From 7f4ebe1d215741b4076223b09d60f8bf7c832e9c Mon Sep 17 00:00:00 2001
From: castellon <alexcastellon077@gmail.com>
Date: Wed, 30 Sep 2026 09:51:38 +0200
Subject: [PATCH 1/3] Remove legacy Cookie Notice runtime module (hard cutover
 to FrontConsent)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Cookie consent now lives entirely in the standalone FrontConsent plugin.
FrontBlocks no longer ships its own banner, AJAX consent endpoints, or
GTM/GA4/tracking integrations — only the FrontConsent promo/migration
panel added in #314 remains.

- Delete includes/Frontend/CookieNotice.php and its assets
  (assets/cookie-notice/frontblocks-cookie-notice.{js,css}).
- Stop instantiating Frontend\CookieNotice from Plugin_Main::load_modules().
- Drop the now-inaccurate 'cookie-notice' entry from
  Admin\RedundantPlugins::get_default_entries() — FrontBlocks no longer
  makes GDPR Cookie Compliance/CookieYes redundant.
- Remove the orphaned .frbl-cookie-notice-preview* CSS left over from the
  pre-promo-panel settings preview.
- Delete tests exercising the removed class (CookieNoticeLinkTest.php);
  trim CookieNoticeTransitionTest.php down to its
  CookieNoticeDeprecationNotice coverage and rename it
  CookieNoticeDeprecationNoticeTest.php, adding regression tests that the
  legacy class is gone and that the promo tab still renders without it.
- Update RedundantPluginsTest.php, AGENTS.md, readme.txt/readme.md, and
  docs/COOKIE-NOTICE.md to describe this as a hard cutover rather than a
  transition, and fix a stale test comment referencing a cookie-notice JS
  test file that no longer exists.

Admin\CookieNoticeDeprecationNotice and Settings::render_cookie_notice_promo_tab()
are untouched — both only ever depended on each other, never on the
removed runtime class.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 .github/workflows/phpunit.yml                 |    2 -
 AGENTS.md                                     |    2 +-
 assets/admin/settings-src.css                 |   37 -
 assets/admin/settings.css                     |   28 -
 .../frontblocks-cookie-notice.css             |  298 ----
 .../frontblocks-cookie-notice.js              |  404 -----
 docs/COOKIE-NOTICE.md                         |   21 +-
 includes/Admin/RedundantPlugins.php           |   10 -
 includes/Admin/Settings.php                   |   12 +-
 includes/Frontend/CookieNotice.php            | 1377 -----------------
 includes/Plugin_Main.php                      |    3 -
 readme.md                                     |    4 +-
 readme.txt                                    |    3 +-
 .../CookieNoticeDeprecationNoticeTest.php     |   64 +
 tests/Unit/CookieNoticeLinkTest.php           |  116 --
 tests/Unit/CookieNoticeTransitionTest.php     |   63 -
 tests/Unit/RedundantPluginsTest.php           |   23 +-
 tests/js/column-link-frontend.test.js         |    2 +-
 18 files changed, 96 insertions(+), 2373 deletions(-)
 delete mode 100644 assets/cookie-notice/frontblocks-cookie-notice.css
 delete mode 100644 assets/cookie-notice/frontblocks-cookie-notice.js
 delete mode 100644 includes/Frontend/CookieNotice.php
 create mode 100644 tests/Unit/CookieNoticeDeprecationNoticeTest.php
 delete mode 100644 tests/Unit/CookieNoticeLinkTest.php
 delete mode 100644 tests/Unit/CookieNoticeTransitionTest.php

diff --git a/.github/workflows/phpunit.yml b/.github/workflows/phpunit.yml
index 9490f9f..936ab2a 100644
--- a/.github/workflows/phpunit.yml
+++ b/.github/workflows/phpunit.yml
@@ -14,7 +14,6 @@ on:
       - 'composer.lock'
       - 'package.json'
       - 'package-lock.json'
-      - 'assets/cookie-notice/**'
       - 'tests/js/**'
   pull_request:
     branches:
@@ -30,7 +29,6 @@ on:
       - 'composer.lock'
       - 'package.json'
       - 'package-lock.json'
-      - 'assets/cookie-notice/**'
       - 'tests/js/**'
     types:
       - opened
diff --git a/AGENTS.md b/AGENTS.md
index 5b00eb9..e8da06f 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -6,7 +6,7 @@ Guidelines for AI coding agents working on this WordPress plugin.
 
 **FrontBlocks Site Tools** is a free, all-in-one WordPress plugin covering the everyday needs of a site — not just a block-extension add-on. It bundles Gutenberg/GeneratePress block enhancements alongside general-purpose site utilities: maintenance mode, image management (size control + WebP/AVIF delivery), social login, and more. New features do not need to be block-related to belong here — evaluate additions against "does a typical WordPress site commonly need this," not "is this a block." The PRO companion lives at `wp-content/plugins/frontblocks-pro/`.
 
-**Cookie Notice is deprecated here and moving to FrontConsent** (`wp-content/plugins/frontconsent/`), a dedicated standalone plugin. It still ships and works in FrontBlocks during the transition (see `includes/Frontend/CookieNotice.php` and `includes/Admin/CookieNoticeDeprecationNotice.php`), but do not extend it further — new cookie-consent work belongs in FrontConsent's own `AGENTS.md`. FrontBlocks' module disables itself automatically once FrontConsent is active (`FRCN_VERSION` defined), and FrontConsent migrates the site's settings/stats on activation.
+**Cookie Notice has been removed from FrontBlocks and moved to FrontConsent** (`wp-content/plugins/frontconsent/`), a dedicated standalone plugin. This was a deliberate hard cutover, not a transition: the runtime banner, its AJAX consent endpoints, and its GTM/GA4/other tracking integrations no longer exist in this plugin. FrontBlocks only keeps a promo/migration-notice UI (`includes/Admin/Settings.php`'s `render_cookie_notice_promo_tab()` and `includes/Admin/CookieNoticeDeprecationNotice.php`) pointing site owners at FrontConsent. Do not add cookie-consent runtime code back here — new cookie-consent work belongs in FrontConsent's own `AGENTS.md`.
 
 - **PHP minimum:** 7.0
 - **WordPress minimum:** 5.8 (required for the image-format-output filters used by Image Management)
diff --git a/assets/admin/settings-src.css b/assets/admin/settings-src.css
index 29cc18e..b2c123a 100644
--- a/assets/admin/settings-src.css
+++ b/assets/admin/settings-src.css
@@ -730,43 +730,6 @@
 
