Consent and privacy: the parts, in plain words

24 parts and 14 phrases. Apps in this area include Cookiebot, OneTrust, Pandectes, Shopify Customer Privacy API, Consent Studio.

Cookie consentprivacy.consentShowThe banner, the choices it offers, where the choice is stored and what it switches on or off.

Cookie bannerprivacy.consent.bannerShowThe message a visitor sees and the buttons on it.

How to extend

ProviderOne per storeconsent managerA consent manager plugin replaces Litestore's banner; one banner runs per store.

Part	Litestore today	How to extend
Cookie banner`privacy.consent.banner.notice`The cookie banner shows on a visitor's first visit, explains the cookies the store uses and stays until a choice is saved.	Core`modules/analytics/cookie-consent.tsx`	Provider · one
Accept all`privacy.consent.banner.accept_all`The accept all button switches on every consent category at once.	Core`modules/analytics/cookie-consent.tsx`	Provider · one
Essential only`privacy.consent.banner.essential_only`The essential only button keeps the store's necessary cookies and switches off the rest.	Core`modules/analytics/cookie-consent.tsx`	Provider · one
Choose by category`privacy.consent.banner.per_category`The per-category choice shows a switch for each category and saves the switches as set.	Core`modules/analytics/cookie-consent.tsx`	Provider · one
Change choice later`privacy.consent.banner.reopen`A cookie settings link in the footer reopens the banner so a visitor can change a saved choice.	Core`modules/analytics/cookie-consent.tsx`	Provider · one
Banner by region`privacy.consent.banner.by_region`A region rule shows the banner, or a stricter version of it, only to visitors in places whose laws require it.	Plugin	Provider · one

Consent categoriesprivacy.consent.categoryShowThe groups of cookies and trackers a visitor agrees to separately.

How to extend

Core onlyThe categories are a fixed list in core so every tracker checks the same names.

Part	Litestore today	How to extend
Essential`privacy.consent.category.essential`The essential category covers cookies the store needs to work, such as the cart and sign-in, and is always on.	Core`modules/analytics/consent.ts`	Core only
Analytics`privacy.consent.category.analytics`The analytics category covers trackers that count visits and behaviour, such as GA4 and PostHog.	Core`modules/analytics/consent.ts`	Core only
Marketing`privacy.consent.category.marketing`The marketing category covers ad pixels, such as the Meta and TikTok pixels, that measure and target ads.	Core`modules/analytics/consent.ts`	Core only
Preferences`privacy.consent.category.preferences`The preferences category covers cookies that store a visitor's settings, such as language, beyond the essentials.	Plugin	Core only

Passing the choice onprivacy.consent.signalShowHow a saved choice switches trackers and outside tools on or off.

How to extend

ProviderMany side by sideanalytics trackerEach tracker added to the store is mounted only when its category is allowed.

Part	Litestore today	How to extend
Tracker gate`privacy.consent.signal.tracker_gate`The tracker gate loads each analytics or ad script only after its category is allowed and removes it when consent is withdrawn.	Core`modules/analytics/consent-gated-trackers.tsx`	Provider · many
Analytics opt-out`privacy.consent.signal.analytics_opt_out`The analytics opt-out tells the product analytics library to stop capturing when analytics consent is off.	Core`modules/analytics/client.ts`	Provider · many
Tag consent flags`privacy.consent.signal.tag_consent_api`Tag consent flags pass the visitor's choice to ad and analytics tags as storage and ad data settings, so the tags load but limit what they send; Google's version is Consent Mode.	Plugin	Provider · many
Browser opt-out signal`privacy.consent.signal.browser_opt_out`The browser opt-out signal is a browser setting, Global Privacy Control, that sends an opt-out of data sale, which the store reads and applies on arrival.	Plugin	Provider · many

Consent recordsprivacy.consent.recordShowWhere a visitor's choice is stored and how it is proven later.

How to extend

ProviderOne per storeconsent managerA server-side consent log comes with a consent manager plugin.

Part	Litestore today	How to extend
Choice in the browser`privacy.consent.record.browser`The browser record stores the visitor's categories and the time they chose in the visitor's own browser.	Core`modules/analytics/consent.ts`	Provider · one
Consent log`privacy.consent.record.log`A consent log stores each choice on a server with its time, page, an anonymised IP address and the categories chosen, so it can be shown to a regulator.	Plugin	Provider · one
Cookie scan`privacy.consent.record.cookie_scan`A cookie scan crawls the store, lists every cookie it finds and assigns each to a category.	Plugin	Provider · one

Customer data requestsprivacy.requestShowWhat happens when a customer asks to see, change, stop or erase their data.

How to extend

EventMany side by sideevent.customer.updatedA plugin that copies customer data elsewhere listens for changes so it can apply erasures too.

Part	Litestore today	How to extend
Delete my account`privacy.request.self_deletion`The delete account action in the customer's settings removes the account and scrubs their personal data while keeping orders as financial records.	Core`modules/customers/delete-account.ts`	Event · many
Data access request`privacy.request.access`A data access request sends the customer a copy of the personal data the store holds about them.	Plugin	Event · many
Correction request`privacy.request.correction`A correction request asks the store to fix wrong personal data it holds.	Plugin	Event · many
Request form`privacy.request.request_form`A request form takes a privacy request from any visitor, checks their email and tracks the request to a deadline.	Plugin	Event · many
Do not sell or share`privacy.request.sale_opt_out`A do-not-sell opt-out records that the customer refuses the sale or sharing of their data, separately from cookie consent.	Plugin	Event · many

Keeping and removing dataprivacy.dataShowHow long the store keeps data and how it removes the personal parts.

How to extend

Core onlyAnonymisation and retention touch orders and money records, so they stay in core.

Part	Litestore today	How to extend
Anonymise a customer`privacy.data.anonymise`Anonymising replaces a removed customer's name, email, phone and slug with placeholder values, deletes saved addresses and keeps the orders intact.	Core`modules/customers/anonymize.ts`	Core only
Data retention`privacy.data.retention`A retention job deletes old activity logs, stale checkout quotes and other temporary records after a set period.	Core`jobs/cron.data-cleanup.ts`	Core only

Phrase	Made of
cookie banner	privacy.consent.banner.notice
consent mode	privacy.consent.banner.notice privacy.consent.signal.tag_consent_api
Google Consent Mode v2	privacy.consent.signal.tag_consent_api
consent log	privacy.consent.record.log
cookie scanner	privacy.consent.record.cookie_scan
prior consent	privacy.consent.signal.tracker_gate
GDPR request	privacy.request.request_form
data subject access request	privacy.request.request_form privacy.request.access
right to be forgotten	privacy.request.self_deletion privacy.data.anonymise
do not sell my personal information	privacy.request.sale_opt_out
Global Privacy Control	privacy.consent.signal.browser_opt_out privacy.request.sale_opt_out
data retention policy	privacy.data.retention
granular consent	privacy.consent.banner.per_category
reject all	privacy.consent.banner.essential_only

Consent and privacy