Agurel KVKK Compliance and Cookie Bar

Description

A WordPress plugin designed to help Turkish websites address the requirements of the KVKK (Law No. 6698 on Protection of Personal Data) and the Cookie Guidelines published by the Personal Data Protection Authority (KVKK Board).

Developed by a Turkish developer for the Turkish WordPress community.

This plugin is completely free. If you find it useful and would like to support its development, you can do so here: https://kreosus.com/agurel

Features:

  • Cookie consent bar designed with KVKK requirements in mind (fixed bottom bar, responsive)
  • Accept All / Reject All / Cookie Settings button layout
  • Google Consent Mode v2 support (GTM and direct gtag.js)
  • Automatic KVKK privacy notice generator based on company info
  • TinyMCE editor for manual text editing
  • Data category selection (general, physical, special category data)
  • Consent statistics dashboard with date range filter
  • Per-user disclaimer acceptance log
  • Shortcode support: [kvkk_aydinlatma_metni]
  • Application method toggles (mail, KEP, email)

Türkçe Özet

Bu eklenti, Türkiye’deki web sitelerinin 6698 sayılı KVKK ve KVK Kurulu Çerez Kılavuzu kapsamındaki
yükümlülüklere yönelik adımlar atmasına yardımcı olmak amacıyla geliştirilmiştir. KVKK mevzuatı
dikkate alınarak tasarlanmış bir çerez onay barı, Google Consent Mode v2 entegrasyonu
(GTM veya gtag.js), şirket bilgilerinize göre otomatik oluşan bir KVKK aydınlatma metni üretici ve
onay istatistikleri paneli içerir. Eklenti modülerdir: sadece çerez barını, veya çerez barı ile
birlikte GA4 entegrasyonunu kullanabilir; KVKK metni üreticisini hiç kullanmadan kendi
avukatınızın hazırladığı metni de sayfanıza ekleyebilirsiniz.

Bu metin ve eklenti hukuki danışmanlık niteliği taşımaz; profesyonel bir hukuk danışmanına
başvurmanız önerilir.

Bu eklenti tamamen ücretsizdir. Faydalı bulduysanız ve destek olmak isterseniz:
https://kreosus.com/agurel

External Services

This plugin optionally connects to Google’s services when the GA4 Integration feature is enabled by the site administrator. This feature is disabled by default.

Google Tag Manager

  • What it is: A tag management system by Google.
  • When it is used: Only when the administrator enables GA4 Integration and selects “Google Tag Manager” mode, entering a GTM Container ID.
  • What data is sent: Standard browser and page data as defined by Google Tag Manager and the tags configured within it.
  • Terms of Service: https://marketingplatform.google.com/about/analytics/terms/us/
  • Privacy Policy: https://policies.google.com/privacy

Google Analytics (gtag.js)

  • What it is: Google’s analytics tracking library.
  • When it is used: Only when the administrator enables GA4 Integration and selects “Direct gtag.js” mode, entering a GA4 Measurement ID.
  • What data is sent: Standard analytics data (page views, browser info, anonymized IP) as defined by Google Analytics.
  • Terms of Service: https://marketingplatform.google.com/about/analytics/terms/us/
  • Privacy Policy: https://policies.google.com/privacy

No data is sent to any external service when GA4 Integration is disabled (default state).

Installation

  1. Upload the plugin to the wp-content/plugins/ directory
  2. Activate the plugin from the Plugins menu in WordPress admin
  3. Click KVKK in the left menu
  4. Accept the disclaimer and fill in your company information

FAQ

Is the generated privacy notice legal advice?

No. The generated text is a starting point based on general KVKK requirements. It does not constitute professional legal advice. We strongly recommend reviewing the text with a lawyer before publishing it, especially if you already work with legal counsel.

Do I have to use the privacy notice generator?

No. The plugin is modular and the privacy notice generator is entirely optional. You can use:

  • Only the cookie consent bar (GA4 integration disabled — the default state), or
  • The cookie consent bar together with GA4 / Consent Mode v2 integration (if enabled in settings)

— in either case, without ever using the [kvkk_aydinlatma_metni] shortcode. If you already have a privacy notice prepared by a lawyer, simply add that text to your page directly.

I edited the generated text manually. Will it update automatically when I change company info or data categories?

