Cookie and tag scan
Every cookie, pixel, and script listed by category, with the ones that fire before consent today.
Cookie consent management for online stores: region-aware banners, Consent Mode v2, Meta pixel consent, and CCPA opt-outs.
100%
Tags gated by visitor choice
v2
Consent Mode for Google tags
How your project runs
Teams we have built for:








The Problem
It shows up when a banner plugin goes in and nobody checks the tags. The banner looks right, while GA4, Meta, and TikTok load on page one.
01 ยท Early pixels
Your Meta pixel loads before visitors choose anything.
GA4, Google Ads, Meta, and TikTok wait for each visitor's answer.
02 ยท Shrinking audiences
Your EEA ad audiences stopped growing.
Google can model conversions from visitors who decline.
03 ยท Missing links
A California shopper can't find the Do Not Sell link.
Opt-out links appear where CCPA applies, and opt-in where GDPR applies.
04 ยท Unchecked tags
Nobody checked which of your 14 tags follow the banner.
Every cookie and tag gets scanned, then tested from each region.
You added a cookie banner last year, so you assumed consent was handled. Then a customer in Germany points out that your Meta pixel loads before they choose anything. Your ads team says EEA audiences stopped growing. Meanwhile, a California shopper asks where the Do Not Sell or Share link went. The banner is there, but nobody checked which of your 14 tags actually listen to it.
We start with a scan of every cookie and tag on your site. Then we set rules for each region: opt-in for the EU and UK, opt-out links for California. Your consent platform passes each choice to Google, the Meta pixel, and Shopify's Customer Privacy API. Then we test from each region, so consent works instead of just looking right.
Region rules, not one banner
Opt-in where GDPR applies and opt-out links where CCPA applies, managed in one consent platform.
Every tag follows the choice
GA4, Google Ads, Meta, and TikTok wait for the visitor's answer, checked in each region.
Measurement kept where allowed
Google can model conversions from visitors who decline, so you lose less data.
Our Consent Setup Process
You approve the banner text, the region rules, and the tag list before anything goes live. We test from each region before handover.
We scan your site for cookies and tags and note which ones fire before consent. You receive the gaps in writing, plus a fixed quote, before we change anything on your store.
What's Included
A cookie scan, a banner with region rules, and every tag wired to the visitor's choice. Bigger plans add opt-outs, consent records, and data requests.
Compare Options
A free banner plugin is fine for simple sites, and enterprise privacy suites suit large legal teams. Neither wires and tests your tags for you.
| Feature | DeveloperLookBest fit | Banner plugin alone | Enterprise privacy suite |
|---|---|---|---|
| Upfront cost | From $600 | Free or low monthly | Enterprise pricing |
| Setup time | 1 to 3 weeks | An afternoon | Weeks to months |
| Tag wiring | Every tag tested | Common tags only | Your team configures |
| Google signals | Set up and tested | Often a toggle | Supported |
| Region rules | Set per region | Basic geo rules | Detailed rules |
| Shopify privacy API | Connected and checked | Depends on the app | Custom work |
| Data requests | On the top plan | None | Built in |
| Ongoing fees | Platform fee only | Free or low | Annual contract |
Projects We've Built
Online stores and apps we have designed and built. Stores like these run analytics and ad tags that need visitor consent.
What Our Clients Say
Feedback from teams we have built stores, tracking, and apps for.
We had a different kind of problem. People were visiting the store, adding products to their carts, and then disappearing before they finished the order. We had tried a few apps and made changes here and there, but nothing really seemed to solve the bigger issue. The team went through the shopping experience with us and pointed out things we hadn't really noticed ourselves. They cleaned up the cart and checkout flow, made the mobile experience much smoother, and helped us make the store feel easier to shop. Iโm not going to pretend we fixed everything overnight, but it finally feels like the store is helping the sale instead of getting in the way of it.
