Region-Aware Consent for
Shopify Markets That
Blocks Every Pixel.
Shopify Markets lets you sell into many regions from one store — each with its own privacy rules. Shopify's Customer Privacy API and consent banner cover Shopify's own tracking, but custom pixels, scripts in theme.liquid, and many app pixels are not gated by it. Different markets demand different defaults, and a single banner rarely gets all of them right. ConsentPixel — Privacy · Verified adds region-aware blocking for every script across every market.
The Gap: One Banner, Many Regions, Uncovered Pixels
Shopify Markets is built for selling across borders — multiple regions, currencies, and languages from a single store. That cross-border reach is exactly what makes consent hard: the EU expects opt-in, much of the US expects opt-out, and several US states now require GPC and a “Do Not Sell or Share” signal. One default banner cannot satisfy all of those at once.
Shopify provides a Customer Privacy API and a native consent banner, and they do gate Shopify's own first-party tracking and Consent Mode signalling. But custom pixels you add, scripts hardcoded into theme.liquid, and many third-party app pixels are not automatically gated by that API — they fire across every market on load.
Shopify's Customer Privacy API and banner handle Shopify-managed tracking and Consent Mode signalling, and they can vary the banner by region. They do not automatically gate custom pixels, scripts you add to theme.liquid, or every app pixel — those depend on each pixel respecting the consent API, which many do not.
Across markets this compounds: a shopper in Germany and a shopper in California need different defaults, and any pixel that ignores Shopify's consent API fires for both regardless of their region's rules.
✗ Custom pixels fire across markets
Custom JavaScript pixels you add fire on load in every region unless they explicitly honour Shopify's consent API — many do not.
✗ theme.liquid scripts run on load
Tags hardcoded into theme.liquid execute on render in all markets, outside the Customer Privacy API's control.
✗ App pixels vary in compliance
Third-party app pixels differ widely in whether they respect the consent API — some fire regardless of region or choice.
✗ One default rarely fits all regions
A single banner default cannot be simultaneously opt-in for the EU and opt-out with GPC for US states.
The more markets you open, the more regulatory regimes you take on at once. Without region-aware gating that covers custom, theme, and app pixels — not just Shopify's own tags — a Shopify Markets store can be compliant in one region and exposed in several others simultaneously.
Trackers Commonly Running Across Shopify Markets
A cross-border Shopify store typically runs a full advertising and analytics stack plus several apps, each firing across every market. These are the integrations most commonly found, and the exposure each creates region by region.
Shopify Native Consent vs. ConsentPixel
Shopify's Customer Privacy API gates Shopify's own tracking and can vary the banner by region. ConsentPixel adds region-aware blocking for the custom, theme, and app pixels the native API does not cover — layered alongside Shopify, not replacing it.
| Capability | Shopify Customer Privacy API | ConsentPixel |
|---|---|---|
| Gates Shopify-managed tracking | ✓ Yes | ✓ Yes — plus everything else |
| Gates custom & theme.liquid pixels | ✗ Not automatic | ✓ All registered scripts |
| Gates non-compliant app pixels | ⚠ Depends on the app | ✓ Yes — by network call |
| Region-aware defaults per market | ⚠ Banner only | ✓ Full per-region logic |
| Google Consent Mode v2 (all 4 params) | ⚠ Shopify scope | ✓ All scripts, all plans |
| Global Privacy Control (GPC) detection | ⚠ Partial | ✓ Auto-detected |
| CIPA session-replay blocking | ⚠ If app complies | ✓ Yes — always |
| Timestamped consent audit log | ⚠ Basic | ✓ Full log, exportable |
| Single consent record across markets | ✗ Fragmented | ✓ Unified, per-region |
See which pixels fire across your markets before consent
ConsentPixel scans your Shopify Markets store across regions in a fresh session — no cache, no prior consent — and shows every custom, theme, and app pixel transmitting data on load.
How to Install ConsentPixel on Shopify Markets
ConsentPixel layers over your existing Shopify Markets setup as a single script in theme.liquid, working alongside Shopify's Customer Privacy API. It must load first so pre-consent blocking and region-aware defaults work across every market.
Create your ConsentPixel account and scan your store
Sign up at consentpixel.com, add your store domain, and run the auto-scanner across your markets. ConsentPixel maps every tracker by region — including custom pixels, theme.liquid scripts, and app pixels. Copy your unique pixel snippet from the dashboard.
Add the snippet to theme.liquid
In your Shopify admin, open Online Store → Themes → Edit code → layout/theme.liquid. Paste the ConsentPixel snippet immediately after the opening <head> tag, before any custom pixels or app-injected scripts.
<head>
<!-- ConsentPixel — must be first -->
<script
src="https://pixel.consentpixel.com/YOUR-SITE-ID.js"
async></script>This covers every market your store serves, because all regions render from the same theme.
Configure region-aware defaults
In the ConsentPixel dashboard, set per-region behaviour: opt-in for the EU/UK, opt-out with GPC and “Do Not Sell or Share” for US states, and your chosen defaults for other markets. ConsentPixel detects each visitor's region and applies the right rules automatically.
Register your pixels and configure GCM v2
Register each tool by consent category — Marketing (Meta, Google Ads, TikTok), Analytics (GA4), Functional (chat), Session Recording (Hotjar, Clarity) — including app pixels that do not respect Shopify's API. Enable Google Consent Mode v2 so all four parameters fire before your Google tags, in every market.
Keep Shopify's API for native tracking
Leave Shopify's Customer Privacy API enabled for Shopify-managed tracking and let ConsentPixel handle everything it does not cover. The two work together — ConsentPixel can read Shopify's consent state so the experience stays consistent.
What ConsentPixel Does for Your Shopify Markets Store
Region-aware consent defaults
Detects each shopper's region and applies the right rules — opt-in for the EU, opt-out with GPC for US states — instead of one default that fits no market perfectly.
Gates custom, theme & app pixels
Intercepts the custom JavaScript pixels, theme.liquid scripts, and non-compliant app pixels Shopify's Customer Privacy API does not automatically gate.
Google Consent Mode v2 — every market
Injects all four GCM v2 parameters before your Google tags fire, in every region. Protects Ads conversion measurement for EU and UK shoppers.
CIPA session-replay protection
Blocks Hotjar, Clarity, and replay apps before consent across all markets — eliminating the $5,000/visitor CIPA exposure your California traffic creates.
Unified audit log across regions
Maintains one timestamped, exportable consent record across every market — with each region's rules captured — instead of fragmented per-app logging.
Layers with Shopify, not against it
Works alongside Shopify's Customer Privacy API rather than replacing it, reading Shopify's consent state so native and custom tracking stay consistent.
Shopify Markets Privacy Compliance Checklist (2026)
Frequently Asked Questions
One script in theme.liquid.
Every market, every pixel covered.
ConsentPixel — Privacy · Verified adds region-aware blocking for the custom, theme, and app pixels Shopify's Customer Privacy API does not gate — with per-region defaults, all four GCM v2 parameters, and GPC honoured across every market. Layers with Shopify, not against it.