Pandectes GDPR Compliance

Name: Pandectes GDPR Compliance
Brand: Pandectes
Rating: 5.0 (2902 reviews)

Pricing: Free plan available. Free trial available.
Rating: 5.0 (2,902)
Developer: Pandectes

Install

View demo store

Pandectes GDPR Compliance Shopify App - GDPR/CCPA Compliance

GDPR/CCPA banner, WCAG accessibility & EU Withdrawal button to keep your Online Store 2.0 compliant.

Protect your store with the premier compliance suite for global Privacy Laws, Web Accessibility (ADA/WCAG), and EU Withdrawal process. As a Shopify Plus Partner and Google/Microsoft Certified CMP, we ensure your store is compliant with 24/7 live support. We offer GDPR, CCPA, etc banners, also an Accessibility Widget for inclusive browsing and a Withdrawal Module. Integrated with Google Consent Mode v2, IAB TCF v2.3, & Shopify Privacy API. Best for Online Store 2.0 and hydrogen / headless stores.

Add a Cookie Banner via Checkout and Theme App Extensions for OS 2.0
Show multilingual cookie banners and Accessibility Widget text to your customers
Collect your customers' data requests, send email alerts, and export DSAR CSV
Schedule cookie scans detecting scripts, classify cookies, and import/export CSV
Google Certified CMP & Microsoft Certified CMP with TCF v2.3 and Consent Mode

Popular with stores like yours: Based in United States

Languages

English, French, Italian, Spanish, German, Portuguese (Brazil), Japanese, Dutch, and Portuguese (Portugal)

Works with

Checkout
Customer accounts
Shopify Admin
EAA, ADA, WCAG, GPC
GA4, Adwords, Tag Manager
Markets, Microsoft Clarity
Microsoft Consent Mode (UET)
Sidekick, A11y, Microsoft Ads
TikTok, Meta Pixel, Klaviyo

Pricing

Choose the plan that best fits your business.

Basic

Free

Features

UNLIMITED IMPRESSIONS
Customizable GDPR Cookie Banner
Geolocation Options
Customer Data Requests
Customer Account Extension
Translated in all EU languages
Consent Tracking Report
Auto Scanning Cookies

Plus

$9 / month

or $90/year and save 17%

Features

All in Basic+
Preferences Popup, Bar & Banner
AI powered Cookie & Tracker Scanner
Google Consent Mode V2
Custom Pixel Support
Meta/Tiktok Pixel, GPC/ UET Consent Mode
Automated Cookie Policy Page
Multiple languages & translations

7-day free trial

Premium

$29 / month

or $290/year and save 17%

Features

All in Plus+
Web Accessibility (ADA/WCAG/EEA)
Auto blocker for popular services
Advanced blocking rules
Checkout block extension
Design support with custom CSS
EU WIthdrawal page - Directive 2023/2673
Live in-store preview & Admin preview

7-day free trial

Enterprise

$49 / month

or $490/year and save 17%

Features

All in Premium+
Scan Scheduler & Behind the Password
Bots/Crawlers Blocking
Inline Script Blocking
Checkout banner for Shopify Plus stores
TCF/IAB v2.3 Banner
Headless & Hydrogen Storefront support
JS API (Props, Methods, Consts & Events)

7-day free trial

All charges are billed in USD. Recurring and usage-based charges are billed every 30 days. See all pricing options

Reviews (2,902)

Overall rating

Counts per rating level

98% of ratings are 5 stars
2.9K
1% of ratings are 4 stars
35
0% of ratings are 3 stars
2
0% of ratings are 2 stars
2
0% of ratings are 1 stars
8

All reviews

August 28, 2026

We spent a significant amount of time trying to get this app working properly with our Shopify store, GTM, GA4, and consent setup. We worked through script blocking, consent timing, custom pixels, network testing, and multiple troubleshooting steps to make sure tracking only fired after a user gave consent.

