Built for Shopify stores

Cookie consent that actually blocks tracking

Noticeify stops advertising pixels, analytics scripts, and third-party trackers from firing until your visitor says yes — then proves it with a timestamped audit trail.

★ CCPA compliant ★ GDPR & US State Laws ★ Google Consent Mode v2 ★ Free plan
100%
Pixel blocking before consent
<1KB
Consent loader script size
25+
Pre-classified vendors
3-phase
Pre-consent scanner
Core features
Everything you need — plus pixel blocking that actually works

Most consent platforms display a banner but don't block anything. Noticeify intercepts scripts at the loader level before any tag fires.

Cookie consent banner

GDPR, CCPA, and US State Laws. Geo-targeted, mobile responsive, accessible. No dark patterns.

Pre-consent pixel blocking

Meta Pixel, Google Ads, TikTok, Klaviyo, and 20+ vendors are blocked at the script level until consent is given.

Consent log & audit trail

Every event timestamped with banner version, category choices, and GPC signal. Export as CSV or PDF.

Reports & analytics

Consent trends, acceptance rates by category, pageview data, and GPC detection rates — all in one dashboard.

Automated scanner

Weekly scans detect new pixels firing before consent. Critical findings trigger instant Slack alerts.

Google Consent Mode v2

All signals denied before GTM loads. Updates granularly after user consent — preserving conversion modeling.

Geo-targeting

Show the banner only to visitors in specific states or countries. California, Florida, EU, or worldwide.

Healthcare-adjacent mode

Stricter controls for prescription, sleep, and vision products. Marketing pixels blocked on sensitive pages.

You own your data

Consent records live in your own Supabase database. No vendor lock-in. Export anytime, cancel anytime.

Banner preview
What your visitors see

Loads before any non-essential script. Reject and Accept are equal visual weight.

GDPR opt-in and CCPA opt-out modes
Keyboard navigable, screen reader compatible
GPC auto-detection and denial
Shadow DOM — zero style conflicts with your theme
Your privacy choices
We use cookies and similar technologies to operate this website, improve performance, and support advertising. Non-essential cookies will not be activated unless you give consent.
Privacy Policy·Cookie Policy·Your Privacy Choices
Comparison
Noticeify vs CookieYes vs OneTrust
FeatureNoticeifyCookieYes Ultimate ($39+/mo)OneTrust
Cookie consent bannerYesYesYes
Pre-consent pixel blockingScript-levelPartialPartial
3-phase pre-consent scannerYesBasic onlyYes
Google Consent Mode v2YesYesYes
GPC signal detectionYesYesYes
Healthcare-adjacent modeYesNoNo
You own the consent dataYes — your DBNoNo
Shopify nativeYesYesComplex
Free planYesLimitedNo
Ready to stop pre-consent tracking?

Add one script tag to your Shopify theme.liquid and Noticeify handles the rest. Free plan — no credit card required.

Overview
Consent
Tools
Settings

ocusleep.com

Status: Active · Last scan: Apr 29 · Next: May 6
Meta Pixel appears to be firing before consent on /checkout. Immediate review recommended.
54%
Acceptance rate
31%
Rejected non-essential
8.4%
GPC detected
2
Pre-consent scripts
Consent trends — 7 days
1,368 consents
Accepted 54%
Rejected 31%
Partial 15%
Pageviews — 7 days
118,066
Apr252627282930May1
Recent consent events
elyVzNpS2…United States/checkoutAcceptedMay 1, 01:20
QnJFZGE2R…United States/AcceptedMay 1, 01:08
R2IZYWlKT…United States/sleep-glassesRejectedMay 1, 01:06
S0djNmZOQ…United States/cartAcceptedMay 1, 01:02
bE5MVnl5Y…United States/checkoutRejectedMay 1, 00:59

Reports

Consent trends — 7 days
1,368 consents
Accepted — 742
Rejected — 424
Partial — 202
Pageviews — Apr 24–30
118,066
Apr252627282930May1
Consent by category
Analytics
61%
Marketing
48%
Personalization
44%
Support & Chat
39%
Embedded Media
35%

Cookie Banner

Customise
Live preview
Your privacy choices
Non-essential cookies will not be activated unless you give consent.

