# Our best PrestaShop modules for GDPR and cookies

> Cookie banner with real blocking and Consent Mode v2, locally hosted Google Fonts, GDPR account deletion, audit log, age and email verification: the complete selection for GDPR and privacy on PrestaShop 8 & 9.

- Page: <https://www.datafirefly.com/en/solutions/prestashop/gdpr-privacy/>
- Language: en
- Last updated: 2026-09-23
- Other languages: [fr](https://www.datafirefly.com/solutions/prestashop/rgpd-cookies/index.md), [de](https://www.datafirefly.com/de/solutions/prestashop/dsgvo-cookies/index.md), [es](https://www.datafirefly.com/es/solutions/prestashop/rgpd-cookies/index.md), [it](https://www.datafirefly.com/it/solutions/prestashop/gdpr-cookie/index.md), [pl](https://www.datafirefly.com/pl/solutions/prestashop/rodo-i-cookies/index.md), [nl](https://www.datafirefly.com/nl/solutions/prestashop/avg-cookies/index.md), [pt](https://www.datafirefly.com/pt/solutions/prestashop/rgpd-cookies/index.md)
- Index: <https://www.datafirefly.com/en/solutions/llms.txt>

## GDPR is not a banner

Most stores believe they are compliant because they have a cookie banner. But the banner is the most visible part — and the least controlled. What actually gets checked is: **do you drop trackers before consent? Is refusing as easy as accepting? Can you prove what the user clicked?**

To those three questions, the majority of European stores answer no — with a banner on the page.

## The three pillars that matter

**Consent**, technically enforced: no script may load before the click. A banner that is merely decorative while Google Analytics is already running is worse than no banner — it documents your breach.

**The rights of data subjects**: access, rectification, erasure. The right to be forgotten is not a principle, it is a button the customer must be able to press — and it must not destroy your accounting.

**Provability**: under audit, you must be able to show who did what and when. With no audit log, your statement is only an assertion.

## Consent Mode v2 is no longer optional

If you use Google Ads or GA4 in Europe, Google now requires Consent Mode v2. Without it you lose conversion data and remarketing reach. From this point on, GDPR compliance and the effectiveness of your advertising hang by the same thread.