 /* Save bar layout/position rules live further down (fixed to the viewport). */
 
-/* Cookie notice live preview: renders the real frontend banner markup/styles
-   confined to a small "stage" instead of position: fixed over the whole screen. */
-.frbl-cookie-notice-preview-stage {
-	position: relative;
-	height: 360px;
-	background: transparent;
-}
-
-.frbl-cookie-notice-preview {
-	position: absolute !important;
-	z-index: 1 !important;
-	max-width: calc(100% - 24px);
-}
-
-.frbl-cookie-notice-preview.frbl-cookie-notice--bar {
-	inset: auto 0 0 0;
-}
-
-.frbl-cookie-notice-preview.frbl-cookie-notice--box {
-	bottom: 12px;
-}
-
-.frbl-cookie-notice-preview.frbl-cookie-notice--box.frbl-cookie-notice--right {
-	right: 12px;
-}
-
-.frbl-cookie-notice-preview.frbl-cookie-notice--box.frbl-cookie-notice--left {
-	left: 12px;
-}
-
-.frbl-cookie-notice-preview.frbl-cookie-notice--popup {
-	position: absolute !important;
-	inset: 0;
-	background-color: rgba(15, 23, 42, 0.35);
-	padding: 12px;
-}
-
 /* Responsive adjustments */
 @media (max-width: 640px) {
 	.frbl-settings-wrapper {
diff --git a/assets/admin/settings.css b/assets/admin/settings.css
index b446db1..0806b79 100644
--- a/assets/admin/settings.css
+++ b/assets/admin/settings.css
@@ -1134,34 +1134,6 @@
   font-weight: 700;
   font-size: 1.125rem;
 }
-.frbl-cookie-notice-preview-stage {
-  position: relative;
-  height: 360px;
-  background: transparent;
-}
-.frbl-cookie-notice-preview {
-  position: absolute !important;
-  z-index: 1 !important;
-  max-width: calc(100% - 24px);
-}
-.frbl-cookie-notice-preview.frbl-cookie-notice--bar {
-  inset: auto 0 0 0;
-}
-.frbl-cookie-notice-preview.frbl-cookie-notice--box {
-  bottom: 12px;
-}
-.frbl-cookie-notice-preview.frbl-cookie-notice--box.frbl-cookie-notice--right {
-  right: 12px;
-}
-.frbl-cookie-notice-preview.frbl-cookie-notice--box.frbl-cookie-notice--left {
-  left: 12px;
-}
-.frbl-cookie-notice-preview.frbl-cookie-notice--popup {
-  position: absolute !important;
-  inset: 0;
-  background-color: rgba(15, 23, 42, 0.35);
-  padding: 12px;
-}
 @media (max-width: 640px) {
   .frbl-settings-wrapper {
     margin-left: 0;
diff --git a/assets/cookie-notice/frontblocks-cookie-notice.css b/assets/cookie-notice/frontblocks-cookie-notice.css
deleted file mode 100644
index 77df6f8..0000000
--- a/assets/cookie-notice/frontblocks-cookie-notice.css
+++ /dev/null
@@ -1,298 +0,0 @@
-/**
- * FrontBlocks Cookie Notice Styles
- *
- * @package FrontBlocks
- * @version 1.0.0
- */
-
-.frbl-cookie-notice {
-	--frbl-cookie-accent: #687df9;
-	--frbl-cookie-accent-contrast: #ffffff;
-	--frbl-cookie-accent-on-light: #687df9;
-	--frbl-cookie-bg: #ffffff;
-	--frbl-cookie-text: #1f2937;
-	--frbl-cookie-radius: 12px;
-
-	position: fixed;
-	z-index: 999999;
-	box-sizing: border-box;
-	font-family: inherit;
-	line-height: 1.5;
-	opacity: 1;
-	transition: opacity 0.3s ease, transform 0.3s ease;
-}
-
-.frbl-cookie-notice * {
-	box-sizing: border-box;
-}
-
-.frbl-cookie-notice--hidden {
-	opacity: 0;
-	pointer-events: none;
-}
-
-/*
- * Initial, pre-decision state: printed by the server this way so a visitor
- * who already accepted/rejected never sees the banner flash into view before
- * frontblocks-cookie-notice.js hides it — the invisible state is the default,
- * not something applied after the fact. It doubles as the "from" state of the
- * entrance animation for a visitor who still needs to decide: the script
- * removes this class once it determines that, letting the transition above
- * animate it in. A `<noscript>` rule further down resets it to visible for
- * browsers that never run the script at all.
- */
-.frbl-cookie-notice--init {
-	opacity: 0;
-	pointer-events: none;
-}
-
-.frbl-cookie-notice--bar.frbl-cookie-notice--init {
-	transform: translateY(100%);
-}
-
-.frbl-cookie-notice--box.frbl-cookie-notice--init {
-	transform: translateX(100%);
-}
-
-.frbl-cookie-notice--box.frbl-cookie-notice--left.frbl-cookie-notice--init {
-	transform: translateX(-100%);
-}
-
-.frbl-cookie-notice--popup.frbl-cookie-notice--init {
-	transform: scale(0.96);
-}
-
-.frbl-cookie-notice__panel {
-	background-color: var(--frbl-cookie-bg);
-	color: var(--frbl-cookie-text);
-	border-radius: var(--frbl-cookie-radius);
-	overflow: hidden;
-	box-shadow: none;
-}
-
-.frbl-cookie-notice__message {
-	margin: 0;
-	font-size: 14px;
-	color: var(--frbl-cookie-text);
-}
-
-.frbl-cookie-notice__link {
-	color: var(--frbl-cookie-accent-on-light);
-	background-color: transparent;
-	text-decoration: underline;
-}
-
-/*
- * Explicit hover/focus color so a theme's own global `a:hover` style (some
- * themes swap the text to white, expecting a colored background underneath)
- * can't make this link's text unreadable against the notice's own background.
- */
-.frbl-cookie-notice__link:hover,
-.frbl-cookie-notice__link:focus {
-	color: var(--frbl-cookie-accent-on-light);
-	background-color: transparent;
-}
-
-.frbl-cookie-notice__link:focus-visible {
-	outline: 2px solid var(--frbl-cookie-accent-on-light);
-	outline-offset: 2px;
-}
-
-.frbl-cookie-notice__actions {
-	display: flex;
-	flex-wrap: wrap;
-	gap: 12px;
-	flex-shrink: 0;
-}
-
-.frbl-cookie-notice__button {
-	appearance: none;
-	border-radius: 6px;
-	padding: 10px 20px;
-	font-size: 14px;
-	font-weight: 600;
-	line-height: 1.2;
-	cursor: pointer;
-	transition: filter 0.15s ease, transform 0.15s ease;
-	white-space: nowrap;
-}
-
-.frbl-cookie-notice__button:hover {
-	filter: brightness(0.92);
-}
-
-.frbl-cookie-notice__button:active {
-	transform: scale(0.97);
-}
-
-.frbl-cookie-notice__button:focus-visible {
-	outline: 2px solid var(--frbl-cookie-accent-on-light);
-	outline-offset: 2px;
-}
-
-.frbl-cookie-notice__button--accept {
-	background-color: var(--frbl-cookie-accent);
-	border: 1px solid var(--frbl-cookie-accent);
-	color: var(--frbl-cookie-accent-contrast);
-}
-
-.frbl-cookie-notice__button--reject {
-	background-color: transparent;
-	border: 1px solid #9ca3af;
-	color: var(--frbl-cookie-text);
-}
-
-/* Bar layout: floating bottom bar, spanning most of the viewport width. */
-.frbl-cookie-notice--bar {
-	left: 20px;
-	right: 20px;
-	bottom: 20px;
-	max-height: calc(100vh - 40px);
-	overflow-y: auto;
-}
-
-/* GeneratePress sets the content width in PHP, so match its centered page
-   container when FrontBlocks receives that value from the active theme. */
-.frbl-cookie-notice--bar.frbl-cookie-notice--generatepress {
-	left: max(20px, calc((100vw - var(--frbl-cookie-content-width)) / 2));
-	right: max(20px, calc((100vw - var(--frbl-cookie-content-width)) / 2));
-}
-
-.frbl-cookie-notice--bar .frbl-cookie-notice__panel {
-	display: flex;
-	align-items: center;
-	justify-content: space-between;
-	gap: 16px;
-	flex-wrap: wrap;
-	padding: 16px 24px;
-}
-
-.frbl-cookie-notice--bar .frbl-cookie-notice__message {
-	flex: 1 1 320px;
-}
-
-/* Box layout: boxed panel anchored bottom-left or bottom-right. */
-.frbl-cookie-notice--box {
-	bottom: 20px;
-	max-width: 380px;
-	width: calc(100% - 40px);
-	max-height: calc(100vh - 40px);
-	overflow-y: auto;
-}
-
-.frbl-cookie-notice--box.frbl-cookie-notice--right {
-	right: 20px;
-}
-
-.frbl-cookie-notice--box.frbl-cookie-notice--left {
-	left: 20px;
-}
-
-.frbl-cookie-notice--box .frbl-cookie-notice__panel {
-	padding: 20px;
-	display: flex;
-	flex-direction: column;
-	gap: 16px;
-}
-
-.frbl-cookie-notice--box .frbl-cookie-notice__actions {
-	flex-direction: column;
-}
-
-.frbl-cookie-notice--box .frbl-cookie-notice__button {
-	width: 100%;
-	text-align: center;
-}
-
-/* Popup layout: centered modal with a dimmed backdrop. */
-.frbl-cookie-notice--popup {
-	inset: 0;
-	display: flex;
-	align-items: center;
-	justify-content: center;
-	padding: 20px;
-	overflow-y: auto;
-	background-color: transparent;
-}
-
-.frbl-cookie-notice--popup .frbl-cookie-notice__panel {
-	padding: 40px 32px 32px;
-	max-width: 420px;
-	width: 100%;
-	max-height: calc(100vh - 40px);
-	overflow-y: auto;
-	display: flex;
-	flex-direction: column;
-	align-items: center;
-	text-align: center;
-	gap: 16px;
-	box-shadow: none;
-}
-
-.frbl-cookie-notice__icon {
-	display: flex;
-	align-items: center;
-	justify-content: center;
-	width: 64px;
-	height: 64px;
-	flex-shrink: 0;
-	border-radius: 50%;
-	background-color: var(--frbl-cookie-accent);
-	color: var(--frbl-cookie-accent-contrast);
-}
-
-.frbl-cookie-notice__icon svg {
-	width: 32px;
-	height: 32px;
-}
-
-.frbl-cookie-notice--popup .frbl-cookie-notice__actions {
-	justify-content: center;
-	width: 100%;
-}
-
-body.frbl-cookie-notice-lock-scroll {
-	overflow: hidden;
-}
-
-@media (max-width: 600px) {
-	.frbl-cookie-notice--bar .frbl-cookie-notice__panel {
-		padding: 16px;
-	}
-
-	.frbl-cookie-notice--bar .frbl-cookie-notice__actions,
-	.frbl-cookie-notice--popup .frbl-cookie-notice__actions {
-		flex-direction: column;
-		width: 100%;
-	}
-
-	.frbl-cookie-notice--bar .frbl-cookie-notice__button,
-	.frbl-cookie-notice--popup .frbl-cookie-notice__button {
-		width: 100%;
-		text-align: center;
-	}
-
-	.frbl-cookie-notice--box,
-	.frbl-cookie-notice--popup .frbl-cookie-notice__panel {
-		width: calc(100% - 24px);
-		max-width: none;
-	}
-
-	.frbl-cookie-notice--popup .frbl-cookie-notice__panel {
-		max-height: calc(100vh - 24px);
-	}
-
-	.frbl-cookie-notice--box,
-	.frbl-cookie-notice--bar {
-		left: 12px;
-		right: 12px;
-		bottom: 12px;
-		max-height: calc(100vh - 24px);
-	}
-}
-
-@media (prefers-reduced-motion: reduce) {
-	.frbl-cookie-notice {
-		transition: none;
-	}
-}
diff --git a/assets/cookie-notice/frontblocks-cookie-notice.js b/assets/cookie-notice/frontblocks-cookie-notice.js
deleted file mode 100644
index 7de6ec8..0000000
--- a/assets/cookie-notice/frontblocks-cookie-notice.js
+++ /dev/null
@@ -1,404 +0,0 @@
-/**
- * FrontBlocks Cookie Notice
- *
- * @package FrontBlocks
- * @version 1.0.0
- */
-
-(function () {
-	'use strict';
-
-	if (document.readyState === 'loading') {
-		document.addEventListener('DOMContentLoaded', init);
-	} else {
-		init();
-	}
-
-	function readCookie(name) {
-		var match = document.cookie.match(new RegExp('(?:^|; )' + name + '=([^;]*)'));
-
-		if (!match) {
-			return '';
-		}
-
-		try {
-			return decodeURIComponent(match[1]);
-		} catch (e) {
-			// Malformed percent-encoding: treat it the same as no cookie at all.
-			return '';
-		}
-	}
-
-	function defineInjectHelper() {
-		window.frblCookieNoticeInject = window.frblCookieNoticeInject || function (gtmId, ga4Id, trackingIntegrations, allowedCategories) {
-			var allowsCategory = function (category) {
-				return !allowedCategories || !!allowedCategories[category];
-			};
-
-			if (gtmId && allowsCategory('analytics')) {
-				window.dataLayer = window.dataLayer || [];
-				window.dataLayer.push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' });
-
-				var gtmScript = document.createElement('script');
-				gtmScript.async = true;
-				gtmScript.src = 'https://www.googletagmanager.com/gtm.js?id=' + encodeURIComponent(gtmId);
-				document.head.appendChild(gtmScript);
-			}
-
-			if (ga4Id && allowsCategory('analytics')) {
-				var ga4Script = document.createElement('script');
-				ga4Script.async = true;
-				ga4Script.src = 'https://www.googletagmanager.com/gtag/js?id=' + encodeURIComponent(ga4Id);
-				document.head.appendChild(ga4Script);
-
-				window.dataLayer = window.dataLayer || [];
-				window.gtag = window.gtag || function () {
-					window.dataLayer.push(arguments);
-				};
-				window.gtag('js', new Date());
-				window.gtag('config', ga4Id);
-			}
-
-			if (!Array.isArray(trackingIntegrations)) {
-				trackingIntegrations = [];
-			}
-
-			trackingIntegrations.forEach(function (integration) {
-				var trackingType = integration && integration.type ? integration.type : '';
-				var trackingId = integration && integration.id ? integration.id : '';
-				var trackingCategory = integration && integration.category ? integration.category : 'marketing';
-
-				if (!trackingId || !allowsCategory(trackingCategory)) {
-					return;
-				}
-
-			if (trackingType === 'clientify_analytics_plus') {
-				var clientifyPixel = document.createElement('script');
-				clientifyPixel.defer = true;
-				clientifyPixel.src = 'https://analyticsplusdev.clientify.net/analytics_plus/pixel/' + encodeURIComponent(trackingId);
-				document.head.appendChild(clientifyPixel);
-			} else if (trackingType === 'clientify_analytics_classic') {
-				(function (d, w, u, o) {
-					w[o] = w[o] || function () {
-						(w[o].q = w[o].q || []).push(arguments);
-					};
-					var a = d.createElement('script'),
-						m = d.getElementsByTagName('script')[0];
-					a.async = 1; a.src = u;
-					m.parentNode.insertBefore(a, m);
-				})(document, window, 'https://analytics.clientify.net/tracker.js', 'ana');
-				window.ana('setTrackerUrl', 'https://analytics.clientify.net');
-				window.ana('setTrackingCode', trackingId);
-				window.ana('trackPageview');
-			} else if (trackingType === 'brevo') {
-				var brevoScript = document.createElement('script');
-				brevoScript.async = true;
-				brevoScript.src = 'https://cdn.brevo.com/js/sdk-loader.js';
-				document.head.appendChild(brevoScript);
-
-				window.Brevo = window.Brevo || [];
-				window.Brevo.push(['init', { client_key: trackingId }]);
-			} else if (trackingType === 'openai_chatgpt_ads') {
-				if (!window.oaiq) {
-					window.oaiq = function () {
-						window.oaiq.q.push(arguments);
-					};
-					window.oaiq.q = [];
-
-					var openaiScript = document.createElement('script');
-					openaiScript.async = true;
-					openaiScript.src = 'https://bzrcdn.openai.com/sdk/oaiq.min.js';
-					document.head.appendChild(openaiScript);
-				}
-
-				window.oaiq('init', { pixelId: trackingId, debug: true });
-			} else if (typeof window.frblCookieNoticeInjectIntegration === 'function') {
-				window.frblCookieNoticeInjectIntegration(integration);
-			} else {
-				window.frblCookieNoticePendingIntegrations = window.frblCookieNoticePendingIntegrations || [];
-				window.frblCookieNoticePendingIntegrations.push(integration);
-			}
-			});
-		};
-	}
-
-	function fetchAndInjectScripts() {
-		var formData = new FormData();
-		formData.append('action', 'frbl_get_cookie_notice_config');
-
-		fetch(frblCookieNotice.ajaxUrl, {
-			method: 'POST',
-			credentials: 'same-origin',
-			body: formData
-		})
-			.then(function (response) {
-				return response.json();
-			})
-			.then(function (response) {
-				if (response && response.success && response.data && window.frblCookieNoticeInject) {
-					window.frblCookieNoticeInject(response.data.gtmId, response.data.ga4Id, response.data.trackingIntegrations, response.data.allowedCategories);
-				}
-			})
-			.catch(function () {
-				// Network hiccup: consent is already stored locally; nothing else to do here.
-			});
-	}
-
-	/**
-	 * For an already-decided visitor, request the tracking scripts (accepted)
-	 * or simply do nothing further (rejected). Normally an inline bootstrap
-	 * script printed on wp_head already does this as early as possible, well
-	 * before this file even loads — this is the fallback for sites whose
-	 * Content Security Policy blocks that unnonced inline script, so tracking
-	 * still starts there too, just later.
-	 *
-	 * Deliberately separate from hiding the banner (see hideBannerIfDecided()):
-	 * that inline copy runs on wp_head, before '#frbl-cookie-notice' exists in
-	 * the DOM at all, so it can never do the hiding itself — only this file,
-	 * running once the DOM is ready, can.
-	 */
-	function requestTrackingIfNeeded() {
-		if (window.frblCookieNoticeBootstrapped) {
-			return;
-		}
-
-		defineInjectHelper();
-
-		var isStale = typeof window.frblCookieNoticeIsConsentStale === 'function' && window.frblCookieNoticeIsConsentStale();
-
-		if (readCookie(frblCookieNotice.cookieName) === 'accepted' && !isStale) {
-			fetchAndInjectScripts();
-		}
-
-		window.frblCookieNoticeBootstrapped = true;
-	}
-
-	function hideBannerIfDecided(banner) {
-		var consent = readCookie(frblCookieNotice.cookieName);
-
-		// An add-on tracking per-category consent (analytics vs. marketing) can
-		// define this to say "the categories cookie is stale — e.g. the site
-		// admin just added a new integration — so re-prompt even though the
-		// legacy accepted/rejected cookie here still looks decided."
-		if (typeof window.frblCookieNoticeIsConsentStale === 'function' && window.frblCookieNoticeIsConsentStale()) {
-			return false;
-		}
-
-		if (banner && (consent === 'accepted' || consent === 'rejected')) {
-			banner.style.display = 'none';
-			return true;
-		}
-
-		return false;
-	}
-
-	function init() {
-		if (typeof frblCookieNotice === 'undefined') {
-			return;
-		}
-
-		requestTrackingIfNeeded();
-
-		var banner = document.getElementById('frbl-cookie-notice');
-
-		if (!banner) {
-			return;
-		}
-
-		if (hideBannerIfDecided(banner)) {
-			// Already decided: nothing left to wire up.
-			return;
-		}
-
-		var acceptBtn = banner.querySelector('[data-frbl-cookie-action="accept"]');
-		var rejectBtn = banner.querySelector('[data-frbl-cookie-action="reject"]');
-		var isPopup = banner.classList.contains('frbl-cookie-notice--popup');
-		var previouslyFocused = document.activeElement;
-
-		revealBanner();
-
-		if (acceptBtn) {
-			acceptBtn.addEventListener('click', function () {
-				handleDecision('accepted');
-			});
-		}
-
-		if (rejectBtn) {
-			rejectBtn.addEventListener('click', function () {
-				handleDecision('rejected');
-			});
-		}
-
-		var customizeBtn = banner.querySelector('[data-frbl-cookie-action="customize"]');
-
-		if (customizeBtn) {
-			// Deliberately not routed through handleDecision(): clicking it isn't a
-			// decision by itself, just a request to see more detail. An add-on
-			// listens for this to open its own categories dialog.
-			customizeBtn.addEventListener('click', function () {
-				var event;
-
-				try {
-					event = new CustomEvent('frblCookieNoticeCustomize');
-				} catch (e) {
-					event = document.createEvent('CustomEvent');
-					event.initCustomEvent('frblCookieNoticeCustomize', true, true, null);
-				}
-
-				document.dispatchEvent(event);
-			});
-		}
-
-		/**
-		 * Reveal the banner: removes the '--init' class printed by PHP so the
-		 * CSS transition animates it in (slide up for the bar, slide in from
-		 * its anchored edge for the box, scale/fade in for the popup). The
-		 * popup gets a short extra delay first, per its layout's own request,
-		 * so it doesn't feel jarring the instant the page loads.
-		 */
-		function revealBanner() {
-			var delay = isPopup ? 150 : 20;
-
-			window.setTimeout(function () {
-				banner.classList.remove('frbl-cookie-notice--init');
-
-				if (isPopup) {
-					document.body.classList.add('frbl-cookie-notice-lock-scroll');
-
-					if (acceptBtn) {
-						acceptBtn.focus({ preventScroll: true });
-					}
-
-					document.addEventListener('keydown', trapFocus);
-				}
-			}, delay);
-		}
-
-		function trapFocus(event) {
-			if (event.key !== 'Tab') {
-				return;
-			}
-
-			var focusable = Array.prototype.slice.call(
-				banner.querySelectorAll('a[href], button')
-			);
-
-			if (!focusable.length) {
-				return;
-			}
-
-			var first = focusable[0];
-			var last = focusable[focusable.length - 1];
-
-			if (event.shiftKey && document.activeElement === first) {
-				event.preventDefault();
-				last.focus();
-			} else if (!event.shiftKey && document.activeElement === last) {
-				event.preventDefault();
-				first.focus();
-			}
-		}
-
-		var decided = false;
-
-		function handleDecision(decision) {
-			if (decided) {
-				return;
-			}
-
-			decided = true;
-
-			setConsentCookie(decision);
-			updateConsentMode(decision);
-			hideBanner();
-			dispatchConsentEvent(decision);
-			logDecision(decision);
-
-			if (decision === 'accepted') {
-				fetchAndInjectScripts();
-			}
-		}
-
-		function updateConsentMode(decision) {
-			var granted = decision === 'accepted' ? 'granted' : 'denied';
-
-			window.dataLayer = window.dataLayer || [];
-			window.dataLayer.push(['consent', 'update', {
-				ad_storage: granted,
-				ad_user_data: granted,
-				ad_personalization: granted,
-				analytics_storage: granted
-			}]);
-		}
-
-		function setConsentCookie(decision) {
-			var maxAge = parseInt(frblCookieNotice.expirationDays, 10) * 24 * 60 * 60;
-			var secure = window.location.protocol === 'https:' ? '; Secure' : '';
-
-			document.cookie = frblCookieNotice.cookieName + '=' + decision +
-				'; path=' + frblCookieNotice.cookiePath + '; max-age=' + maxAge + '; SameSite=Lax' + secure;
-		}
-
-		function hideBanner() {
-			banner.classList.add('frbl-cookie-notice--hidden');
-			document.body.classList.remove('frbl-cookie-notice-lock-scroll');
-			document.removeEventListener('keydown', trapFocus);
-
-			if (isPopup && previouslyFocused && typeof previouslyFocused.focus === 'function') {
-				previouslyFocused.focus({ preventScroll: true });
-			}
-
-			window.setTimeout(function () {
-				if (banner.parentNode) {
-					banner.parentNode.removeChild(banner);
-				}
-			}, 300);
-		}
-
-		function dispatchConsentEvent(decision) {
-			var event;
-
-			try {
-				event = new CustomEvent('frblCookieConsent', { detail: { consent: decision } });
-			} catch (e) {
-				event = document.createEvent('CustomEvent');
-				event.initCustomEvent('frblCookieConsent', true, true, { consent: decision });
-			}
-
-			document.dispatchEvent(event);
-		}
-
-		function logDecision(decision) {
-			var nonceForm = new FormData();
-			nonceForm.append('action', 'frbl_get_cookie_notice_log_nonce');
-
-			fetch(frblCookieNotice.ajaxUrl, {
-				method: 'POST',
-				credentials: 'same-origin',
-				body: nonceForm
-			})
-				.then(function (response) {
-					return response.json();
-				})
-				.then(function (response) {
-					if (!response || !response.success || !response.data) {
-						return;
-					}
-
-					var formData = new FormData();
-					formData.append('action', 'frbl_log_cookie_consent');
-					formData.append('nonce', response.data.nonce);
-					formData.append('decision', decision);
-
-					return fetch(frblCookieNotice.ajaxUrl, {
-						method: 'POST',
-						credentials: 'same-origin',
-						body: formData
-					});
-				})
-				.catch(function () {
-					// Best-effort: the aggregate stat is not critical to the consent flow.
-				});
-		}
-	}
-})();
diff --git a/docs/COOKIE-NOTICE.md b/docs/COOKIE-NOTICE.md
index 968cd89..e0f025b 100644
--- a/docs/COOKIE-NOTICE.md
+++ b/docs/COOKIE-NOTICE.md
@@ -1,23 +1,26 @@
 # Cookie Notice migration
 
-Cookie consent configuration has moved from FrontBlocks to the dedicated free
-[FrontConsent plugin](https://wordpress.org/plugins/frontconsent/). New sites
+Cookie consent has moved entirely out of FrontBlocks into the dedicated free
+[FrontConsent plugin](https://wordpress.org/plugins/frontconsent/). This was a
+hard cutover, not a transition: FrontBlocks no longer ships a cookie consent
+banner, AJAX consent endpoints, or tracking integrations of its own. All sites
 should install and configure FrontConsent directly.
 
 ## Existing FrontBlocks sites
 
-The legacy Cookie Notice module remains active during the transition, so an
-existing banner and its consent-gated integrations keep working. Its settings
-are no longer shown in **Appearance → FrontBlocks → Cookie Notice**.
+The legacy Cookie Notice module (banner, consent-gated Google Tag Manager/GA4
+and other tracking integrations) has been removed from FrontBlocks. Sites that
+had it enabled will show no cookie banner at all until FrontConsent is
+installed — this is intentional, to push migration forward.
 
-Install and activate FrontConsent from that tab or from the FrontBlocks admin
-notice. On its first run, FrontConsent automatically:
+**Appearance → FrontBlocks → Cookie Notice** is now a static promo panel: it
+explains the move and offers a one-click install/activation link for
+FrontConsent. Installing and activating FrontConsent automatically:
 
 - Copies the existing Cookie Notice settings and acceptance statistics.
 - Converts retired dedicated Google Tag Manager and GA4 IDs into its shared
   tracking integrations.
-- Disables the legacy FrontBlocks banner, preventing duplicate notices.
 
