Google tags need their own check
Consent signals do not install or automatically govern every third-party tag. Configure each tag or pixel to use its supported consent integration, and check its actual behavior after acceptance and withdrawal.
Set up consent for your storefront.
Connect your CYB App, enable the consent embed, and check how visitor choices reach Shopify and Google. Your CYBEXO banner supports IAB TCF v2.4 and Google Consent Mode v2.
Five steps to connect your store
You need access to the CYBEXO dashboard and permission to manage your Shopify theme and customer privacy settings.
Create your CYB App
Open the CYBEXO dashboard, create an App for your Shopify storefront, and add its domain. Configure your banner, applicable regions, IAB TCF options, and Google Consent Mode.
Copy its CYB App ID, which begins with
CYB-. Older App IDs need a new CYB App; changing the prefix of an old ID does not migrate it.Enable the app embed
In Shopify, go to Online Store → Themes → Customize → App embeds. Enable Consent management under Cybexo CMP.
Paste your CYB App ID and save the theme. If your store uses the
cybexo.settings_idshop metafield, its value takes priority over the text field.Keep one consent installation
Remove an old direct CYBEXO script or another CMP installation from this theme. Check any tag-manager integration as well. A second consent manager can create competing banners and signals.
After an upgrade, confirm that the embed is still enabled and contains your current CYB App ID.
Align Shopify privacy settings
Open Settings → Customer privacy. Configure consent regions to match where your CYBEXO banner asks for consent. Use CYBEXO as the storefront banner and avoid displaying a competing Shopify cookie banner.
Keep Shopify’s data-sale opt-out page and Global Privacy Control settings configured separately for applicable regions.
Set tag order, then test
Load and initialize direct Google or tag-manager tags after the CYBEXO consent bootstrap. The app embed’s placement does not move scripts already in your theme’s head. For a direct theme installation, place the measurement or tag-manager snippet immediately after the opening
<body>tag, after the head’s CYBEXO bootstrap. Remove any earlier duplicate and verify the actual published HTML order.Test a fresh visit in a region where consent is required. Check acceptance, rejection, individual choices, reopening settings, and withdrawal. Verify your Google tags in Tag Assistant and repeat after a reload. Use the checklist below before relying on a store’s production configuration.
How choices reach Shopify
The embed records a Shopify choice after a visitor completes a choice in CYBEXO. Loading the page, restoring saved choices, or applying regional defaults does not create a new Shopify decision.
| Shopify category | What controls it |
|---|---|
| Analytics | The visitor’s separate Analytics preference, together with the effective Google Analytics consent gate. |
| Marketing | Advertising storage, advertising user data, and personalized advertising must all be permitted. |
| Preferences | The same conservative personalization gate as Marketing. TCF does not provide a separate Shopify preferences category. |
| Sale or sharing | Shopify’s independent data-sale opt-out page and Global Privacy Control. Accept All, Reject All, and TCF customization do not change this setting. |
If CYBEXO asks for a fresh decision after an earlier choice expires or becomes invalid, Shopify may still hold its earlier platform choice. The embed does not invent a new decision on page load; the visitor’s next completed choice updates Shopify.
Check the experience your visitors receive
- A fresh visit shows one banner where consent is required, and Google consent starts denied.
- Accepting or rejecting updates the expected Shopify categories and Google signals.
- Withdrawing advertising personalization does not silently withdraw a separately permitted Analytics choice.
- Withdrawing Analytics stops Analytics permission while keeping other permitted choices intact.
- Saved choices survive a reload, and visitors can reopen settings to change or withdraw consent.
- Google Tag Assistant shows denied defaults processed before Google initialization, then the expected states after acceptance and withdrawal.
- The data-sale opt-out page and Global Privacy Control retain their independent behavior.
Checkout is a separate surface
A theme app embed runs on the online storefront, not Shopify checkout pages. Shopify pixels and checkout use platform-managed environments. Verify those integrations separately with the store’s customer privacy configuration.
If something needs attention
The banner does not appear
Check the saved CYB App ID, the active theme’s app embed, the storefront domain, and the banner’s regional settings. A visitor with a valid saved choice may not see the first layer again; use the preferences entry to reopen it.
I see two banners, or initialization is blocked
Keep one storefront consent installation. Remove an old direct script, duplicate tag-manager loader, or competing CMP. Save the active theme and reload before testing again.
Shopify categories do not follow a new choice
Confirm the current app embed is enabled and Shopify’s customer privacy integration is available. Make a new explicit choice after a temporary failure. Contact support if the platform still does not confirm the choice; a banner closing by itself is not proof of synchronization.
I upgraded from an older installation
The existing embed setting is retained, but the App ID must belong to a current CYB App. Replace a retired App ID through the dashboard setup flow. Do not rename an old ID manually or add another loader.
Need a hand with your store?
Share your storefront domain and the step that needs attention.