WP Manifestindependent plugin directory
manifest / privacy / wpcookiekit

CookieKit — Cookie and Consent Manager

CookieKit: KVKK-compliant cookie banner and preferences panel for WordPress, Google Consent Mode v2, consent log, script-blocking API.

by RBN Bilişim · github.com/rbncore/wpcookiekit · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/rbncore/wpcookiekit/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/rbncore/wpcookiekit ↗

CookieKit

CookieKit adds a cookie banner and a preferences panel to WordPress for the Turkish data protection law (KVKK), with Google Consent Mode v2, a consent log kept as proof, and a script-blocking API.

Who it is for

Turkish WordPress publishers and agencies that need a cookie consent banner with real records — which categories were accepted, when, and with which policy revision — without sending visitor data to a third-party consent service.

Features

  • Banner and preferences panel in the site language. Accept, Reject and Preferences have equal prominence; there are no dark patterns.
  • Categories: Essential (always on, locked), Analytics and Advertising. Each category has a documented cookie list, and you can add your own cookies in the settings.
  • Google Consent Mode v2: denied defaults are pushed inline at the top of the page, before other tags; gtag('consent','update', …) runs on the visitor's choice, and a returning visitor's stored choice is applied immediately on page load.
  • Consent cookie cookiekit_consent with the format revision.bitmask, valid for 180 days by default (adjustable between 30 and 395). Raising the revision asks every visitor for consent again.
  • Consent log as proof: the raw IP address is never stored — the log keeps an HMAC with a daily rotating salt. Entries are deleted automatically after 12 months, and the log can be exported as CSV.
  • Shortcodes [cookiekit_tercihler] and [cookiekit_cerez_listesi]; any element with the data-cookiekit-open attribute opens the preferences panel.
  • Script blocking: cookiekit_script( 'analytics', $src_or_code ) in PHP, or a `