Consentl for Shopify

The Consentl app for Shopify is coming soon: a theme app embed with no code and no site key that passes each choice to Shopify's Customer Privacy API.

Consentl for Shopify is a separate, native Shopify app. It is not in the Shopify App Store yet, so it cannot be installed today; this page describes how it works and will link to the listing as soon as it is published.

The app is not connected with a site key and does not use the Consentl dashboard at app.consentl.com: once it is available, you install it from the Shopify App Store, manage it inside your Shopify admin, and Shopify bills the plan on your Shopify invoice.

What you get

• A banner that follows the rules of each region: opt-in for the EU/EEA, the UK and Switzerland, opt-out with Global Privacy Control for US state privacy laws, notice elsewhere.
• Reject as easy as Accept, choices per category, and a "Cookie settings" link and icon so visitors can change their choice at any time.
• Shopify's Customer Privacy API on every plan: Shopify-managed pixels (app pixels, custom pixels with a privacy permission) and checkout follow the visitor's choice.
• A consent log with CSV export, a cookie scanner and a cookie declaration page, a privacy request form with deadlines per law.
• On paid plans: Google Consent Mode v2, Meta, Microsoft and TikTok consent signals, the EU withdrawal button, automatic blocking of known trackers and more. See Pricing.

Install

These steps apply once the app is published in the Shopify App Store.

1. Open the Consentl listing in the Shopify App Store and click Install. The listing link appears at the top of this page as soon as the app is published.
2. Approve the permissions. Consentl opens in your Shopify admin with a four-step setup guide.
3. Activate Consentl in your theme. The guide opens the theme editor on App embeds. Turn on Consentl and click Save. The app embed adds the banner and the script blocking to your theme without editing theme code.
4. Choose where to ask for consent. Keep the recommended strategy unless you have a reason to change it.
5. Make it match your brand. Pick a layout and colours in the banner editor with live preview. Ready-made translations are shown in every language your store publishes.
6. Go live. Consentl turns on the banner, switches off Shopify's built-in cookie banner and aligns Shopify's privacy regions with yours, so pixels and checkout follow the same choice.

Check that it works

1. Open your store in a private browser window. Add ?consentl=preview to the address to see the banner while test mode is on.
2. Open the browser's developer tools on the Network tab and reload. Before you click anything on the banner, filter for facebook, google, tiktok and similar vendors: in an opt-in region there should be no requests to them until you accept the matching category. On Free and Pro, tags hard-coded in the theme are held back only if you marked them (see Tracking tags in theme files); automatic blocking of known trackers needs Business or higher.
3. In the Console, Consentl.get() shows the current choices and Consentl.region() the resolved region.

Tracking tags in theme files

This limitation applies to every JavaScript consent tool, on every plan. When the browser receives your store's HTML, it starts downloading <script src>, <img> and <iframe> URLs it finds there while parsing, before any script can stop them. Tags pasted straight into theme.liquid or a snippet can therefore reach the vendor before consent. Fix them in this order:

1. Use the vendor's Shopify app (Meta, Google & YouTube, TikTok, Pinterest, Microsoft). App pixels follow the choice Consentl passes to Shopify. Then delete the hard-coded copy.
2. Move the tag to Shopify Customer events: Settings → Customer events → Add custom pixel, paste the vendor code and set the matching privacy permission.
3. Keep it in the theme but mark it: change <script> to <script type="text/plain" data-consentl="marketing"> (or analytics), and change <img src="…"> / <iframe src="…"> to data-src="…" with data-consentl.
4. Delete <noscript> tracking pixels. They only fire when JavaScript is off, which is exactly when no banner can be shown.

The cookie scanner lists trackers it saw before consent, which helps you find them.

Headless and Hydrogen storefronts

On the Enterprise plan Consentl also works on headless storefronts. Copy the loader tag from the Consentl app (Settings) and add it as the first, synchronous script in <head> of your storefront. Consentl forwards the choice to Shopify's Customer Privacy API, so Shopify analytics and checkout follow it. In Hydrogen, do not also enable Shopify's own privacy banner.

Limitations

• Consentl can only hold back code it sees before the browser runs it (see Tracking tags in theme files). Server-side tracking and other apps' own servers are outside its control.
• Checkout pages are rendered by Shopify; the banner does not appear inside checkout, but checkout follows the choice through the Customer Privacy API.
• Consentl does not implement the IAB Transparency & Consent Framework (TCF).
• You remain responsible for your settings and for your store's compliance. Consentl does not give legal advice.

Privacy and billing

The app has its own terms of service and privacy policy, which are published when the app is available in the Shopify App Store. Plans are billed by Shopify; you can change or cancel your plan in the app at any time.

Stuck? Write to [email protected] — we answer in English on business days.