Question 1

Cookie Banner Modes

Accepted Answer

In this article, we analyze in detail the different banner modes that you can select from the app. The different modes are listed below.

Informative

All cookies (essential & non-essential) are allowed by default when pages load and cannot be blocked. The banner message and wording should only inform the visitor about the cookie policy of the website and why cookies are used. The banner has by default one action button called Dismiss (x or close).

Optionally, a second action button called Decline may be added. If the Dismiss button is clicked, the banner closes and full consent to the cookie policy is implied. If the Decline button is clicked, then the visitor is redirected away from the website (to an external page, e.x. google.com). This is the simplest (loose) mode but is not recommended for strict GDPR compliance.

Decline only

All cookies (essential & non-essential) are allowed by default when pages load and are blocked only when/if the user selects to opt out. The banner message and wording should inform the visitor about the cookie policy of the website and why non-essential cookies (Marketing & Analytics) are used.

The banner has two action buttons called Decline and Dismiss, with the Dismiss button being highlighted. If the Dismiss button is clicked, the banner closes and full consent to the cookie policy is implied. If the Decline button is clicked, then, depending on other configuration options offered by the application, the visitor is

Question 2

4 Steps to Ensure Compliance

Accepted Answer

Step 1: Customer Privacy

To be compliant, you need to activate customer privacy from your store preferences. Head to your Shopify Admin > “Online Store” > “Preferences”, and under the “Customer privacy” section, choose the “Collected after consent” option and then Save.

If you have added Google Analytics from the Online Store preferences, you must check the Enhanced Ecommerce and then Save.

Step 2: Banner Type / Consent Mode

Open the app from the "Apps" heading on the left-side menu > "Settings" > "Banner" > “Behavior”, and on the top, you can select the Banner Type / Consent Mode.

To comply, we recommend you select Accept/Decline or Accept only.

Note: If you are on any paid plan, we recommend selecting Preferences (which is more detailed). Under the Preferences, please select the Strict policy and make sure at least the Decline and Accept buttons are checked for you.

Step 3: Privacy Policy Page

Our cookie banner is good to have a link to your [privacy policy](/

Question 3

Checking if Google Consent Mode is properly implemented

Accepted Answer

By using our application with Google Consent Mode integration enabled, gives you the ability to customize the behavior of your Google tags based on the consent given or not given by your users. You can specify whether consent has been granted for Analytics and/or Ads cookies, and Google's tags will dynamically adjust by using cookies only for the designated purposes or cookie categories. This serves as an alternative to script blocking.

Google Consent Mode (GCM) is a simple and trustworthy method for preventing Google scripts from setting cookies through Google Tag Manager or gtag. Despite its easy implementation, it can be challenging to confirm whether it has been correctly set up and functioning properly.

It's crucial to mention that only specific tags in Google Tag Manager have pre-installed consent checks. These are listed in the next figure.

When Consent Mode is activated, it will modify the functioning of these kinds of pings.

Consent status pings - Consent status pings are sent from each page the user visits where consent mode is implemented, as well as if the consent changes (e.g., if the user opts in). These pings communicate the consent state (i.e. granted or denied) for each consent type (e.g. ad storage, analytics storage).
Conversion pings - Conversion pings are sent to indicate that a conversion has occurred.
Google Analytics pings - Google Analytics pings are

Question 4

Using Google Consent Mode Integration

Accepted Answer

In this article you will learn about:

Introduction to Google Consent Mode
Benefits of using it
Services Supported by Google Consent Mode
Enable the integration
Advanced settings

Introduction to google consent mode

With our application's integration to the Google Consent Mode you can respect the privacy choices of end-users with minimal impact on your store's ad-based revenue stream, analytics, and more. Learn more about Google Consent Mode here.

If you're already using Google gtag.js or Google Tag Manager (GTM) on your store, we recommend that you enable the Google Consent Mode integration to your store, to ensure you get the best use of your Google Services. If you don't have GTM installed, we do this for you from inside our application by just adding your property ID. Learn more on how it works here.

There are some data (pings) that Google collects in order to make it work properly. More details about the data gathered by Google Consent Mode can be found here.

Benefits of using it

Once you have enabled the integration for your store, our application will automatically signal the consent choices of your visitors to Google instead of blocking tags when not consented. The end user's granular

Question 5

Shopify Customer Privacy API

Accepted Answer

Shopify offers a feature to limit the data collection of European customers visiting your online store, as determined by their IP address. From inside your store, you can choose the level of restrictions for marketing and analytics data collection for customers from the EU, EEA, UK, and Switzerland.

Since our application has an integration with Shopify’s Customer Privacy API (which automatically blocks cookies and trackers installed either by Shopify directly or by any plugins that support it), first you have to enable the Collected after consent option inside your Online Store > Preferences.

Because Shopify has no control over whether a third-party app or script tracks customers, they provide a consent tracking API for integration. This permission-tracking API has been integrated into our Pandectes GDPR Compliance app. Once the page has loaded and Shopify has banned the cookies, each customer can choose to opt-in or opt-out of the various cookie groups. When Collected after consent option is turned off, all cookies, including the Facebook Pixel and Google Analytics, will be fired as usual. Also, the default cookies from Shopify are set as persistent cookies, not as session ones.

No pixel is fired when the Collected after consent option is activated. Shopify is also enforcing this

Question 6

Installation guide

Accepted Answer

The installation of the app is done automatically after adding it to your store and is pretty straightforward.

Pandectes GDPR Compliance contains three main features:

Cookie consent banner This is the most visible part of the app which is the banner that informs your visitors about your store's policy.
Customer data requests block This is a block that can be added to a page on your store that provides your customers or guest customers the option to make requests about their personal data that are stored on your store. This block additionally offers the option to the visitor to see the already given consent preference and also to revoke this given consent.
Cookie declaration block This is a block that can be added to a page on your store and automatically presents all your store's cookies with detailed information about their purpose (Note: this feature is available to the paid plans).

Visit our demo store here to see what the banner looks like and also how the customer data requests and cookie declaration block work on pages.

The steps to follow are five and listed below.

Step 1

Go to Pandectes.io homepage and click Start your free trial. Another option is to visit directly our [app listing page on the Shopify app store](https://apps.shopify.com/gdpr

Frequently Read Articles

Browse All Categories