Google tags need their own check
Consent signals do not install or automatically govern every third-party tag. Configure each tag or pixel to use its supported consent integration, and check its actual behavior after acceptance and withdrawal.
Set up consent for your storefront.
Connect your CYB App, enable the consent embed, and check how visitor choices reach Shopify and Google. The Shopify app works without Google Tag Manager. Keep the default Shopify App (no GTM) option for this setup; use the optional GTM instructions only if your store already uses GTM.
Five steps to connect your store
You need access to the CYBEXO dashboard and permission to manage your Shopify theme and customer privacy settings.
Create your CYB App
Open the CYBEXO dashboard, create an App for your Shopify storefront, and add its domain. Configure your banner, applicable regions, IAB TCF options, and Google Consent Mode.
Copy its CYB App ID, which begins with
CYB-. Older App IDs need a new CYB App; changing the prefix of an old ID does not migrate it.Enable the app embed
In Shopify, go to Online Store → Themes → Customize → App embeds. Enable Consent management under Cybexo CMP.
Paste your CYB App ID. Under Setup mode, keep Shopify App (no GTM). Leave the GTM container ID empty and save the active theme. The app loads the CMP and connects completed choices to Shopify; no extra CMP script is required. If your store uses the
cybexo.settings_idshop metafield, its value takes priority over the text field.Keep one consent installation
Remove an old direct CYBEXO script or another CMP installation from this theme. Check any tag-manager integration as well. A second consent manager can create competing banners and signals.
After an upgrade, confirm that the embed is still enabled and contains your current CYB App ID.
Align Shopify privacy settings
Open Settings → Customer privacy. Configure consent regions to match where your CYBEXO banner asks for consent. Use CYBEXO as the storefront banner and avoid displaying a competing Shopify cookie banner.
Keep Shopify’s data-sale opt-out page and Global Privacy Control settings configured separately for applicable regions.
Test your storefront
Keep Google Consent Mode enabled in CYBEXO. Test a fresh visit in a region where consent is required, then acceptance, rejection, individual choices, reopening settings, and withdrawal. Repeat after a reload. The app supplies Google consent signals; your Analytics or advertising integration remains a separate installation.
If you use direct Google tags, load them after the app's early consent defaults. The embed cannot move scripts that appear earlier in your theme. Check the actual tag behavior and consent commands in Tag Assistant.
Optional: stores using Google Tag Manager
Select Google Tag Manager in the embed and enter your container ID. In that container, install the CYBEXO CMP Gallery template, use the same App ID and fire one CMP tag on Consent Initialization – All Pages. Preview and publish it. The app loads the container; remove duplicate container snippets and competing consent writers. Load measurement after native consent defaults.
Existing stores keep their selected mode; switching requires coordinating the embed and tags and repeating verification.
How choices reach Shopify
The embed records a Shopify choice after a visitor completes a choice in CYBEXO. Loading the page, ordinary restoration, or regional defaults does not create a new Shopify decision. A visitor’s completed choice in another open tab is synchronized, including Shopify categories, without another CYBEXO decision or receipt.
| Shopify category | What controls it |
|---|---|
| Analytics | The visitor’s separate Analytics preference, together with the effective Google Analytics consent gate. |
| Marketing | Advertising storage, advertising user data, and personalized advertising must all be permitted. |
| Preferences | The same conservative personalization gate as Marketing. TCF does not provide a separate Shopify preferences category. |
| Sale or sharing | Shopify’s independent data-sale opt-out page and Global Privacy Control. Accept All, Reject All, and TCF customization do not change this setting. |
If CYBEXO asks for a fresh decision after an earlier choice expires or becomes invalid, Shopify may still hold its earlier platform choice. The embed does not invent a new decision on page load; the visitor’s next completed choice updates Shopify.
Check the experience your visitors receive
- A fresh visit shows one banner where consent is required, and Google consent starts denied.
- Accepting or rejecting updates the expected Shopify categories and Google signals.
- Withdrawing advertising personalization does not silently withdraw a separately permitted Analytics choice.
- Withdrawing Analytics stops Analytics permission while keeping other permitted choices intact.
- Saved choices survive a reload, and visitors can reopen settings to change or withdraw consent.
- In Google Tag Assistant, expand Consent Default and Consent Update API calls to check the four parameters, then verify the actual tag behavior. If the Consent panel disagrees, contact support with the captured commands.
- The data-sale opt-out page and Global Privacy Control retain their independent behavior.
Checkout is a separate surface
A theme app embed runs on the online storefront, not Shopify checkout pages. Shopify pixels and checkout use platform-managed environments. Verify those integrations separately with the store’s customer privacy configuration.
If something needs attention
The banner does not appear
Check the saved CYB App ID, the active theme’s app embed, the storefront domain, and the banner’s regional settings. A visitor with a valid saved choice may not see the first layer again; use the preferences entry to reopen it.
I see two banners, or initialization is blocked
Keep one storefront consent installation. Remove an old direct script, duplicate tag-manager loader, or competing CMP. Save the active theme and reload before testing again.
Shopify categories do not follow a new choice
Confirm the current app embed is enabled and Shopify’s customer privacy integration is available. Make a new explicit choice after a temporary failure. Contact support if the platform still does not confirm the choice; a banner closing by itself is not proof of synchronization.
I upgraded from an older installation
The existing embed setting is retained, but the App ID must belong to a current CYB App. Replace a retired App ID through the dashboard setup flow. Do not rename an old ID manually or add another loader.
Need a hand with your store?
Share your storefront domain and the step that needs attention.