New in version 5 

The consent cookie defaults to sameSite = Strict 

Before version 5.0.0 the default was Lax. Strict improves the first-party signals of the cookie.

To keep the previous behaviour, set cookie.sameSite:

plugin.tx_cookieman.settings.cookie.sameSite = Lax

The consent cookie is secure on https 

Cookieman reads the protocol of the page and sets the secure attribute on https pages only. Browsers discard a secure cookie that an http page sets: the cookie is then never stored and the popup comes back on every page.

Set cookie.secure to 0 if you share the cookie between subdomains and one of them is still http:

plugin.tx_cookieman.settings.cookie.secure = 0

See Configuration of the cookie used by the extension itself.

TypoScript constants for the cookie settings 

The cookie{} block in the setup now reads TypoScript constants, as the links{} block does. You can set the lifetime, the domain, sameSite and secure in the constants editor: cookie.cookieLifetimeDays, cookie.domain, cookie.sameSite and cookie.secure.

See TypoScript constants.

Show the popup again after a configuration change 

Change consentConfigurationVersion every time you change your cookie configuration:

plugin.tx_cookieman.settings.consentConfigurationVersion = 2

Cookieman writes the version into the consent cookie and shows the popup again to all users whose cookie holds a different version. Until such a user saves again, the old consent does not count and cookieman injects no tracking objects. The selections of the user stay in the checkboxes.

See Show the consent popup again after a configuration change.