Install freeProof of consent for every visitor
Every choice a visitor makes on your cookie banner is saved as a consent record with its own ID. When a customer, a regulator or Google asks what someone agreed to, you have the answer in seconds.
6ae0dc5e5e7a…Accepted all92.208.155.***DE6ae0bfd7d4a1…Accepted all89.134.8.***HU6ae09bf9d4a1…Partially accepted85.75.98.***GR6ae098a8d4a1…Declined all85.106.44.***TRWhat is consent tracking?
Consent tracking is keeping a record of every cookie choice a visitor makes, so you can prove later what they agreed to and when. Under the GDPR, a business that relies on consent must be able to demonstrate that the visitor gave it (Article 7(1)). A consent banner collects the choice; consent tracking is the proof.
What every consent record holds
Each choice is saved as a receipt: anonymous, timestamped and tied to one ID that both you and the visitor can see.
- Consent IDA unique 24-character ID for every consent, also shown to the visitor.
- Date and timeWhen the choice was made, to the second.
- ChoiceAccepted all, partially accepted or declined all.
- Each categoryFunctionality, performance and targeting, one by one.
- CountryWhere the visitor was, for the law that applied.
- Masked IPShortened so it can’t identify the visitor.
One record, two views
For you, in the Shopify admin
- Every consent in Reports & analytics > Consents list
- Filter by today, yesterday, this week, last week or this month
- Filter by type and date range, newest or oldest first
- Find one consent instantly by its ID
- Export the records to CSV for your files
For your shoppers, on your store
- Their current choice, category by category
- The date of their consent and their consent ID
- Change or withdraw their consent at any time
- A reference to quote if they ever contact you
When you’ll need the proof
A customer complaint
A shopper says they never agreed to marketing cookies. Search their consent ID and show exactly what they chose, and when.
A regulator’s request
A data protection authority asks how you collect consent. Export the records and show a complete, timestamped trail.
A Google consent audit
Google reviews whether your store collects valid consent before ads cookies. Your records show every choice was captured.
Your own checks
See how many visitors accept, decline or choose some categories, and spot a banner that isn’t working.
Private by design
- Visitors get an anonymous ID with no personal information in it
- IP addresses are masked before they’re shown
- Records are stored encrypted in the app’s cloud database
- Every later change by the same visitor is linked to their record
How it works
The visitor sees your banner
A first-time visitor sees your cookie banner, in their language and for their region.
They make a choice
Accept all, decline all, or choose category by category in the preferences.
The consent is recorded
The choice is saved in the visitor’s browser and in your consents list, with its own ID.
Consent tracking questions, answered
Do I need to keep a record of cookie consent?
Yes, if you rely on consent. Article 7(1) of the GDPR says the business must be able to demonstrate that the visitor consented. A consent log with the date, the choice and an ID for each visitor is how you do that.
What counts as proof of consent?
A record that shows who consented (an anonymous ID is enough), when, to what, and how. Pandectes saves each choice with a unique consent ID, the date and time, the choice for each category, the country and a masked IP address.
How do I find a specific customer’s consent?
Ask the customer for their consent ID: they can see it in the cookie settings on your store. Then search for it in Reports & analytics > Consents list in the app.
Can I export the consent records?
Yes. Filter the consents list by date or type and export it to a CSV file that opens in Excel, Google Sheets or any analytics tool.
Is consent tracking itself GDPR compliant?
The records are built to hold no more than they need: visitors get an anonymous ID, IP addresses are masked, and records are stored encrypted. This page explains how the feature works, not legal advice.
Can visitors change or withdraw their consent?
Yes. Visitors can reopen their cookie settings at any time, see their current choice, and change it. The new choice is recorded and linked to the same visitor.
Why merchants choose Pandectes
Privacy compliance that installs in minutes, keeps your store fast and grows with you.
- 185k+
- stores installed Pandectes
- 3,000+
- five-star reviews
- 17m+
- consents recorded every day
- 35
- privacy laws covered
Loved by Shopify merchants
Built for Shopify, and one of the most installed and highest-rated privacy apps in the Shopify App Store.
3,000+Fast at any scale
From a first store to millions of visitors a day, with no slowdown for your shoppers.
Every privacy law
GDPR, CCPA/CPRA, LGPD, PIPEDA, APPI and 30 more, with the right banner for each region.
A global cookie dictionary
Every cookie on your store is matched to our database and categorised for you.
Proof of consent
A downloadable record of every consent, ready if a regulator asks.
Real people, 24/7
Our team answers by chat and email around the clock.
Make your Shopify Store's use of cookies and online tracking compliant today
Try for freeRecent Posts
How HB 380 Changes Delaware Privacy Compliance in 2027
Delaware's HB 380 rewrites the state privacy law from January 1, 2027: lower thresholds, more sensitive data, stricter consent, teen protections and named third-party disclosures.
Website Compliance Under the Louisiana Data Privacy Act
The Louisiana Data Privacy Act takes effect on January 1, 2027. Who it applies to, the consumer rights and opt-outs websites must support, notices, assessments and penalties.
Google's EU User Consent Policy Audit: The 8 Checks and How to Pass Them
Google is auditing consent on sites that advertise in Europe. The 8 issues it flags, how to fix each one on Shopify, and what agencies managing client accounts need to do.