How can we configure Shopify’s default cookie banner so that if a visitor does not interact with the banner (neither accepting nor rejecting), their continued browsing is automatically treated as implicit acceptance of cookies.
To be GDPR cookie compliant, websites must obtain prior and explicit consent from users before activating cookies that collect personal data, except for strictly necessary cookies.
Read here:
And look up the GDPR for more info.
Hi @saurabhv ,
Shopify’s default cookie banner doesn’t support implied consent it only registers a choice when the visitor clicks Accept, Reject, or manages preferences. There’s no “continued browsing = acceptance” toggle, and that’s intentional: Shopify auto-enables the banner for UK/EEA visitors, where GDPR/ePrivacy treat implied consent as invalid.
If you genuinely need that behavior (for regions where it’s allowed), you’d have to remove Shopify’s native banner and use a third-party CMP app like Consentmo that supports implied consent, integrated via the Customer Privacy API.
Best practice: stick with explicit Accept/Reject it’s safer and works cleanly with Google Consent Mode v2.
You cannot configure Shopify’s default cookie banner to treat quiet browsing as implicit consent.
just a reminder that the setup you’re describing (continued browsing = implicit acceptance) is not legally valid under GDPR, which applies to you directly since you’re in Germany
document.addEventListener(
‘click’,
function () {
if (
window.Shopify &&
window.Shopify.customerPrivacy
) {
window.Shopify.customerPrivacy.setTrackingConsent(
{
analytics: true,
marketing: true,
preferences: true
}
);
}
},
{ once: true }
);
Can’t we do this way ??
Hello there @saurabhv
Under Shopify’s default Customer Privacy settings, implied consent through continued browsing is not considered a valid form of consent in places that require users to obtain explicit consent such as under GDPR. The native banner relies on a very strong user engagement (accept or reject cookies).
One common approach is to create your own custom consent banner with the Customer Privacy API or use an app that manages consent such as behaviour based consent rules. You can enable a geo targeting so that you can treat some regions as strict and trust them to sign up explicitly, and treat other regions as implying consent by scrolling or continuing to broswse the site if legally they can. This keeps the setup flexible but compliant.