About this plugin
Riza Kayit is a consent management platform (CMP) that helps websites meet their obligations under KVKK (Turkish Personal Data Protection Law no. 6698) and the GDPR.
This plugin adds the Riza Kayit widget to your WordPress site, in the right order and with the right settings.
Why a plugin? When the snippet is pasted into a theme by hand, it disappears the next time the theme is updated, and site owners rarely notice. What remains is a site with no cookie banner and no compliance.
A plugin survives theme updates.
What it does
- Cookie consent banner — Accept and Reject are presented with equal weight
- Blocks trackers before consent — Google Analytics, Meta Pixel, Hotjar, GTM and similar tools stay inactive until the visitor chooses
- Google Consent Mode v2 support
- Automatic cookie scanning — detects provider, category and retention period
- Automatically generated cookie policy (added to a page with a shortcode or block)
- Visitors can view their own consent record and request its deletion (KVKK art. 11)
- Banner available in 7 languages
Admin dashboard
The settings screen is organised into five tabs:
- Dashboard — consent records this month, acceptance rate, quota usage and current plan
- Appearance — a read-only summary of your banner settings (position, colours, logo, categories)
- Behaviour — blocking status, Google Consent Mode and blocking exceptions
- Cookie Policy — the shortcode and block for your policy page
- Plan — your quota and available plans
Requires an account
This plugin does not work on its own; a free Riza Kayit account is required. You can create one without leaving WordPress, or paste the site ID from your existing account.
Cookie policy
To publish your automatically generated cookie policy on a page, use the shortcode:
[rizakayit_cerez_politikasi]
The height can be adjusted:
[rizakayit_cerez_politikasi yukseklik="800"]
In the block editor you can also search for the Riza Kayit — Cookie Policy block.
External services
com), a third-party service. The plugin does not function without it.
When is data sent, and what data?
-
js into your site’s <head>. While the widget runs:
- It fetches your banner settings (your site ID is sent). The same request also carries the integration type ( wordpress ) and the plugin version number, so Riza Kayit support can see which sites are connected through this plugin and which are running an outdated version. Nothing about your visitors is included.
- When a visitor makes a choice, a consent record is sent: consent ID, selected categories, page address, browser information, language and a masked IP address. Raw IP addresses are never stored; they are masked and hashed irreversibly.
- Only the names of cookies detected on your site are reported; their values are never sent.
-
php. This happens only when you click the button. No password is requested; a link to set your password is e-mailed to you.
-
php and your site name and domain are returned. This happens only when you click the button.
-
php (cached for 6 hours). If an account key is present, your current plan is returned in the same request. No personal information is sent or received.
-
php. The response is cached for 12 hours; you can refresh it manually with the “Refresh data” button. The request contains only the account key stored by the plugin — site IDs are public, so these figures cannot be requested with one.
No visitor-level records are returned, only totals.
-
php and your session is opened. com, not in this plugin; card details are never entered on your WordPress site.
-
php.
-
php (deliberately with invalid data, so no account is created). This happens only when you click the button, and no personal data is sent.
Data is processed on servers hosted in Istanbul, Turkey.
- Terms of service: https://rizakayit.com/legal?doc=terms
- Privacy policy: https://rizakayit.com/legal?doc=privacy
- Data processing agreement (DPA): https://rizakayit.com/legal?doc=dpa