TL;DR: PrestaShop installs several technical and marketing cookies by default. To comply with GDPR and ICO guidelines, you must block all non-essential cookies before consent, display a banner with an equally accessible reject option, and implement Google Consent Mode v2 if you use Google Analytics or Google Ads.
If you run an online store with PrestaShop and serve European customers, GDPR applies to you. You must obtain free, informed, and explicit consent before placing any non-strictly-necessary cookies. This applies to businesses of all sizes.
This guide walks you through identifying cookies on your store, setting up a compliant banner, and integrating analytics tools without legal risk.
Why PrestaShop stores must comply with GDPR cookie rules
GDPR and the ePrivacy Directive require prior consent for any cookie placed for purposes other than the technical operation of the site. The ICO and EU supervisory authorities have confirmed that simply continuing to browse does not constitute valid consent.
PrestaShop merchants are directly affected by:
- Audience measurement cookies (Google Analytics, Facebook Pixel)
- Product personalisation and recommendation cookies
- Retargeting and advertising cookies
- Integrated social media cookies
Non-compliance can result in fines of up to 4% of global annual turnover or 20 million euros.
Cookies placed by PrestaShop by default
A standard PrestaShop installation places several cookies, some technically necessary and others not:
- PrestaShop-[token]: session/cart cookie, technically necessary
- id_currency, id_lang, id_wishlist: user preferences, necessary
- viewed: browsing history, may require consent depending on use
- Third-party modules: each module (chat, analytics, marketing) adds its own cookies
Third-party modules are the main source of non-compliance: they often place cookies as soon as they are activated, without waiting for user consent.
Setting up a compliant cookie banner on PrestaShop
Official modules vs dedicated consent solutions
PrestaShop's marketplace offers cookie banner modules, but their compliance level varies. Some only provide an 'Accept' button with no easily accessible reject option, which does not meet GDPR requirements.
A compliant banner must include:
- A reject button as prominent as the accept button
- Access to the list of purposes and partners
- An easy way to withdraw consent at any time
- Consent logging (proof of consent)
A dedicated solution like FlowConsent integrates via a JavaScript snippet and automatically handles cookie blocking before consent, consent logging, and Google Consent Mode v2 compatibility.
Essential settings to configure
Whichever solution you choose, you must configure:
- A complete list of all cookies placed by your store (audit with browser developer tools)
- Preventive blocking of marketing scripts before consent
- Banner text with a clear description of purposes
- A link to your privacy policy
- Consent validity period (ICO recommends reviewing consent periodically)
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Integrating Google Consent Mode v2 on PrestaShop
Since March 2024, Google requires Google Consent Mode v2 for advertisers using Google Analytics 4 or Google Ads in the European Economic Area. Without this, conversions may no longer be measured accurately.
Google Consent Mode v2 uses two main signals:
- analytics_storage: enables audience measurement
- ad_storage: enables advertising cookies
On PrestaShop, integration is done via the Google Tag Manager module or directly in the theme header. Your CMP must send consent signals before Google tags load.
With FlowConsent, Consent Mode v2 signals are sent automatically once your purposes are configured.
Auditing your PrestaShop store
Before setting up your banner, conduct a full audit of all cookies on your store. Browse in private/incognito mode, open developer tools (F12 > Application > Cookies), and list all cookies with their domains and expiry durations. Identify which are technically necessary and which require consent.
You can use FlowConsent's free scan tool to automate this audit and get a full cookie report.
Regular audits (at least once a year) are recommended, as newly installed modules can introduce new cookies without notice.
PrestaShop compliance checklist
- Audit all cookies placed on your store
- Identify necessary vs non-necessary cookies
- Install a GDPR-compliant CMP
- Configure preventive blocking of non-essential scripts
- Display a banner with a reject option as accessible as the accept option
- List all purposes and partners in the banner
- Implement Google Consent Mode v2 if you use GA4 or Google Ads
- Store consent logs as proof
- Update your privacy policy
- Schedule an annual cookie audit
Making your PrestaShop store GDPR-compliant is not optional, but it is manageable. A properly configured CMP protects you legally while preserving your marketing performance.
To quickly set up your compliant cookie banner, try FlowConsent for free.
Frequently asked questions
Is PrestaShop GDPR-compliant by default for cookies?
No. PrestaShop does not include a GDPR-compliant cookie consent solution out of the box. You need to install a third-party CMP and configure blocking of non-essential cookies before consent.
Which PrestaShop modules should I use for cookie compliance?
Several cookie banner modules exist on the PrestaShop marketplace, but their compliance level varies. An external solution like FlowConsent ensures full GDPR compliance with an accessible reject option, consent logging, and Google Consent Mode v2.
Is Google Consent Mode v2 required for PrestaShop?
Yes, if you use Google Analytics 4 or Google Ads in Europe since March 2024. Without Consent Mode v2, Google can no longer accurately measure your conversions, impacting your advertising ROI.
How do I audit cookies on my PrestaShop store?
Browse in private/incognito mode and use browser developer tools (F12 > Application > Cookies). List all cookies, their durations, and purposes. You can also use FlowConsent's free scan tool for an automated report.