Preference Centre

Manage your privacy preferences
ocusleep.com · Banner v1.0
Strictly necessary
Cart, checkout, auth, payment processing.
Session cookies, Stripe, Signifyd
Always on
Functional
Remembers preferences and settings.
Analytics
Helps us understand how visitors use the site.
Google Analytics 4, Microsoft Clarity
Marketing & advertising
Ad measurement, retargeting, and audience building.
Meta Pixel, Google Ads, Microsoft Ads, Klaviyo, TikTok
Support & chat
Live chat widget.
Zendesk Chat
Embedded media
YouTube and Vimeo players.

Cookie Manager

Last scan: Apr 29 · Next: May 6

1 cookie found in the wrong category. Review recommended.
Necessary cookies
Cookie IDDomainDurationPurpose
ocusleep_sessionocusleep.com3 monthsShopping cart and session
XSRF-TOKENocusleep.comSessionCSRF protection
nfy_consentocusleep.com1 yearNoticeify consent preferences
_shopify_yocusleep.com1 yearShopify analytics
_shopify_socusleep.com30 minShopify session tracking
cartocusleep.com2 weeksCart contents

Consent Log

Proof of consent for compliance audit.

Consent IDCountryPageStatusDate/Time UTCProof
elyVzNpS2tNMV…United States/checkoutAcceptedMay 1, 01:20:34↗
QnJFZGE2R3pa…United States/AcceptedMay 1, 01:08:45↗
R2IZYWlKTlRL…United States/sleep-glassesRejectedMay 1, 01:06:04↗
S0djNmZOQXdz…United States/cartAcceptedMay 1, 01:02:31↗
bE5MVnl5Yk81…United States/checkoutRejectedMay 1, 00:59:16↗
RlRnV1A3SEtT…United States/AcceptedMay 1, 00:51:55↗
cXAyRzBJQXVy…United States/product/sleep-maskRejectedMay 1, 00:49:19↗
Ykk0czZxV0lV…United States/framesRejectedMay 1, 00:35:51↗
WkRNSHV1OUVX…United States/checkoutRejectedMay 1, 00:34:56↗
eFVRRUgxSEpj…United States/RejectedMay 1, 00:32:00↗
Showing 10 of 1,368 · Export all CSV · Pages: 1 2 3 4…

Pre-consent Scanner

Apr 29, 2026 · 47 pages · ocusleep.com

47
Pages crawled
11
Third-party domains
2
Pre-consent fires
1
Unclassified
Critical
Meta Pixel firing before affirmative consent
Network requests to connect.facebook.net detected before consent on /checkout and /cart.
connect.facebook.net/en_US/fbevents.js · /checkout, /cart
High
Klaviyo fires via GTM custom HTML tag without consent gate
Move to Noticeify vendor registry and remove direct GTM Custom HTML tag.
static.klaviyo.com/onsite/js/klaviyo.js · GTM-NQB7D7L
Moderate
Zendesk chat loads before user opens chat
Correctly blocked in vendor registry — confirm GTM trigger does not bypass gate.
static.zdassets.com/ekr/snippet.js · 39 of 47 pages
Low
1 unclassified third-party script
cdn.justuno.com is not in the vendor registry. Classify and assign a consent category.
cdn.justuno.com/visitorv2.js · /frames, /sunglasses

Vendor Registry

All third-party scripts must be classified before they can load.

