CookieYes
👤 Anvar T K (Ran WebToffee, a WordPress plugin studio - its GDPR Cookie Consent plugin already had a big install base when the law hit.)🌐 site𝕏LinkedIn
GDPR made cookie banners mandatory. CookieYes became WordPress's free default, then upsold a hosted CMP.
Will it work? · our read
Regulation sells. A commodity banner - but GDPR and every privacy law after it force the demand, and a free WordPress plugin owns the funnel. Low ARPU caps it; regulation keeps forcing demand.
01How the money moves
Site owner installs the free plugin from WordPress.org
→
A law or Google mandate forces real compliance (GDPR, GCM v2)
→
Owner upgrades to the paid CMP - from $10/mo per domain
02The numbers
1M+
active WP installs
WP.org
$523K
est. ARR 2024
Latka
1.5M+
sites using it
CookieYes
Bootstrapped - raised $0; parent Mozilor is about 100 people across India/UK. Latka
$0 (2019) to about $523K est. ARR (2024), bootstrapped.
03Weight class — CENTStap an axis
Control Low
Commodity market; rivals sit at free-to-$10, so there is little real pricing power.
04The key move
Give away GCM v2
When Google's 2024 Consent Mode v2 mandate hit, most CMPs locked it behind paid plans. CookieYes shipped it free - becoming the default install as millions of WordPress sites scrambled to comply.
fact
The counter-intuitive move
Free GCM v2 wins installs but deepens the free-rider trap - 1M free users, only about $523K ARR. Distribution is not monetization.
our read
05Where the moat is
Why it holds:
1M+ WordPress installs = a built-in funnelEvery new privacy law re-forces demandFree tier owns the default choiceCovers GDPR, CPRA, LGPD, PDPA in one
06How it diesmedium confidence
The dead twin: WordPress or Google bundles cookie consent for free, or OS/browser-level consent kills the banner. A $10 commodity with 1M free riders has no pricing power to retreat to. our read
Show evidence · counter
Evidence: Free rivals (Complianz), WPConsent and native builders already compete; ARR is only about $523K on 1M+ installs.
Counter: Privacy laws keep multiplying and tightening - each new mandate re-forces demand faster than the category commoditizes.
07Against rivals
Bigger names charge more; CookieYes wins the low end through WordPress distribution. our read
08Who uses it
WordPress site ownersSmall-business sitesBloggers & creatorsAgencies with client sitesEU/CA-facing shops
★Would it work for you?
Do you already own a free distribution channel - a directory, plugin, or template - where a forced-demand product could become the default?
CookieYes' moat was WordPress.org, not code. Where is your free funnel? We don't score you — you answer.
🚀Use it as a launchpada prompt for your own AI
Copy → paste into your AI → then develop it freely in the conversation.
You are a sharp, honest startup strategist. Use the proven case below as a launchpad for MY idea — help me find my own angle, not copy it.
<my_profile>
Domain I know: [your domain]
My unfair advantage (access/audience): [your edge]
Interests: [your interests]
Resources & goal: [your resources] · [your goal]
</my_profile>
<case name="CookieYes" model="saas">
What it does: A cookie-consent CMP: a free WordPress plugin plus a paid hosted platform that keeps sites compliant with privacy laws.
Why it won (moat): 1M+ free WordPress installs are the funnel; every new privacy law re-forces demand at near-zero acquisition cost.
Weakest axis (CENTS): Low ARPU (a $10 commodity) and a huge free-rider base - 1M free users, only about $523K ARR.
How it could die: WordPress or Google bundles consent for free, or OS-level consent removes the banner entirely.
</case>
<task>
Be a skeptical operator, not a cheerleader. No generic startup platitudes. If my angle is weak, say so plainly.
First, a reality check: markets like this mostly fail. State the honest base rate (how crowded/hard is this?) and the ONE specific thing that would have to be true for ME to be the exception — grounded in my profile above.
Then a compact table:
- Fit — does this pattern suit my edge, or fight my gap?
- Angle — my sharpest differentiation vs CookieYes (concrete, not "better UX")
- Distribution — exactly where my first 100 users come from (this is the hardest part — be specific, not "content marketing")
- Risk — its "how it dies" (above) in MY situation
Finish with one line: "The single thing to do next."
Use only the facts above; if data is thin, say so — never invent numbers.
Then stay with me and go deeper on whatever I ask — tech stack, rough cost & time, the smallest MVP to test, pricing, or timing.
</task>
✓ Copied — paste into your AI
👤Placeholders like [your domain] auto-fill from your profile — example values for now.Set up profile →
Sourcesupdated · daily
Latka - CookieYes revenue ($523.3K est. ARR 2024, bootstrapped)WordPress.org - cookie-law-info plugin (1M+ installs, 4.8 stars)CookieYes - About (founded 2018, 1.5M+ sites, UK/India)LearnWoo - interview with founder Anvar T KCookieYes pricing (free tier + $10 Basic, per-domain)
Revenue ($523.3K ARR, 2024) is Latka's ESTIMATE, not first-party - marked EST, not independently confirmed; CookieYes publishes no official revenue. Installs (1M+, WordPress.org) and 1.5M+ sites are platform/first-party verified, as are the 2018 launch and the Anvar T K / WebToffee origin. The free-GCM-v2 move is documented; the low-ARPU / free-rider read is [our read] inferred from Latka's figures. We never score you.