The mobile experience is probably my favourite part of the new site. We had spent a lot of time making sure the desktop version looked right, and the team kept pushing us to think about how everything would actually feel on a phone too. They were right. The navigation is clean, the interactions feel natural, and everything weโve tested so far works exactly as it should. They also went through the links, forms, integrations, and other details more than once before launch, which I really appreciated. And even after going live, we could still reach out when something came up. The whole process felt friendly, organised, and surprisingly straightforward.
We had a pretty specific idea of what we wanted our website to become, but I wasnโt sure how easily we could explain all of it to a development team. There were quite a few moving parts, and we were working toward a deadline, so I expected a few things to get lost along the way. That never really happened. They understood what we were trying to achieve, kept us updated throughout the process, and got everything ready within the agreed timeline. The final site feels much easier to navigate, works beautifully on mobile, and is noticeably smoother for our customers. It was a huge relief seeing the original idea actually turn into the website we had in mind.
1,000+
Projects shipped
10+
Years of experience
Top 3%
Upwork Top Rated Plus
5 stars
Average review score

Want results like these?
Tell us what you are building. You get a reply within 24 hours on business days, then a written estimate.
Work Culture
A banner that blocks too little is a risk, and one that blocks too much breaks your data. These habits keep both in check.
We load your store from the EU, UK, and US and record which tags fire before and after each choice. You see proof, not a settings screenshot.
Every cookie and pixel goes into an inventory with its category and the app behind it. When you add an app, you know where its tag belongs.
Google's consent signals and Meta's consent commands keep measurement working within each visitor's choice. You lose less data than with a banner that blocks everything.
Each category gets one clear sentence, and Reject is as easy to find as Accept. Visitors understand the choice instead of clicking through a maze.
We're developers, not lawyers, so policy wording and legal calls stay with your counsel. We build what they decide and flag questions as we find them.
The consent platform account, tag manager container, and settings stay in your name. You can switch providers later without starting over.
Overview
DeveloperLook sets up cookie consent management for online stores, so tracking waits for permission where the law requires it. We scan your cookies, configure a banner with rules for each region, connect Google Consent Mode v2 and the Meta pixel, and test every tag. Setup starts at $600 and takes 1 to 3 weeks, with legal questions flagged for your lawyer.
DEVELOPERLOOK
Project facts ยท Privacy Compliance and Consent Management
Reviewed 28 Sep 2026 by Saimul Islam
Good fit
Stores selling to the EU and UK
Your store gets EU and UK traffic, and your analytics and ad tags fire before anyone clicks Accept.
Advertisers on Google and Meta
Your Google Ads audiences stopped growing in the EEA, or conversions dropped after a banner started blocking every tag.
Brands with California customers
You sell to California shoppers and need a Do Not Sell or Share link that actually stops the tags.
Shopify stores with third-party banners
Your Shopify store uses a third-party banner, and pixels stay silent after Accept because the choice doesn't reach Shopify.
Agencies launching client stores
Your agency launches client stores and needs a repeatable cookie consent management tool setup you can hand over with each site.
Not a fit
Legal advice or policy
You need legal advice or a privacy policy written from scratch. A privacy lawyer should draft those, and we'll implement what they decide.
Breach worries
Your worry is hackers or a breach, not consent. Our Website Security Audit Services page covers that.
Broken GA4 data
Your GA4 data itself is broken, with missing or duplicate purchases. Our GA4 Setup and Audit Services page fixes that first.
Shopify's own apps only
Your budget is under $600, or your Shopify store runs only Shopify's own apps. Shopify's built-in cookie banner may cover you for free.
Not sure we're the right fit?
Book a free call or message us. We'll tell you honestly whether we're the right team.
Pricing
These are starting points in USD. Your final price depends on your tags, regions, and opt-out needs, and you get a fixed proposal after a free privacy review.
For one store with a standard set of tags that needs consent rules for each region.
$600one-time, USD
For stores with many ad tags and California customers who need opt-outs handled properly.
