MammothWP Acceptance Logs

Name: MammothWP Acceptance Logs
Author: Mammoth WP

Log that your users accepted your terms. Versioned, role-scoped and tamper-evident, with a permanent archive of every version.

What it does

MammothWP Acceptance Logs asks logged-in users in the roles you choose to accept your Terms & Conditions, and keeps a verifiable record of who accepted which version, and when.

Versioned archive. Every published version is stored in full and never deleted, so each acceptance can be tied to the exact text shown.
Tamper-evident log. Each record is signed twice (immutable core, erasable context) and chained to the previous one. A verifier on the log screen flags altered rows.
Role-scoped prompt. A popup with “skip for now” and a persistent notice until the user accepts.
Receipts. An emailed PDF copy of what was accepted (optional, needs the bundled PDF library).
GDPR tooling. Personal-data exporter and eraser, retention-based anonymisation, and suggested privacy policy text.
Manage it your way. Admin screens, a REST API (mmwp/v1), WP-CLI (wp mmwp terms) and the WordPress Abilities API.
A public block that shows the current terms, effective date and history.

This is not a consent plugin. Recording acceptance of terms is an access-control and contractual-compliance mechanism (GDPR Art. 6(1)(b) and 6(1)(f)), not consent under Art. 6(1)(a). Acceptance is therefore not withdrawable and records are not deleted on request.

The plugin makes no outbound requests, loads no remote scripts, fonts or images, and sends no telemetry. It sends email only through your site’s normal wp_mail(): the acceptance receipt, and a support request if an administrator presses Send on the Support screen.

Requirements

WordPress: 6.2 or later (tested up to 7.1)
PHP: 8.1 or later
Version: 1.0.0
Licence: GPLv2 or later

Download and install

The wordpress.org listing is pending review. Until it is live, install from GitHub:

Download the ZIP of the main branch from github.com/mammothwp/admin-terms-acceptance (Code > Download ZIP).
Unzip it and rename the folder to mammothwp-acceptance-logs if GitHub named it admin-terms-acceptance-main, then zip it again.
In wp-admin, go to Plugins > Add New > Upload Plugin and choose the ZIP.
Activate the plugin.
Go to Settings > Terms & Conditions, write your terms, choose which roles must accept them, then publish the version.

The GitHub ZIP is the source tree and does not bundle its Composer dependencies. The acceptance flow and audit trail work without them; the REST, WP-CLI and Abilities surfaces, the Support screen and PDF receipts need them. To get all of that, run composer install --no-dev --optimize-autoloader inside the plugin folder before zipping.

Users in the selected roles are prompted the next time they load the site or the dashboard while logged in. Whoever activated the plugin becomes its first manager; managers are the only people who can read the acceptance log, under Users > Terms acceptance log.

Screenshots

The Terms & Conditions settings screen, where terms are written and published.

The acceptance log with signature verification.

Support

Email [email protected], or use the Mammoth WP → Support screen in wp-admin. Nothing is sent unless an administrator presses Send, and a site report is attached only if they tick the box after previewing it.

Licence and source

GPLv2 or later (licence text). Source code: github.com/mammothwp/admin-terms-acceptance.