OCMasters GDPR & Cookie Consent

OCMasters GDPR & Cookie Consent gives OpenCart a cookie banner with Google Consent Mode v2, a record of every consent and GDPR tools. There are no external services and no monthly fees: the data stays in your store.

A compliant cookie banner

• Accept all and Necessary only are equally prominent, as the EDPB guidelines require.
• Per-category choice: functional, statistics and marketing. Toggles are off by default (opt-in).
• 5 positions (bottom left, bottom right, bottom, top, center), 3 sizes and a modal mode.
• 4 colors, corner radius and custom CSS. Text colors are chosen automatically for readability.
• A floating button lets visitors change their choice at any time. You can also add a link to your cookie policy.
• Texts in every language, with ready-made English and Bulgarian texts.
• Works on mobile and with the keyboard, and respects the reduced-motion setting for animations.

Google Consent Mode v2

• Everything is denied by default, at the top of <head>, before any Google tag.
• Works with Google Analytics 4, Google Ads and Google Tag Manager.
• Supports ads_data_redaction and url_passthrough.
• When the visitor has already chosen, the update is sent from the server with no delay.
• You choose Advanced or Basic Consent Mode.

Scripts wait for consent

• Facebook Pixel, TikTok, LinkedIn, Microsoft Clarity, Hotjar and others are detected automatically and do not load without consent.
• Add your own detection rules, or mark scripts manually with type="text/plain" data-ocm-consent="marketing".
• After consent the scripts start right away, without a page reload.
• Third-party cookies (_ga, _fbp and others) are deleted when consent is withdrawn.

Proof of every consent

• Cookie consents: an anonymous ID, the per-category choice, the date and the IP without its last byte.
• Accepted policies: at registration and checkout the module keeps a copy of the exact text the customer accepted, linked to the order number.
• Newsletter: a history of subscriptions and unsubscriptions, with optional double opt-in by e-mail.
• Filter by e-mail and dates, and export to CSV.

Digital content consent

For stores selling downloads, licences or software, a required checkbox at checkout records two things: the customer agrees that supply starts immediately, and acknowledges losing the right of withdrawal (Art. 16(m) of Directive 2011/83/EU). Without this consent, the 14-day right of withdrawal remains even after the download.

More GDPR tools

• Required privacy checkbox on the contact form.
• Customers can download all their data instantly (JSON): account, addresses, orders and consents.
• Data breach notification: send to all customers in batches, with a history.
• Dashboard with statistics and a compliance checklist.
• Works with the built-in GDPR feature of OpenCart 4 (export and deletion requests).

Why OCMasters GDPR

• No subscription: one payment and no visitor limits, unlike Cookiebot or CookieYes.
• No external requests: the banner loads from your own server and does not slow the site down.
• Clean code: no changes to OpenCart core files, events only.
• Tested with the default theme and Journal 3.

The module covers the technical side. The content of your policies remains the merchant's responsibility.