You can set up a cookie consent banner directly from your Shopify admin in the Customer Privacy settings (The page on privacy settings). This built-in feature allows you to ask visitors for consent before using cookies and other trackers, helping you comply with privacy laws in the regions you sell to.
Key takeaways
- Shopify has a built-in cookie banner that you can activate in your admin settings, which replaced the former Privacy & Compliance app (Introducing Customer Privacy settings in Shopify admin - Shopify).
- Before you can use the banner, you must have a published privacy policy on your store.
- The banner's automated settings will display it to visitors from the UK and EEA if you have active markets in those regions.
- Shopify's banner controls Shopify-managed tools like pixels and checkout, but scripts you add manually or through some apps may require a third-party solution to respect consent.
What is a cookie consent banner and why do I need one?
A cookie consent banner is a notification that appears on your store to inform visitors about the use of cookies and ask for their permission before any non-essential trackers are used. Many privacy laws, such as the General Data Protection Regulation (GDPR) in Europe, require you to get this consent before collecting or processing certain types of personal data.
In the European Union and the United Kingdom, you generally need to get a visitor's consent before using cookies for analytics or marketing. In the United States, privacy laws like the California Consumer Privacy Act (CCPA) focus more on giving consumers the right to opt out of the "sale" or "sharing" of their personal information for targeted advertising. Setting up a banner is a key step in meeting these legal requirements and building trust with your customers (The page on privacy settings).
How to set up the cookie banner in Shopify
Shopify provides a built-in tool to create and manage a cookie banner for your online store. The feature is located in the Customer privacy section of your settings and requires you to have a privacy policy published before you can activate it.
Here are the steps to set up Shopify's cookie banner:
- From your Shopify admin, go to Settings and then click Customer privacy.
- Select Cookie banner from the options.
- In the Regions and content section, you can use automated settings or choose to customize the banner manually. The automated settings will display the banner in regions where it is typically required, such as the UK and the European Economic Area (EEA), if you sell there.
- To manually select where the banner appears, click Edit in the Regions section, choose the specific regions, and then click Done.
- You can adjust the banner's appearance, including colors and on-screen position, to match your store's branding.
- Once you are finished with your configuration, click Save. You can preview how the banner will look on your store by clicking View in the Position section.
Example: Imagine a customer from the United Kingdom visits your store. Because you have an active market in the UK, your Shopify cookie banner appears, asking for consent to use cookies for analytics and marketing (The page on privacy settings). The customer clicks "Decline". As a result, Shopify will not set non-essential cookies like _shopify_analytics or _shopify_marketing on the customer's device. If the customer had clicked "Accept", these cookies would have been set, and their session data would contribute to those functions.
Should I use Shopify's banner or a third-party app?
Shopify's built-in banner is a good starting point, but it doesn't cover all scenarios. It automatically handles consent for Shopify-managed services like Shopify Pixels and checkout. However, if you have added tracking scripts to your theme manually or use apps that inject their own scripts, Shopify's banner may not stop them from running. In those cases, you might need a third-party consent management app.
| What you need | Shopify's built-in banner | Third-party consent app |
|---|---|---|
| Consent for other scripts | Not covered without custom code. | Usually covered by blocking scripts based on category until consent is given. |
| Consent record | Provides a log of consent choices. | The app maintains its own log, often for a longer duration. |
| Google Consent Mode | Requires a manual code snippet for custom pixels. | Often has built-in integration for easier setup. |
According to Enzuzo, a dedicated consent management app from the Shopify App Store can offer more control over third-party scripts and often provides more detailed consent logs, which can be important for demonstrating compliance. If you use a third-party app, you should disable Shopify's banner to avoid showing two pop-ups to your visitors.
Common mistakes when setting up cookie consent
Setting up cookie consent correctly is important for both legal compliance and customer trust. Here are some common mistakes to avoid.
- Forgetting about third-party scripts: Many merchants assume the built-in Shopify banner controls all trackers on their site. It only manages Shopify's own services. Scripts from apps or added manually to your theme may ignore the consent choice unless you use a third-party consent app or add custom code.
- Mismatching regions: If you use a third-party banner app, you must ensure the regions you select in the app's settings match the regions configured in Shopify's Customer privacy settings. If they don't match, data could be collected before a visitor gives consent.
- Not having a privacy policy: Shopify requires you to have a published privacy policy before you can activate the cookie banner. You can create one from a template in Settings > Policies. For more information, see our guide on how to add a privacy policy to your Shopify store.
- Ignoring opt-out signals in the US: In several US states, you are required to honor browser signals like the Global Privacy Control (GPC), which lets users automatically opt out of data sharing. Shopify's data sharing opt-out page, when activated for the relevant regions, handles this for you.
This is general information, not legal advice. You are responsible for your own compliance, and you should consult a lawyer to understand how privacy laws affect your business (Shopify Help Center | Privacy).
Frequently asked questions
Do I need a cookie banner in the US?
According to Enzuzo, most US state privacy laws, like California's CCPA, require businesses to offer an opt-out from the "sale" or "sharing" of personal data, rather than an opt-in banner like in the EU. However, these laws also require you to honor universal opt-out signals like Global Privacy Control (GPC), which Shopify's privacy tools can help you manage.
Can I customize the look of the Shopify cookie banner?
According to Google, yes, you can customize the colors and position of Shopify's built-in cookie banner. These options are available in the Cookie banner settings within the Customer privacy section of your admin.
Why did the Shopify Privacy & Compliance app disappear?
The features of the Shopify Privacy & Compliance app were integrated directly into the Shopify admin under Settings > Customer privacy (Introducing Customer Privacy settings in Shopify admin - Shopify). This change, announced in January 2024, consolidated the tools for managing privacy policies, cookie banners, and data opt-outs into one central location.
