Requires custom code to be GDPR compliant

The plugin does not remove the cookies in case of a change of consent or a subsequent rejection by the user. If you use this plugin in Europe, custom logic to remove already set cookies must be implemented, otherwise, this plugin will not comply with the required GDPR rules. Or to be more precise, your website does not and is, therefore, suspect of being sued.

In my opinion, this is a major flaw of the plugin and I reckon, that the majority of users have no idea that this Plugin isn’t DSGVO conform out of the box.