Frequently Asked Questions

CookieTrace is a Consent Management Platform (CMP) that helps organisations implement GDPR, KVKK, ePrivacy and CCPA consent workflows. It is developed and operated by EZERA DIGITAL TECHNOLOGIES FZCO (EZERATECH).

E-commerce sites, fintech, SaaS, agencies, telecom and SMBs. Suitable for any size of website that needs KVKK in Türkiye, GDPR in the EU, CCPA in the US.

3 minutes with a single-line script. No code changes or developer help required. Can also be added through a tag manager.

The banner UI ships in 8 languages: Turkish, English, German, French, Spanish, Italian, Dutch and Polish. Custom language additions are available from the Pro plan.

Geo-targeting works worldwide. The banner shows the right regulation per country: KVKK for TR, GDPR for the EU, CCPA/CPRA for US states, LGPD for Brazil.

CookieTrace supports implementation of the 2022 Cookie Guide principles, including disclosure of essential cookies, plain language, equal-prominence Accept/Reject choices and purpose-level controls. Cross-border transfers require a separate KVKK Article 9 assessment; adequacy, appropriate safeguards or limited statutory exceptions may apply, and explicit consent is not the sole route.

If you operate in Türkiye, GDPR alone is not enough. KVKK Art. 9 (cross-border transfer), the explicit consent definition and VERBİS obligations differ. CookieTrace is designed KVKK-native.

Yes. Per the EU ePrivacy Directive (Cookie Law), all non-essential cookies are blocked before consent. No pre-ticked checkboxes, no dark patterns.

Yes. For US users, the 'Do Not Sell My Personal Information' link, opt-out management and Global Privacy Control (GPC) signal are automatically supported.

Each consent event is stored immutably with timestamp, IP hash, banner version and cryptographic hash. In an audit you can prove 'this user made this choice at this time'. Default retention is 3 years, extendable per plan.

CookieTrace automatically lists your cookie inventory and data processing activities — you can use this as a reference in your VERBİS registration. CookieTrace is a software solution and does not provide legal advisory services. For the legal aspects of VERBİS registration, please consult your own legal counsel.

As the website owner, you are the data controller. CookieTrace acts as the data processor. A KVKK-compliant standard Data Processing Agreement (DPA) is included in all plans.

Under 15 KB (gzip). With edge-cached delivery and async-defer loading the impact on Core Web Vitals is negligible. Test sites show no measurable change in LCP/CLS.

No. The banner script, written with a modern stack, is non-blocking and loads async. There is no visible drop in your Lighthouse scores.

The Deep Scan engine crawls your site weekly, automatically finds and categorizes newly added cookies and trackers. No manual updates needed.

Cookies already set by the rejected categories are deleted, providers with a consent API (Meta, Clarity, TikTok) are told to revoke, and — if you enable tracker request blocking — outgoing requests to known trackers are stopped before they leave the browser. Scripts already loaded are not removed; what stops is their data transmission.

Yes, with an optional second switch. When it is on, non-essential trackers are stopped until the visitor chooses. It is off by default, and because our widget loads asynchronously it cannot undo a request already sent in the very first moments of a first visit.

With Google Consent Mode v2 the tags receive a 'no consent' signal: GA does not write cookies and sends a cookieless ping instead. If you also want that ping stopped, enable tracker request blocking with the before-consent option.

Yes. Fully compatible with React, Vue, Angular, Next.js and other SPA frameworks. Banner state persists across page transitions.

Yes, we offer an AMP-compatible banner version. Included from the Pro plan and above.

There is no permanently free plan. Every plan starts with a 14-day trial that needs no credit card.

Cancel monthly. Annual billing is available at the prices shown in checkout, and there is no long-term lock-in.

No. CookieTrace does not meter pageviews, sessions or monthly visitors. Pricing depends only on the number of domains, so traffic growth never triggers an overage bill.

Domains are included in the plan: Pro $39/month covers 10 domains, Premium $79/month covers 100 domains, and Enterprise covers unlimited domains with custom pricing. There is no per-domain surcharge inside those limits.

All traffic runs over HTTPS, consent data is stored encrypted. Stored consent records are immutable — cannot be modified. Regular backups and access logs are maintained.

By default, service data is hosted in the EU (Frankfurt). Türkiye data residency is available on request. Local hosting may reduce some cross-border transfer scenarios, but customers must assess all transfers created by their architecture and integrations under KVKK Article 9.

Our DPA includes a reasonable-time notification obligation. We notify the data controller per KVKK Art. 12 and GDPR Art. 33. All security events are automatically logged.

Yes, native GTM integration. Tags are automatically triggered or blocked based on consent state.

Yes, out-of-the-box. The Consent Mode v2 signals required for Google Ads and GA4 to function properly in the EU and TR are sent automatically.

Yes, official one-click plugins/apps are available for all of them. There is also a universal script option that works with any CMS.

Yes. The banner is compatible with Google Ads, Meta Ads and other major ad-tech platforms. Ad scripts are automatically triggered or blocked based on consent state.

Yes, REST API and webhook access are included on all plans. You can stream consent events to your own data warehouse.