Global Privacy Control for Shopify
Global Privacy Control (GPC) is a browser setting that tells every website a visitor does not want their personal information sold or shared. Pandectes reads the signal and applies it to the visitor's consent automatically. It is always active, on every plan, with nothing to set up.
How it works
The visitor turns on GPC
GPC is set once in the browser or an extension. Brave, DuckDuckGo and Firefox Focus send it by default, and Firefox sends it once the visitor turns it on.
Pandectes reads the signal
When a visitor in a region with an opt-out law, such as California or Virginia, arrives with GPC on, Pandectes treats it as a request to opt out of the sale and sharing of their data.
The opt-out is applied
The visitor is opted out without having to open the banner, and your "Do not sell or share my data" page shows the same choice.
Global Privacy Control in Pandectes
An opt-out your visitors set once
- Always active in the app, on every plan, including the free Basic plan.
- Applied to visitors in regions with an opt-out model, such as California and Virginia.
- Uses Shopify's own check of which privacy regulation applies to the visitor.
- Carried through to your "Do not sell or share my data" page.
- Sent by Brave, DuckDuckGo and Firefox Focus by default, and by Firefox when turned on. Chrome, Safari and Edge send it only through an extension.
Frequently Asked Questions
Do I need to turn GPC on?
No. Global Privacy Control is always active in Pandectes, on every plan. You can see it on the Integrations page of the app.
Which visitors does it apply to?
Visitors in regions with an opt-out model, such as California and Virginia, whose browser sends the GPC signal. Everywhere else, the banner works as you set it up.
Which browsers send GPC?
Brave, DuckDuckGo and Firefox Focus send it by default, and Firefox once the visitor turns it on in its settings. Chrome, Safari and Edge do not send it unless the visitor adds an extension.
Where can I read more?
The GPC guide in our Help Center explains how the signal works with Shopify and Pandectes.
Why merchants choose Pandectes
Privacy compliance that installs in minutes, keeps your store fast and grows with you.
- 185k+
- stores installed Pandectes
- 3,000+
- five-star reviews
- 17m+
- consents recorded every day
- 35
- privacy laws covered
Loved by Shopify merchants
Built for Shopify, and one of the most installed and highest-rated privacy apps in the Shopify App Store.
Fast at any scale
From a first store to millions of visitors a day, with no slowdown for your shoppers.
Every privacy law
GDPR, CCPA/CPRA, LGPD, PIPEDA, APPI and 30 more, with the right banner for each region.
A global cookie dictionary
Every cookie on your store is matched to our database and categorised for you.
Proof of consent
A downloadable record of every consent, ready if a regulator asks.
Real people, 24/7
Our team answers by chat and email around the clock.
Make your Shopify Store's use of cookies and online tracking compliant today
Try for freeRecent Posts

What Is the DSGVO? A Guide to Data Protection in Germany
The DSGVO is Germany's name for the GDPR. How it works with the BDSG and TDDDG, legal bases, data subject rights, DPOs, cookie consent and fines for online businesses.

How HB 380 Changes Delaware Privacy Compliance in 2027
Delaware's HB 380 rewrites the state privacy law from January 1, 2027: lower thresholds, more sensitive data, stricter consent, teen protections and named third-party disclosures.

Website Compliance Under the Louisiana Data Privacy Act
The Louisiana Data Privacy Act takes effect on January 1, 2027. Who it applies to, the consumer rights and opt-outs websites must support, notices, assessments and penalties.