-After migration, manage the banner in **Settings → FrontConsent**. See the
+After installing, manage the banner in **Settings → FrontConsent**. See the
 [FrontConsent plugin page](https://wordpress.org/plugins/frontconsent/) for
 current configuration and integration documentation.
diff --git a/includes/Admin/RedundantPlugins.php b/includes/Admin/RedundantPlugins.php
index 8f31b65..5b52e9b 100644
--- a/includes/Admin/RedundantPlugins.php
+++ b/includes/Admin/RedundantPlugins.php
@@ -89,7 +89,6 @@ public static function get_entries() {
 	 * @return array
 	 */
 	private static function get_default_entries() {
-		$settings               = get_option( 'frontblocks_settings', array() );
 		$google_signin_settings = GoogleSignInSettings::get_options();
 
 		return array(
@@ -103,15 +102,6 @@ private static function get_default_entries() {
 				),
 				'doc_url' => admin_url( 'themes.php?page=frontblocks-settings' ),
 			),
-			'cookie-notice' => array(
-				'feature' => __( 'Cookie Notice', 'frontblocks' ),
-				'enabled' => (bool) ( $settings['enable_cookie_notice'] ?? false ),
-				'plugins' => array(
-					'gdpr-cookie-compliance/moove-gdpr.php' => 'GDPR Cookie Compliance',
-					'cookie-law-info/cookie-law-info.php' => 'CookieYes',
-				),
-				'doc_url' => admin_url( 'themes.php?page=frontblocks-settings' ),
-			),
 			'login-google'  => array(
 				'feature' => __( 'Google Login', 'frontblocks' ),
 				'enabled' => GoogleSignInSettings::is_configured() && ( ! empty( $google_signin_settings['enable_wp_login'] ) || ! empty( $google_signin_settings['enable_myaccount_login'] ) || ! empty( $google_signin_settings['enable_myaccount_register'] ) || ! empty( $google_signin_settings['enable_checkout'] ) ),
diff --git a/includes/Admin/Settings.php b/includes/Admin/Settings.php
index f9a6176..6212d6b 100644
--- a/includes/Admin/Settings.php
+++ b/includes/Admin/Settings.php
@@ -1865,12 +1865,12 @@ private function section_maintenance_callback() {
 	/**
 	 * Render the Cookie Notice tab as a promo panel for FrontConsent.
 	 *
-	 * Cookie Notice configuration moved out of FrontBlocks entirely (see
-	 * `includes/Frontend/CookieNotice.php` and
-	 * `includes/Admin/CookieNoticeDeprecationNotice.php`) — this tab no
-	 * longer renders any settings fields, only an explanation and an
-	 * install/manage call to action, so site owners who click the tab
-	 * looking for cookie settings find where they actually live now.
+	 * Cookie Notice's runtime module has been removed from FrontBlocks
+	 * entirely — a hard cutover, not a transition — leaving only this promo
+	 * panel and `includes/Admin/CookieNoticeDeprecationNotice.php`. This tab
+	 * renders no settings fields, only an explanation and an install/manage
+	 * call to action, so site owners who click the tab looking for cookie
+	 * settings find where they actually live now.
 	 *
 	 * @return void
 	 */
diff --git a/includes/Frontend/CookieNotice.php b/includes/Frontend/CookieNotice.php
deleted file mode 100644
index 894e206..0000000
--- a/includes/Frontend/CookieNotice.php
+++ /dev/null
@@ -1,1377 +0,0 @@
-<?php
-/**
- * Cookie Notice module for FrontBlocks.
- *
- * @package    FrontBlocks
- * @author     Closemarketing
- * @copyright  2026 Closemarketing
- * @version    1.0
- */
-
-namespace FrontBlocks\Frontend;
-
-defined( 'ABSPATH' ) || exit;
-
-/**
- * CookieNotice class.
- *
- * Displays a configurable cookie consent banner on the frontend, conditionally
- * loads Google Tag Manager / GA4 only after consent is granted, and keeps a
- * lightweight aggregate acceptance-rate counter.
- *
- * The banner markup and assets are always enqueued/rendered (never gated by
- * the visitor's own consent cookie) so that a full-page cache serves the exact
- * same HTML to every visitor of a given URL. All consent-specific behavior —
- * hiding the banner, and loading GTM/GA4 — happens client-side instead.
- *
- * @since 1.0.0
- */
-class CookieNotice {
-
-	/**
-	 * Option name storing the aggregate accepted counter.
-	 *
-	 * @var string
-	 */
-	const STATS_OPTION_ACCEPTED = 'frontblocks_cookie_notice_accepted_count';
-
-	/**
-	 * Option name storing the aggregate rejected counter.
-	 *
-	 * @var string
-	 */
-	const STATS_OPTION_REJECTED = 'frontblocks_cookie_notice_rejected_count';
-
-	/**
-	 * Nonce action used to protect the consent-logging AJAX endpoint.
-	 *
-	 * @var string
-	 */
-	const NONCE_ACTION = 'frbl_cookie_notice_nonce';
-
-	/**
-	 * Tracking tools detectable from a pasted snippet or plain ID (see
-	 * detect_tracking_snippet()) and storable as {type, id} records in the
-	 * shared cookie_notice_tracking_integrations list. 'gtm' and 'ga4' are
-	 * FrontBlocks' own native types; the rest are additional tools.
-	 *
-	 * @var string[]
-	 */
-	const TRACKING_TYPES = array( 'gtm', 'ga4', 'clientify_analytics_plus', 'clientify_analytics_classic', 'brevo', 'openai_chatgpt_ads' );
-
-	/**
-	 * Constructor.
-	 */
-	public function __construct() {
-		// These listeners must be available outside wp-admin for cron and integrations.
-		add_action( 'update_option_frontblocks_settings', array( $this, 'handle_frontblocks_settings_updated' ), 10, 3 );
-		add_action( 'add_option_frontblocks_settings', array( $this, 'handle_frontblocks_settings_added' ), 10, 2 );
-
-		if ( ! is_admin() && $this->is_enabled() ) {
-			// Priority 1: must run before any analytics/ads tag (Google Site Kit,
-			// a manually pasted GTM/gtag snippet, etc.) reads its consent defaults —
-			// Google Consent Mode only holds those tags back if 'default' is queued
-			// on the page's dataLayer before they call gtag('config', ...).
-			add_action( 'wp_head', array( $this, 'render_consent_mode_default' ), 1 );
-			// Also early (wp_head, not wp_footer): for an already-accepted visitor
-			// this is what actually requests GTM/GA4, so it needs to run long
-			// before a slow page finishes loading — a footer-only bootstrap risks
-			// missing an early interaction or a request that never reaches the
-			// footer at all, silently undercounting analytics.
-			add_action( 'wp_head', array( $this, 'render_consent_bootstrap_script' ), 2 );
-			add_action( 'wp_enqueue_scripts', array( $this, 'enqueue_assets' ) );
-			add_action( 'wp_footer', array( $this, 'render_banner' ) );
-		}
-
-		// The endpoints must stay available for logged-out and logged-in visitors alike.
-		add_action( 'wp_ajax_frbl_log_cookie_consent', array( $this, 'log_consent_callback' ) );
-		add_action( 'wp_ajax_nopriv_frbl_log_cookie_consent', array( $this, 'log_consent_callback' ) );
-		add_action( 'wp_ajax_frbl_get_cookie_notice_config', array( $this, 'get_config_callback' ) );
-		add_action( 'wp_ajax_nopriv_frbl_get_cookie_notice_config', array( $this, 'get_config_callback' ) );
-		add_action( 'wp_ajax_frbl_get_cookie_notice_log_nonce', array( $this, 'get_log_nonce_callback' ) );
-		add_action( 'wp_ajax_nopriv_frbl_get_cookie_notice_log_nonce', array( $this, 'get_log_nonce_callback' ) );
-	}
-
-	/**
-	 * Handle a saved FrontBlocks settings option.
-	 *
-	 * @param mixed  $old_value Previous option value.
-	 * @param mixed  $new_value New option value.
-	 * @param string $option_name Option name.
-	 * @return void
-	 */
-	public function handle_frontblocks_settings_updated( $old_value, $new_value, $option_name ) {
-		if ( 'frontblocks_settings' !== $option_name || ! is_array( $old_value ) || ! is_array( $new_value ) || ! $this->settings_changed( $old_value, $new_value ) ) {
-			return;
-		}
-
-		$this->handle_settings_changed( $old_value, $new_value );
-	}
-
-	/**
-	 * Handle the first save of the FrontBlocks settings option.
-	 *
-	 * @param string $option_name Option name.
-	 * @param mixed  $new_value New option value.
-	 * @return void
-	 */
-	public function handle_frontblocks_settings_added( $option_name, $new_value ) {
-		if ( ! is_array( $new_value ) || ! $this->settings_changed( array(), $new_value ) ) {
-			return;
-		}
-
-		$this->handle_settings_changed( array(), $new_value );
-	}
-
-	/**
-	 * Invalidate page caches after Cookie Notice settings change.
-	 *
-	 * @param array $old_options Previous settings.
-	 * @param array $new_options New settings.
-	 * @return void
-	 */
-	private function handle_settings_changed( $old_options, $new_options ) {
-		$cache_was_purged = false;
-
-		if ( function_exists( 'rocket_clean_domain' ) ) {
-			rocket_clean_domain();
-			$cache_was_purged = true;
-		}
-
-		/**
-		 * Fires after Cookie Notice settings affecting frontend output have changed.
-		 *
-		 * Cache integrations can use this action to invalidate cached pages.
-		 *
-		 * @param array $old_options Previous FrontBlocks settings.
-		 * @param array $new_options New FrontBlocks settings.
-		 */
-		do_action( 'frbl_cookie_notice_settings_updated', $old_options, $new_options );
-
-		$user_id = get_current_user_id();
-		if ( $user_id ) {
-			set_transient( 'frbl_cookie_notice_cache_notice_' . $user_id, $cache_was_purged ? 'wp-rocket' : 'manual', MINUTE_IN_SECONDS );
-		}
-	}
-
-	/**
-	 * Check whether Cookie Notice settings changed from their frontend defaults.
-	 *
-	 * @param array $old_options Previous settings.
-	 * @param array $new_options New settings.
-	 * @return bool
-	 */
-	private function settings_changed( $old_options, $new_options ) {
-		$defaults = array(
-			'enable_cookie_notice'                => false,
-			'cookie_notice_message'               => '',
-			'cookie_notice_accept_label'          => '',
-			'cookie_notice_reject_label'          => '',
-			'cookie_notice_policy_page_id'        => 0,
-			'cookie_notice_layout'                => 'bar',
-			'cookie_notice_position'              => 'bottom-right',
-			'cookie_notice_color'                 => '#687df9',
-			'cookie_notice_bg_color'              => '#ffffff',
-			'cookie_notice_radius'                => 'small',
-			'cookie_notice_expiration_days'       => 365,
-			'cookie_notice_tracking_integrations' => array(),
-		);
-
-		foreach ( $defaults as $key => $default ) {
-			$old_value = array_key_exists( $key, $old_options ) ? $old_options[ $key ] : $default;
-			$new_value = array_key_exists( $key, $new_options ) ? $new_options[ $key ] : $default;
-
-			if ( $old_value !== $new_value ) {
-				return true;
-			}
-		}
-
-		return false;
-	}
-
-	/**
-	 * Check if the Cookie Notice module is enabled.
-	 *
-	 * Always disabled once FrontConsent is active: FrontConsent is the
-	 * dedicated cookie-consent plugin this module is being retired in favor
-	 * of, and its own Migration class already flips
-	 * frontblocks_settings['enable_cookie_notice'] to false on activation —
-	 * this check is what keeps both banners from ever rendering together in
-	 * the narrow window before that migration has run (or if a site's admin
-	 * hand-edits the option back afterward).
-	 *
-	 * @return bool
-	 */
-	private function is_enabled() {
-		if ( defined( 'FRCN_VERSION' ) ) {
-			return false;
-		}
-
-		$options = get_option( 'frontblocks_settings', array() );
-		return (bool) ( $options['enable_cookie_notice'] ?? false );
-	}
-
-	/**
-	 * Name of the cookie storing the visitor's consent decision.
-	 *
-	 * On multisite, COOKIEPATH alone can't isolate the root site from its
-	 * subsites (the root site's path is '/', which every subsite path sits
-	 * under), so the blog ID is folded into the cookie name itself instead.
-	 *
-	 * @return string
-	 */
-	private function get_cookie_name() {
-		if ( is_multisite() ) {
-			return 'frbl_cookie_consent_' . get_current_blog_id();
-		}
-
-		return 'frbl_cookie_consent';
-	}
-
-	/**
-	 * Get the admin-ajax.php URL, forced onto the frontend's own scheme and host.
-	 *
-	 * The admin_url() function can point at a different scheme (e.g.
-	 * FORCE_SSL_ADMIN on an http frontend) and even a different host (when
-	 * WP_HOME and WP_SITEURL are configured separately) than the page that's
-	 * about to fetch() it. 'credentials: same-origin' then omits the consent
-	 * cookie, and the browser's CORS check blocks the response regardless —
-	 * so only the admin-ajax.php path is taken from admin_url(); the scheme
-	 * and host always come from the current request and home_url() instead,
-	 * keeping the AJAX call same-origin with the frontend.
-	 *
-	 * @return string
-	 */
-	private function get_ajax_url() {
-		$home_parts = wp_parse_url( home_url() );
-		$ajax_path  = (string) wp_parse_url( admin_url( 'admin-ajax.php' ), PHP_URL_PATH );
-
-		$scheme = is_ssl() ? 'https' : 'http';
-		$host   = $home_parts['host'] ?? '';
-		$port   = isset( $home_parts['port'] ) ? ':' . $home_parts['port'] : '';
-
-		return $scheme . '://' . $host . $port . $ajax_path;
-	}
-
-	/**
-	 * Get the visitor's current consent decision from the cookie.
-	 *
-	 * @return string 'accepted', 'rejected', or '' when the visitor has not decided yet.
-	 */
-	private function get_consent() {
-		$cookie_name = $this->get_cookie_name();
-
-		if ( ! isset( $_COOKIE[ $cookie_name ] ) ) {
-			return '';
-		}
-
-		$consent = sanitize_key( wp_unslash( $_COOKIE[ $cookie_name ] ) );
-
-		return in_array( $consent, array( 'accepted', 'rejected' ), true ) ? $consent : '';
-	}
-
-	/**
-	 * Check whether the current request is for the configured cookie policy page.
-	 *
-	 * Used to suppress the banner there so visitors can read the policy before
-	 * deciding — otherwise, with the popup layout, the notice would immediately
-	 * cover the policy content on that same page.
-	 *
-	 * @return bool
-	 */
-	private function is_policy_page() {
-		$options        = get_option( 'frontblocks_settings', array() );
-		$policy_page_id = (int) ( $options['cookie_notice_policy_page_id'] ?? 0 );
-
-		if ( ! $policy_page_id ) {
-			return false;
-		}
-
-		return get_queried_object_id() === $policy_page_id;
-	}
-
-	/**
-	 * Enqueue the frontend banner assets.
-	 *
-	 * Always enqueued, on every page including the configured policy page —
-	 * never gated by the visitor's consent cookie, so a full-page cache can
-	 * safely serve one cached HTML response to every visitor of a URL. The
-	 * policy page only suppresses the visible banner markup (see
-	 * render_banner()); it still needs these assets so an accepted visitor
-	 * keeps getting tracking scripts there too.
-	 *
-	 * @return void
-	 */
-	public function enqueue_assets() {
-		$options = get_option( 'frontblocks_settings', array() );
-		$days    = (int) ( $options['cookie_notice_expiration_days'] ?? 365 );
-
-		wp_enqueue_style(
-			'frontblocks-cookie-notice',
-			FRBL_PLUGIN_URL . 'assets/cookie-notice/frontblocks-cookie-notice.css',
-			array(),
-			FRBL_VERSION
-		);
-
-		wp_enqueue_script(
-			'frontblocks-cookie-notice',
-			FRBL_PLUGIN_URL . 'assets/cookie-notice/frontblocks-cookie-notice.js',
-			array(),
-			FRBL_VERSION,
-			true
-		);
-
-		wp_localize_script(
-			'frontblocks-cookie-notice',
-			'frblCookieNotice',
-			array(
-				'ajaxUrl'        => $this->get_ajax_url(),
-				'cookieName'     => $this->get_cookie_name(),
-				'cookiePath'     => defined( 'COOKIEPATH' ) && COOKIEPATH ? COOKIEPATH : '/',
-				'expirationDays' => $days > 0 ? $days : 365,
-			)
-		);
-	}
-
-	/**
-	 * Render the visible consent banner markup in the footer.
-	 *
-	 * Always rendered the same way for every visitor of a given URL — never
-	 * gated by the visitor's own consent cookie — so a full-page cache stays
-	 * safe; render_consent_bootstrap_script() (hooked much earlier, on
-	 * wp_head) hides it immediately client-side when a decision cookie already
-	 * exists, so a returning visitor never sees it flash.
-	 *
-	 * Suppressed on the configured cookie policy page so a popup layout can't
-	 * block that page's own content — the bootstrap script's tracking pickup
-	 * still runs there regardless, since it's on wp_head, not this method.
-	 *
-	 * @return void
-	 */
-	public function render_banner() {
-		if ( ! $this->is_policy_page() ) {
-			$this->render_banner_markup();
-		}
-	}
-
-	/**
-	 * Render the visible banner markup.
-	 *
-	 * @return void
-	 */
-	private function render_banner_markup() {
-		$options = get_option( 'frontblocks_settings', array() );
-
-		$message        = trim( (string) ( $options['cookie_notice_message'] ?? '' ) );
-		$accept_label   = trim( (string) ( $options['cookie_notice_accept_label'] ?? '' ) );
-		$reject_label   = trim( (string) ( $options['cookie_notice_reject_label'] ?? '' ) );
-		$policy_page_id = (int) ( $options['cookie_notice_policy_page_id'] ?? 0 );
-		$policy_url     = $policy_page_id ? (string) get_permalink( $policy_page_id ) : '';
-		$layout         = (string) ( $options['cookie_notice_layout'] ?? 'bar' );
-		$position       = (string) ( $options['cookie_notice_position'] ?? 'bottom-right' );
-		$color          = (string) ( $options['cookie_notice_color'] ?? '#687df9' );
-		$bg_color       = (string) ( $options['cookie_notice_bg_color'] ?? '#ffffff' );
-		$radius         = (string) ( $options['cookie_notice_radius'] ?? 'small' );
-
-		if ( '' === $message ) {
-			$message = __( 'We use cookies to improve your experience on our website. By browsing this website, you agree to our use of cookies.', 'frontblocks' );
-		}
-
-		if ( '' === $accept_label ) {
-			// Filterable so an add-on that relabels the binary choice as "accept all" /
-			// "reject non-essential" (once it introduces per-category consent) doesn't
-			// need the site admin to retype the button copy themselves.
-			$accept_label = apply_filters( 'frbl_cookie_notice_default_accept_label', __( 'Accept', 'frontblocks' ) );
-		}
-
-		if ( '' === $reject_label ) {
-			$reject_label = apply_filters( 'frbl_cookie_notice_default_reject_label', __( 'Reject', 'frontblocks' ) );
-		}
-
-		if ( ! in_array( $layout, array( 'bar', 'box', 'popup' ), true ) ) {
-			$layout = 'bar';
-		}
-
-		// '--init' starts the banner invisible/off-screen: it's what keeps an
-		// already-decided visitor from ever seeing it flash into view before
-		// frontblocks-cookie-notice.js hides it, and doubles as the "from" state
-		// of the entrance animation for a visitor who still needs to decide (the
-		// script removes it once that's determined). See the noscript style
-		// below for the no-JS fallback.
-		$classes       = array( 'frbl-cookie-notice', 'frbl-cookie-notice--' . $layout, 'frbl-cookie-notice--init' );
-		$content_width = function_exists( 'generate_get_option' ) ? absint( generate_get_option( 'container_width' ) ) : 0;
-
-		if ( $content_width > 0 ) {
-			$classes[] = 'frbl-cookie-notice--generatepress';
-		}
-
-		if ( 'box' === $layout ) {
-			$classes[] = 'bottom-left' === $position ? 'frbl-cookie-notice--left' : 'frbl-cookie-notice--right';
-		}
-
-		$is_modal    = 'popup' === $layout;
-		$accent_text = $this->get_readable_text_color( $color );
-		$accent_link = $this->get_readable_on_white_color( $color );
-		$panel_text  = $this->get_readable_text_color( $bg_color );
-		$style       = sprintf(
-			'--frbl-cookie-accent: %1$s; --frbl-cookie-accent-contrast: %2$s; --frbl-cookie-accent-on-light: %3$s; --frbl-cookie-bg: %4$s; --frbl-cookie-text: %5$s; --frbl-cookie-radius: %6$s;',
-			esc_attr( $color ),
-			esc_attr( $accent_text ),
-			esc_attr( $accent_link ),
-			esc_attr( $bg_color ),
-			esc_attr( $panel_text ),
-			esc_attr( $this->get_radius_value( $radius ) )
-		);
-
-		if ( $content_width > 0 ) {
-			$style .= sprintf( ' --frbl-cookie-content-width: %dpx;', $content_width );
-		}
-		?>
-		<div
-			id="frbl-cookie-notice"
-			class="<?php echo esc_attr( implode( ' ', $classes ) ); ?>"
-			style="<?php echo esc_attr( $style ); ?>"
-			role="<?php echo $is_modal ? 'dialog' : 'region'; ?>"
-			<?php echo $is_modal ? 'aria-modal="true"' : ''; ?>
