> PrestaShop under GDPR: storefront cookies, official GDPR module, consent for marketing modules, EU hosting and best practice for compliant online stores.
>
> Canonical: https://www.flowconsent.com/en/services/ecommerce/prestashop

E-commerce

# PrestaShop

Preferences · [Official website](https://www.prestashop.com)

PrestaShop is a French open source e commerce platform used by SMEs and large brands across Europe. It runs PHP and MySQL, with cloud and self hosted options.

[Block PrestaShop until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [E-commerce](https://www.flowconsent.com/en/services/ecommerce)

- Consent

  Preferences

- Prior consent

  Required

- Documented cookies

  2

- Third-party domains

  2

- Servers

  Self hosted (operator choice) or PrestaShop Cloud on AWS EU

Overview

## What does PrestaShop do?

## What PrestaShop is

PrestaShop is an open source PHP and MySQL e commerce platform developed by PrestaShop SA, a French company based in Paris. It powers over 250,000 online stores in Europe, with a strong presence in France, Spain, Italy and Poland. It can be self hosted on any LAMP stack or run on the official PrestaShop Cloud (AWS EU).

## Data and cookies set

By default PrestaShop sets the PrestaShop-\* first party cookies for the session and the shopping cart, plus a CSRF token. These cookies are strictly necessary. Additional cookies are added when marketing or analytics modules are enabled.

## GDPR and ePrivacy implications

Order and account data are processed under Article 6(1)(b) GDPR. Marketing modules, advertising tags and analytics require valid consent under Article 5(3) ePrivacy and Article 6(1)(a) GDPR.

## Consent requirements

You do not need consent for the strictly necessary checkout cookies. PrestaShop ships an official GDPR module that helps with data subject requests. Marketing, analytics and advertising modules must be gated behind a consent management platform.

## Data transfers outside the EEA

If you self host in the EU there is no transfer. PrestaShop Cloud uses AWS EU. Third party modules (Mailchimp, Klaviyo, Hubspot, Google Tag Manager) may introduce US transfers that require SCCs and a transfer impact assessment.

## Practical compliance steps

Host PrestaShop on EU infrastructure, enable the official GDPR module, integrate a CMP (Axeptio, Cookiebot, Klaro), block marketing modules before consent, document each third party module and its sub processors, and audit the cookie inventory monthly.

Compliance

## PrestaShop and the GDPR

PrestaShop is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Performance of a contract (Article 6(1)(b) GDPR) for order processing, consent (Article 6(1)(a) GDPR and Article 5(3) ePrivacy) for marketing and analytics modules added on top

- Risk level

  low

- Applicable regulations

  GDPR, ePrivacy Directive 2002/58/EC, French CNIL guidelines, German TDDDG, Spanish LSSI, PCI DSS

### Impact assessment (DPIA)

The platform itself rarely triggers a DPIA. A DPIA can be needed for advanced modules (advertising, customer segmentation, loyalty profiling) and for third party integrations such as US payment or marketing tools.

### Sample text for your banner

> Our online store runs on PrestaShop, an open source platform developed by PrestaShop SA in France. Order and account data are processed to fulfil your purchase. Marketing and analytics cookies are activated only with your prior consent.

Cookies and trackers

## What PrestaShop sets and contacts

- Tracking method

  server\_side

- Server location

  Self hosted (operator choice) or PrestaShop Cloud on AWS EU

### Cookies set (2)

| Name              | Type         | Duration | Purpose                                           |
| ----------------- | ------------ | -------- | ------------------------------------------------- |
| PrestaShop-{hash} | first\_party | 20 days  | Session and cart identifier (strictly necessary). |
| checksum          | first\_party | Session  | Verifies the integrity of the visitor session.    |

### Third-party domains contacted (2)

- `prestashop.com`
- `addons.prestashop.com`

Questions

## Frequently asked questions about PrestaShop

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Which cookies does PrestaShop set?

PrestaShop sets first party cookies starting with PrestaShop- for the session and cart, plus a CSRF token. These are strictly necessary. Marketing and analytics modules add their own cookies.

### Do I need consent?

Not for the strictly necessary cookies. Yes for analytics, advertising and marketing modules.

### What is the legal basis?

Article 6(1)(b) GDPR for orders, Article 6(1)(a) GDPR and Article 5(3) ePrivacy for marketing and analytics modules.

### Are any data transferred to the United States?

No when self hosted in the EU. Yes if you enable third party modules like Mailchimp, Klaviyo or Google Tag Manager that route data through US infrastructure.

### Is a DPIA needed?

Usually limited. Run a DPIA when you enable behavioural profiling, loyalty scoring or advanced analytics modules.

### How do I implement compliance correctly?

Host PrestaShop in the EU, enable the official GDPR module, integrate a CMP, disable marketing modules until consent is given and audit your installed modules.

### What are the alternatives?

Magento (Adobe Commerce), WooCommerce, Shopify, BigCommerce, Sylius. EU based and self hosted options minimise transfer issues.

### How do I update the cookie policy?

Run a scanner on staging and production each release, separate strictly necessary cookies from consent based ones and document the third party modules in your policy.

Related guide

## Our guides on PrestaShop

[25 May 2026](https://www.flowconsent.com/en/blog/prestashop-cookies-gdpr-compliance-guide)

### [PrestaShop cookies and GDPR: compliance guide](https://www.flowconsent.com/en/blog/prestashop-cookies-gdpr-compliance-guide)

[How to make your PrestaShop store GDPR-compliant for cookies: cookie audit, compliant banner, Google Consent Mode v2, and a practical checklist.](https://www.flowconsent.com/en/blog/prestashop-cookies-gdpr-compliance-guide)

[Read the guide](https://www.flowconsent.com/en/blog/prestashop-cookies-gdpr-compliance-guide)

Same category

## More services: E-commerce

[See the whole category](https://www.flowconsent.com/en/services/ecommerce)

### [Tauros Media](https://www.flowconsent.com/en/services/ecommerce/tauros-media)

[Tauros Media is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Tauros Media supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Tauros Media ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/tauros-media)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/tauros-media)

·

### [Little Hotelier](https://www.flowconsent.com/en/services/ecommerce/little-hotelier)

[Little Hotelier is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Little Hotelier enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Little Hotelier empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/ecommerce/little-hotelier)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/little-hotelier)

·

### [Shopaholic](https://www.flowconsent.com/en/services/ecommerce/shopaholic)

[Shopaholic is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Shopaholic supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Shopaholic ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/shopaholic)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/shopaholic)

·

### [iRaiser](https://www.flowconsent.com/en/services/ecommerce/iraiser)

[iRaiser is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. iRaiser integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, iRaiser helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/iraiser)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/iraiser)

·

### [AdNabu](https://www.flowconsent.com/en/services/ecommerce/adnabu)

[AdNabu is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. AdNabu supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, AdNabu ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/adnabu)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/adnabu)

·

### [Simple Goods](https://www.flowconsent.com/en/services/ecommerce/simple-goods)

[Simple Goods is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Simple Goods integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Simple Goods helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/simple-goods)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/simple-goods)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)