Guest Wi-Fi Logging for Cafes and Restaurants
Cafes and restaurants offering free Wi-Fi to customers are considered mass-use providers under Law No. 5651 and must record guest connections in a way that can be traced to a person. For a small business the practical solution is simple: redirect the customer to a captive portal (login page) on internet egress, verify by SMS or form, then store the firewall/DHCP/NAT records timestamped and centrally. The “I put the password on the wall, everyone connects” approach is not sufficient for Law No. 5651, because the connection cannot be tied to a person. Home-modem records are also unsigned and short-lived, so they carry no evidential value.
This page is for information only; consult the current legislation and a legal advisor for definitive obligations.
The most practical setup for a small business
- Captive portal: when a customer connects, a login page opens; they verify by SMS code or form.
- Central logs: firewall/DHCP/NAT records are collected on a signed log server.
- Time sync: all devices use the same NTP source.
- Retention: records are kept for the legal period with integrity intact.
Should I prefer SMS or form?
SMS verification is common and practical because it binds the phone number to the session. Form/sponsor verification can be used in scenarios where you don’t want SMS costs. For the flow, see How does an SMS-verified captive portal work?
Chain/branch scenario
If you have multiple branches, each branch’s record must be collected centrally and consistently; during a request, the right branch’s record must be reachable quickly.
How is SignLogger used in cafes/restaurants?
SignLogger installs as a ready virtual appliance for small businesses too: captive portal with SMS/form verification, syslog collection from all brands, daily signing of logs with the TÜBİTAK Kamu SM timestamp and e-signature, and audit reporting. For the general framework see Law No. 5651 log obligation, and for which records are needed see the what logs for guest Wi-Fi guide. Explore the features or request a demo.
Frequently Asked Questions
I’m a small cafe — do I really need to keep logs?
If you offer internet to guests you are within scope; business size grants no exemption. Practical and low-cost solutions exist.
Isn’t giving everyone the Wi-Fi password enough?
No. A shared password does not tie the connection to a person; captive-portal authentication is required.
Will SMS costs be high?
It depends on usage volume; methods that don’t require SMS, such as form/sponsor verification, can also be used.
Where should I store the records?
On a central log server, signed and integrity-protected; SignLogger provides this on your own infrastructure.
How long must I retain them?
Common practice is at least 6 months and at most 2 years; the exact period may vary by current regulation.
Is setup difficult?
As SignLogger is a ready virtual appliance, setup is completed the same day in most environments.