May 28, 2026

Cookie Policy Requirements for E-Commerce Stores

E-commerce stores use analytics, advertising, and payment cookies. Learn which cookies require consent under GDPR and how to write a compliant cookie policy for your online store.

Why E-Commerce Sites Need a Cookie Policy

Online stores are among the heaviest users of tracking cookies. A typical Shopify, WooCommerce, or custom e-commerce site uses:

  • Analytics cookies (Google Analytics, Hotjar)
  • Advertising cookies (Google Ads, Facebook Pixel, TikTok Pixel)
  • Functional cookies (cart contents, login state, saved addresses)
  • Payment processor cookies (Stripe, PayPal, Klarna)
  • Affiliate tracking cookies

Under GDPR (EU), the ePrivacy Directive, and CCPA (California), you must disclose all of these in a cookie policy — and for most of them, obtain consent before setting them.

Categories of Cookies to Disclose

Essential / Strictly Necessary Cookies - Shopping cart cookies - Session cookies (keeping users logged in) - Security cookies (CSRF protection, fraud prevention) - Load balancing cookies

These do not require consent under GDPR. You must still disclose them.

Functional Cookies - Language/currency preferences - Recently viewed products - Saved wish lists

These may be considered essential if the user explicitly chose the setting; otherwise consent is required.

Analytics Cookies - Google Analytics (_ga, _gid) - Hotjar - Microsoft Clarity

These require consent under GDPR. Users must be able to opt in or out.

Advertising and Retargeting Cookies - Google Ads (conversion tracking, remarketing) - Facebook/Meta Pixel - TikTok Pixel - Pinterest Tag

These require explicit consent under GDPR. This is where most e-commerce sites face the highest compliance risk.

What Your Cookie Policy Must State

For each category of cookies:

  • Purpose (why you set the cookie)
  • Duration (session vs. persistent; specific expiration if known)
  • First-party vs. third-party
  • Who controls the cookie (your site vs. Google, Meta, etc.)

Your policy should also explain:

  • How users can manage cookies via browser settings
  • How to opt out of Google Analytics specifically
  • How to use Google's "My Ad Center" to control ad personalization
  • What happens if cookies are disabled (e.g., "Your cart will not function without essential cookies")

Generating a Cookie Policy for Your Store

TermsDock's Cookie Policy Generator lets you select which cookie categories you use. Select "Essential + analytics + advertising" for a full e-commerce cookie policy.