Skip to content
Help Center Pasilobus Help Center home

Compliance centre

Check your store against each privacy law, with a fix for every gap

The compliance centre on the app's home page shows, law by law, whether your store meets the cookie consent and opt-out requirements this app can check. Each check runs against your store's real settings: Shopify's privacy settings, your published theme, your storefront and the app's own settings. Anything that needs attention comes with a Fix button that takes you straight to the right place.

Before the first check

Most checks need the banner to be on, so on a new store the home page first shows Start by turning on the cookie banner. Select Turn on the banner to open the theme editor, or Check my store to see your score straight away. The full report shows by itself once the banner is on.

The score

At the top, the score shows the share of checks your store passes. Checks that could not be run are left out of the score and counted separately as "not checked". The summary underneath says how many checks pass, how many need attention and how many could not be checked, and when the store was last checked.

Results refresh by themselves when they are more than 10 minutes old. Select Check again after you fix something to run the checks now, then reload the page for the result.

The laws

Each law in force has its own card with where it applies, the date it came into force, and its status: Ready, Needs attention or Not checked.

  • Consent laws - GDPR (EU and EEA), UK GDPR and PECR, LGPD (Brazil) and Law 25 (Québec). Visitors must opt in before non-essential cookies.
  • Notice law - nFADP (Switzerland). Visitors must be told about cookies.
  • Opt-out laws - the US state privacy laws in force, such as CCPA / CPRA (California), Virginia, Colorado, Connecticut, Texas and others. Visitors must be able to opt out of the sale or sharing of their data.

Laws that are passed but not yet in force are listed under Coming into force with their start date.

The checks

Which checks a law has depends on its type:

  • Consent laws - the banner, Shopify's own banner, the region rule, rejecting as easy as accepting, the privacy policy, recorded choices and the cookie list.
  • Notice law - the banner, the privacy policy and the cookie list.
  • Opt-out laws - the banner, the region rule, the opt-out link, Global Privacy Control and the privacy policy.

What each check looks at, and its Fix button:

  • The cookie banner is on - the app embed is enabled in your published theme. Fix: Turn on the banner.
  • Shopify's own banner is off - otherwise visitors see two banners. Fix: Turn off Shopify's banner.
  • Shopify applies this law's region rule - Shopify asks for consent, or offers the opt-out, everywhere the law applies. Fix: Set the region rule opens the region review page with the right law ticked.
  • Rejecting is as easy as accepting - Reject all sits next to Accept at the same size, and its colours are as easy to see and read. Fix: Adjust the button colours in the theme editor.
  • A privacy policy is linked - the banner links a privacy policy page that loads. Fix: Add a privacy policy.
  • Choices are recorded - the consent log is on, the banner sends choices to it, and choices have arrived in the last 30 days. Fix: Turn on the consent log.
  • The cookie list is published - your cookies are listed and the cookie list block is on a page of your theme. Fix: Review your cookies or Add the cookie list block.
  • Visitors can opt out of the sale or sharing of their data - a "Do not sell or share" link shows to visitors in the state. Fix: Set the region rule.
  • Global Privacy Control is honoured - Shopify treats a browser's GPC signal as an opt-out in the state. Fix: Set the region rule.

Each check shows Pass, Fix needed or Unknown. Unknown means the app could not check it right now, for example because your theme could not be read, and is never counted as a failure. See A compliance check shows Unknown or Fix needed.

The checks cover the cookie consent and opt-out requirements this app can verify. They are not legal advice and do not cover everything a law requires, such as the content of your privacy policy or how you handle data requests. A passing score does not mean your store is compliant: check with your own legal advisor what each law requires of your business.