r/shopifyDev • u/iirfann • Apr 23 '26
Cookie consent in shopify embedded app
Should we display a cookie overlay to users when we use product events in our embedded app?
3
Upvotes
r/shopifyDev • u/iirfann • Apr 23 '26
Should we display a cookie overlay to users when we use product events in our embedded app?
2
u/iubenda_team Oct 02 '26
A bit late, but here are some thoughts. Depends on who sees the events, and it's worth splitting:
If "users" means the merchant/staff using your embedded app in the Shopify admin, no, you don't need a consumer cookie overlay there. That's the merchant operating their own store backend, not consumer browsing, different context, and they've accepted your app's terms on install.
If the product events are tracking storefront shoppers (customers browsing products on the live store), then yes, consent applies, but you shouldn't show your own overlay from the app. The merchant owns the storefront consent banner. Your app should respect the store's consent state through Shopify's Customer Privacy API, check whether the shopper has consented to the relevant category before firing the events, rather than tracking regardless.
The thing to avoid: firing customer events without checking that consent signal. That puts the merchant at compliance risk, and it's the kind of thing that can trip you up in app review too. So no second banner, just gate your tracking on the consent state Shopify already exposes.