Cookie Consent for Shopify: What You Need to Know
Shopify is a special case, so it is worth being straight about it. Shopify runs its own tracking through a Customer Privacy API, and Shopify's native pixels only respect consent when a banner talks to that API. Shopify's built-in cookie banner does this for you, and it switches on automatically for UK and EEA visitors. A script-tag banner added to your theme handles your added third-party tags, such as GA4, Google Ads and Meta, and sends Google Consent Mode v2, but it does not by itself tell Shopify's own systems about the choice.
So on Shopify the honest setup is often two layers: Shopify's own consent for Shopify's native tracking, and a banner like Consentfolio for the third-party tags you add and for Consent Mode v2.
How Shopify handles consent
| Layer | What it covers | How it is set |
|---|---|---|
| Shopify Customer Privacy API | Shopify's native pixels and Network Intelligence | Shopify's built-in banner, or an app that integrates with the API |
| Your added tags | GA4, Google Ads, Meta and other scripts you install | A cookie banner and Consent Mode v2 |
Shopify auto-enables its privacy settings and native banner for UK and EEA visitors, and passes the visitor's choice to its Customer Privacy API. That covers Shopify's own tracking. It does not automatically govern every third-party tag you add through your theme or a tag manager.
Where Consentfolio fits
Consentfolio installs as a script tag in your theme, blocks the third-party tags you add before consent, records provable consent per domain, and sends Google Consent Mode v2 signals to GA4 and Google Ads. That is the layer most merchants actually struggle with, because those added tags are the ones that fire without a banner.
What Consentfolio does not do today is integrate with Shopify's Customer Privacy API, so it does not drive Shopify's native pixel consent. If your compliance depends on Shopify's own tracking respecting consent, keep Shopify's built-in banner or an app that integrates with the API for that layer. We would rather tell you this now than have you find it later.
Installing the script tag
- Create your project in Consentfolio and copy the snippet. Add your domain and copy the two-line snippet from the Install tab.
- Open your theme's
theme.liquid. In your Shopify admin, go to the theme code editor and open the layout filetheme.liquid. - Paste the snippet high in the
<head>, above your other tags. It sets the Consent Mode defaults to denied before your added tags run. - Save. Then open your store in a private window and confirm the banner appears and your added analytics holds until you accept.
Frequently asked questions
Does Consentfolio work on Shopify?
Yes, for the third-party tags you add and for Google Consent Mode v2. It installs as a script tag in theme.liquid. It does not drive Shopify's native pixel consent through the Customer Privacy API, so keep Shopify's own banner for that layer.
Do I still need Shopify's built-in cookie banner? If you rely on Shopify's native tracking respecting consent, yes. Shopify's banner talks to its Customer Privacy API. A script-tag banner covers the third-party tags you add on top.
Which tags does Consentfolio block on Shopify? The third-party scripts you add, such as GA4, Google Ads and Meta, and it sends Consent Mode v2 signals. Shopify's own native pixels are governed through Shopify's Customer Privacy API.
Can I use one banner for everything on Shopify? Only if that banner integrates with Shopify's Customer Privacy API. Consentfolio does not yet, so on Shopify it works alongside Shopify's native consent rather than replacing it.
Written by Tudor Rusmanica, founder of Consentfolio. Tudor has spent over a decade in agency SEO, working where search performance meets data protection: the analytics, tagging and consent setups that keep measurement useful and lawful. Connect on LinkedIn.
Published 13 July 2026. Shopify's consent behaviour is described as of July 2026 and may change; check Shopify's Customer Privacy API documentation for current details.