VendorCategoryDomainMay share dataStatus
Google Analytics 4Analyticsgoogletagmanager.comNoGated
Google Tag ManagerEssentialgoogletagmanager.comNoActive
Meta PixelMarketingconnect.facebook.netYes⚠ Pre-consent
Microsoft AdsMarketingbat.bing.comYesGated
KlaviyoMarketingstatic.klaviyo.comYes⚠ Review
TikTok PixelMarketinganalytics.tiktok.comYesGated
Zendesk ChatSupportstatic.zdassets.comNoGated
JustunoPersonalizationcdn.justuno.comNoUnclassified

Geo-targeting

Banner display
Show the banner only to visitors in selected locations.
Currently targeting
California ×Florida ×Texas ×Virginia ×Colorado ×Connecticut ×Montana ×Oregon ×
Support IAB TCF v2.3
For EU GDPR compliance with advertising partners.
Enable Google Consent Mode
Passes signals to Google tags via Consent Mode v2.

Google Consent Mode v2

GCM configured correctly on ocusleep.com. No errors detected. Last checked: Apr 29, 2026
Current signal state (default — before consent)
ad_storage
denied
analytics_storage
granted
ad_user_data
denied
ad_personalization
denied
functionality_storage
granted
personalization_storage
denied
security_storage
granted
wait_for_update
500ms
GTM container — GTM-NQB7D7L
Allow Google tags to fire before consent
Recommended: disabled. Tags only fire after consent.
URL passthrough
Cookieless conversion modeling in denied state.
Microsoft consent mode
Microsoft UET Consent Mode
Controls Microsoft Advertising storage based on user consent.
Microsoft Clarity Consent API
Communicates consent to Clarity before tracking begins.

Advanced Settings

Banner settings
Cookie banner status
Active — live on ocusleep.com
Banner display
Enable or disable without removing the script tag.
Disable on specific pages
URLs where the banner should not appear.
Consent settings
Consent log
Store all consent records for compliance audit trail.
Healthcare-adjacent mode
Stricter pixel controls on health and prescription pages.
GPC signal detection
Auto-deny marketing consent for GPC-enabled browsers.
Log retention period
Scan settings
Automated weekly scan
GitHub Actions runs every Monday 2am UTC.
Critical finding Slack alerts
Alert when a pre-consent pixel is newly detected.

Installation — ocusleep.com (Shopify)

✓
Add the script tag to theme.liquid

Online Store → Themes → Edit code → layout/theme.liquid. Paste immediately after opening <head>.

<script
  src="https://noticeify.pages.dev/core/consent-loader.js"
  data-client-id="nfy_ocusleep_prod"
  data-domain="ocusleep.com"
  async></script>
2
Add GTM Consent Initialization tag

In GTM-NQB7D7L: Custom HTML tag on "Consent Initialization — All Pages".

<script>
window.dataLayer=window.dataLayer||[];
function gtag(){dataLayer.push(arguments);}
gtag('consent','default',{'ad_storage':'denied','analytics_storage':'denied','ad_user_data':'denied','ad_personalization':'denied','wait_for_update':500});
</script>
3
Add Your Privacy Choices link to footer

Required by CCPA. Add to Shopify footer section.

<a href="#" onclick="window.Noticeify.openPreferences();return false">Your Privacy Choices</a>

Get started in 2 minutes

Free plan — no credit card required.

By continuing you agree to our Terms and Privacy Policy.

Already have an account? Sign in

Features
Everything you need for privacy compliance

Built for Shopify and e-commerce. Makes compliance easier without slowing down your store.

CCPA, GDPR & US State Laws

Covers all US state privacy laws including California, Florida, Texas, Virginia, Colorado, and more.

Script-level blocking

Non-essential scripts are never injected into the DOM before consent. Not hidden — genuinely blocked.

Weekly automated scanner

Runs every Monday via GitHub Actions. Detects new pixels added to GTM or theme.liquid since the last scan.

GPC signal detection

Detects navigator.globalPrivacyControl automatically and denies marketing consent — no configuration needed.

Legal-ready exports

CSV and PDF exports with timestamp, banner version, policy version, and proof of consent per record.

You own your data

Consent records live in your own Supabase database. Export anytime. No vendor lock-in. Cancel anytime.

