Skip to content
Start free Sign in

Cookie consent for e-commerce

One banner for any store.

Whether you sell on Shopify, WooCommerce or another platform, Kukie.io shows the consent banner, holds back known trackers and keeps a record of each shopper's choice.

The Free plan covers up to 5 sites, with unlimited pageviews.

Why it matters

Online stores collect more than most websites.

From payment providers to retargeting pixels, most of the cookies on a store need consent in the EU and the UK before they are set.1

  • Tracking

    30-60

    Cookies on an online store

    Payment providers, analytics, cart tools and other integrations all set cookies. In the EU and the UK, each one that is not strictly necessary needs consent, and each belongs in your cookie policy.

    • Essential
    • Analytics
    • Marketing
    • Payment
  • Ad pixels

    Retargeting and ad pixels

    Meta Pixel, Google Ads, TikTok and LinkedIn set marketing cookies that need opt-in consent in the EU and the UK. Without it, the data behind your ad audiences was collected without a valid basis.

  • Risk

    €20 million

    The highest GDPR fine2

    Or 4% of worldwide annual turnover, whichever is higher. Groups such as noyb have filed thousands of complaints about websites across Europe.

  • Several countries

    Selling abroad means several privacy laws

    The GDPR, the UK GDPR, the CCPA and CPRA, the LGPD and PIPEDA each set a different bar. One notice for everyone either holds back more than it must in some regions or asks for too little in others.

    • GDPR
    • CCPA
    • LGPD
    • PIPEDA
    • UK GDPR
    • ePrivacy
  • Trust

    A clear banner builds confidence

    A clear, well-made banner shows shoppers you respect their data. Open privacy practices support add-to-cart rates and lower cart abandonment.

  • Payment

    Payment and checkout cookies

    Stripe, PayPal, Klarna and other providers set cookies for fraud prevention, sessions and 3D Secure. Most are strictly necessary and still need to be listed. Some providers also set analytics cookies, which need consent.

Cookies on an average online store
42
Of those cookies track visitors for ad platforms
65%
Privacy laws that already cover online stores
15+

What is on your store

Cookies found on online stores.

Most stores set dozens of cookies from analytics, marketing, payment and cart tools, and many owners only see them once a scanner lists them.

Typical cookie breakdown
Essential
15%
Analytics
35%
Marketing
40%
Payment
10%

On a typical online store, marketing and analytics cookies make up about 75% of the total. In the EU and the UK, both need consent.

Scan your website

How it works

Three steps to a consent banner.

Setting up consent on your store does not need a developer. Kukie.io takes you from finding your cookies to showing the banner you set for each region.

  1. Step 1: Add the embed code

    Paste one line into your store's theme. On WooCommerce, use the WordPress plugin instead. Any platform that accepts custom HTML works.
  2. Step 2: Scan your store

    Kukie.io opens your store's pages, lists the cookies and scripts they load and sorts them from a database of 3,300+ known cookies. It also loads each page as a visitor who accepted, to find cookies that only appear after consent. On the Pro, Agency and Unlimited plans, schedule weekly or monthly scans to catch changes.
  3. Step 3: Publish your banner

    Your banner follows the rule you set for each visitor's region, such as opt-in with category choices in the EU and a notice or a Do Not Sell or Share link in the US.

Built for merchants

Change platforms without starting over.

Kukie.io sits in your store's head tag, not inside your platform. The same setup survives a move to a new platform, a theme rebuild or a second storefront.

  • One setup, any platform Shopify, WooCommerce, Magento, PrestaShop, BigCommerce, Wix, Squarespace or your own build. Moving between them does not mean setting up consent again.
  • Every store in one account Each storefront gets its own scan, banner and consent records, managed from one dashboard rather than a sign-in per platform.
  • Nothing to maintain by hand Added an app or a pixel? Scan again and the categories update from a database of 3,300+ known cookies.

See pricing

An online store owner at his laptop in a small fulfilment studio, with packed orders ready to ship behind him

Platform integrations

How Kukie.io fits each platform.

Choose your platform to see how the banner is added and what the scanner recognises.

Example scenarios

How different stores use Kukie.io.

Three kinds of online business, and how each asks for consent while keeping its conversion rates and advertising data.

  • Shopify Plus, fashion

    Example: Multi-region fashion retailer

    A Shopify Plus fashion store selling across the EU, the UK and the US needed a different consent model for each region. Its previous consent tool showed the same opt-in banner to everyone, and the bounce rate of US shoppers rose by 15%.

    What changed

    Kukie.io shows an opt-in banner to visitors from the EU and the UK and a short notice to US visitors. Google Consent Mode v2 keeps GA4 and Google Ads receiving consent signals in both.