-			aria-label="<?php echo esc_attr__( 'Cookie consent', 'frontblocks' ); ?>"
-		>
-			<div class="frbl-cookie-notice__panel">
-				<span class="frbl-cookie-notice__icon" aria-hidden="true">
-					<?php echo $this->get_cookie_icon_svg(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- static inline SVG, no dynamic data. ?>
-				</span>
-				<p class="frbl-cookie-notice__message">
-					<?php
-					echo esc_html( $message );
-
-					if ( $policy_url ) {
-						$policy_title = $policy_page_id ? get_the_title( $policy_page_id ) : '';
-						$link_text    = '' !== $policy_title ? $policy_title : __( 'Learn more', 'frontblocks' );
-
-						echo ' <a href="' . esc_url( $policy_url ) . '" class="frbl-cookie-notice__link" target="_blank" rel="noopener noreferrer">' . esc_html( $link_text ) . '</a>';
-					}
-					?>
-				</p>
-				<div class="frbl-cookie-notice__actions">
-					<?php
-					/**
-					 * Fires right before the reject/accept buttons, inside the same actions
-					 * row. Lets an add-on (e.g. per-category consent) insert its own button —
-					 * a "Customize" trigger — without forking this markup.
-					 *
-					 * @param array $options The 'frontblocks_settings' option array.
-					 */
-					do_action( 'frbl_cookie_notice_before_actions', $options );
-					?>
-					<button
-						type="button"
-						class="frbl-cookie-notice__button frbl-cookie-notice__button--reject"
-						data-frbl-cookie-action="reject"
-					>
-						<?php echo esc_html( $reject_label ); ?>
-					</button>
-					<button
-						type="button"
-						class="frbl-cookie-notice__button frbl-cookie-notice__button--accept"
-						data-frbl-cookie-action="accept"
-					>
-						<?php echo esc_html( $accept_label ); ?>
-					</button>
-				</div>
-			</div>
-		</div>
-		<?php
-		// Without JS, nothing would ever remove '--init' (see the class list
-		// above), so the banner would stay invisible forever — this resets it
-		// back to plain visible/static for a no-JS visitor.
-		?>
-		<noscript>
-			<style>
-				#frbl-cookie-notice.frbl-cookie-notice--init {
-					opacity: 1;
-					pointer-events: auto;
-					transform: none;
-				}
-			</style>
-		</noscript>
-		<?php
-		if ( $is_modal ) {
-			?>
-			<noscript>
-				<style>
-					.frbl-cookie-notice--popup {
-						position: static;
-						display: block;
-						overflow: visible;
-						background-color: transparent;
-						padding: 0;
-					}
-					.frbl-cookie-notice--popup .frbl-cookie-notice__panel {
-						max-width: none;
-						box-shadow: none;
-					}
-				</style>
-			</noscript>
-			<?php
-		}
-
-		/**
-		 * Fires right after the banner markup, still inside the same wp_footer
-		 * output. Lets an add-on print extra markup that belongs to the same
-		 * consent flow — e.g. a "customize categories" dialog — right next to it.
-		 *
-		 * @param array $options The 'frontblocks_settings' option array.
-		 */
-		do_action( 'frbl_cookie_notice_after_banner', $options );
-	}
-
-	/**
-	 * Print the Google Consent Mode default state, before any other script.
-	 *
-	 * This is what actually blocks analytics/ads tags that read Consent Mode
-	 * (Google Site Kit's own gtag snippet, a manually pasted GTM container,
-	 * etc.) from firing before the visitor decides — the banner markup and its
-	 * own accept/reject buttons only control what *this plugin* loads via the
-	 * GTM/GA4 ID fields below; they have no effect on tags any other plugin
-	 * injects independently. Consent Mode is the standard way to reach those
-	 * too, because gtag() queues commands on window.dataLayer regardless of
-	 * which plugin's script eventually processes them — as long as this runs
-	 * first, it doesn't matter which plugin's gtag.js loads second.
-	 *
-	 * Only the cookie *name* (a fixed string) is embedded server-side — the
-	 * decision itself is read from document.cookie client-side, in the browser,
-	 * exactly like render_consent_bootstrap_script() below. This keeps the
-	 * printed HTML identical for every visitor of a given URL, so a full-page
-	 * cache stays safe; an earlier version of this method embedded the
-	 * granted/denied value directly, which a full-page cache could then have
-	 * served to the wrong visitor.
-	 *
-	 * @return void
-	 */
-	public function render_consent_mode_default() {
-		$cookie_name = $this->get_cookie_name();
-		?>
-		<script>
-		window.dataLayer = window.dataLayer || [];
-		function gtag(){ window.dataLayer.push( arguments ); }
-		( function () {
-			var cookieMatch = document.cookie.match( new RegExp( '(?:^|; )<?php echo esc_js( $cookie_name ); ?>=([^;]*)' ) );
-			var consent = '';
-
-			if ( cookieMatch ) {
-				try {
-					consent = decodeURIComponent( cookieMatch[ 1 ] );
-				} catch ( e ) {
-					// Malformed percent-encoding: treat it the same as no cookie at all,
-					// same as the bootstrap script below — a thrown, uncaught error here
-					// would abort before gtag('consent', 'default', ...) ever runs.
-					consent = '';
-				}
-			}
-
-			var granted = 'accepted' === consent ? 'granted' : 'denied';
-			var state = {
-				ad_storage: granted,
-				ad_user_data: granted,
-				ad_personalization: granted,
-				analytics_storage: granted
-			};
-
-			// An add-on tracking per-category consent (analytics vs. marketing)
-			// can define this — reading its own cookie the same way, client-side —
-			// to send the granular signals Consent Mode actually expects instead
-			// of this binary default. Must be defined by the time this script
-			// runs, i.e. at an earlier wp_head priority than this method's own.
-			if ( typeof window.frblCookieNoticeConsentModeState === 'function' ) {
-				var overrideState = window.frblCookieNoticeConsentModeState();
-
-				if ( overrideState ) {
-					state = overrideState;
-				}
-			}
-
-			// An add-on reporting its own per-category consent as stale (see
-			// window.frblCookieNoticeIsConsentStale, already used to keep the
-			// banner/tracking bootstrap from trusting stale consent) means a
-			// fresh decision is needed — so deny by default here too, instead
-			// of falling back to this plugin's own (possibly still 'accepted')
-			// binary cookie, which would let an independently loaded, Consent
-			// Mode-aware tag (e.g. Site Kit) run before the visitor re-decides.
-			if ( typeof window.frblCookieNoticeIsConsentStale === 'function' && window.frblCookieNoticeIsConsentStale() ) {
-				state = {
-					ad_storage: 'denied',
-					ad_user_data: 'denied',
-					ad_personalization: 'denied',
-					analytics_storage: 'denied'
-				};
-			}
-
-			gtag( 'consent', 'default', state );
-		} )();
-		</script>
-		<?php
-	}
-
-	/**
-	 * Print the inline bootstrap script: hides the banner immediately when a
-	 * decision cookie already exists, and — for an accepted visitor — fetches
-	 * and injects the tracking scripts. Hooked on wp_head (not wp_footer,
-	 * where the banner markup itself renders) precisely so an already-accepted
-	 * visitor's tracking request fires as early as possible, on every page
-	 * including the policy page (where render_banner_markup() is skipped but
-	 * this still runs).
-	 *
-	 * This is an optimization, not the only implementation: it sets
-	 * window.frblCookieNoticeBootstrapped so the registered
-	 * frontblocks-cookie-notice.js file (enqueued in enqueue_assets()) knows
-	 * this already ran and skips redoing it. On a site whose Content Security
-	 * Policy blocks unnonced inline scripts, this one is simply never executed
-	 * by the browser, and that registered script performs the same bootstrap
-	 * itself instead — banner hiding and tracking still work there, just
-	 * without the no-flash guarantee this inline copy provides.
-	 *
-	 * @return void
-	 */
-	public function render_consent_bootstrap_script() {
-		$cookie_name = $this->get_cookie_name();
-		?>
-		<script>
-		( function () {
-			// This runs on wp_head, before '#frbl-cookie-notice' exists in the DOM
-			// (it's printed later, in wp_footer) — so, unlike the registered
-			// frontblocks-cookie-notice.js file, it can only handle the tracking
-			// side of an already-decided visitor, not hiding the banner itself.
-			var cookieMatch = document.cookie.match( new RegExp( '(?:^|; )<?php echo esc_js( $cookie_name ); ?>=([^;]*)' ) );
-			var consent     = '';
-
-			if ( cookieMatch ) {
-				try {
-					consent = decodeURIComponent( cookieMatch[ 1 ] );
-				} catch ( e ) {
-					// Malformed percent-encoding: treat it the same as no cookie at all.
-					consent = '';
-				}
-			}
-
-			window.frblCookieNoticeInject = window.frblCookieNoticeInject || function ( gtmId, ga4Id, trackingIntegrations, allowedCategories ) {
-				var allowsCategory = function ( category ) {
-					return ! allowedCategories || !! allowedCategories[ category ];
-				};
-
-				if ( gtmId && allowsCategory( 'analytics' ) ) {
-					window.dataLayer = window.dataLayer || [];
-					window.dataLayer.push( { 'gtm.start': new Date().getTime(), event: 'gtm.js' } );
-
-					var gtmScript = document.createElement( 'script' );
-					gtmScript.async = true;
-					gtmScript.src = 'https://www.googletagmanager.com/gtm.js?id=' + encodeURIComponent( gtmId );
-					document.head.appendChild( gtmScript );
-				}
-
-				if ( ga4Id && allowsCategory( 'analytics' ) ) {
-					var ga4Script = document.createElement( 'script' );
-					ga4Script.async = true;
-					ga4Script.src = 'https://www.googletagmanager.com/gtag/js?id=' + encodeURIComponent( ga4Id );
-					document.head.appendChild( ga4Script );
-
-					window.dataLayer = window.dataLayer || [];
-					window.gtag = window.gtag || function () {
-						window.dataLayer.push( arguments );
-					};
-					window.gtag( 'js', new Date() );
-					window.gtag( 'config', ga4Id );
-				}
-
-				if ( ! Array.isArray( trackingIntegrations ) ) {
-					trackingIntegrations = [];
-				}
-
-				trackingIntegrations.forEach( function ( integration ) {
-					var trackingType = integration && integration.type ? integration.type : '';
-					var trackingId = integration && integration.id ? integration.id : '';
-					var trackingCategory = integration && integration.category ? integration.category : 'marketing';
-
-					if ( ! trackingId || ! allowsCategory( trackingCategory ) ) {
-						return;
-					}
-
-				if ( 'clientify_analytics_plus' === trackingType ) {
-					var clientifyPixel = document.createElement( 'script' );
-					clientifyPixel.defer = true;
-					clientifyPixel.src = 'https://analyticsplusdev.clientify.net/analytics_plus/pixel/' + encodeURIComponent( trackingId );
-					document.head.appendChild( clientifyPixel );
-				} else if ( 'clientify_analytics_classic' === trackingType ) {
-					( function ( d, w, u, o ) {
-						w[ o ] = w[ o ] || function () {
-							( w[ o ].q = w[ o ].q || [] ).push( arguments );
-						};
-						var a = d.createElement( 'script' ),
-							m = d.getElementsByTagName( 'script' )[ 0 ];
-						a.async = 1; a.src = u;
-						m.parentNode.insertBefore( a, m );
-					} )( document, window, 'https://analytics.clientify.net/tracker.js', 'ana' );
-					window.ana( 'setTrackerUrl', 'https://analytics.clientify.net' );
-					window.ana( 'setTrackingCode', trackingId );
-					window.ana( 'trackPageview' );
-				} else if ( 'brevo' === trackingType ) {
-					var brevoScript = document.createElement( 'script' );
-					brevoScript.async = true;
-					brevoScript.src = 'https://cdn.brevo.com/js/sdk-loader.js';
-					document.head.appendChild( brevoScript );
-
-					window.Brevo = window.Brevo || [];
-					window.Brevo.push( [ 'init', { client_key: trackingId } ] );
-				} else if ( 'openai_chatgpt_ads' === trackingType ) {
-					if ( ! window.oaiq ) {
-						window.oaiq = function () {
-							window.oaiq.q.push( arguments );
-						};
-						window.oaiq.q = [];
-
-						var openaiScript = document.createElement( 'script' );
-						openaiScript.async = true;
-						openaiScript.src = 'https://bzrcdn.openai.com/sdk/oaiq.min.js';
-						document.head.appendChild( openaiScript );
-					}
-
-					window.oaiq( 'init', { pixelId: trackingId, debug: true } );
-				} else if ( typeof window.frblCookieNoticeInjectIntegration === 'function' ) {
-					window.frblCookieNoticeInjectIntegration( integration );
-				} else {
-					window.frblCookieNoticePendingIntegrations = window.frblCookieNoticePendingIntegrations || [];
-					window.frblCookieNoticePendingIntegrations.push( integration );
-					}
-				} );
-			};
-
-			// An add-on tracking per-category consent can define this (printed
-			// earlier than this script, at a lower wp_head priority) to say the
-			// stored consent is stale — e.g. the site admin just added a new
-			// integration — so tracking shouldn't start yet either, not just the
-			// banner staying hidden.
-			var isStale = typeof window.frblCookieNoticeIsConsentStale === 'function' && window.frblCookieNoticeIsConsentStale();
-
-			if ( 'accepted' === consent && ! isStale ) {
-				var formData = new FormData();
-				formData.append( 'action', 'frbl_get_cookie_notice_config' );
-
-				fetch( '<?php echo esc_url( $this->get_ajax_url() ); ?>', {
-					method: 'POST',
-					credentials: 'same-origin',
-					body: formData
-				} )
-					.then( function ( response ) { return response.json(); } )
-					.then( function ( response ) {
-						if ( response && response.success && response.data ) {
-							window.frblCookieNoticeInject( response.data.gtmId, response.data.ga4Id, response.data.trackingIntegrations, response.data.allowedCategories );
-						}
-					} )
-					.catch( function () {} );
-			}
-
-			window.frblCookieNoticeBootstrapped = true;
-		} )();
-		</script>
-		<?php
-	}
-
-	/**
-	 * Inline SVG for the popup layout's icon badge.
-	 *
-	 * The badge's circular background comes from CSS (using the configured
-	 * accent color), so this only needs the glyph itself, colored via
-	 * `fill="currentColor"`. Public so the admin settings preview can reuse
-	 * the exact same markup shown on the frontend.
-	 *
-	 * @return string Raw SVG markup.
-	 */
-	public static function get_cookie_icon_svg() {
-		return '<svg width="242" height="242" viewBox="0 0 242 242" fill="none" xmlns="http://www.w3.org/2000/svg" aria-hidden="true" focusable="false"><path d="M120.931 242C120.045 242 119.159 241.991 118.268 241.973C85.0089 241.264 54.2629 227.347 31.7023 202.787C-10.324 157.038 -10.4104 85.2933 31.5114 39.4584C59.026 9.38964 99.4661 -4.79939 139.638 1.44977C144.565 2.21332 148.137 6.66272 147.764 11.5712C147.155 19.761 150.128 27.7827 155.918 33.5774C158.345 35.9998 161.126 37.9268 164.171 39.3039C167.407 40.7628 169.58 43.7487 169.989 47.2892C170.689 53.6065 173.47 59.3467 178.024 63.9052C182.487 68.3637 188.404 71.2178 194.667 71.9405C198.185 72.345 201.157 74.5174 202.621 77.7488C204.002 80.812 205.92 83.5753 208.311 85.9705C214.11 91.7606 222.2 94.7057 230.317 94.1285C235.371 93.7649 239.67 97.3326 240.443 102.259C246.37 140.331 233.662 179.317 206.438 206.55C183.514 229.474 153.236 242 120.931 242ZM120.559 9.43963C89.4356 9.43963 59.7077 22.4243 38.3832 45.7394C-0.311723 88.043 -0.23447 154.266 38.5559 196.497C59.385 219.167 87.7631 232.01 118.468 232.665C149.346 233.374 178.124 221.703 199.857 199.969C224.99 174.827 236.725 138.841 231.244 103.695C220.055 104.145 209.438 100.26 201.73 92.5515C198.539 89.361 195.985 85.6705 194.14 81.5847C185.259 80.2258 177.397 76.4263 171.443 70.4907C165.462 64.5051 161.662 56.638 160.735 48.3345C156.272 45.9485 152.573 43.3852 149.346 40.1629C141.629 32.4457 137.675 21.7744 138.475 10.8758C132.484 9.91232 126.494 9.43963 120.559 9.43963ZM169.68 189.671C158.799 189.671 149.946 180.817 149.946 169.937C149.946 159.047 158.799 150.194 169.68 150.194C180.56 150.194 189.413 159.047 189.413 169.937C189.413 180.817 180.56 189.671 169.68 189.671ZM169.68 159.502C163.935 159.502 159.254 164.183 159.254 169.937C159.254 175.681 163.935 180.363 169.68 180.363C175.424 180.363 180.105 175.681 180.105 169.937C180.105 164.183 175.424 159.502 169.68 159.502ZM80.9776 179.817C66.2977 179.817 54.3539 167.873 54.3539 153.193C54.3539 138.514 66.2977 126.57 80.9776 126.57C95.6621 126.57 107.606 138.514 107.606 153.193C107.606 167.873 95.662 179.817 80.9776 179.817ZM80.9776 135.878C71.4289 135.878 63.6617 143.649 63.6617 153.193C63.6617 162.738 71.4289 170.509 80.9776 170.509C90.5264 170.509 98.2981 162.738 98.2981 153.193C98.2981 143.649 90.5263 135.878 80.9776 135.878ZM140.447 116.985C129.667 116.985 120.895 108.213 120.895 97.4326C120.895 86.6523 129.667 77.8807 140.447 77.8807C151.227 77.8807 159.999 86.6523 159.999 97.4326C159.999 108.213 151.227 116.985 140.447 116.985ZM140.447 87.1885C134.802 87.1885 130.203 91.7834 130.203 97.4326C130.203 103.082 134.802 107.677 140.447 107.677C146.092 107.677 150.691 103.082 150.691 97.4326C150.691 91.7833 146.092 87.1885 140.447 87.1885ZM68.7701 87.7021C59.7077 87.7021 52.3314 80.3258 52.3314 71.2588C52.3314 62.1963 59.7077 54.82 68.7701 54.82C77.8371 54.82 85.2134 62.1963 85.2134 71.2588C85.2134 80.3258 77.8371 87.7021 68.7701 87.7021ZM68.7701 64.1279C64.8388 64.1279 61.6393 67.3275 61.6393 71.2588C61.6393 75.1946 64.8388 78.3942 68.7701 78.3942C72.706 78.3942 75.9055 75.1946 75.9055 71.2588C75.9055 67.3275 72.706 64.1279 68.7701 64.1279Z" fill="currentColor"/></svg>';
-	}
-
-	/**
-	 * Map a corner-rounding preset to its CSS value.
-	 *
-	 * Public static — also used by the admin settings preview so it renders the
-	 * exact same rounding the frontend does.
-	 *
-	 * @param string $preset 'none', 'small', or 'large'.
-	 * @return string CSS length, e.g. '12px'.
-	 */
-	public static function get_radius_value( $preset ) {
-		$radii = array(
-			'none'  => '0px',
-			'small' => '12px',
-			'large' => '24px',
-		);
-
-		return $radii[ $preset ] ?? $radii['small'];
-	}
-
-	/**
-	 * Pick black or white text, whichever has the higher actual WCAG contrast
-	 * ratio against a background color (not just whichever "looks" darker/lighter).
-	 *
-	 * Public static — pure color math with no instance state, also used by the
-	 * admin settings preview to show the same contrast the frontend actually renders.
-	 *
-	 * @param string $hex_color Background color, e.g. '#687df9'.
-	 * @return string '#ffffff' or '#000000'.
-	 */
-	public static function get_readable_text_color( $hex_color ) {
-		$bg_luminance = self::get_relative_luminance( self::hex_to_rgb( $hex_color ) );
-
-		$white_contrast = self::get_contrast_ratio( $bg_luminance, 1 );
-		$black_contrast = self::get_contrast_ratio( $bg_luminance, 0 );
-
-		// Pure black, not a lighter dark neutral: whichever of black/white has
-		// the lower contrast against any background is guaranteed to still
-		// reach ~4.58:1 at that background's worst-case luminance (~0.179),
-		// clearing the 4.5:1 button-text requirement for every allowed accent.
-		return $white_contrast >= $black_contrast ? '#ffffff' : '#000000';
-	}
-
-	/**
-	 * Ensure a color stays legible when used as text on the banner's white panel —
-	 * accent colors that don't reach a 4.5:1 contrast ratio against white fall
-	 * back to a dark neutral instead.
-	 *
-	 * Public static — pure color math with no instance state, also used by the
-	 * admin settings preview to show the same contrast the frontend actually renders.
-	 *
-	 * @param string $hex_color Requested accent color, e.g. '#687df9'.
-	 * @return string A color safe to use as text on a white background.
-	 */
-	public static function get_readable_on_white_color( $hex_color ) {
-		$luminance = self::get_relative_luminance( self::hex_to_rgb( $hex_color ) );
-		$contrast  = self::get_contrast_ratio( $luminance, 1 );
-
-		return $contrast >= 4.5 ? $hex_color : '#111827';
-	}
