"Does Shopify's cookie banner keep a log of consents?" It's one of the most common questions in Shopify's own community forums — worth a straight answer: no, it doesn't.

What Shopify's banner actually does

Shopify's native consent banner does its core job well. It uses Google's Consent Mode v2, and it won't fire analytics or marketing signals before a visitor responds. For most stores, that feels like "GDPR handled." It isn't — not on its own.

What GDPR actually asks for

GDPR doesn't just require you to ask for consent. It expects you to be able to show, later, that you asked — and what the visitor decided. In practice, that means three things:

  • A record of each consent decision — when it happened, and which categories (analytics, marketing) the visitor allowed or declined.
  • A place visitors can check what's being tracked — a plain-language list of the tracking and pixels a store actually runs, not just a cookie policy paragraph.
  • Both of these, kept current — not a one-time setup, but something that stays accurate as scripts and pixels change.

Shopify's banner handles the asking. It doesn't handle the proving.

A quick example

Say a store called Nordic Gear runs Google Analytics, a Meta Pixel, and a retargeting script. A visitor lands on the site, sees the cookie banner, and declines analytics tracking. Shopify respects that — no analytics events fire. But three months later, if that visitor (or a regulator) asks "what did I actually agree to, and when?", Nordic Gear has no record to point to. The banner did its job in the moment; it just didn't keep a receipt.

Closing the gap without adding risk

The fix doesn't need to touch your theme, your checkout, or any of your existing scripts. Banner Companion adds two things on top of Shopify's own banner:

  • An audit log that records every consent decision automatically, downloadable whenever you need to show one.
  • A public tracking declaration page listing the pixels and scripts your store actually runs, linked from your footer.

Both run through Shopify's own sandboxed Web Pixel and Customer Privacy API — so neither can touch, block, or slow down another script on your store.

If you're an EU-facing Shopify store and you've never been asked to prove a consent decision, that's normal — most stores haven't been, yet. It's a lot easier to have the record before you need it than to go looking for it after.

(General guidance, not legal advice — confirm your specific GDPR obligations with a qualified professional.)