Pricing
Simple, transparent pricing

One platform, multiple Shopify stores. No per-pageview charges.

Starter
$0/mo
One website. Perfect for getting started.
  • 1 website
  • Banner + preference center
  • Consent logging (365 days)
  • GPC detection
  • Google Consent Mode v2
  • Shopify native install
Most popular
Business
$49/mo
Up to 5 websites with full scanner and exports.
  • 5 websites
  • Weekly automated scanner
  • CSV + PDF exports
  • Slack critical alerts
  • Healthcare-adjacent mode
  • Geo-targeting (state/country)
  • Microsoft Consent Mode
Agency
$149/mo
Unlimited websites. White-label ready.
  • Unlimited websites
  • White-label banner
  • Legal-ready PDF reports
  • Priority support
  • Multi-team access
  • API access
Noticeify vs CookieYes Ultimate ($39+/mo)

CookieYes Ultimate doesn't give you ownership of your consent data, doesn't have a real pre-consent pixel scanner, and doesn't have healthcare-adjacent mode. Noticeify Business at $49/month includes all of this — and your consent records live in your own database.

Documentation
Quick start guide

Get Noticeify running on your Shopify store in under 10 minutes.

1
Open theme.liquid

Online Store → Themes → Actions → Edit code → layout/theme.liquid

2
Add Noticeify as first script in <head>
<script
  src="https://noticeify.pages.dev/core/consent-loader.js"
  data-client-id="YOUR_CLIENT_ID"
  data-domain="yourstore.com"
  async></script>
3
GTM must load AFTER Noticeify

The Noticeify script must appear above your GTM snippet so Consent Mode defaults are set before any GTM tags fire.

4
Add Your Privacy Choices link to footer
<a href="#" onclick="window.Noticeify.openPreferences();return false">Your Privacy Choices</a>

Create a Custom HTML tag firing on Consent Initialization — All Pages:

<script>
window.dataLayer=window.dataLayer||[];
function gtag(){dataLayer.push(arguments);}
gtag('consent','default',{'ad_storage':'denied','analytics_storage':'denied','ad_user_data':'denied','ad_personalization':'denied','wait_for_update':500});
gtag('set','url_passthrough',true);
</script>

For each marketing Custom HTML tag, add a trigger condition: CG - Has Marketing Consent equals true. Full guide in the repo at gtm/gtm-consent-config.js.

// Check consent
window.Noticeify.hasConsent('marketing'); // boolean

// Get full consent record
window.Noticeify.getConsent();

// Open preference center
window.Noticeify.openPreferences();

// React to changes
window.Noticeify.onConsentChange(({ categories }) => {
  if (categories?.analytics) initGA4();
  if (categories?.marketing) loadMetaPixel();
});

// Withdraw consent
window.Noticeify.withdrawConsent();

The scanner runs automatically every Monday. To trigger manually:

# Trigger via API
curl -X POST https://noticeify-w39k.vercel.app/api/v1/scanner/run/CLIENT_ID \
  -H "Authorization: Bearer YOUR_KEY"

Or go to GitHub → Actions → ConsentGuard Scanner → Run workflow. Results post to the dashboard and store in Supabase.

Free tool
Pre-consent pixel scanner

Enter any website URL to scan for third-party scripts that fire before the user gives consent.

Non-destructive and read-only. We load your page in a clean browser with no cookies.

Sample results — ocusleep.com
Critical
Meta Pixel firing before affirmative consent
Network requests to connect.facebook.net detected before consent on /checkout and /cart.
connect.facebook.net/en_US/fbevents.js
High
Klaviyo fires via GTM custom HTML without consent gate
Loads via GTM-NQB7D7L without a Noticeify consent trigger condition.
static.klaviyo.com/onsite/js/klaviyo.js
Low
All other vendors correctly gated
Google Analytics, Microsoft Ads, TikTok Pixel, Zendesk — all blocked before consent.
9 vendors · 47 pages · GTM-NQB7D7L