-
-	/**
-	 * WCAG relative luminance of an sRGB color.
-	 *
-	 * @param int[] $rgb Three-item [r, g, b] array, each 0-255.
-	 * @return float Relative luminance between 0 (black) and 1 (white).
-	 */
-	private static function get_relative_luminance( $rgb ) {
-		$channels = array();
-
-		foreach ( $rgb as $channel ) {
-			$channel    = $channel / 255;
-			$channels[] = $channel <= 0.03928 ? $channel / 12.92 : ( ( $channel + 0.055 ) / 1.055 ) ** 2.4;
-		}
-
-		return 0.2126 * $channels[0] + 0.7152 * $channels[1] + 0.0722 * $channels[2];
-	}
-
-	/**
-	 * WCAG contrast ratio between two relative luminances.
-	 *
-	 * @param float $luminance_a First relative luminance (0-1).
-	 * @param float $luminance_b Second relative luminance (0-1).
-	 * @return float Contrast ratio, from 1 (no contrast) to 21 (black on white).
-	 */
-	private static function get_contrast_ratio( $luminance_a, $luminance_b ) {
-		$lighter = max( $luminance_a, $luminance_b );
-		$darker  = min( $luminance_a, $luminance_b );
-
-		return ( $lighter + 0.05 ) / ( $darker + 0.05 );
-	}
-
-	/**
-	 * Convert a hex color (3 or 6 digits, with or without '#') to an [r, g, b] triple.
-	 *
-	 * @param string $hex_color Hex color string.
-	 * @return int[] Three-item array of 0-255 RGB values; black if the input is invalid.
-	 */
-	private static function hex_to_rgb( $hex_color ) {
-		$hex = ltrim( (string) $hex_color, '#' );
-
-		if ( 3 === strlen( $hex ) ) {
-			$hex = $hex[0] . $hex[0] . $hex[1] . $hex[1] . $hex[2] . $hex[2];
-		}
-
-		if ( 6 !== strlen( $hex ) || ! ctype_xdigit( $hex ) ) {
-			return array( 0, 0, 0 );
-		}
-
-		return array(
-			hexdec( substr( $hex, 0, 2 ) ),
-			hexdec( substr( $hex, 2, 2 ) ),
-			hexdec( substr( $hex, 4, 2 ) ),
-		);
-	}
-
-	/**
-	 * AJAX callback: returns the GTM/GA4 identifiers, but only when the requesting
-	 * browser's own consent cookie says 'accepted'.
-	 *
-	 * Deliberately unauthenticated: it's read-only, never touches the aggregate
-	 * counters, and only ever echoes back non-secret IDs that are already public
-	 * once GTM/GA4 loads. A nonce would have to be embedded in the cache-neutral
-	 * HTML this module renders, and would go stale on any page a full-page cache
-	 * keeps for longer than a WordPress nonce's lifetime — breaking tracking for
-	 * every visitor of that cached page until it expires from the cache.
-	 *
-	 * @return void
-	 */
-	public function get_config_callback() {
-		$response = array(
-			'gtmId'                => '',
-			'ga4Id'                => '',
-			'trackingIntegrations' => array(),
-			'allowedCategories'    => null,
-		);
-
-		$has_tracking_consent = 'accepted' === $this->get_consent();
-
-		/**
-		 * Filters whether the current visitor has granted consent for tracking.
-		 *
-		 * Add-ons with per-category consent can allow this endpoint when at least
-		 * one tracking category is accepted. They must pass the allowed categories
-		 * to frblCookieNoticeInject() so only matching integrations are loaded.
-		 *
-		 * @param bool $has_tracking_consent Whether binary consent is accepted.
-		 */
-		$has_tracking_consent          = (bool) apply_filters( 'frbl_cookie_notice_has_tracking_consent', $has_tracking_consent );
-		$response['allowedCategories'] = apply_filters( 'frbl_cookie_notice_allowed_tracking_categories', null );
-
-		if ( $this->is_enabled() && $has_tracking_consent ) {
-			$options       = get_option( 'frontblocks_settings', array() );
-			$site_kit_tags = $this->get_google_site_kit_managed_tags();
-			$integrations  = self::get_tracking_integrations( $options );
-			$other_types   = array();
-			$gtm_id        = '';
-			$ga4_id        = '';
-
-			foreach ( $integrations as $integration ) {
-				if ( 'gtm' === $integration['type'] ) {
-					$gtm_id = $integration['id'];
-				} elseif ( 'ga4' === $integration['type'] ) {
-					$ga4_id = $integration['id'];
-				} else {
-					$other_types[] = $integration;
-				}
-			}
-
-			// GTM/GA4 are surfaced through their own dedicated response keys
-			// (consumed directly by the inline bootstrap script and the
-			// registered frontblocks-cookie-notice.js fallback), not through
-			// the generic trackingIntegrations dispatch used by add-ons.
-			$response['gtmId']                = $site_kit_tags['gtm'] ? '' : $this->sanitize_gtm_id( $gtm_id );
-			$response['ga4Id']                = $site_kit_tags['ga4'] ? '' : $this->sanitize_ga4_id( $ga4_id );
-			$response['trackingIntegrations'] = array_map(
-				function ( $integration ) {
-					$integration['category'] = self::get_integration_default_category( $integration['type'] );
-					return $integration;
-				},
-				$other_types
-			);
-		}
-
-		wp_send_json_success( $response );
-	}
-
-	/**
-	 * Get the Google tags that Site Kit is configured to place.
-	 *
-	 * Site Kit may be active without placing a tag. Only suppress the matching
-	 * FrontBlocks ID when its Site Kit module has both an identifier and snippet
-	 * placement enabled, avoiding duplicated tags without disabling tracking on
-	 * partially configured Site Kit installations.
-	 *
-	 * @return array{gtm: bool, ga4: bool}
-	 */
-	private function get_google_site_kit_managed_tags() {
-		$tags = array(
-			'gtm' => false,
-			'ga4' => false,
-		);
-
-		if ( ! defined( 'GOOGLESITEKIT_VERSION' ) && ! class_exists( '\\Google\\Site_Kit\\Plugin' ) ) {
-			return $tags;
-		}
-
-		$tag_manager_settings = get_option( 'googlesitekit_tagmanager_settings', array() );
-		if ( is_array( $tag_manager_settings ) && ! empty( $tag_manager_settings['containerID'] ) && ( ! isset( $tag_manager_settings['useSnippet'] ) || $tag_manager_settings['useSnippet'] ) ) {
-			$tags['gtm'] = true;
-		}
-
-		$analytics_settings = get_option( 'googlesitekit_analytics-4_settings', array() );
-		if ( is_array( $analytics_settings ) && ! empty( $analytics_settings['measurementID'] ) && ( ! isset( $analytics_settings['useSnippet'] ) || $analytics_settings['useSnippet'] ) ) {
-			$tags['ga4'] = true;
-		}
-
-		return $tags;
-	}
-
-	/**
-	 * AJAX callback: returns a fresh nonce for the logging endpoint.
-	 *
-	 * Fetched live at the moment a visitor actually decides, instead of being
-	 * embedded in the cache-neutral HTML this module renders — a nonce baked
-	 * into that HTML would go stale on any page a full-page cache keeps around
-	 * longer than a WordPress nonce's lifetime, silently dropping every decision
-	 * logged from that cached response. Generating a nonce isn't a sensitive
-	 * action in itself (the same thing any login form does for a logged-out
-	 * visitor), so this endpoint needs no authentication of its own.
-	 *
-	 * @return void
-	 */
-	public function get_log_nonce_callback() {
-		wp_send_json_success( array( 'nonce' => wp_create_nonce( self::NONCE_ACTION ) ) );
-	}
-
-	/**
-	 * AJAX callback: logs the visitor's decision in the aggregate accepted/rejected counters.
-	 *
-	 * This is a best-effort, lightweight aggregate stat, not a precise per-visitor
-	 * metering system — the module explicitly renders cache-neutral HTML (see
-	 * render_banner()), so there is no page-embedded value this endpoint could use
-	 * to deduplicate a replayed request without also breaking under a full-page
-	 * cache, the same way a one-time token would. The nonce itself is fetched
-	 * fresh via get_log_nonce_callback() right before this call, so it stays
-	 * valid regardless of how long a cache keeps the page that triggered it.
-	 *
-	 * @return void
-	 */
-	public function log_consent_callback() {
-		if ( ! $this->is_enabled() ) {
-			wp_send_json_error( array( 'message' => __( 'Cookie Notice is disabled.', 'frontblocks' ) ), 403 );
-		}
-
-		$nonce = isset( $_POST['nonce'] ) ? sanitize_text_field( wp_unslash( $_POST['nonce'] ) ) : '';
-
-		if ( ! wp_verify_nonce( $nonce, self::NONCE_ACTION ) ) {
-			wp_send_json_error( array( 'message' => __( 'Security check failed.', 'frontblocks' ) ), 403 );
-		}
-
-		$decision = isset( $_POST['decision'] ) ? sanitize_key( wp_unslash( $_POST['decision'] ) ) : '';
-
-		if ( ! in_array( $decision, array( 'accepted', 'rejected' ), true ) ) {
-			wp_send_json_error( array( 'message' => __( 'Invalid decision.', 'frontblocks' ) ), 400 );
-		}
-
-		$this->maybe_increment_stat( $decision );
-
-		wp_send_json_success();
-	}
-
-	/**
-	 * Increment the aggregate accepted/rejected counter for a decision.
-	 *
-	 * Logged-in administrators are excluded so testing the banner doesn't skew stats.
-	 *
-	 * @param string $decision 'accepted' or 'rejected'.
-	 * @return void
-	 */
-	private function maybe_increment_stat( $decision ) {
-		if ( current_user_can( 'manage_options' ) ) {
-			return;
-		}
-
-		$option_name = 'accepted' === $decision ? self::STATS_OPTION_ACCEPTED : self::STATS_OPTION_REJECTED;
-
-		$this->increment_option_atomically( $option_name );
-	}
-
-	/**
-	 * Increment an integer option by 1 directly in the database.
-	 *
-	 * A plain get_option()/update_option() round trip races under concurrent
-	 * requests — two visitors deciding at the same moment can both read the same
-	 * value and one increment gets overwritten. A single UPDATE ... SET value = value + 1
-	 * lets the database serialize concurrent increments instead.
-	 *
-	 * @param string $option_name Option name storing a plain integer.
-	 * @return void
-	 */
-	private function increment_option_atomically( $option_name ) {
-		global $wpdb;
-
-		$sql = $wpdb->prepare( "UPDATE {$wpdb->options} SET option_value = option_value + 1 WHERE option_name = %s", $option_name );
-
-		$updated = $wpdb->query( $sql );
-
-		if ( ! $updated ) {
-			// First time this counter is created. add_option() returns false if another
-			// request created the row first — in that case fall back to the atomic UPDATE
-			// so this increment isn't silently dropped.
-			if ( ! add_option( $option_name, 1, '', 'no' ) ) {
-				$wpdb->query( $sql );
-			}
-		}
-
-		wp_cache_delete( $option_name, 'options' );
-	}
-
-	/**
-	 * Validate a Google Tag Manager container ID (e.g. GTM-XXXXXXX).
-	 *
-	 * @param string $value Raw value.
-	 * @return string Sanitized ID, or an empty string when it doesn't match the expected format.
-	 */
-	private function sanitize_gtm_id( $value ) {
-		$value = strtoupper( trim( (string) $value ) );
-
-		return preg_match( '/^GTM-[A-Z0-9]+$/', $value ) ? $value : '';
-	}
-
-	/**
-	 * Validate a GA4 Measurement ID (e.g. G-XXXXXXXXXX).
-	 *
-	 * @param string $value Raw value.
-	 * @return string Sanitized ID, or an empty string when it doesn't match the expected format.
-	 */
-	private function sanitize_ga4_id( $value ) {
-		$value = strtoupper( trim( (string) $value ) );
-
-		return preg_match( '/^G-[A-Z0-9]+$/', $value ) ? $value : '';
-	}
-
-	/**
-	 * Validate a stored tracking integration type against the ones this
-	 * plugin actually knows how to inject.
-	 *
-	 * @param string $value Raw stored value.
-	 * @return string One of TRACKING_TYPES, or '' if unrecognized.
-	 */
-	private function sanitize_tracking_type( $value ) {
-		return in_array( $value, self::get_tracking_types(), true ) ? $value : '';
-	}
-
-	/**
-	 * Return the tracking integration types supported by FrontBlocks and add-ons.
-	 *
-	 * @return string[] Tracking integration type slugs.
-	 */
-	public static function get_tracking_types() {
-		/**
-		 * Filters the tracking integration types accepted by Cookie Notice.
-		 *
-		 * @param string[] $types Built-in tracking integration type slugs.
-		 */
-		return array_values( array_unique( apply_filters( 'frbl_cookie_notice_tracking_types', self::TRACKING_TYPES ) ) );
-	}
-
-	/**
-	 * Detect which supported tool a pasted tracking snippet belongs to, and
-	 * pull out the single id/code it needs to be rebuilt later.
-	 *
-	 * The admin settings field only asks for "paste your tracking snippet" —
-	 * it deliberately doesn't ask which tool or product it's from, so this is
-	 * what tells them apart. Order matters: Clientify's two products are only
-	 * distinguishable by which loader URL they reference, so both are checked
-	 * before falling through to Brevo.
-	 *
-	 * Public static — also used by the admin settings page to detect what was
-	 * just pasted and by the settings sanitizer to decide what to store.
-	 *
-	 * @param string $raw Raw snippet as pasted by the admin.
-	 * @return array{type: string, id: string}|null The detected type/id pair, or null if unrecognized.
-	 */
-	public static function detect_tracking_snippet( $raw ) {
-		$raw = (string) $raw;
-
-		if ( '' === trim( $raw ) ) {
-			return null;
-		}
-
-		// A bare container ID, or Google Tag Manager's own install snippet —
-		// which passes the container ID as the IIFE's last literal argument,
-		// not embedded in the gtm.js URL itself.
-		if ( preg_match( '/^GTM-[A-Za-z0-9]+$/i', trim( $raw ) ) ) {
-			return array(
-				'type' => 'gtm',
-				'id'   => strtoupper( trim( $raw ) ),
-			);
-		}
-
-		if ( false !== strpos( $raw, 'googletagmanager.com/gtm.js' ) && preg_match( '/[\'"](GTM-[A-Za-z0-9]+)[\'"]/i', $raw, $matches ) ) {
-			return array(
-				'type' => 'gtm',
-				'id'   => strtoupper( $matches[1] ),
-			);
-		}
-
-		// A bare measurement ID, or gtag.js's own install snippet — which does
-		// embed the measurement ID directly in its src URL.
-		if ( preg_match( '/^G-[A-Za-z0-9]+$/i', trim( $raw ) )
-			|| preg_match( '#googletagmanager\.com/gtag/js\?id=(G-[A-Za-z0-9]+)#i', $raw, $matches )
-		) {
-			return array(
-				'type' => 'ga4',
-				'id'   => strtoupper( isset( $matches[1] ) ? $matches[1] : trim( $raw ) ),
-			);
-		}
-
-		if ( preg_match( '#analyticsplusdev\.clientify\.net/analytics_plus/pixel/([A-Za-z0-9_-]+)#', $raw, $matches ) ) {
-			return array(
-				'type' => 'clientify_analytics_plus',
-				'id'   => $matches[1],
-			);
-		}
-
-		// The classic snippet calls a generic ana(...) dispatcher with the
-		// method name as its first string argument — e.g.
-		// ana('setTrackingCode', 'CF-12345-12345-ABCDE') — not a
-		// setTrackingCode(...) call itself.
-		if ( false !== strpos( $raw, 'analytics.clientify.net/tracker.js' )
-			&& preg_match( '#ana\(\s*[\'"]setTrackingCode[\'"]\s*,\s*[\'"]([^\'"]+)[\'"]#', $raw, $matches )
-		) {
-			return array(
-				'type' => 'clientify_analytics_classic',
-				'id'   => $matches[1],
-			);
-		}
-
-		if ( false !== strpos( $raw, 'cdn.brevo.com/js/sdk-loader.js' )
-			&& preg_match( '#client_key\s*:\s*[\'"]([^\'"]+)[\'"]#', $raw, $matches )
-		) {
-			return array(
-				'type' => 'brevo',
-				'id'   => $matches[1],
-			);
-		}
-
-		if ( false !== strpos( $raw, 'bzrcdn.openai.com/sdk/oaiq.min.js' )
-			&& preg_match( '#pixelId\s*:\s*[\'\"]([A-Za-z0-9_-]+)[\'\"]#', $raw, $matches )
-		) {
-			return array(
-				'type' => 'openai_chatgpt_ads',
-				'id'   => $matches[1],
-			);
-		}
-
-		if ( preg_match( '/^[A-Za-z0-9]{22}$/', trim( $raw ) ) ) {
-			return array(
-				'type' => 'openai_chatgpt_ads',
-				'id'   => trim( $raw ),
-			);
-		}
-
-		/**
-		 * Filters a pasted tracking snippet that FrontBlocks does not detect.
-		 *
-		 * Add-ons can return a type/ID pair after registering their type through
-		 * frbl_cookie_notice_tracking_types.
-		 *
-		 * @param array|null $detected Detected type/ID pair, or null.
-		 * @param string     $raw      Pasted tracking snippet.
-		 */
-		$detected = apply_filters( 'frbl_cookie_notice_detect_tracking_snippet', null, $raw );
-		if ( is_array( $detected ) && isset( $detected['type'], $detected['id'] ) && in_array( $detected['type'], self::get_tracking_types(), true ) ) {
-			return array(
-				'type' => $detected['type'],
-				'id'   => sanitize_text_field( $detected['id'] ),
-			);
-		}
-
-		return null;
-	}
-
-	/**
-	 * Return the safe, normalized integration records stored in the settings.
-	 *
-	 * Raw tracking code is never persisted. The legacy single-integration
-	 * options are read only as a migration path and are converted on the next
-	 * settings save.
-	 *
-	 * @param array $options FrontBlocks settings.
-	 * @param bool  $include_unknown Whether to preserve records registered by an inactive add-on.
-	 * @return array<int, array{type: string, id: string}> Integration records.
-	 */
-	public static function get_tracking_integrations( $options, $include_unknown = false ) {
-		if ( ! is_array( $options ) ) {
-			return array();
-		}
-
-		$stored = array_key_exists( 'cookie_notice_tracking_integrations', $options ) ? $options['cookie_notice_tracking_integrations'] : null;
-		if ( null === $stored ) {
-			$legacy_type = $options['cookie_notice_tracking_type'] ?? '';
-			$legacy_id   = $options['cookie_notice_tracking_id'] ?? '';
-			$stored      = array(
-				array(
-					'type' => $legacy_type,
-					'id'   => $legacy_id,
-				),
-			);
-		}
-
-		if ( ! is_array( $stored ) ) {
-			return array();
-		}
-
-		$integrations = array();
-		foreach ( $stored as $integration ) {
-			if ( ! is_array( $integration ) ) {
-				continue;
-			}
-
-			$type = sanitize_key( $integration['type'] ?? '' );
-			$id   = sanitize_text_field( $integration['id'] ?? '' );
-			if ( ( in_array( $type, self::get_tracking_types(), true ) || $include_unknown ) && '' !== $type && '' !== $id ) {
-				$integrations[ $type ] = array(
-					'type' => $type,
-					'id'   => $id,
-				);
-			}
-		}
-
-		// Keep sites upgrading directly from the retired dedicated fields working
-		// until FrontConsent migrates them into its shared integrations list.
-		$legacy_ids = array(
-			'cookie_notice_gtm_id' => 'gtm',
-			'cookie_notice_ga4_id' => 'ga4',
-		);
-
-		foreach ( $legacy_ids as $option_key => $type ) {
-			$legacy_id = sanitize_text_field( $options[ $option_key ] ?? '' );
-			if ( '' !== $legacy_id && ! isset( $integrations[ $type ] ) ) {
-				$integrations[ $type ] = array(
-					'type' => $type,
-					'id'   => $legacy_id,
-				);
-			}
-		}
-
-		return array_values( $integrations );
-	}
-
-	/**
-	 * The consent category an integration falls under by default, for
-	 * FrontBlocks PRO's Advanced Cookie Management to key its per-category
-	 * gating on — this plugin's own gating stays a plain accept/reject
-	 * binary regardless of category.
-	 *
-	 * @param string $type Integration type: 'gtm', 'ga4', or one of TRACKING_TYPES.
-	 * @return string Category slug, e.g. 'analytics' or 'marketing'.
-	 */
-	public static function get_integration_default_category( $type ) {
-		$categories = array(
-			'gtm'                         => 'analytics',
-			'ga4'                         => 'analytics',
-			'clientify_analytics_plus'    => 'marketing',
-			'clientify_analytics_classic' => 'marketing',
-			'brevo'                       => 'marketing',
-			'openai_chatgpt_ads'          => 'marketing',
-		);
-
-		$category = $categories[ $type ] ?? 'marketing';
-
-		/**
-		 * Filters which consent category an integration defaults to.
-		 *
-		 * FrontBlocks PRO's Advanced Cookie Management reads this to decide
-		 * which category gate (e.g. "Analytics" vs "Marketing") an
-		 * integration falls under when the visitor granted only some
-		 * categories, instead of this plugin's own binary accept/reject.
-		 *
-		 * @param string $category Default category slug ('analytics' or 'marketing').
-		 * @param string $type     Integration type ('gtm', 'ga4', 'clientify_analytics_plus', 'clientify_analytics_classic', 'brevo').
-		 */
-		return apply_filters( 'frbl_cookie_notice_integration_category', $category, $type );
-	}
-}
diff --git a/includes/Plugin_Main.php b/includes/Plugin_Main.php
index 094dfdb..99e6af2 100644
--- a/includes/Plugin_Main.php
+++ b/includes/Plugin_Main.php
@@ -204,9 +204,6 @@ private function load_modules() {
 		// Maintenance Mode module.
 		new Frontend\Maintenance();
 