No. Once you manually edit the privacy notice text, it is treated as your custom text and is no longer regenerated automatically. If you change your company information or data categories afterwards, you need to go to the “KVKK Metni” page and click “Otomatik Oluştur” (Auto-Generate) again to refresh the text, or edit it manually.

Why does the disclaimer screen appear again after I deactivate/reactivate the plugin, or when a different user logs in?

The disclaimer acceptance is recorded per WordPress user. If a different user logs in, they have not yet accepted it, so it will be shown to them. Additionally, deactivating the plugin resets the acceptance records (the permanent file log is not affected), so reactivating the plugin will show the disclaimer again for all users. This ensures everyone is aware of the disclaimer terms after any plugin reinstallation or update.

Are cookies off by default?

Yes. As required by the KVKK Cookie Guidelines, analytics and marketing cookies are disabled by default. Only essential cookies are always active.

What happens when a visitor clicks “Tümünü Kabul Et” (Accept All)?

All cookie categories (essential, analytics, marketing) are enabled. If GA4 integration is active, Consent Mode v2 signals (analytics_storage, ad_storage, etc.) are updated to “granted”.

What happens when a visitor clicks “Tümünü Reddet” (Reject All)?

Only essential cookies remain active; analytics and marketing cookies stay disabled. If GA4 integration is active, Consent Mode v2 signals remain “denied”.

What happens when a visitor closes the bar with the X button without choosing?

The site continues with only essential cookies. No consent choice is recorded, so the cookie bar will be shown again on the visitor’s next visit.

How long is consent stored?

Default is 180 days (6 months), configurable from the admin panel.

How does GA4 integration work?

Consent Mode v2 automatically updates analytics_storage and ad_storage signals based on user consent. Works with both GTM and direct gtag.js.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“Agurel KVKK Compliance and Cookie Bar” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

1.1.1

  • Updated Author display to “Ahmet Gurel” with LinkedIn link, consistent with the developer’s other plugin

1.1.0

  • Softened “compliant” wording in the description and Turkish summary to “designed with KVKK requirements in mind” / “mevzuata yönelik” — avoiding an absolute compliance claim, consistent with the disclaimer that this is not legal advice

1.0.9

  • Added a note that the plugin is free and a support/donation link (Kreosus) to both the readme and the dashboard footer

1.0.8

  • Added Donate link (Kreosus)
  • Added Turkish summary section to the readme
  • Expanded FAQ: legal disclaimer notice, modular usage without the privacy notice generator, manual text editing behavior, disclaimer re-acceptance after deactivation, and detailed cookie bar button behaviors

1.0.7

  • Disclaimer acceptance records are now reset on plugin deactivation, so the disclaimer is shown again on reactivation or reinstall
  • Added “accepted_version” column to the disclaimer log table and display it in the admin log table
  • Renamed “Aktif Kurulum Kayıtları” to “Aktif Kurulum Onay Kayıtları” and simplified the persistent log description
  • Added a note on the KVKK Text page clarifying that users with their own lawyer-prepared privacy notice do not need to use the shortcode

1.0.6

  • Reworded the persistent log explanation text on the “Onay Kayıtları” page for clarity

1.0.5

  • Updated plugin display name to “Agurel KVKK Compliance and Cookie Bar”
  • Updated description to mention it is developed by a Turkish developer
  • Renamed admin menu to “Agurel KVKK & Cookie Bar”
  • Added plugin version display on the dashboard page

1.0.4

  • The persistent file log now includes the plugin version at the time of acceptance

1.0.3

  • Added uninstall.php to remove database tables and settings on plugin deletion
  • The persistent file log (uploads/kvkk-disclaimer-log.txt) is preserved across uninstall/reinstall
  • The persistent file log is now displayed (read-only) on the “Onay Kayıtları” admin page

1.0.2

  • Limited representative entries to a maximum of 3
  • Added a reminder when company info or data categories change but the privacy notice text has been manually edited
  • Added KVKK Board (KVK Kurulu) guidance notes for camera, audio recording, and biometric data categories

1.0.1

  • Per-user disclaimer log
  • Dashboard date range filter
  • Application method toggles
  • Strengthened privacy notice text
  • Phone number validation

1.0.0

  • Initial release