GTM Privacy & Consent Mode (GDPR)

Privacy regulations like GDPR (Europe), CCPA (California), and others require websites to obtain user consent before tracking. The GroPulse app includes a customizable consent banner and Google Consent Mode V2 support to help you stay compliant.

Understanding Consent Requirements

What is GDPR?

The General Data Protection Regulation (GDPR) is a European Union law that:

• Requires explicit consent before collecting personal data
• Gives users the right to opt out of tracking
• Mandates clear information about data collection
• Imposes significant fines for non-compliance

What is Google Consent Mode V2?

Google Consent Mode V2 is a feature that adjusts how Google tags behave based on user consent:

New in V2: ad_user_data and ad_personalization signals are required from March 2024.

Why Consent Matters

Legal Compliance

• Avoid fines (up to 4% of global revenue under GDPR)
• Meet legal requirements in EU, UK, California, and other regions
• Protect your business from legal liability

Trust and Transparency

• Build customer trust through transparency
• Give customers control over their data
• Demonstrate ethical business practices

Platform Requirements

• Google requires Consent Mode V2 for EU traffic
• Facebook requires consent signals for accurate attribution
• Non-compliant data may be rejected by platforms

Consent Banner Feature

The GroPulse app includes a customizable cookie consent banner for managing user consent.

Note: The Consent Banner feature is available on the Advanced plan.

Accessing Consent Banner Settings

1. Open the GroPulse app
2. Click Configure under “Google Consent Mode V2” on the Dashboard
3. Or navigate to the Consent Banner page from Data Layer Settings

Banner Customization Options

Display Settings

Content Settings

Style Settings

Default Banner Settings

The app comes with sensible defaults:

Banner Text: "We use cookies to improve your experience and analyze site traffic.
             By clicking 'Accept', you consent to our use of cookies."

Accept Button: "Accept"
Decline Button: "Decline"
Privacy Link: "Privacy Policy"

Setting Up Consent Mode

Step 1: Enable Consent Mode

1. Go to Data Layer Settings
2. Find Google Consent Mode V2 section
3. Toggle it ON
4. Save your settings

Step 2: Configure the Consent Banner

1. Navigate to the Consent Banner settings
2. Customize the appearance and text
3. Set your Privacy Policy URL
4. Select target regions
5. Save your settings

Step 3: Activate the Banner

1. Click Activate in the Consent Banner section
2. This adds the banner to your theme
3. Save your theme settings

Step 4: Test the Banner

1. Visit your store in an incognito window
2. Verify the banner appears
3. Test Accept and Decline buttons
4. Check that consent is remembered

How Consent Mode Works

User Accepts Consent

When a user clicks “Accept”:

1. Consent signals are set to granted
2. All tracking tags fire normally
3. Cookies are stored as usual
4. Full data is collected and sent

User Declines Consent

When a user clicks “Decline”:

1. Consent signals are set to denied
2. Google tags adjust behavior:
   • No cookies are stored
   • Anonymized pings are sent
   • Conversion modeling fills gaps
3. Other platforms may not track at all

Consent State Persistence

• User choice is remembered in localStorage
• Choice persists across sessions
• User can change preference anytime
• Consent state is checked on each page load

Integrating with Shopify’s Privacy API

The app integrates with Shopify’s Customer Privacy API for seamless consent management:

Automatic Integration

The app automatically:

• Listens for Shopify privacy consent changes
• Updates Google Consent Mode signals
• Syncs with the consent banner state
• Handles regional compliance requirements

Shopify Privacy Regions

The app respects Shopify’s regional settings for:

• EU (GDPR)
• UK (UK GDPR)
• California (CCPA)
• Other configured regions

Regional Configuration

Showing Banner by Region

1. In Consent Banner settings, select Region Type
2. Choose “Specific Regions” to target certain areas
3. Select the regions where you need consent
4. The banner will only show to visitors from those regions

Recommended Regional Settings

Advanced Configuration

Custom Consent Categories

For advanced compliance needs:

1. Essential Cookies: Always allowed (session, cart)
2. Analytics Cookies: Requires consent
3. Marketing Cookies: Requires consent
4. Personalization: Requires consent

Consent Mode with Multiple Platforms

The app sends appropriate consent signals to each platform:

Troubleshooting

Banner Not Showing

1. Check Activation: Ensure banner is activated in theme
2. Check Region Settings: If targeting specific regions, verify your location
3. Check Cookies: Clear existing consent cookies
4. Disable Ad Blockers: Some blockers hide consent banners

Consent Not Remembered

1. Check localStorage: Consent is stored in browser storage
2. Third-party Cookies: Ensure third-party cookies aren’t blocked
3. Incognito Mode: Consent won’t persist in incognito

Tags Still Firing After Decline

1. Update GTM Template: Ensure you have the latest template
2. Check Trigger Conditions: Triggers should check consent state
3. Verify Consent Mode: Ensure Consent Mode is enabled

Low Conversion Data

After implementing consent:

• Some data loss is expected (users declining)
• Google Consent Mode provides modeled conversions
• Monitor your conversion rate for significant changes
• Ensure banner messaging encourages acceptance

Best Practices

1. Clear Communication

• Use simple, understandable language
• Explain what data you collect and why
• Make Accept and Decline equally prominent

2. Easy Access

• Include a link to change preferences
• Don’t hide the Decline option
• Make your privacy policy accessible

3. Regular Testing

• Test consent flow regularly
• Verify consent signals are sent correctly
• Monitor conversion data quality

4. Legal Review

• Have your privacy policy reviewed by legal counsel
• Ensure banner text is legally compliant
• Stay updated on regulatory changes

5. User Experience

• Don’t be overly aggressive with banners
• Allow dismissal without choosing (treats as decline)
• Remember user preferences

Compliance Checklist

Use this checklist to ensure compliance:

• Consent banner is enabled and activated
• Privacy policy is linked and accessible
• Accept and Decline buttons are clearly visible
• Banner appears to users in required regions
• Consent choice is remembered
• Tags respect consent state
• Google Consent Mode V2 signals are sent
• Server-side events include consent state
• Privacy policy covers all data collection
• Regular compliance audits are scheduled

Next Steps

• Review Pricing Plans
• Check FAQ & Troubleshooting
• Return to Getting Started