-		// Cookie Notice module.
-		new Frontend\CookieNotice();
-
 		// Image Management module (size control + WebP/AVIF delivery).
 		new Frontend\ImageManagement();
 
diff --git a/readme.md b/readme.md
index 2cccb94..c0da792 100644
--- a/readme.md
+++ b/readme.md
@@ -27,7 +27,7 @@ Repository for FrontBlocks Site Tools, a WordPress plugin covering the everyday
 - Custom SVG Animations
 
 ### Site Tools
-- **Cookie Notice (moved to FrontConsent)** - Cookie consent configuration now lives in the dedicated free [FrontConsent](https://wordpress.org/plugins/frontconsent/) plugin. The legacy FrontBlocks module remains active for existing sites until FrontConsent migrates its settings and stats.
+- **Cookie Notice (moved to FrontConsent)** - Cookie consent now lives entirely in the dedicated free [FrontConsent](https://wordpress.org/plugins/frontconsent/) plugin. FrontBlocks no longer ships a banner of its own; the "Cookie Notice" settings tab is a promo panel pointing existing sites at FrontConsent, which migrates their settings and stats on install.
 - **Image Management** - Enable/disable/override registered image sizes, define custom sizes, bulk-regenerate thumbnails, and automatically serve WebP/AVIF variants on the frontend
 - **Maintenance Mode** - Show a customizable maintenance page to visitors while keeping the site accessible to logged-in administrators
 - **Google Sign-In** - "Sign in / Sign up with Google" button for wp-login.php, WooCommerce My Account and Checkout, plus a shortcode and block, with server-side ID token verification
@@ -72,7 +72,7 @@ Repository for FrontBlocks Site Tools, a WordPress plugin covering the everyday
 - [Full Page Implementation](./docs/FULLPAGE-IMPLEMENTATION-SUMMARY.md) - Technical implementation details
 - [Changelog Full Page](./docs/CHANGELOG-FULLPAGE.md) - Full Page feature changelog
 - [Carousel Pattern](./docs/CAROUSEL-PATTERN.md) - Hero carousel pattern with native WordPress blocks
-- [Cookie Notice migration](./docs/COOKIE-NOTICE.md) - Moving legacy Cookie Notice settings to FrontConsent
+- [Cookie Notice migration](./docs/COOKIE-NOTICE.md) - Cookie consent has moved entirely to FrontConsent
 - [Image Management](./docs/IMAGE-MANAGEMENT.md) - Image size control and automatic WebP/AVIF delivery
 - [Review Notice](./docs/REVIEW-NOTICE.md) - Dismissible WordPress.org review prompt
 - [Redundant Plugins Notice](./docs/REDUNDANT-PLUGINS.md) - Detects plugins made unnecessary by FrontBlocks features and how to register new pairings
diff --git a/readme.txt b/readme.txt
index 33b37c5..0939aa5 100644
--- a/readme.txt
+++ b/readme.txt
@@ -182,7 +182,7 @@ Register and manage events directly from WordPress. Enable the Events feature fr
 Display a smart banner that detects the visitor's browser language and suggests switching to the matching version of the site. Enable the banner from the FrontBlocks settings page. The banner only appears when the site has a translated version matching the user's browser language, and respects user dismissal via a cookie.
 
