL consent exemption for audience measurement tools.

Organisations relying on the CNIL consent exemption can track website visitors by default provided that all exemption conditions are met:

  • The data is collected only for audience measurement their visitors are informed about and can object to tracking via an opt-out mechanism;
  • The cookies or other tracking tools used solely for audience analytics;
  • The tracking meets required time limits and produces specific aggregated data sets; and
  • The trackers are not used for identification, profiling, or cross-site tracking of visitors.

Note: To comply with this exemption, you must implement the necessary settings in Matomo to ensure data collection remains privacy-friendly and adheres to CNIL’s guidelines.

Refer to the CNIL consent exemption for Matomo Analytics Configuration Guide (English version) or (French version).

While CNIL’s exemption is specific to France, supervisory authorities in a small number of other EU countries have also exempted narrow scope of website analytics from consent (with opt-out right). The Opt-out tracking method can also be used in the context of those exemptions, if Matomo is configured in line with the specific requirements. Refer to the ePrivacy Directive overview, National Implementations, and Matomo’s Website Analytics Guide for details.

To configure tracking under the CNIL exemption (opt-out model), it’s important to assess whether your site qualifies for this setup. Consult with your data privacy officer or legal team before relying on the CNIL exemption.

If you fully comply with CNIL’s criteria for exempt audience measurement tools, there are different approaches you can take to integrate with your consent manager platform (CMP).

  1. Your website targets visitors in countries where CNIL or very similar exemption exists (e.g., France, Spain, Italy), or you have an establishment in such countries:
    • Configure your CMP to either load Matomo Analytics cookies and start tracking without prior consent, or
    • Re-categorise the Matomo cookies as Essential/Necessary.
    • The CMP banner must clearly inform users about the use of consent exempt website analytics tracking and include a visible and easily accessible opt-out mechanism (e.g. a link to your privacy policy with an opt-out checkbox).
  2. If your website serves a broader audience that targets visitors from countries that require prior consent for cookie based or cookieless website analytics (e.g. most of EU countries):
    • Consider splitting your banner configuration if the CMP supports region-specific geotargeting and consent rules.
  3. Follow the steps in this guide, How to include a web analytics opt-out feature on your site to add the embedded Matomo opt-out form to your website. The form includes all required JavaScript to allow users to opt-out of tracking.
  4. Alternatively, you can create a custom opt-out form using HTML and JavaScript, as explained in this developer guide.

Validate the integration

Once configured, test the tracking behaviour and validate your privacy compliance setup.

  1. Perform test actions on your website and view the Visits in Real-time report to verify tracking requests are sent to Matomo.
  2. Select to opt-out of tracking.
  3. Open the browser’s developer tools and view the Application or Storage > Cookies tab to verify that the mtm_consent_removed cookie is set.
  4. Perform test actions on your website and view the Visits in Real-time report to ensure no tracking requests are sent to Matomo after opting out.
  5. Change the settings to opt back in and resume tracking.
  6. Perform test actions on your website and view the Visits in Real-time report to ensure tracking requests are sent to Matomo.

This test confirms that the integration respects the user’s choice to opt out and behaves in accordance with CNIL’s exemption criteria.

⚠️ If you use Matomo features like Heatmaps, User ID, Ecommerce, Advertising Conversion, or Session Recording, or you want to access or export raw data you must switch to Method 1 (Consent-based Tracking), as these features fall outside the exemption.

Method 3: Adaptive Tracking

The Adaptive Tracking method can be used in regions where prior consent for analytics cookies or other trackers:

  • are not legally required (but you want to minimise the data you collect),
  • are not required for pseudonymised non-sensitive personal data or
  • are only required if certain personal data is processed.

You can minimise the data you collect by configuring the Matomo privacy settings.

This method allows tracking to begin immediately in cookieless mode, with the option to request consent for cookie-based tracking. When the website visitor provides consent, tracking switches to cookie-based mode. If consent is denied or later revoked, tracking continues in cookieless mode.

  1. Once the Complianz GDPR/CCPA Cookie Consent plugin is installed, a wizard may appear to take you through configuration steps or you can navigate to WordPress > Plugins > Installed Plugins.
  2. Ensure the Complianz plugin is activated and click Settings.
  3. From the Complianz Dashboard, open the Wizard tab (or click the Continue Wizard button) to go through the configuration steps.
  4. Follow each step and configure according to your privacy laws and requirements.
  5. In the section, Consent > Statistics, select the following options:
    • Do you compile statistics of this website? – choose Yes, with Matomo.
    • Do you want to use cookieless tracking with Matomo? – choose Yes. This allows cookieless tracking before cookie consent is granted.
      configure complianz for cookieless tracking in matomo
  6. Continue to the next step, Statistics Configuration and select the following option:
    • Do you want Complianz to add Matomo to your website? – choose Yes.
    • Provide your Matomo instance URL and site ID (for Matomo Cloud or On-Premise). If you are using the Matomo for WordPress plugin, then the URL for your Matomo installation will be: your-domain.com/wp-content/plugins/matomo/app.
      configure complianz for matomo
  7. Continue through the wizard to the Cookie descriptions and Service descriptions steps, where you should see auto-configured entries for Matomo.

Remove/disable Matomo tracking

Remove or disable any existing Matomo tracking code from your WordPress site.

  1. If you manually added the tracking code to your WordPress site, it must be removed.
  2. If you are using the Matomo for WordPress plugin or the WP-Matomo (Connect Matomo) plugin, go to Installed Plugins and open the plugin settings.
  3. For the Enable Tracking option, ensure tracking is disabled.
  4. Save your settings.
  5. Do not deactivate the Matomo plugin.

Validate the integration

Once you have installed the Matomo tracking code and added the consent handling script to your website, you can test the tracking behaviour for different regions to validate your privacy compliance setup.

  1. To simulate different locations, use a VPN during testing.
  2. Open your website and use the CMP widget to decline cookie consent.
  3. Use the browser’s developer tools and view the Application or Storage > Cookies tab to confirm cookies were not set.
  4. In the Visits in Real-time report, check that tracking requests are still sent.
  5. Next, grant / revoke consent and confirm cookies were set / removed as expected.

This simple test confirms that the integration correctly respects regional privacy requirements and only uses cookies after consent is granted.

Disclaimer: The use of any third-party tools (plugins, extensions, platforms, APIs, widgets, etc.) is at your own risk. Matomo does not own, control, maintain or support any third-party tools that integrate with our product. We recommend checking your privacy setup is correctly configured across your environment when using any third-party tools.

Previous FAQ: Using Klaro Consent Manager CMP with Matomo