PrestaShop Marketing & Promotions

dfsavecart – Magic link cart save for PrestaShop 8 & 9

Your customers always come back to their cart.

Cart save via email with magic link: the simplest way to reduce cart abandonment on PrestaShop.

PrestaShop 8 & 9 PHP 8.1+ GDPR Multilingual FR/EN/ES/DE Encrypted token
  • 30-day refund
  • 12 months updates
  • 24h support
www.datafirefly.com/en/
DataFirefly Save Cart For Later Prestashop Module
v1.0.0 · updated 2026-05-15
What it does

The short version.

01

Secure magic link

256-bit token sent by email, hashed in the database. No password to remember, no leak possible in case of database theft.

02

Exact restoration

Products, quantities, language and currency are restored identically. Automatic unavailability detection and stock adjustment.

03

Multilingual emails ready

HTML and text templates included in French, English, Spanish and German. Subject customizable per language from the back office.

04

GDPR by design

Explicit consent checkbox, hashed rate-limit email, automatic expired link purge. No superfluous data retained.

The long version

Everything you'd want to know before you install.

A detailed look at how dfsavecart - Magic link cart save for PrestaShop 8 & 9 works, why we built it the way we did, and the thinking behind the features above.

§ 01

The problem: 70 percent of carts are abandoned

Most carts never convert into orders. Distraction, price comparison, hesitation, lack of time, device switching: the reasons are many. When a visitor leaves your store, you have no simple way to bring them back to their exact cart. Automatic recovery emails require a customer account. Cookies disappear when the browser closes or when the device changes. And not everyone is willing to create an account just to buy.

§ 02

The solution: one button, one email, one link

dfsavecart adds a discreet inset on your cart page. The visitor enters their email, receives a secure link, and can restore their exact cart in one click, later, from any device. No account creation. No friction. No data loss. Ideal for B2B stores with hierarchical validation, evaluation carts, considered purchases, or simply to respect each customer's pace.

§ 03

Bank-grade security

The magic link is a 256-bit token generated by random_bytes, PHP's cryptographically secure generator. Only its SHA-256 fingerprint is stored in the database. If your database is compromised, the links become useless. CSRF protection secures the AJAX save endpoint, and a rate-limit by anonymized email prevents spam. The token format is strictly validated server-side.

§ 04

Smart, not mechanical, restoration

The module does not just copy products back into the cart: it checks each line. Disabled or deleted product? It is skipped and the customer is notified. Insufficient stock? The quantity is adjusted to the maximum available. Original language and currency? Preserved. The customer finds a coherent experience, even weeks later.

§ 05

GDPR by design

Everything is designed around the European regulation. Explicit consent checkbox before sending, configurable. The email is not stored in clear text for rate-limiting (only a salted hash is kept). Expired links are purged automatically via a cron hook, or manually from the back office. No tracking pixel, no third-party service, everything stays inside your PrestaShop.

§ 06

Statistics and administration

The back office shows in real time the number of saved, active, expired and restored carts. A purge button cleans up obsolete entries manually. The email subject is fully customizable per language, with dynamic variables. The entire configuration fits on a single page.

§ 07

Compatible with PrestaShop 8 and 9

The module was designed from the start for both major versions. The composer.json file is provided for PrestaShop 9 with PSR-4 autoload. The hooks used are those that remain supported in both versions. No custom Symfony service required. Installation takes less than a minute via the native module manager.