 **Cookie Notice (moved to FrontConsent):**
-Cookie consent — including the Advanced Cookie Management upsell (per-category consent, Google Ads/Meta Pixel/Microsoft Clarity) — moved out of FrontBlocks entirely into its own dedicated free plugin, **FrontConsent** (https://wordpress.org/plugins/frontconsent/), so it's easier to find and keeps improving on its own. The Cookie Notice module keeps working here during the transition, but if you have it enabled you'll see a notice offering a one-click install of FrontConsent, which automatically migrates your existing settings and stats and turns this module off. New sites should install FrontConsent directly instead of enabling Cookie Notice here.
+Cookie consent — including the Advanced Cookie Management upsell (per-category consent, Google Ads/Meta Pixel/Microsoft Clarity) — has moved out of FrontBlocks entirely into its own dedicated free plugin, **FrontConsent** (https://wordpress.org/plugins/frontconsent/), so it's easier to find and keeps improving on its own. FrontBlocks no longer ships a cookie consent banner of its own: the Cookie Notice settings tab is now a promo panel offering a one-click install of FrontConsent, which automatically migrates your existing settings and stats. Install FrontConsent to keep showing a cookie banner on your site.
 
 **WooCommerce Features:**
 Included features for WooCommerce FrontBlocks PRO.
@@ -226,6 +226,7 @@ More information in the [FrontBlocks PRO](https://close.technology/en/wordpress-
 *   Updated: Bundled Action Scheduler and development/build dependencies.
 
 = Unreleased =
+*   Changed: Removed the legacy Cookie Notice runtime (banner, AJAX consent endpoints, and GTM/GA4/other tracking integrations) from FrontBlocks — a hard cutover, not a transition. Cookie consent now lives entirely in the standalone FrontConsent plugin; the Cookie Notice settings tab remains as a promo panel pointing to it.
 
 = 1.5.4 =
 *   Added: Column Link controls for native WordPress Column blocks — make an entire column clickable, optionally open the destination in a new tab, and preserve the behaviour of links and buttons placed inside it.
diff --git a/tests/Unit/CookieNoticeDeprecationNoticeTest.php b/tests/Unit/CookieNoticeDeprecationNoticeTest.php
new file mode 100644
index 0000000..455410c
--- /dev/null
+++ b/tests/Unit/CookieNoticeDeprecationNoticeTest.php
@@ -0,0 +1,64 @@
+<?php
+/**
+ * Tests for FrontBlocks\Admin\CookieNoticeDeprecationNotice, plus a couple of
+ * regression checks confirming the legacy Cookie Notice runtime module (the
+ * banner, its AJAX endpoints, and tracking integrations) was fully removed
+ * without leaving any dangling dependency behind.
+ *
+ * This file used to be CookieNoticeTransitionTest.php, covering FrontBlocks'
+ * own Cookie Notice module during its transition period alongside
+ * CookieNoticeDeprecationNotice. That module has since been removed in a
+ * hard cutover — cookie consent now lives entirely in the standalone
+ * FrontConsent plugin — so only the tests exercising
+ * CookieNoticeDeprecationNotice (which is kept) remain, plus new regression
+ * coverage for the removal itself.
+ *
+ * @package FrontBlocks
+ */
+
+use FrontBlocks\Admin\CookieNoticeDeprecationNotice;
+use FrontBlocks\Admin\Settings;
+use Yoast\WPTestUtils\WPIntegration\TestCase;
+
+class CookieNoticeDeprecationNoticeTest extends TestCase {
+
+	public function tear_down() {
+		delete_option( 'frontblocks_settings' );
+		parent::tear_down();
+	}
+
+	public function test_frontconsent_install_url_uses_the_published_wordpress_org_slug() {
+		$url = CookieNoticeDeprecationNotice::get_frontconsent_action_url();
+
+		$this->assertStringContainsString( 'plugin=frontconsent', html_entity_decode( $url, ENT_QUOTES, 'UTF-8' ) );
+	}
+
+	/**
+	 * FrontBlocks' own Cookie Notice runtime was removed entirely rather than
+	 * merely disabled — this confirms the class is really gone, not just
+	 * inert, so nothing in FrontBlocks (or a third-party add-on) can go on
+	 * instantiating or calling into it.
+	 */
+	public function test_the_legacy_cookie_notice_class_no_longer_exists() {
+		$this->assertFalse( class_exists( 'FrontBlocks\Frontend\CookieNotice' ) );
+	}
+
+	/**
+	 * The Settings "Cookie Notice" tab is now a pure FrontConsent promo panel
+	 * (see Settings::render_cookie_notice_promo_tab()) that only depends on
+	 * CookieNoticeDeprecationNotice, which is kept — rendering it must not
+	 * fatal now that the legacy Frontend\CookieNotice class is gone.
+	 */
+	public function test_cookie_notice_promo_tab_renders_without_the_legacy_class() {
+		$settings = new Settings();
+
+		$method = new ReflectionMethod( Settings::class, 'render_cookie_notice_promo_tab' );
+		$method->setAccessible( true );
+
+		ob_start();
+		$method->invoke( $settings );
+		$output = ob_get_clean();
+
+		$this->assertStringContainsString( 'FrontConsent', $output );
+	}
+}
diff --git a/tests/Unit/CookieNoticeLinkTest.php b/tests/Unit/CookieNoticeLinkTest.php
deleted file mode 100644
index 8d0aecc..0000000
--- a/tests/Unit/CookieNoticeLinkTest.php
+++ /dev/null
@@ -1,116 +0,0 @@
-<?php
-/**
- * Tests for the Cookie Notice banner's policy link text.
- *
- * @package FrontBlocks
- */
-
-use FrontBlocks\Frontend\CookieNotice;
-use Yoast\WPTestUtils\WPIntegration\TestCase;
-
-/**
- * CookieNoticeLinkTest class.
- */
-class CookieNoticeLinkTest extends TestCase {
-
-	/**
-	 * Clean up options after each test.
-	 *
-	 * @return void
-	 */
-	public function tear_down() {
-		delete_option( 'frontblocks_settings' );
-		parent::tear_down();
-	}
-
-	/**
-	 * Render the private banner markup and capture its output.
-	 *
-	 * @param CookieNotice $notice Instance to render.
-	 * @return string
-	 */
-	private function render_banner_markup( CookieNotice $notice ) {
-		$method = new ReflectionMethod( CookieNotice::class, 'render_banner_markup' );
-		$method->setAccessible( true );
-
-		ob_start();
-		$method->invoke( $notice );
-		return ob_get_clean();
-	}
-
-	/**
-	 * The policy link should use the configured page's own title, not a
-	 * generic "Learn more" — so a screen reader user tabbing through links
-	 * out of context knows where it leads.
-	 *
-	 * @return void
-	 */
-	public function test_policy_link_uses_the_policy_page_title_instead_of_generic_text() {
-		$page_id = self::factory()->post->create(
-			array(
-				'post_type'   => 'page',
-				'post_title'  => 'Nuestra Política de Cookies',
-				'post_status' => 'publish',
-			)
-		);
-
-		update_option(
-			'frontblocks_settings',
-			array(
-				'cookie_notice_message'        => 'We use cookies.',
-				'cookie_notice_policy_page_id' => $page_id,
-			)
-		);
-
-		$html = $this->render_banner_markup( new CookieNotice() );
-
-		$this->assertStringContainsString( 'Nuestra Política de Cookies', $html );
-		$this->assertStringNotContainsString( 'Learn more', $html );
-	}
-
-	/**
-	 * A policy page with no title falls back to the generic label rather than
-	 * rendering an empty link.
-	 *
-	 * @return void
-	 */
-	public function test_policy_link_falls_back_to_learn_more_when_the_page_has_no_title() {
-		$page_id = self::factory()->post->create(
-			array(
-				'post_type'   => 'page',
-				'post_title'  => '',
-				'post_status' => 'publish',
-			)
-		);
-
-		update_option(
-			'frontblocks_settings',
-			array(
-				'cookie_notice_message'        => 'We use cookies.',
-				'cookie_notice_policy_page_id' => $page_id,
-			)
-		);
-
-		$html = $this->render_banner_markup( new CookieNotice() );
-
-		$this->assertStringContainsString( 'Learn more', $html );
-	}
-
-	/**
-	 * No policy page configured means no link is rendered at all.
-	 *
-	 * @return void
-	 */
-	public function test_no_link_is_rendered_when_no_policy_page_is_configured() {
-		update_option(
-			'frontblocks_settings',
-			array(
-				'cookie_notice_message' => 'We use cookies.',
-			)
-		);
-
-		$html = $this->render_banner_markup( new CookieNotice() );
-
-		$this->assertStringNotContainsString( 'frbl-cookie-notice__link', $html );
-	}
-}
diff --git a/tests/Unit/CookieNoticeTransitionTest.php b/tests/Unit/CookieNoticeTransitionTest.php
deleted file mode 100644
index 7f81c7f..0000000
--- a/tests/Unit/CookieNoticeTransitionTest.php
+++ /dev/null
@@ -1,63 +0,0 @@
-<?php
-/**
- * Tests for FrontBlocks\Frontend\CookieNotice transition behavior.
- *
- * @package FrontBlocks
- */
-
-use FrontBlocks\Frontend\CookieNotice;
-use Yoast\WPTestUtils\WPIntegration\TestCase;
-
-class CookieNoticeTransitionTest extends TestCase {
-
-	public function tear_down() {
-		delete_option( 'frontblocks_settings' );
-		parent::tear_down();
-	}
-
-	public function test_legacy_gtm_and_ga4_ids_are_available_without_a_migration_save() {
-		$integrations = CookieNotice::get_tracking_integrations(
-			array(
-				'cookie_notice_gtm_id' => 'GTM-LEGACY1',
-				'cookie_notice_ga4_id' => 'G-LEGACY123',
-			)
-		);
-
-		$this->assertSame(
-			array(
-				array( 'type' => 'gtm', 'id' => 'GTM-LEGACY1' ),
-				array( 'type' => 'ga4', 'id' => 'G-LEGACY123' ),
-			),
-			$integrations
-		);
-	}
-
-	public function test_existing_shared_integration_wins_over_the_retired_dedicated_id() {
-		$integrations = CookieNotice::get_tracking_integrations(
-			array(
-				'cookie_notice_tracking_integrations' => array(
-					array( 'type' => 'gtm', 'id' => 'GTM-CURRENT' ),
-				),
-				'cookie_notice_gtm_id'                => 'GTM-LEGACY1',
-			)
-		);
-
-		$this->assertSame( array( array( 'type' => 'gtm', 'id' => 'GTM-CURRENT' ) ), $integrations );
-	}
-
-	public function test_frontconsent_install_url_uses_the_published_wordpress_org_slug() {
-		$url = \FrontBlocks\Admin\CookieNoticeDeprecationNotice::get_frontconsent_action_url();
-
-		$this->assertStringContainsString( 'plugin=frontconsent', html_entity_decode( $url, ENT_QUOTES, 'UTF-8' ) );
-	}
-
-	public function test_frontconsent_disables_an_enabled_legacy_module() {
-		define( 'FRCN_VERSION', '1.0.1' );
-		update_option( 'frontblocks_settings', array( 'enable_cookie_notice' => true ) );
-
-		$method = new ReflectionMethod( CookieNotice::class, 'is_enabled' );
-		$method->setAccessible( true );
-
-		$this->assertFalse( $method->invoke( new CookieNotice() ) );
-	}
-}
diff --git a/tests/Unit/RedundantPluginsTest.php b/tests/Unit/RedundantPluginsTest.php
index 58f81f0..c7f09f9 100644
--- a/tests/Unit/RedundantPluginsTest.php
+++ b/tests/Unit/RedundantPluginsTest.php
@@ -15,11 +15,10 @@ public function tear_down() {
 		parent::tear_down();
 	}
 
-	public function test_default_entries_include_svg_upload_and_cookie_notice() {
+	public function test_default_entries_include_svg_upload() {
 		$entries = RedundantPlugins::get_entries();
 
 		$this->assertArrayHasKey( 'svg-upload', $entries );
-		$this->assertArrayHasKey( 'cookie-notice', $entries );
 	}
 
 	public function test_svg_upload_entry_is_always_enabled() {
@@ -30,21 +29,15 @@ public function test_svg_upload_entry_is_always_enabled() {
 		$this->assertArrayHasKey( 'svg-support/svg-support.php', $entries['svg-upload']['plugins'] );
 	}
 
-	public function test_cookie_notice_entry_enabled_follows_the_setting() {
-		update_option( 'frontblocks_settings', array( 'enable_cookie_notice' => true ) );
-		$entries = RedundantPlugins::get_entries();
-		$this->assertTrue( $entries['cookie-notice']['enabled'] );
-
-		update_option( 'frontblocks_settings', array( 'enable_cookie_notice' => false ) );
-		$entries = RedundantPlugins::get_entries();
-		$this->assertFalse( $entries['cookie-notice']['enabled'] );
-	}
-
-	public function test_cookie_notice_entry_lists_supported_cookie_plugins() {
+	/**
+	 * Cookie Notice's entry was removed along with the module itself: with no
+	 * runtime banner left in FrontBlocks, this feature no longer makes any
+	 * third-party cookie-consent plugin redundant.
+	 */
+	public function test_cookie_notice_entry_no_longer_exists() {
 		$entries = RedundantPlugins::get_entries();
 
-		$this->assertArrayHasKey( 'gdpr-cookie-compliance/moove-gdpr.php', $entries['cookie-notice']['plugins'] );
-		$this->assertArrayHasKey( 'cookie-law-info/cookie-law-info.php', $entries['cookie-notice']['plugins'] );
+		$this->assertArrayNotHasKey( 'cookie-notice', $entries );
 	}
 
 	/**
diff --git a/tests/js/column-link-frontend.test.js b/tests/js/column-link-frontend.test.js
index c0b360d..8aa28ac 100644
--- a/tests/js/column-link-frontend.test.js
+++ b/tests/js/column-link-frontend.test.js
@@ -6,7 +6,7 @@ const vm = require('node:vm');
 
 // This test builds its own tiny DOM shim (below) instead of pulling in a
 // real DOM implementation, matching this repo's existing frontend JS tests
-// (see tests/js/cookie-notice-injection.test.js).
+// (see tests/js/table-of-contents-frontend.test.js).
 const scriptPath = path.resolve(__dirname, '../../assets/column-link/frontblocks-column-link.js');
 const columnLinkScript = fs.readFileSync(scriptPath, 'utf8');
 

From c933ac1185647c9254ec1364a8da83a7806ad8a4 Mon Sep 17 00:00:00 2001
From: castellon <alexcastellon077@gmail.com>
Date: Wed, 30 Sep 2026 09:56:02 +0200
Subject: [PATCH 2/3] fix: realign RedundantPlugins array double-arrows after
 cookie-notice removal

Removing the 'cookie-notice' entry left 'svg-upload' and 'login-google' misaligned per WordPress.Arrays.MultipleStatementAlignment, which composer lint's phpcs run flagged.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 includes/Admin/RedundantPlugins.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/includes/Admin/RedundantPlugins.php b/includes/Admin/RedundantPlugins.php
index 5b52e9b..a76b684 100644
--- a/includes/Admin/RedundantPlugins.php
+++ b/includes/Admin/RedundantPlugins.php
@@ -92,7 +92,7 @@ private static function get_default_entries() {
 		$google_signin_settings = GoogleSignInSettings::get_options();
 
 		return array(
-			'svg-upload'    => array(
+			'svg-upload'   => array(
 				'feature' => __( 'SVG Upload', 'frontblocks' ),
 				// Always active: FrontBlocks enables sanitized SVG uploads in the media library out of the box.
 				'enabled' => true,
@@ -102,7 +102,7 @@ private static function get_default_entries() {
 				),
 				'doc_url' => admin_url( 'themes.php?page=frontblocks-settings' ),
 			),
-			'login-google'  => array(
+			'login-google' => array(
 				'feature' => __( 'Google Login', 'frontblocks' ),
 				'enabled' => GoogleSignInSettings::is_configured() && ( ! empty( $google_signin_settings['enable_wp_login'] ) || ! empty( $google_signin_settings['enable_myaccount_login'] ) || ! empty( $google_signin_settings['enable_myaccount_register'] ) || ! empty( $google_signin_settings['enable_checkout'] ) ),
 				'plugins' => array(

From 85c29eeb3e042cc3f73f9ca3d289a12515bdd012 Mon Sep 17 00:00:00 2001
From: castellon <alexcastellon077@gmail.com>
Date: Wed, 30 Sep 2026 16:02:09 +0200
Subject: [PATCH 3/3] fix: address Codex review findings on the Cookie Notice
 hard cutover
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Bump CookieNoticeDeprecationNotice::DISMISSED_META_KEY to a new name
  so an admin who dismissed the old, lower-stakes transition notice
  still sees this one — the site now has no consent banner at all
  until FrontConsent is installed, which the old dismissal predates.
- Rewrite the notice's copy (and its class docblock) to state plainly
  that the banner is already gone, instead of the stale "is moving" /
  "is being extracted" / "turns itself off" transition-period wording.
- Gate the Settings promo tab's install CTA on current_user_can(
  'install_plugins' ): a user with only edit_theme_options (e.g. a
  multisite subsite admin) could see the tab but would hit a failed
  nonce authorization on the install URL; they now get a message
  pointing at a site/network administrator instead.
- Drop cookie-consent claims from readme.txt's short description,
  opening paragraph, and Tags line, and point to FrontConsent instead
  — those are the first things a WordPress.org visitor sees, ahead of
  the (already-accurate) detailed changelog section.
- Correct readme.md and docs/REDUNDANT-PLUGINS.md, both still
  documenting Cookie Notice as one of the two core redundant-plugin
  defaults; the actual defaults are SVG Upload and Google Login.
- Clarify docs/COOKIE-NOTICE.md: the promo panel's link only installs
  FrontConsent when it isn't present yet — WordPress still requires a
  separate activation step, so "one-click install/activation" overstated
  what actually happens in one click.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 docs/COOKIE-NOTICE.md                         |  9 ++-
 docs/REDUNDANT-PLUGINS.md                     |  2 +-
 .../Admin/CookieNoticeDeprecationNotice.php   | 33 +++++++----
 includes/Admin/Settings.php                   |  9 ++-
 readme.md                                     |  2 +-
 readme.txt                                    | 10 ++--
 .../CookieNoticeDeprecationNoticeTest.php     | 59 +++++++++++++++++++
 7 files changed, 103 insertions(+), 21 deletions(-)

diff --git a/docs/COOKIE-NOTICE.md b/docs/COOKIE-NOTICE.md
index e0f025b..2cbbc1b 100644
--- a/docs/COOKIE-NOTICE.md
+++ b/docs/COOKIE-NOTICE.md
@@ -14,8 +14,13 @@ had it enabled will show no cookie banner at all until FrontConsent is
 installed — this is intentional, to push migration forward.
 
