Disclaimer (read first)
Educational purposes only.
This post documents the technical steps to disable Shopify's cookie banner. Whether disabling it is appropriate for your store is a compliance decision specific to your jurisdiction, your traffic mix, your data-collection practices, and your risk tolerance. We are not your lawyers. We are documenting how the system works so operators can make informed choices.
Cookie banner regulation across jurisdictions in 2026 is complicated. The EU GDPR plus the ePrivacy Directive set the floor for European traffic. The UK PECR adds its own rules. Several US states (California, Colorado, Connecticut, Virginia) have their own consumer privacy frameworks that occasionally overlap with cookie consent. Some stores need a compliant banner. Some stores do not have any practical cookie-tracking that triggers the rule. Some stores have configured Shopify Markets in a way that auto-injects a banner they did not actually need.
This post covers the latter case. If your Shopify store is showing a cookie popup you did not deliberately configure, this is how to identify the source and remove it. Whether you should remove it is your call based on your specific store, your audience, and your legal counsel. We are operators, not compliance attorneys. We document the mechanism. You decide what to do with it.
Where the cookie popup comes from
Quick answer.
3 possible sources: Shopify's native Customer Privacy API, an installed third-party cookie consent app, or a banner hardcoded into your theme files. Each has a separate disable path.
Operators who try to remove a cookie popup and find that nothing they do works are usually disabling the wrong source. The popup looks the same on the storefront whether it comes from the native API, an installed app, or a theme-baked snippet, because the visual design is similar across most cookie consent implementations. The difference is where the markup gets injected, and which dashboard or file controls it.
The 3 sources in 2026:
- Shopify native Customer Privacy API. Shopify auto-injects a cookie banner when your store has Shopify Markets enabled with at least one EU country targeted. This is the most common source for a popup the merchant did not deliberately install. The banner inherits the store's theme color tokens by default.
- Installed third-party cookie consent app. Apps like Pandectes, Consentmo, iubenda, Termly, and CookieYes inject a more configurable banner overlay. These usually appeared at some point because a previous developer added them or the merchant installed them during onboarding without realizing they would persist.
- Hardcoded banner inside theme files. Some Shopify themes ship with a built-in cookie banner section, especially older premium themes from the 2020 to 2022 era. Some custom-developed themes have a cookie banner Liquid snippet hardcoded by a previous developer. These do not appear in any settings dashboard, only in the theme code.
The 3 injection points (and how to identify yours)
Quick answer.
Right-click the popup, Inspect Element, read the wrapper class name. shopify-privacy = native. pandectes / consentmo / iubenda = app. Generic class with no brand prefix = theme-baked.
Identification cheatsheet for 2026:
| Wrapper class / signal | Source | Disable path |
|---|---|---|
shopify-privacy-banner, shopify-cookie-banner | Native Customer Privacy API | Settings → Customer Privacy → toggle off |
pandectes prefix | Pandectes app | Apps → uninstall + clean theme app-embed |
consentmo, cm-banner | Consentmo (formerly GDPR/CCPA Consent App) | Apps → uninstall + clean theme app-embed |
iubenda, iub-banner | iubenda | Apps → uninstall + clean theme app-embed |
termly | Termly | Apps → uninstall + clean theme app-embed |
cc-banner, cookie-notice, generic | Hardcoded theme banner | Edit theme code, remove markup |
If the wrapper class does not match any of the above and no app shows in your Apps section, the source is almost certainly hardcoded into the theme. Search the theme code for the visible banner text (for example "We use cookies" or "Accept all") and you will find the file in seconds.
Disable each source, quickly
Native Shopify Customer Privacy API
- Shopify admin → Settings → Customer Privacy
- Find the section labeled Cookie banner
- Toggle Show banner to OFF
- Save
- Reload your storefront on a fresh browser session to confirm
Time: under 60 seconds. Markets and country targeting stay active. Customer Privacy API stays running in the background.
Third-party cookie consent app
- Shopify admin → Apps → find the app
- Click the trash icon → confirm uninstall
- Online Store → Themes → Customize → Theme app embeds → toggle the cookie app embed OFF (some apps leave the embed enabled even after uninstall)
- Edit theme code → search for the app brand name → remove leftover snippet references
- Reload storefront to confirm popup is gone
Time: 2 to 5 minutes depending on how many leftover artifacts the app left behind. Pandectes and Consentmo tend to clean up well. iubenda sometimes leaves a snippet you have to manually remove.
Hardcoded theme banner
- Online Store → Themes → Edit code on your active theme
- Use the search field to find the visible banner text (for example "We use cookies")
- The match returns the file containing the banner: typically
layout/theme.liquid,snippets/cookie-banner.liquid, orsections/cookie-notice.liquid - Comment out or delete the banner markup (or the include/render statement)
- Save and reload the storefront
Time: 3 to 10 minutes. If the banner is rendered via a section in OS 2.0 themes, you can also remove it via the theme editor without touching code, by deleting the section block.
🔥 Hot tip: the Iceland hack (operator-tested)
From our own stores.
