I’m on SecurePod Care — do I need this?

No. PodShield Privacy is included in every SecurePod Care tier at no extra charge. This page is for sites that aren’t there yet.

What’s the difference between the GA4 and GTM versions?

It’s about how your site’s tracking is built. Sites running standard analytics (GA4) are a clean install. Sites running Google Tag Manager need consent wired through the GTM container tag-by-tag — it’s the hardest setup to get right and the most common one to find silently broken. Same annual price; the setup reflects the extra wiring.

Why do you only do this on sites you host?

Because we sign our name to the audits. Owning the outcome means owning the infrastructure — seeing changes as they happen and fixing findings without filing tickets with someone else’s host. Migration to our hosting is free, so the rule costs you nothing but the decision.

What actually happens in a quarterly audit?

We scan the site and log every cookie and tracker it actually sets, compare that against what your policies disclose, verify the consent banner enforces the visitor’s choices (including opt-out signals like GPC), and fix any drift we find — whether the law moved or your site did.

What happens when a new privacy law passes?

Your policies get updated as part of the plan. The platform’s attorneys track the laws; we push the updates and verify them on your site. You’ll usually hear about a new law from us — after it’s already handled.

Should I buy the add-on or move to Essentials Shield?

If you want the compliance handled and nothing else changed, the annual add-on does exactly that. Shield is for owners who’d rather put the site’s speed, score monitoring, and compliance under one monthly roof — it includes everything in Boost plus PodShield Privacy, billed monthly instead of prepaid. The 15-minute call sorts this out fast.

Will the consent banner hurt my conversions or break my site?

No — configured correctly, essential cookies keep running and your site works exactly as before. What actually hurts conversion is a demand letter.

COMPLIANCE, MANAGED BY PXLPOD

PodShield Privacy

Privacy compliance isn't a plugin.
It's a subscription to the law.

Attorney-maintained policies, a consent system that actually honors the visitor's "no," and quarterly audits that catch drift before a demand letter does. Installed, verified, and kept current — by us, not by you.

Book a 15-minuteCompliance Check

No checkout button. We look at your actual site first — then you get a price you can trust.

PodShield Privacy

Consent verification · on the wire

First visit · no history Live

What the visitor chooses

Visitor declines tracking

Browser opt-out signal (GPC)

Flip the switches — watch the wire respond.

What the site actually does

session_id

strictly necessary · site function

Allowed

ga4 · page_view

analytics · tracking

Blocked

ad_pixel · fbevents

marketing · tracking

Blocked

fonts.gstatic.com

functional · third party

Blocked

/fonts/lato.woff2

first party · self-hosted

Allowed

Policy claims: opt-outs honored

Banner enforces: verified on the wire

Design holds: fonts served first-party

Opt-out honored — enforced, not painted on

WHY "SET IT AND FORGET IT" FAILS

Your site drifts out of compliance on two clocks.

Nobody breaks their website's compliance on purpose. It happens quietly, on two schedules that never stop running — and neither one asks your permission.

Clock one: the law changes.

The laws shift but your website (and policies) haven't. New state privacy laws pass nearly every year. Each one can add required disclosures your policies don't have yet. Your site didn't change. It's still out of date. When this site was built, today's consent requirements didn't exist — that's not a defect, it's a moving target.

Clock two: your site changes.

Your website gets updated but your static policies don't reflect the updates. A new booking widget. A chat tool. A different analytics setup. Every tool you add can drop new cookies — and every new cookie is something your policy now fails to disclose and your banner may fail to control. The site moved; the paperwork didn't.

This is really hard to DIY.

PodShield Privacy exists because both clocks keep ticking whether anyone is watching or not. We're the ones watching.
Your policies must keep up or be kept up.

WHAT PODSHIELD PRIVACY COVERS

The whole system. Not pieces of it.

Policies, generated and installed.

Privacy policy, cookie policy, terms — built on an attorney-maintained platform that updates the legal text when the law moves.

Consent management (CMP), configured and maintained.

The banner, the enforcement behind it, and the opt-out signals (like Global Privacy Control) it's legally required to honor.

Quarterly audits and remediation.

Four times a year we scan the site, compare what it actually does against what its policies say, and fix the drift on both clocks.

Law-change response.

When a new privacy law lands, your policies are updated as part of the plan — not quoted as a new project.

Verification, not vibes.

We test the deployment the way a regulator would: accept, decline, and opt-out signals — and confirm on the wire that the site obeys.

