How to Add Cookie Consent to Your Shopify Store (GDPR Guide 2026)
If your Shopify store has visitors from the EU, cookie consent is not optional. Every tracking pixel, analytics script, and marketing tag you've installed needs to be blocked before it fires until your visitor says yes. Shopify has a built-in cookie banner, but it only covers Shopify's own tools. Your third-party scripts are your responsibility.
This guide shows you how to get fully compliant in under ten minutes, without editing code.
Does Shopify Have Built-In Cookie Consent?
Shopify includes a basic cookie banner in Settings, but it only manages Shopify's own cookies and pixels. According to Shopify's own documentation, if you've manually installed third-party cookies or pixels, you need to use a third-party cookie banner or add custom logic to ensure they honor customer consent. Google Analytics, Meta Pixel, TikTok Pixel, Klaviyo, and similar tools are not covered by Shopify's native banner unless they're installed through an app that integrates with Shopify's Customer Privacy API.
In short: Shopify's built-in banner is a starting point, not a complete solution for most stores.
What Cookies Does a Shopify Store Typically Use?
A typical Shopify store runs more tracking than the owner realizes. Common non-essential cookies include Google Analytics 4, Meta Pixel, TikTok Pixel, Pinterest Tag, Klaviyo, Google Ads conversion tracking, and any embedded chat widgets. All of these require explicit consent from EU visitors before they fire.
To see exactly what's running on your store, use the Consentify domain scanner. It identifies active cookies and third-party scripts and flags which categories they belong to. Running this before you set anything up gives you a clear picture of what needs to be gated behind consent.
How to Add a GDPR-Compliant Banner to Shopify
Step 1 — Create a Free Consentify Account
Go to consentify.app and sign up. The free plan covers one domain with no watermark and no pageview limit. Add your Shopify store's domain in the dashboard and confirm the URL.
Step 2 — Add Your Integrations
In the integrations tab, add the tools your store uses. For most Shopify stores, this means GA4 and Meta Pixel at minimum. Consentify will block these from loading until the visitor gives consent. If you use Klaviyo, TikTok, or Google Ads, add those too. The integrations panel shows which category each tool belongs to, so your visitors can accept analytics without accepting marketing, or vice versa.
Step 3 — Design Your Banner
Open the visual editor. Set the position, colors, and text to match your store's branding. The banner sits in a Shadow DOM, which means it won't conflict with your Shopify theme's CSS. Keep the language simple and specific. Tell visitors what you track and why. Avoid vague phrases like "we use cookies to improve your experience" without naming which cookies.
Step 4 — Paste the Script Into Your Theme
Copy the script tag from your domain settings. In Shopify, go to Online Store → Themes → Edit Code. Open theme.liquid and paste the script tag just before the closing </head> tag. Click Save and preview the store in an incognito window to confirm the banner appears.
If you're not comfortable editing theme code, the script can also be added via Shopify's Custom HTML block or through a trusted app. The important thing is that the script loads before any other third-party tracking scripts on the page.
Step 5 — Add a Revoke Consent Option
GDPR requires that visitors can change their consent after the first visit. Add a link or button in your footer with the element ID revoke-consent-btn. In Shopify, you can add this as a text link in the footer navigation or as a button in your footer section. Consentify will automatically attach the consent panel to it. Without this, your setup is legally incomplete.
A Note on Shopify Checkout
Shopify does not allow external scripts in the native checkout flow. Third-party consent tools, including Consentify, can cover your storefront and order confirmation page, but not the checkout pages themselves. Shopify manages its own consent in checkout via its Customer Privacy API. This is a platform limitation, not a gap in your compliance setup, as long as no third-party tracking scripts run in checkout without consent.
What About Google Consent Mode v2?
If your store runs Google Ads or uses GA4 for analytics, Consent Mode v2 has been required since March 2024 for EEA traffic. It tells Google how to adjust its tags based on your visitor's consent choice. Consentify passes the correct consent signals to GA4 automatically when you configure it as an integration. For a deeper look at how GA4 and GDPR interact, see the GDPR for developers guide.
Managing Multiple Shopify Stores
If you're a Shopify developer or agency managing several client stores, the free plan covers one domain. Paid plans start at 39 NOK per month and let you manage multiple domains from a single dashboard. Agency plans include white-label options so the banner reflects your client's brand. See the Consentify for Shopify page for plan details.
Ready to get started? Try Consentify free — one domain, no watermark, no time limit.