Global Options: Privacy & Security
The Privacy & Security group of Tirenoa › Options has two sections. Privacy decides where fonts are loaded from, whether third-party content waits for the visitor’s consent, and how the cookie bar looks and behaves. Custom Auth Pages replaces the WordPress login screens with pages of your own.
Most options in the Privacy section only appear once the switch they depend on is turned on, so a fresh site shows a short list.
In this article: Privacy: Fonts And User Names · Privacy: Privacy Consent · Privacy: Cookie Bar & Popup · Privacy: Buttons And Settings Panel · Custom Auth Pages · Related
Privacy: Fonts And User Names
| Option | What it does |
|---|---|
| Google & Font Awesome Fonts Mode | Local downloads the fonts once and serves them from your own server, so visitors make no request to an outside server. CDN loads them from Google and Font Awesome, which sends each visitor’s IP address there. Default: CDN. |
| Hide User Names On The Website | Keeps login names off the public site: author pages answer “not found”, and the sitemap, the public users list, feeds and hidden markup no longer name the author; an author line shows the website’s name instead. Leave it off for blogs and magazines that present their authors. Default: off. |
Note: If you want a site without connections to font services, set the fonts mode to Local.
Privacy: Privacy Consent
Privacy Consent blocks third-party embeds and scripts until the visitor agrees. In their place the page shows a placeholder. The choice is remembered in a cookie named privacy_embeds on the visitor’s device.
| Option | What it does |
|---|---|
| Enable Privacy Consent | Turns the blocking on. Default: off. The options below are only shown when it is on. |
| Consent Cookie Expiration | Days until the visitor is asked again, from 1 to 366. Default: 30. |
| Consent Types | Which kinds of content need consent: YouTube, Vimeo, SoundCloud, Facebook, Flickr, X, Google Maps, Instagram and Tracking Cookies. Default: all of them. |
| Pre-selected Consent Types | The types that are already checked in the cookie bar and the Privacy element. Default: none. |
| Placeholder Background Color, Placeholder Text Color | Colors of the placeholder shown instead of a blocked embed. |
Privacy: Cookie Bar & Popup
The cookie bar tells visitors about cookies and, together with Privacy Consent, collects their choice. All further options are only shown when Enable Cookie Bar / Popup is on.
| Option | What it does |
|---|---|
| Enable Cookie Bar / Popup | Shows the bar or popup to visitors. Default: off. |
| Position | Bottom Bar (Full Width), Top Bar (Full Width), Bottom Left, Bottom Right, Top Left, Top Right or Center (Modal). Default: Bottom Bar. |
| Show Overlay | Darkens the page behind the popup. Only for the corner and center positions. Default: off. |
| Close on Overlay Click | A click on the overlay dismisses the popup. Only shown when the overlay is on. Default: off. |
| Animation | How the bar appears: None, Fade or Slide. Default: Slide. |
| Max Width, Border Radius | Width limit (default 420px) and rounded corners (default 8px) of the popup. Not shown for the two full-width bar positions. |
| Padding | Inner spacing of the bar or popup on all four sides. |
| Border Width, Border Color, Box Shadow | Border (default 0px = none) and a soft shadow (default on). |
| Background Color, Text Color, Link Color, Link Hover Color | Colors of the bar and its content. |
| Heading Color, Heading Font Size | Style of the headings in the settings panel. Only shown when the settings panel is enabled. Font size default: 13px. |
| Font Size | Text size of the bar. Default: 13px. |
| Privacy Policy Page | The page a link in the bar text can lead to. |
| Cookie Bar Text | The message. HTML is allowed. Default: “This website uses cookies and third party services.” |
| Necessary Cookies Notice | A short notice that necessary cookies are always active. Leave it empty to hide it. |
Privacy: Buttons And Settings Panel
| Option | What it does |
|---|---|
| Button Layout | Normal, Full Width or Stacked. Default: Normal. |
| Accept Button Text | Label of the accept button. Default: “Accept All”. |
| Accept Button colors | Four options: background and text color, each for the normal and the hover state. |
| Save Consent on Accept Click | On: a click on the accept button saves the default selection at once. Off: consent is only saved after a checkbox was changed. Only with Privacy Consent enabled. Default: off. |
| Show Reject Button | Adds a second button that declines everything. Only with Privacy Consent enabled. Default: off. |
| Reject Button Text and Reject Button colors | Label (default “Reject All”) and four colors. Only shown when the reject button is on. |
| Enable Settings Panel | Adds a panel with a description and a checkbox per cookie category. Default: off. |
| Settings Link Text | The link that opens the panel. Default: “Manage Preferences”. |
| Save Preferences Button Text and Save Preferences Button colors | Label (default “Save Preferences”) and four colors of the button in the panel. |
| Re-open Preferences Text | A small link visitors can use at any time to open the cookie settings again. Default: “Cookie Settings”. Leave empty to disable. |
| Settings Panel Content | One column per cookie category, each with a type, a Title and a Description. The types Tracking Cookies and Third Party Embeds get their checkboxes automatically; Custom is a plain information column. |
The texts and colors are yours to set, but which content a site must ask consent for is a legal question. If you are unsure, ask Tiaro or your data protection advisor before you go live.
Custom Auth Pages
Here you choose pages of your own for logging in, registering and resetting a password. Each of those pages needs a Tirenoa Form whose matching authentication action is set on the form’s Submission tab; without that form the page cannot log anyone in.
| Option | What it does |
|---|---|
| Login Page, Registration Page, Lost Password Page, Reset Password Page | The page used for each step. Default for all four: WP Default, the normal WordPress screen. |
| WordPress Authentication Pages Redirect | What happens when someone opens the standard WordPress login address: Auth Pages (your custom pages), Homepage, 404 Page or Custom Page. Default: Auth Pages. |
| Custom Redirect Page | The target page. Only shown when the redirect is set to Custom Page. |
| Custom Authentication Page Bypass | A secret word of your choice. Adding it to the standard login address as a parameter opens the normal WordPress login for 5 minutes, or until you have logged in. Default: empty. |
Note: Set a bypass word before you redirect the standard login away, and keep it somewhere safe. It is your way back in if a custom login page stops working.