Quarterly Compliance Audit

PodShield Privacy · drift check & remediation

Cycle 3 of 4 Complete

What we checked

Cookie inventory

Every cookie on the wire matched to the policy

Match

Policy currency

Law changes applied since the last cycle

Current

Consent enforcement

Accept · decline · GPC signal — all tested

Pass

Drift check

New tooling detected · policy updated to match

Remediated

Audit result

Cleared

Every finding remediated inside the cycle. Nothing carried forward.

Drift

Detected

Remediation

Complete

Open items

None

Next cycle

Scheduled

Annual audit cadence

Q1

Q2

Q3

Q4

Next audit: scheduled

A man with curly, gray hair and a beard stands in a cozy room filled with books and a globe.

"Most compliance products sell you a tool and wish you luck. This isn't a tool. It's me owning the problem."

CHRIS FOLEY · FOUNDER, PXLPOD

STRAIGHT PRICING

Two ways in. Same system underneath.

Every price includes the full year of management — the audits, the law-change updates, the remediation. There is no license-only option, because a policy nobody verifies is just a promise your site might be breaking.

Annual • Prepaid

PodShield Privacy

$299/yr

+ $100 one-time setup (first year: $399)

Policies generated & installed

Consent banner configured & enforced

4 quarterly audits + remediation

Law-change updates included

For sites running standard analytics (GA4)

Start with the call

Annual • Prepaid

PodShield Privacy GTM

$299/yr

+ $175 one-time setup (first year: $474)

Everything in PodShield Privacy

Consent wired through your Google Tag Manager container — tag-by-tag

The hardest setup to get right, done right

Same $299/yr from year two

Start with the call

Monthly • Most Popular

Essentials Shield Managed WordPress Hosting +

$99/mo

+ one-time setup ($100 GA4 · $175 GTM)

PodShield Privacy, included

Everything in Essentials Boost:

Managed WordPress hosting

NitroPack speed optimization

PSI + GA4 monitoring in the SecurePod Observatory

One monthly bill, no annual prepay

Start with the call

The Fix

Start with a 15-minute call.

There's no one-size cookie fix — the right setup depends on your site, your traffic, and how it's built. So we don't hand you a buy button and a guess. We start with a short call, figure out exactly what your site needs, and put it in place for you.

You talk to us. We handle the rest.

Book a 15-minute call. We look at your actual site together.
We tell you exactly what it needs — and which solution fits (some sites are simple; some need more).
We set it up and keep it working — most clients fold this into SecurePod Care so it just stays handled as the laws keep moving.

Book a 15-minuteCompliance Check

Why a call and not a buy button?

A buy button can't tell whether your site needs a simple banner or a full consent setup inside a complex tag manager — and paying for the wrong fix is worse than waiting. Fifteen minutes gets you the right answer the first time.

Already on Essentials Core Hosting?

Just want the compliance handled? The annual PodShield Privacy add-on works on any plan we host.

Already on SecurePod Care?

You're covered — we've already rolled this across your sites at no extra charge. Nothing to book, nothing to do. (That's the point of SecurePod: the fire drills are our problem.)

ONE RULE, NO EXCEPTIONS

We only do this for websites we host.

Compliance isn't a drive-by service. There's no "one and done" here. If we're signing our name to your quarterly audits, we need to be the ones holding the infrastructure — watching the site, seeing the changes, able to fix what we find without filing a ticket with somebody else's host.

The good news: migration is free. Not "free-ish." Free. WPEngine's migration tooling moves sites cleanly, we've done it a few hundred times, and your site doesn't go down. If your website isn't with us yet, the 15-minute call covers that too.

Site Migration

To PXLPOD hosting · zero-downtime protocol

WPEngine In progress

Migration protocol

Full site backup

Files · database · media — all captured

Complete

Transfer to WPEngine

Site cloned & verified on new infrastructure

Complete

DNS cutover

Traffic moves — visitors never notice

Running

Verify & hand off

Every page, form & email tested

Queued

What it costs you

Downtime

None

cutover, not a switch-off

Your cost

$0.00

migration is always free

Left behind

Nothing

pages, media, forms, email

Broken links

None

checked post-transfer

Migration progress

82% Visitor experience: uninterrupted

Did you know

The things almost everyone gets wrong.

A smiling man with dark hair and a casual blue shirt, set against a gradient blue background.

Your QUESTIONS, ANSWERED