After implementing Pandectes on our live theme, we saw a massive and completely abnormal spike in GA4 traffic. The traffic was overwhelmingly direct, came from highly suspicious automated-looking users, and did not match what Shopify was reporting. We eventually traced the issue back to behavior that only occurred while Pandectes was active.

To confirm it, we disabled the app and watched GA4 in real time. The abnormal traffic nearly stopped immediately.

When we reached out to Pandectes, they acknowledged that bot traffic can interact with the banner and pointed us to their bot-blocking feature. The problem is that this functionality is only available on their Enterprise plan. In other words, the app created or enabled a serious analytics issue for us, and the recommended solution was to upgrade to a much more expensive plan.

At that point, we had already spent hours auditing scripts, testing consent states, troubleshooting GA4, and trying to make the setup work correctly.

For us, this was not worth the risk or the amount of troubleshooting required. We ultimately decided to remove the app and move toward Shopify’s native consent tools with GTM instead.

If accurate analytics and clean tracking are important to your business, I would be very cautious before installing this app. We wish we had built the consent setup ourselves from the beginning rather than spending this much time troubleshooting an issue we did not have before installing it.

Rustic Kitchen & Bath

United States

4 days using the app

Pandectes replied August 29, 2026

Hi team at Rustic Kitchen and Bath,

Thank you for taking the time to share your feedback. We fully understand how concerning sudden GA4 traffic anomalies can be, and we appreciate the opportunity to clarify how consent banners interact with automated traffic.

First, to reassure merchants reading this: Pandectes does not generate, route, or trigger bot traffic to your site.

When headless bots or automated crawlers (often using synthetic browser signatures like fixed screen resolutions or user agents) visit a site, they interact with the web page scripts, including analytics tags and consent banners. Depending on how your GA4 and GTM tags are configured to handle consent states, automated scripts interacting with a consent UI can inadvertently trigger GA4 pageview events before or upon consent interaction. Turning off a consent banner changes how GTM evaluates tag execution conditions, which alters how and when those bot interactions hit GA4, giving the appearance that the traffic source itself shifted, when in reality, tag firing behavior changed.

Regarding our Bot Detection feature: our app’s core function is privacy compliance (managing consent banners and signal passing). Because specialized bot filtering requires dedicated infrastructure, it is included in our Enterprise tier for high-traffic stores. However, bot traffic itself is an external web phenomenon, and standard GA4 traffic filters or web application firewalls (WAF) can also be used independently to filter these hits.

We regret that your support interaction felt transactional when discussing plan tiers, that is never our intention. We are continuously working to improve how our team guides merchants through complex tag setups.

We wish you all the best with your store and your custom GTM setup, and our team remains available if you ever need technical assistance in the future.

Pandectes Support Team

August 10, 2026

So far so very good. We just updated our theme and at the same time did some research regarding our cookies and general compliance with GDPR, EAA and all the other letters of the alphabet that signals new laws to comply with. What we found was that Pandectes could do it all at a slightly cheaper price. This means that less apps = less heavy on page and no manual coding in one theme. It follows for every theme update. For the price there is a lot of options in the settings. The UX is very good and their employee Marios did a manual compliance check after enabling to make sure the setup is correct. He was very helpful and fast with a good solution to another UI question regarding the widget button.

KreStoffer

Denmark

3 days using the app

August 6, 2026

Excellent support from Natalie. I was configuring Google Consent Mode V2 on a fairly non-standard setup — my GA4 and Google Ads run through the Shopify Google & YouTube channel rather than Tag Manager — and I needed to be sure I wouldn't end up with duplicate page views or double-counted conversions before unpausing a campaign.

Natalie answered clearly and specifically, explained exactly how Advanced consent mode behaves for visitors who decline, and pointed me to the right setting to avoid duplication. She also checked my store directly and confirmed only strictly necessary cookies were firing before consent. When a setting hadn't saved properly on my side, she spotted it and told me — which saved me from thinking I was compliant when I wasn't.

Fast, accurate, and she engaged with the actual technical detail instead of sending generic links. Exactly what you want from support when there's ad spend on the line.

The Rally Rider

United Arab Emirates

3 months using the app