Strictly necessary
Keep the site working and hold the consent choice itself. Always on.
- mg_consent
- PHPSESSID
- __cf_bm
Consent your visitors can see. Proof you can show when asked.
ikuad scans your site, shows a consent banner in Arabic and English with your design, and keeps every yes and every no in a timestamped record locked for five years — proof of compliance you can hand to a PDPL or GDPR regulator.
Consent receipt — ikuad
- Site
- ward-store.sa
- Local time
- 2026-10-17 14:32
- Banner version
- v7
- Text fingerprint
- 9f3c 41ab
- Necessary✓
- Preferences✗
- Analytics✓
- AdvertisingGPC signal✗
Kept until2031-10
Locked — cannot be changed or deleted before the term ends
How it works
Three real steps, in the order they happen: scan, banner, proof.
1
Scan
ikuad browses your site the way a real browser does — twice, before and after consent — and finds every cookie, storage entry and third-party request, categorised from a library that knows them.
2
Banner
A banner in Arabic and English with your colours, font and logo. Accept and refuse are the same size on the first layer, each category has its own switch, and visitors are asked again only when what they consent to changes.
3
Proof
Every choice becomes a record: the site, the banner version, the text fingerprint, each category's answer, the time and the country — with no IP address. Archived within the hour to storage locked for five years that even we cannot edit.
Four categories, one colour per meaning
The same colours in the banner, the receipt, the scan report and the dashboard — one meaning for you and for your visitor. Real examples from our library:
Preferences
Remember the language, currency and layout the visitor likes.
- theme
- lang
- currency
Analytics
Measure how the site is used. Never without consent.
- _ga
- _ga_*
- _gid
Advertising
Measure campaigns and build audiences. Only with explicit consent.
- _fbp
- _gcl_au
- fr
What we do not know is treated as advertising and blocked until you categorise it — an error in the other direction costs you your compliance.
Run a matgrk store? One click.
ikuad is a paid app in matgrk's Apps store. Buy it there, and within five minutes — without typing a single field: your site and domains are added, the first scan is done, every cookie is categorised, and the banner carries your store's colours, font and logo in Arabic and English.
- Zero setup: everything happens on payment, and your new domains are followed as you verify them.
- Cheaper through matgrk: every plan costs less than buying directly on ikuad.com, with identical features.
- One visitor choice governs every matgrk integration — analytics, ads and event destinations.
Plans that start at zero
A free plan for one site, then plans that grow with your pageviews. Every paid plan is cheaper through matgrk.
Free
- Sites
- 1
- Domains
- 1
- Pageviews / month
- 5,000
Starter
- Sites
- 1
- Domains
- 3
- Pageviews / month
- 50,000
Business
- Sites
- 5
- Domains
- 10
- Pageviews / month
- 500,000
Pro
- Sites
- 20
- Domains
- 50
- Pageviews / month
- 3,000,000
The rules we help you prove
- Saudi PDPL
- Consent is the basis of processing, and the regulator asks you for it. Records locked for five years show exactly what the visitor saw and answered.
- GDPR
- Free, specific, informed, withdrawable consent — and proving it is your burden. ikuad's record keeps the text version and its fingerprint with every answer.
- Google Consent Mode v2
- All four signals update on every choice, stored or via gtag — refusal starts from full blocking, not from a question.
- Global Privacy Control
- The browser signal counts as a refusal of advertising unless the visitor explicitly accepts, and the record says so.
Security and data you can sleep on
- No IP address is ever stored in a consent record — only the visitor's country, from Cloudflare, with salted hashing for rate limits.
- Records archive within the hour to Object-Locked storage in Europe — Amsterdam then OVH Gravelines — five years with no edits and no deletes, even by us.
- Our scanner leaves through a gateway that refuses private network addresses, so a stranger's scan is never a key to your network.
- This very site loads nothing from any third party before your consent — our fonts are ours, and there are no analytics yet (when there are, they will not run without your consent).
- Operations logs are kept 13 months, stripped of secrets and identities.
Questions site owners ask
Does the free scan need an account?
No. Put your site address on the homepage and you get a categorised report. The report is public by an unguessable link and kept 30 days. Turning the result into a working banner needs a free account.
What happens when a visitor refuses everything?
Only the strictly necessary keeps running: no tracking cookies, no requests to analytics or advertising partners, and withdrawn categories' cookies are deleted on withdrawal. The refusal is recorded like any answer — a refusal is compliance proof too.
How are records locked for five years?
Every hour, its records are written compressed with a chained checksum to object storage under compliance Object Lock. We hold no ability to edit or delete before the term, and a daily verifier recounts and matches them.
I changed the banner text — are visitors asked again?
If the change touches what a visitor consents to (wording or categories), yes — the law requires it. A cosmetic change (colour, layout) asks no one. ikuad tells the difference and warns you before publishing.
My visitors are in Saudi Arabia and your data is in Europe — how?
Records carry no IP address and no direct identifier — a random consent id only. For cross-border purposes we rely on the appropriate transfer basis under the PDPL for customers subject to it, and under GDPR for those subject to that; the privacy policy has the detail.
What if I stop my subscription?
The banner keeps working and records keep being kept to the end of the term; edits and new scans stop. Your archive stays locked until its five years end.
Is the Arabic real or a thin translation?
ikuad is Arabic-first: the banner, the dashboard, the reports and the emails are written in natural Arabic, and English is the translation, not the other way round. Your site speaks each visitor's language.
My site has nothing to do with matgrk — is this for me?
Yes. Any website works: add your site, verify your domain, and you get one snippet to put in your pages that shows the banner and blocks what your visitor did not consent to, before it runs.