    Bounce rate
    -40%
    Consent rate (US)
    95%
  • WooCommerce, electronics

    Example: EU electronics store with 50+ trackers

    A WooCommerce electronics store running Meta Pixel, Google Ads, TikTok Pixel and Hotjar did not know it set 53 cookies. A customer complaint to the Austrian data protection authority prompted an urgent review.

    What changed

    The scanner found all 53 cookies and sorted them. Auto-blocking holds marketing scripts until consent, and scheduled weekly scans catch new cookies from plugin updates.

    Cookies found
    53
    Sorted into categories
    100%
  • Several platforms, agency

    Example: Agency managing 30+ client stores

    A digital agency running stores on Shopify, WooCommerce and Magento needed one consent tool for all its clients, each with its own branding and its own markets.

    What changed

    The agency manages every client banner from one dashboard. Each site has its own branding, languages and region rules, and team members get access per client.

    Sites managed
    30+
    Dashboard
    1

Regions

A consent rule for each major law.

Kukie.io reads where each visitor is and shows the consent experience you set for that region. Which rules apply to your store is a question for you and your adviser. Kukie.io gives you the tools to follow them.

  • GDPR and ePrivacy (EU)Opt-in consent with category choices, a record of each choice and the right to withdraw it
  • CCPA and CPRA (California)A Do Not Sell or Share My Personal Information link that lets visitors opt out
  • UK GDPR and PECRConsent for visitors in the United Kingdom
  • LGPD, PIPEDA and moreBrazil, Canada and more than 10 other regions, through region rules

Learn more about privacy laws by region

Questions about e-commerce

Do online stores need a cookie banner?
Most do. If your store sets cookies for analytics, ad pixels or payment and has visitors in the EU or the UK, the cookies that are not strictly necessary need the visitor's consent before they are set (Article 5(3) of the ePrivacy Directive and regulation 6 of PECR). The CCPA and CPRA give California residents the right to opt out of the sale or sharing of their personal information. Online stores are especially affected, because they usually run several tracking and payment services.
Does Kukie.io work with Shopify?
Yes. Add one line of embed code to your Shopify theme, in theme.liquid. The scanner recognises Shopify's own cookies, such as cart, _secure_session_id and the checkout cookies, and once you switch on Google Consent Mode v2, your GA4 and Google Ads tags receive each visitor's choice. The Shopify page has the details.
What about WooCommerce?
Yes. WooCommerce stores can use the free Kukie.io WordPress plugin, or add the embed code by hand. The scanner recognises WooCommerce's cart, session and payment cookies.
Can Kukie.io block cookies before consent?
Yes. Kukie.io holds known third-party scripts, such as analytics, ad pixels and chat widgets, until the visitor consents, and you can attach any other script to a consent category. With Google Consent Mode v2 switched on, Google's tags receive the visitor's choice without any change to your tags.
Does Kukie.io support Google Consent Mode v2?
Yes, with all 7 consent types: analytics_storage, ad_storage, ad_user_data, ad_personalization, functionality_storage, personalization_storage and security_storage. Google has asked for Consent Mode v2 on EEA traffic for ad personalisation and remarketing since March 2024. Once you switch it on, Kukie.io sends each visitor's choice to Google's tags. For Amazon Ads, Kukie.io also supports the Amazon Consent Signal.
Which privacy laws apply to online stores?
The main ones are the GDPR in the EU, the UK GDPR, the CCPA and CPRA in California, the LGPD in Brazil and PIPEDA in Canada, and each asks for something different. With geo-targeting, the banner shows each visitor the consent model you set for their region, such as opt-in for the EU and opt-out for California.
How does geo-targeting help an online store?
Different regions ask for different consent models. In the EU, visitors opt in before any tracking. Many US visitors outside California may only need a notice. Kukie.io reads each visitor's country and applies the consent model you set for that region, so visitors see the choices you decided on for where they are.
Is there a free plan for small stores?
Yes. The Free plan covers up to 5 sites, with unlimited pageviews and cookie scanning, and Google Consent Mode v2. For more region rules and scheduled scans, see the pricing page.

Set up consent on your store.

Scan your store to see what it sets today. Then add Kukie.io and publish your banner, without a developer.

Footnotes

Kukie.io provides tools to collect and record consent. It is not legal advice, and using it does not by itself make a website compliant with any law.

  1. 1. Article 5(3) of the ePrivacy Directive (2002/58/EC) in the EU, and regulation 6 of the Privacy and Electronic Communications Regulations in the UK. Back to footnote 1 in the text
  2. 2. Article 83(5) of the General Data Protection Regulation (EU) 2016/679: up to €20 million or 4% of total worldwide annual turnover of the preceding financial year, whichever is higher. Back to footnote 2 in the text

Listed on