Checkout tracking that follows the visitor’s consent choice.
Shopify keeps checkout tracking separate from a site’s consent banner and Google Tag Manager. I connected the two and tested what happens at checkout when a visitor accepts or declines.
- Client
- A professional fitness education business
- Service
- Consent management
- Systems
- Shopify, Google Tag Manager, GA4, a consent platform, ad and attribution pixels
- When
- July to August 2026
How checkout was tested
Five consent categories, each tested with consent accepted and declined. Each test ran a purchase through checkout and checked which tags fired.
| Consent category | Accepted | Declined |
|---|---|---|
| Analytics | Tested | Tested |
| Advertising | Tested | Tested |
| Ad personalization | Tested | Tested |
| Personalization | Tested | Tested |
| Functionality | Tested | Tested |
Checked on every test: purchase events for GA4 and two marketing platforms, on the thank-you and order confirmation pages.
The question
Shopify runs checkout tracking scripts in a sandbox. That protects the checkout, but the consent banner and Tag Manager can’t see what the visitor chose there. The team needed purchase tracking that respected those choices and still reported purchases correctly.
What I did
- Built a bridge that passes Shopify’s consent signals from checkout into Google Tag Manager.
- Mapped five consent categories to the tags that depend on them.
- Tested checkout with consent accepted and declined, and checked purchase events for GA4 and two marketing platforms on the thank-you and order confirmation pages.
- Confirmed purchases carried the transaction details the reports need, and removed duplicate and leftover test tags.
- Documented the setup and the observed behavior, with screenshots, for the client’s internal and legal review.
What it showed, and what stayed open
What it showed
- The consent bridge was in place and tested.
- On the checkout flows tested, purchase events arrived with their transaction details in each consent state tested.
- The legal team got evidence of what actually happens at checkout, alongside a description of the setup.
What stayed open
- Legal decisions stayed with the client’s counsel. This work documented technical behavior and isn’t a legal approval.
- Testing covered the flows and consent states above. Other devices, regions and future checkout versions weren’t part of it.
- Some inconsistencies in the consent banner itself were still being worked on.
Does your tracking follow the banner?
Tell me your website platform, your consent tool and which tags you’re unsure about.