Built for Shopify

New: Pandectes EU Warranty & GARAN - Official EU legal guarantee notice & GARAN, required since 27 Sep 2026

New: Pandectes EU Warranty & GARAN Install on Shopify
Install free
Free scanInstall free

Every consent, passed straight to Shopify

When a visitor accepts, rejects or picks categories on your Pandectes banner, the choice reaches Shopify’s Customer Privacy API at once. Shopify’s pixels, customer events, sales channels and checkout then follow it. The integration is built in and always active.

Connect your banner to Shopify

What is the Shopify Customer Privacy API?

The Shopify Customer Privacy API is the browser API every Shopify store has for recording a visitor’s tracking consent. Shopify can’t see which third-party scripts track your visitors, so it asks a consent app to tell it what each visitor decided. Pandectes does that with setTrackingConsent(), the documented call, and Shopify applies the decision to everything it controls.

4Shopify consent purposes kept in step with your banner

Every category mapped to Shopify

Shopify’s API knows four purposes. Pandectes maps its cookie categories onto them, so one choice on your banner sets all four.

Pandectes categoryShopify purposeFunctionalitypreferencesPerformanceanalyticsTargetingmarketingDo not sell my datasale_of_dataStrictly necessaryAlways allowed

What Shopify does with it

The app’s job is to pass the decision on, correctly and at once. From there Shopify applies it to the systems it owns.

  • Web pixels on the storefront and in checkout
  • Customer events and audiences
  • Sales channels such as Google & YouTube and Meta
  • The “Do not sell or share my data” opt-out in US states

Two settings to check in Shopify

One banner, not two

Remove Shopify’s own cookie banner so visitors see only yours: Settings > Customer privacy > Cookie banner > More actions > Remove cookie banner.

The same regions on both sides

Keep the regions in Shopify’s Customer privacy settings in line with your banner’s consent model, for example a strict opt-in for the EU, the EEA and the UK.

Set regions with geolocation

See it work in your own store

One console command proves the integration, and installs nothing.

  1. Open your store in a private window, from a region where consent is required.
  2. Before you click the banner, run the command: every value is empty.
  3. Click Accept, run it again: the values turn to yes, and stay after a reload.
The full verification guide

How it works

  1. The visitor sees your banner

    In a region that needs consent, Shopify starts with no decision for every purpose.

  2. They make a choice

    Accept, reject, or choose category by category in the preferences.

  3. Shopify is told at once

    Pandectes writes the decision to the Customer Privacy API, and Shopify’s pixels and checkout follow it.

Start for free

Shopify Customer Privacy questions, answered

Do I need to turn the integration on?

No. The Shopify Customer Privacy integration is always active and has no setting. It only needs the Pandectes app embed enabled in your theme.

Should I keep Shopify’s own cookie banner?

No. Two banners confuse visitors. Remove Shopify’s in Settings > Customer privacy > Cookie banner > More actions > Remove cookie banner, then check in a private window that only the Pandectes banner appears.

What exactly does Pandectes send to Shopify?

The visitor’s decision for Shopify’s four purposes: functionality cookies set preferences, performance sets analytics, targeting sets marketing, and the “Do not sell my data” opt-out sets sale_of_data. Strictly necessary cookies are always allowed and aren’t part of it.

Why does a Shopify pixel still fire after the visitor declines?

If Shopify received the right decision and a pixel still runs, Shopify chose to run it. Usually that pixel’s permission is set to Not required in Settings > Customer events, or the sales channel is set to run without consent. Change it there.

Why does shouldShowBanner() stay true after consent?

Because it isn’t a consent check. It tells you whether the visitor is in a region set to show a banner, and a visitor in Germany is still in Germany after Accept. Check currentVisitorConsent() instead.

Does it work on a headless store?

Yes. The same API and the same checks apply. Shopify also needs the storefront and checkout domains to record consent on a custom storefront, so make sure they are filled in in the Pandectes admin. More on Pandectes for headless stores.

Connect your banner to Shopify

Why merchants choose Pandectes

Privacy compliance that installs in minutes, keeps your store fast and grows with you.

185k+
stores installed Pandectes
3,000+
five-star reviews
17m+
consents recorded every day
35
privacy laws covered

  • Loved by Shopify merchants

    Built for Shopify, and one of the most installed and highest-rated privacy apps in the Shopify App Store.

    Built for Shopify5/53,000+

  • Fast at any scale

    From a first store to millions of visitors a day, with no slowdown for your shoppers.

  • Every privacy law

    GDPR, CCPA/CPRA, LGPD, PIPEDA, APPI and 30 more, with the right banner for each region.

  • A global cookie dictionary

    Every cookie on your store is matched to our database and categorised for you.

  • Proof of consent

    A downloadable record of every consent, ready if a regulator asks.

  • Real people, 24/7

    Our team answers by chat and email around the clock.

Make your Shopify Store's use of cookies and online tracking compliant today

Try for free

Recent Posts