 **Appearance → FrontBlocks → Cookie Notice** is now a static promo panel: it
-explains the move and offers a one-click install/activation link for
-FrontConsent. Installing and activating FrontConsent automatically:
+explains the move and links to install FrontConsent. If FrontConsent isn't
+installed yet, that link only installs it — WordPress still requires a
+separate activation step (a confirmation screen with an "Activate Plugin"
+link) before it actually runs; the panel's own link becomes an activation
+link automatically once FrontConsent is detected as installed but inactive.
+Until FrontConsent is both installed and active, the site has no cookie
+consent banner at all. Once active, it automatically:
 
 - Copies the existing Cookie Notice settings and acceptance statistics.
 - Converts retired dedicated Google Tag Manager and GA4 IDs into its shared
diff --git a/docs/REDUNDANT-PLUGINS.md b/docs/REDUNDANT-PLUGINS.md
index 33be7eb..f8d62be 100644
--- a/docs/REDUNDANT-PLUGINS.md
+++ b/docs/REDUNDANT-PLUGINS.md
@@ -39,7 +39,7 @@ Notes:
 - The array key (`image-optimization` above) is the entry id — keep it unique and stable, since it's also the key used to store per-entry dismissals.
 - `plugins` accepts more than one basename per entry when several third-party plugins cover the same functionality (as in the example above).
 - `enabled` should reflect the real on/off state of the FrontBlocks feature (e.g. read from `get_option( 'frontblocks_settings', array() )` for opt-in features), so the notice doesn't fire for a feature the site owner hasn't turned on.
-- See `RedundantPlugins::get_default_entries()` for the two entries FrontBlocks core ships: SVG Upload (vs. *Safe SVG* / *SVG Support*) and Cookie Notice (vs. *GDPR Cookie Compliance* / *CookieYes*).
+- See `RedundantPlugins::get_default_entries()` for the two entries FrontBlocks core ships: SVG Upload (vs. *Safe SVG* / *SVG Support*) and Google Login (vs. *Login with Google* / *Login with*).
 
 ## Debugging
 
diff --git a/includes/Admin/CookieNoticeDeprecationNotice.php b/includes/Admin/CookieNoticeDeprecationNotice.php
index 7ffbc2a..4025e59 100644
--- a/includes/Admin/CookieNoticeDeprecationNotice.php
+++ b/includes/Admin/CookieNoticeDeprecationNotice.php
@@ -13,15 +13,18 @@
 defined( 'ABSPATH' ) || exit;
 
 /**
- * Tells site owners still using FrontBlocks' bundled Cookie Notice module that
- * it moved to its own dedicated plugin, FrontConsent, and offers a one-click
- * install/activate link from wp-admin.
+ * Tells site owners who had FrontBlocks' Cookie Notice module enabled that
+ * its runtime has been removed entirely (a hard cutover, not a transition)
+ * and moved into its own dedicated plugin, FrontConsent, and offers a
+ * one-click install/activate link from wp-admin.
  *
- * FrontBlocks' own Cookie Notice module keeps working during this transition
- * period — this is a heads-up, not a functional change. Once FrontConsent is
- * installed and active, it migrates the site's settings/stats on its own and
- * disables this module automatically (see FrontConsent's own Migration class),
- * so no coordination happens from this side beyond the notice itself.
+ * Unlike the original transition-period version of this notice, there is no
+ * functional overlap left to manage: FrontBlocks no longer renders any
+ * banner at all, so this is now an urgent "your site has no consent banner"
+ * warning, not a heads-up. Once FrontConsent is installed and active, it
+ * migrates the site's settings/stats on its own (see FrontConsent's own
+ * Migration class), so no coordination happens from this side beyond the
+ * notice itself.
  *
  * @since 1.0.0
  */
@@ -30,9 +33,17 @@ class CookieNoticeDeprecationNotice {
 	/**
 	 * User meta key storing whether this notice was dismissed.
 	 *
+	 * Versioned with a `_v2` suffix: the hard cutover that removed Cookie
+	 * Notice's runtime module entirely (rather than just deprecating it)
+	 * makes this notice urgent in a way the original "Dismiss for now" never
+	 * anticipated — an admin who dismissed the old, lower-stakes transition
+	 * notice must still see this one, since their site now has no consent
+	 * banner at all until they install FrontConsent. Bumping the meta key
+	 * makes every prior dismissal irrelevant without needing a migration.
+	 *
 	 * @var string
 	 */
-	const DISMISSED_META_KEY = 'frbl_cookie_notice_deprecation_dismissed';
+	const DISMISSED_META_KEY = 'frbl_cookie_notice_deprecation_dismissed_v2';
 
 	/**
 	 * Nonce action used to protect the dismissal AJAX endpoint.
@@ -140,9 +151,9 @@ public function render_notice() {
 		$action_url = self::get_frontconsent_action_url();
 		?>
 		<div id="frbl-cookie-notice-deprecation" class="notice notice-warning">
-			<p><strong><?php echo esc_html__( 'FrontBlocks: Cookie Notice is moving to its own plugin', 'frontblocks' ); ?></strong></p>
+			<p><strong><?php echo esc_html__( 'FrontBlocks: your site no longer shows a cookie consent banner', 'frontblocks' ); ?></strong></p>
 			<p>
-				<?php echo esc_html__( 'Cookie Notice is being extracted from FrontBlocks into a dedicated free plugin, FrontConsent, so it is easier to find and keeps improving on its own. Install FrontConsent and your existing settings and stats are migrated automatically, and this module turns itself off.', 'frontblocks' ); ?>
+				<?php echo esc_html__( 'Cookie Notice has been removed from FrontBlocks entirely and moved into its own dedicated free plugin, FrontConsent. Your site currently has no cookie consent banner at all until you install and activate it. Doing so automatically imports your existing settings and stats.', 'frontblocks' ); ?>
 			</p>
 			<p>
 				<a href="<?php echo esc_url( $action_url ); ?>" class="button button-primary"><?php echo esc_html__( 'Install FrontConsent', 'frontblocks' ); ?></a>
diff --git a/includes/Admin/Settings.php b/includes/Admin/Settings.php
index 6212d6b..86bd580 100644
--- a/includes/Admin/Settings.php
+++ b/includes/Admin/Settings.php
@@ -1876,6 +1876,7 @@ private function section_maintenance_callback() {
 	 */
 	private function render_cookie_notice_promo_tab() {
 		$is_frontconsent_active = CookieNoticeDeprecationNotice::is_frontconsent_active();
+		$can_install_plugins    = current_user_can( 'install_plugins' );
 		?>
 		<div class="frbl-tab-panel-head">
 			<div>
@@ -1897,12 +1898,16 @@ private function render_cookie_notice_promo_tab() {
 				<a href="<?php echo esc_url( admin_url( 'options-general.php?page=frontconsent-settings' ) ); ?>" class="frbl-btn-primary">
 					<?php esc_html_e( 'Manage in FrontConsent', 'frontblocks' ); ?>
 				</a>
-			<?php else : ?>
+			<?php elseif ( $can_install_plugins ) : ?>
 				<a href="<?php echo esc_url( CookieNoticeDeprecationNotice::get_frontconsent_action_url() ); ?>" class="frbl-btn-primary">
 					<?php esc_html_e( 'Install FrontConsent', 'frontblocks' ); ?>
 				</a>
 				<p class="tw:text-xs tw:text-blue-700 tw:mt-3 tw:mb-0">
-					<?php esc_html_e( 'Installing and activating it automatically imports your existing Cookie Notice settings and stats from FrontBlocks, and turns this banner off so the two never overlap.', 'frontblocks' ); ?>
+					<?php esc_html_e( 'Installing and activating it imports your existing Cookie Notice settings and stats from FrontBlocks automatically. Your site currently has no cookie consent banner until you do.', 'frontblocks' ); ?>
+				</p>
+			<?php else : ?>
+				<p class="tw:text-sm tw:text-red-800 tw:font-medium tw:mb-0">
+					<?php esc_html_e( 'Your site currently has no cookie consent banner. You do not have permission to install plugins — ask a site or network administrator to install and activate FrontConsent.', 'frontblocks' ); ?>
 				</p>
 			<?php endif; ?>
 		</div>
diff --git a/readme.md b/readme.md
index c0da792..5dc09a5 100644
--- a/readme.md
+++ b/readme.md
@@ -32,7 +32,7 @@ Repository for FrontBlocks Site Tools, a WordPress plugin covering the everyday
 - **Maintenance Mode** - Show a customizable maintenance page to visitors while keeping the site accessible to logged-in administrators
 - **Google Sign-In** - "Sign in / Sign up with Google" button for wp-login.php, WooCommerce My Account and Checkout, plus a shortcode and block, with server-side ID token verification
 - **Review Notice** - Dismissible admin notice inviting site owners to leave a WordPress.org review, shown 14 days after activation
-- **Redundant Plugins Notice** - Persistent admin notice detecting third-party plugins made unnecessary by an active FrontBlocks feature (e.g. SVG upload plugins, GDPR cookie consent plugins), extensible via the `frontblocks_redundant_plugins` filter
+- **Redundant Plugins Notice** - Persistent admin notice detecting third-party plugins made unnecessary by an active FrontBlocks feature (e.g. SVG upload plugins, Google Login plugins), extensible via the `frontblocks_redundant_plugins` filter
 - **Google Sign-In** - "Sign in / Sign up with Google" button for wp-login.php, WooCommerce My Account and Checkout, plus a shortcode and block, with server-side ID token verification
 - **Table of Contents** - Accessible navigation block generated from the headings in the post, with collapsible and sticky options
 
diff --git a/readme.txt b/readme.txt
index 0939aa5..913b468 100644
--- a/readme.txt
+++ b/readme.txt
@@ -1,6 +1,6 @@
 === FrontBlocks Site Tools ===
 Contributors: davidperez, sacrajaimez, alexbreagarcia, matiasquero, amulero, mit2sumit, alexcm13
-Tags: carrusel, cookies, lightweight, generatepress, gutenberg
+Tags: carrusel, lightweight, generatepress, gutenberg, maintenance-mode
 Donate link: https://close.marketing/go/donate/
 Requires at least: 5.8
 Tested up to: 7.1
@@ -9,13 +9,15 @@ Version: 1.5.5
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
 
-Essential toolkit for a WordPress site: block editor enhancements, cookie consent, maintenance mode, image optimization, login and more.
+Essential toolkit for a WordPress site: block editor enhancements, maintenance mode, image optimization, login and more.
 
 == Description ==
 
-FrontBlocks Site Tools is a lightweight, all-in-one toolkit covering the everyday needs of a WordPress site. Instead of installing a separate plugin for every small requirement, get block editor enhancements, cookie consent, maintenance mode, image optimization, social login and other practical site utilities from a single, well-maintained plugin.
+FrontBlocks Site Tools is a lightweight, all-in-one toolkit covering the everyday needs of a WordPress site. Instead of installing a separate plugin for every small requirement, get block editor enhancements, maintenance mode, image optimization, social login and other practical site utilities from a single, well-maintained plugin.
 
-Turn Query Loops and grids into carousels, add animations and visual effects, improve layouts, and cover common site needs — from GDPR-friendly cookie notices to maintenance mode and modern image delivery. FrontBlocks works with native WordPress blocks as well as supported GenerateBlocks elements, with optional integrations for WooCommerce, GenerateBlocks/GeneratePress and Gravity Forms.
+Turn Query Loops and grids into carousels, add animations and visual effects, improve layouts, and cover common site needs — from maintenance mode to modern image delivery. FrontBlocks works with native WordPress blocks as well as supported GenerateBlocks elements, with optional integrations for WooCommerce, GenerateBlocks/GeneratePress and Gravity Forms.
+
+Looking for cookie consent? That moved into its own free, dedicated plugin: [FrontConsent](https://wordpress.org/plugins/frontconsent/).
 
 **Container Edge Alignment**
 Add custom controls to GenerateBlocks Container blocks and native WordPress Group/Container blocks to remove padding from the left or right side, creating edge-to-edge layouts. This feature only appears for containers using GeneratePress global max-width settings, perfect for creating asymmetric layouts where content extends to one browser edge while maintaining proper spacing on the other side.
diff --git a/tests/Unit/CookieNoticeDeprecationNoticeTest.php b/tests/Unit/CookieNoticeDeprecationNoticeTest.php
index 455410c..eef2abc 100644
--- a/tests/Unit/CookieNoticeDeprecationNoticeTest.php
+++ b/tests/Unit/CookieNoticeDeprecationNoticeTest.php
@@ -61,4 +61,63 @@ public function test_cookie_notice_promo_tab_renders_without_the_legacy_class()
 
 		$this->assertStringContainsString( 'FrontConsent', $output );
 	}
+
+	/**
+	 * A user who cannot install plugins (e.g. a multisite subsite admin with
+	 * `edit_theme_options` but not `install_plugins`) must never see a CTA
+	 * whose nonce-bearing install URL will fail authorization for them —
+	 * they get a message pointing at a site/network administrator instead.
+	 */
+	public function test_promo_tab_hides_the_install_cta_without_install_plugins_capability() {
+		$user_id = self::factory()->user->create( array( 'role' => 'editor' ) );
+		wp_set_current_user( $user_id );
+
+		$this->assertFalse( current_user_can( 'install_plugins' ) );
+
+		$settings = new Settings();
+		$method   = new ReflectionMethod( Settings::class, 'render_cookie_notice_promo_tab' );
+		$method->setAccessible( true );
+
+		ob_start();
+		$method->invoke( $settings );
+		$output = ob_get_clean();
+
+		$this->assertStringNotContainsString( 'action=install-plugin', $output );
+		$this->assertStringContainsString( 'administrator', $output );
+	}
+
+	/**
+	 * A user who does have the capability still sees the real install link.
+	 */
+	public function test_promo_tab_shows_the_install_cta_with_install_plugins_capability() {
+		$user_id = self::factory()->user->create( array( 'role' => 'administrator' ) );
+		wp_set_current_user( $user_id );
+
+		$this->assertTrue( current_user_can( 'install_plugins' ) );
+
+		$settings = new Settings();
+		$method   = new ReflectionMethod( Settings::class, 'render_cookie_notice_promo_tab' );
+		$method->setAccessible( true );
+
+		ob_start();
+		$method->invoke( $settings );
+		$output = ob_get_clean();
+
+		$this->assertStringContainsString( 'action=install-plugin', html_entity_decode( $output, ENT_QUOTES, 'UTF-8' ) );
+	}
+
+	/**
+	 * The hard cutover makes this notice urgent in a way the original,
+	 * lower-stakes transition notice never was: an admin who dismissed that
+	 * old notice must still see this one, since their site now has no
+	 * consent banner at all until FrontConsent is installed. The dismissal
+	 * meta key was bumped to a new name specifically so every prior
+	 * dismissal (stored under the old key) becomes irrelevant.
+	 */
+	public function test_dismissal_meta_key_was_bumped_for_the_hard_cutover() {
+		$this->assertSame(
+			'frbl_cookie_notice_deprecation_dismissed_v2',
+			CookieNoticeDeprecationNotice::DISMISSED_META_KEY
+		);
+	}
 }