Install freeThe right cookie banner for every country
Pandectes detects where each visitor is and shows the banner their law requires: opt-in under the GDPR, an opt-out under US state laws, or no banner at all where none is needed. One setup, every market.
EU/EEA & UK
CaliforniaDo not sell or share my personal information
JapanNo bannerWhat is a geo-targeted cookie banner?
A geo-targeted cookie banner changes with the visitor’s location. Privacy laws differ by country: the GDPR requires opt-in consent before non-essential cookies in the EU and UK, while most US state laws only require a way to opt out. Showing every visitor the strictest banner costs consent and sales; showing the loosest one breaks the law. Geolocation shows each visitor the banner their own law asks for.
Four consent models, one switch
- GDPR
Strict opt-in
Visitors must click Accept before any data is collected. The strictest setting, for stores that sell mostly in Europe.
- CCPA
Standard opt-out
Data is collected straight away, and visitors have a clear way to decline.
- Geotargeting
Auto-pilot
Detects each visitor’s location and applies the right model: opt-in for EU visitors, opt-out for US visitors.
- Advanced
Custom configuration
Choose opt-in or opt-out country by country, and where the banner shows at all.
Every region, its own rule
Pick where the banner shows, then set opt-in or opt-out for each country and state, or for a whole region at once.
- Worldwide visibility, or only the regions you choose
- Ready-made rules for the EU/EEA and UK, US states, Canada and 16 more countries
- Opt-in or opt-out per country, or for a whole region in one click
- Search any country, with the rest of the world one tab away
Built into Shopify’s privacy settings
The “Do not sell or share my data” opt-out appears only to visitors in regions where the law requires it, and Shopify decides which visitors those are from your store’s data sale settings. Turn on Shopify’s automated settings and the regions stay in line with its latest recommendations, with nothing to maintain.
Shopify Customer Privacy integrationHeadless and custom storefronts too
On a headless store, Pandectes still knows where each visitor is. Use the Pandectes Geo-IP database, regularly updated and accurate for around 90% of visitors, or pass the country and state from your own framework to the consent component.
- Pandectes Geo-IP database, country and state
- Or your own location data, passed to the web component
- The same rules as your Shopify theme
How it works
Install the app
Install Pandectes from the Shopify App Store. It takes seconds.
Choose your model and regions
Pick auto-pilot, or set opt-in and opt-out country by country.
Every visitor gets the right banner
Pandectes detects the location on each visit and shows the banner their law requires.
EU/EEA & UK
California
JapanGeolocation questions, answered
Do I need to show a cookie banner to visitors outside the EU?
It depends on where they are. The EU, the UK and Switzerland require opt-in consent. Many US states, Canada, Brazil and others have their own rules, often an opt-out. In some countries no banner is required. Geolocation shows each visitor what their own law asks for.
What is the difference between opt-in and opt-out consent?
With opt-in, non-essential cookies wait until the visitor clicks Accept. With opt-out, they run from the start and the visitor can refuse. The GDPR requires opt-in; most US state laws allow opt-out.
How does Pandectes know where a visitor is?
Pandectes detects the visitor’s country and state with its own Geo-IP database, which is regularly updated and accurate for around 90% of visitors. Headless stores can also pass the country and state from their own framework instead.
Can I set different rules for different US states?
Yes. In the custom configuration, the United States has its own list of states, each set to opt-in or opt-out, and the “Do not sell or share my data” opt-out follows your Shopify data sale settings.
Can I show the banner to every visitor worldwide?
Yes. Turn on worldwide visibility and every visitor sees the banner, with opt-in or opt-out still set by region.
Why merchants choose Pandectes
Privacy compliance that installs in minutes, keeps your store fast and grows with you.
- 185k+
- stores installed Pandectes
- 3,000+
- five-star reviews
- 17m+
- consents recorded every day
- 35
- privacy laws covered
Loved by Shopify merchants
Built for Shopify, and one of the most installed and highest-rated privacy apps in the Shopify App Store.
3,000+Fast at any scale
From a first store to millions of visitors a day, with no slowdown for your shoppers.
Every privacy law
GDPR, CCPA/CPRA, LGPD, PIPEDA, APPI and 30 more, with the right banner for each region.
A global cookie dictionary
Every cookie on your store is matched to our database and categorised for you.
Proof of consent
A downloadable record of every consent, ready if a regulator asks.
Real people, 24/7
Our team answers by chat and email around the clock.
Make your Shopify Store's use of cookies and online tracking compliant today
Try for freeRecent Posts
How HB 380 Changes Delaware Privacy Compliance in 2027
Delaware's HB 380 rewrites the state privacy law from January 1, 2027: lower thresholds, more sensitive data, stricter consent, teen protections and named third-party disclosures.
Website Compliance Under the Louisiana Data Privacy Act
The Louisiana Data Privacy Act takes effect on January 1, 2027. Who it applies to, the consumer rights and opt-outs websites must support, notices, assessments and penalties.
Google's EU User Consent Policy Audit: The 8 Checks and How to Pass Them
Google is auditing consent on sites that advertise in Europe. The 8 issues it flags, how to fix each one on Shopify, and what agencies managing client accounts need to do.