Consent in mobile measurement: a practical checklist for KVKK and GDPR
Short answer: Measurement data must not be sent without explicit consent. When consent is withdrawn, local identifiers are deleted and no new events are sent.
Checklist
- Ask for consent before measurement starts, on its own screen.
- If consent is declined, the app keeps working; only measurement stops.
- Respect the Global Privacy Control signal and similar opt-outs.
- Do not send personal fields such as email, phone or name to the SDK.
- Store only a salted hash of IP addresses.
Retention and deletion
Event data is deleted after the period set for the property. When a user withdraws consent, the related data must also be deleted.
Legal note
This article is general information, not legal advice. Ask your legal adviser to review your consent flow and privacy notice.