Shopify Shopify forces you to have at least one region selected on the Data sharing opt-out page. Set it to just Iceland. The opt-out banner only fires for Iceland visitors. You probably do not ship there anyway, so it never affects a real customer.
What is happening here: Shopify Shopify added a required compliance page called Data sharing opt-out, intended for customers in regions that mandate it. The system will not let you set the region list to empty. So the rule is: at least one region has to be selected, even if you do not actually need it.
Iceland satisfies the requirement without any operational impact. Population ~390,000. Almost no dropshipping store ships to Iceland because the freight cost makes 2x to 3x markup math unworkable. Set the regions list to Iceland only, the Data sharing opt-out banner only fires on Iceland visits, and you keep the customer-facing surface clean for every market you actually sell into.
✓ In your admin: Settings → Customer privacy → Data sharing opt-out page → Regions → Edit → set to Iceland only → Save.
This is a workaround documented in the Shopify admin UI itself. It is not a hack of the system. The system is designed to require a region, and Iceland is the cleanest non-impactful choice for stores that do not ship to it. Combine this with the cookie banner removal above and your storefront first-load is genuinely clean for real customers.
Full removal: step-by-step in 10 minutes
Quick answer.
Identify the source via DevTools. Apply the matching disable path. Verify on a fresh browser. If the popup persists, repeat the identification step because there may be a second source still active.
- Open your storefront in a clean incognito window. The popup should appear within a few seconds of page load.
- Right-click the popup → Inspect Element. DevTools opens with the banner element selected.
- Read the wrapper class names. Cross-reference with the cheatsheet table above to identify the source.
- Apply the matching disable path. Native API → Settings, Customer Privacy. App → Apps, uninstall. Hardcoded → theme code, remove markup.
- Verify on a fresh incognito window after clearing cache. Cookie banners often cache in the browser, so a hard refresh is necessary.
- If the popup persists, repeat step 2. Many stores have a layered situation where the native API is showing one banner AND an app is showing another. Disable the still-visible source.
The total time including identification, disable, and verification is typically 2 to 10 minutes. Most stores have a single source, so the disable is fast once the source is identified correctly.
For independent guidance on Shopify Customer Privacy API behavior, the Shopify Customer Privacy API documentation covers the technical surface. Shopify Research publishes related commerce data. Compliance specifics vary by jurisdiction and your legal counsel is the right source for whether disabling is appropriate for your store.
Frequently asked questions
3 sources of the cookie popup on Shopify in 2026:
- Shopify native Customer Privacy API (auto-injects when Markets targets EU)
- Installed cookie consent app (Pandectes, Consentmo, iubenda, etc)
- Hardcoded theme banner (left over from a previous theme or custom dev work)
Identify the source in under 60 seconds:
- Right-click the popup, Inspect Element
- Read the wrapper class names (
cc-banner,shopify-privacy-banner= native;pandectes,consentmo= app; generic = theme) - Cross-check with Shopify admin → Apps
- If no app installed and banner still shows, source is native or theme-baked
Disable native banner, keep Markets:
- Settings → Customer Privacy → toggle banner display OFF
- Markets, language, and country targeting all stay active
- Customer Privacy API stays in background (window.Shopify.customerPrivacy still works)
- To remove the API entirely, edit theme.liquid script tags directly
Clean app uninstall in 4 steps:
- Apps section → find the cookie app → trash icon
- Theme editor → App embeds → toggle the cookie app embed OFF
- Theme code → search for the app brand name → remove leftover snippets
- Reload storefront → confirm popup gone
Hardcoded banner injection points in Shopify themes:
layout/theme.liquid(most common, near closing body tag)snippets/cookie-banner.liquidorsnippets/gdpr-popup.liquidsections/custom section (OS 2.0 themes)- Search code for:
cookie,gdpr,consent,banner,accept all
Cookie banner vs privacy policy in 2026:
- Cookie banner: consent UI popup, controlled in Customer Privacy settings
- Privacy policy: separate page, controlled in Settings → Policies
- Disabling the banner does not remove the policy page or footer link
- Most operators keep the privacy policy link (it is a near-universal legal requirement)
Shopify policy stance on cookie banner removal in 2026:
- Shopify Shopify documents the removal pattern in its own help articles
- No ToS or App Store violation for disabling the banner
- Policy concern is jurisdictional (your customers, your data, your counsel)
- Iceland hack satisfies the platform requirement cleanly without affecting real markets
Disabling popup vs analytics impact in 2026:
- Shopify built-in analytics: unaffected by banner visibility
- Meta / TikTok pixels: continue per store-level pixel config, not banner state
- Customer Privacy API consent state: separate system, affects some cookies
- Most stores: zero measurable attribution impact
- Exception: stores using the popup as a real consent gate lose the gate
Clean storefront, page-first stack
Build a Shopify product page that ships at 4%+ CVR in 13 minutes.
Paste a product URL. Godmode runs market research, applies the ATIDCOA framework, mines copy from real reviews, and ships native Shopify Liquid.
