Cookie consent and Consent Mode v2

Shoporama has a built-in, free cookie consent app. It displays a cookie banner to your customers, automatically blocks analytics and marketing cookies until consent is given, and supports Google Consent Mode v2. This means you don’t need to purchase an external solution like Cookiebot to comply with the regulations.

This article walks you through the setup and all the features. If you want to learn more about the regulations themselves, read GDPR and Cookie Rules for Your Online Store. You can find a complete list of the cookies your store sets in Which Cookies Does Shoporama Set?

How to Enable Cookie Consent

1. Go to Integrations > Apps in your admin panel
2. Find the Cookie Consent app and install it
3. Select a display type, and customize the text, button colors, and content of your cookie policy as needed
4. Save

The app is free, works with all themes, and is automatically added to all pages. You don’t need to make any changes to your theme or manually mark your scripts.

Here’s what the customer sees

On their first visit, the cookie banner appears, allowing the customer to choose from three options:

• Accept All: Statistics and marketing cookies are allowed
• Reject all: Only necessary cookies are allowed
• Settings: The customer can select or deselect categories themselves

You can choose between two display types: a classic overlay in the middle of the screen or a discreet bar at the bottom of the page. Once the customer has made their selection, the page automatically reloads so that the allowed scripts load correctly. The page remembers where the customer came from—for example, a Google search or a link on another site—so that Google Analytics still tracks the correct traffic source.

The customer can always change their selection via the small cookie icon visible at the bottom of the page.

Cookie Categories

The app uses three categories:

• Essential: Shopping cart, login, payment, and the consent cookie itself. These are always active and cannot be opt-out.
• Statistics: Analytics tools such as Google Analytics and Hotjar
• Marketing: Advertising platforms such as Meta (Facebook), Google Ads, TikTok, LinkedIn, Pinterest, Snapchat, and Microsoft Ads, as well as email tools such as Klaviyo

Cookies are automatically categorized based on their names. The app recognizes cookies from the most widely used services, and cookies it does not recognize are treated as tracking cookies and blocked until consent is given.

Automatic Blocking

From the moment the page loads, the app detects all attempts to set cookies in the browser. Until the customer makes a decision, all analytics and marketing cookies are automatically blocked. If the customer gives consent, the blocked cookies are set immediately. If the customer declines, they remain blocked.

This means you don’t need to modify or tag your tracking scripts. They can remain as they are, and the app ensures that their cookies are only set after consent is given.

Withdrawal of Consent

The customer can click the cookie icon at the bottom of the page at any time to change their selection. If consent is withdrawn, the app automatically deletes the relevant analytics and marketing cookies from the browser and also clears associated data from the browser’s local storage.

The consent is stored with a timestamp in the customer’s browser and remains valid for up to 12 months. After that, the customer will be asked to make a decision again.

Google Consent Mode v2

Consent Mode v2 is Google’s standard for consent signals and has been a requirement since March 2024 for using Google Analytics and Google Ads with personalized advertising in the EU. The app automatically sends the following four signals to Google:

• analytics_storage: Controls Google Analytics cookies
• ad_storage: Controls Google Ads cookies
• ad_user_data: Controls the sharing of user data with Google
• ad_personalization: Controls personalized ads

All signals are set to “denied” by default and are automatically updated based on the customer’s choice. Because Google still receives anonymous signals when a customer opts out, Google can model conversions. This ensures you maintain an accurate picture in Google Analytics and Google Ads, even when some customers opt out of cookies.

Integration with Shoporama’s tracking

If you use Shoporama’s built-in tracking, you can link it directly to the cookie consent:

1. Go to Webshop > Tracking
2. Check the box for “Use Consent Mode”
3. Save

This ensures that the browser-based tracking respects the customer’s choice in the cookie banner, and the ad platforms receive the correct consent signals. Until the customer has made a selection, nothing is sent to Google Analytics. Without the checkmark, the tracking ignores the customer’s choice. For example, the meta pixel fires even if the customer has declined, and the app only blocks the cookies themselves.

This happens when the customer declines

With the app and Consent Mode enabled, the following happens when the customer taps “Reject All”:

• The Meta and LinkedIn pixels do not fire in the browser, and no marketing cookies are set.
• Google receives only anonymous signals without cookies and models the missing conversions in Google Analytics and Google Ads.
• The purchase is still sent from the server if you use server-side tracking. Once the order is paid for, Shoporama’s server sends the purchase along with the customer’s contact information so the platforms can match it.
• Ad clicks are recorded on the order. If the customer came from a Google or Microsoft ad, the purchase may be attributed via offline conversions.

The last two processes occur outside the browser and do not depend on the customer’s selection in the banner. Therefore, be sure to describe them in your privacy policy. Read more about the other settings in Tracking in your Shoporama online store.

Customization

Everything in the banner can be customized in the app’s settings:

• All text: headline, description, button text, and category descriptions
• The content of the cookie policy that the customer sees under “Read more”
• Button colors, so the banner matches the store’s design
• Custom CSS for full control over the appearance
• Display type: overlay or discreet bar at the bottom

Frequently Asked Questions

Does the cookie app cost anything?

No. The app is free and included in all Shoporama online stores. You install it under Integrations > Apps, and there’s no ongoing subscription fee like with third-party solutions.

Do I need to make any changes to my theme?

No. The app is automatically added to all pages and works with all themes. Your existing tracking scripts can remain in place, as the app automatically blocks their cookies until consent is given.

How do I document the customer’s consent?

Each consent is stored with a timestamp in the customer’s browser and remains valid for up to 12 months. Together with an updated cookie policy, you can demonstrate that your store obtains consent before setting tracking cookies. Read more in the GDPR and cookie rules for your online store.

Do I lose conversion data when customers reject cookies?

The Meta and LinkedIn pixels, as well as cookies from ad platforms, only activate upon consent, so those visits are not tracked by the pixels in the browser. With Consent Mode v2, Google still receives anonymous signals and models conversions. The purchase itself can still be tracked via server-side tracking and offline conversions; see the section “What Happens When a Customer Rejects Cookies” above.

How can the customer change their selection later?

Via the small cookie icon that’s always visible at the bottom of the page. If the customer withdraws consent, the app automatically deletes the relevant cookies from the browser.

Can I customize the banner to match my store’s design?

Yes. You can change all text, choose button colors, add your own CSS, and choose between an overlay or a discreet bar at the bottom of the screen.