$1,350one-time, USD
For brands with several stores or domains that also need data requests and consent records.
$2,600one-time, USD
For Agencies
You own the client relationship. We configure consent banners, tag rules, and Google's consent signals for your clients' stores under your brand. You hand over a tested setup without tracking every privacy law yourself.
White label: your client only ever sees your brand
Send the store list, regions, and the ad platforms each client runs.
You get a tag plan, region rules, and a fixed price per store.
We set up, test in each region, and document it for your team.
You present the setup. We stay behind your brand on every call.
Fixed scope per store, with region rules agreed up front.
Developers who wire GA4, Meta, and Shopify pixels every week.
Add consent work to client launches without hiring a specialist.
The Right Technology for Your Project
We work in the tag manager, analytics, and ad platforms your store already uses, plus your consent platform of choice.
FAQ
Straight answers on GDPR and CCPA basics, cost, Google and Meta signals, platforms, and keeping it current.
Saimul IslamFounder & CEO, DeveloperLookStill have questions?
Send a message or book a call with the team.
Website GDPR compliance starts with asking before non-essential cookies run and recording each choice. Your banner needs a clear accept and reject, tags must wait for the answer, and your policies must match the site. Our GDPR website compliance checklist covers each step, with legal wording left to your lawyer.
For CCPA compliance, website owners covered by the law need a Do Not Sell or Share link if they sell or share personal data. Covered businesses must also honor Global Privacy Control signals as a valid opt-out. The CPRA amended the CCPA and added protections that began on January 1, 2023.
Consent setup starts at $600 for one store with a region-aware banner, Google's consent signals, and Meta pixel consent. Opt-out flows, Global Privacy Control, and gating every marketing tag bring it to $1,350. The $2,600 program adds data requests, consent records, and up to 3 stores. Your consent platform's own fee is separate.
Most setups need 1 to 2 weeks for one store with a standard set of tags. Adding opt-out flows, Global Privacy Control, and every marketing tag takes 2 to 3 weeks. Most of that time goes to testing each tag from every region you sell to before handover.
A consent banner reduces what you can track, because visitors who decline aren't followed with cookies. In the EEA, Google requires consent signals to keep measurement, personalization, and remarketing working. Set up well, Google can model conversions from people who decline, so you lose less data than a banner that blocks everything.
Set Google's consent defaults to denied before any tag loads, then update them when the visitor chooses. Consent Mode v2 uses four signals: ad_storage, analytics_storage, ad_user_data, and ad_personalization. On Meta, the pixel's revoke command pauses events until you grant consent. We test both with Tag Assistant and the network log.
The right cookie consent management platform depends on your store and ad spend. Shopify's free banner can cover stores running only Shopify apps. Stores running Google Ads in the EEA often use a CMP from Google's partner list, such as Cookiebot, CookieYes, or OneTrust. If Shopify's banner is enough for you, we'll tell you before we quote.
Usually because your consent app doesn't pass the choice to Shopify. Shopify says third-party consent tools must sync consent through its Customer Privacy API, or pixels might not fire even after a customer consents. We connect the two and test that each pixel fires once permission is given.
Rescan your site whenever you add an app or tag, and review the setup at least twice a year. New apps often add cookies without asking, and US state privacy laws keep changing. Our top plan includes a rescan after 90 days, and your tag inventory shows where each new tag belongs.
Yes, the consent platform account, tag manager container, and tag inventory stay in your name. Support runs 30 days on the banner and opt-out plans, or 60 days on the compliance program, which also includes a rescan after 90 days. Legal questions stay with your counsel, and we flag them.
Saimul IslamFounder & CEO, DeveloperLookStill have questions?
Send a message or book a call with the team.
Free 30-min callGoogle Meet
Book a call
In 30 minutes on Google Meet we walk you through how we would build it, how long it takes and what it costs. Then you get a written estimate.
Calendar not showing? Book on cal.com or send a brief.