Use and Features
Note
Before using this plugin, please read the explanation for the use of this plugin in:
GDPR standardizes data protection law across all 28 EU countries and imposes strict new rules on controlling and processing personally identifiable information (PII). From 25 May 2018 every website collecting data from EU citizens must need the GDPR requirements.
Use and its Features are as follows:
In your Shopify admin panel, navigate to Apps > Ultimate GDPR & CCPA and click on the app name:
You will find there a sidebar menu visible on the left hand of the page (1). From there admin can accessed all of the GDPR & CPPA Toolkit’s options and functionalities.
Home
In this section all the detected cookies are saved.
Cookies
Cookies section contain options that will:
- find all the cookies used in the store (Scan for cookies),
- gather them in a groups (Cookie manager)
- create a cookie popup (Cookie consent) which will let the visitors of the website to decide which cookies they will allow.
Cookie manager
In this section all the detected cookies are saved. This section also allows to add new cookies manually and Import/export content for this section.
It also contains:
Import cookies - Allows to add cookies exported from a different store
Export - Exporting cookies will can be use in app installed on a different store
More actions - In this drop-down menu we provide options like:
Note
Cookie scanner settings feature is available only if the Pro plan is choose. More information about the available billing plans can be found in the Billings plans section.
Scan for cookies - This option will allow to Scan the store for the cookies
Example of a cookie item
You can change the cookies’s details here. You can also make a customized cookie to be blocked from your site.
Basic information:
- Title - Used only for admin user to navigate through services.
- Purpose - Purpose of the cookie.
Scripts that create cookies:
Cookies to block:
- Cookie names - Comma separated names of cookies which are to be blocked. It’s important use actual name of cookie, not name of service.
Properties:
Level - Assign cookie to a level on which it will be allowed on site.
Domain - select the domain to which the cookie belongs
Type - Pick the group the cookies belong.
Can be blocked - Option to activate or deactivate. Only services which are active, are being blocked.
Note
Only services which are active, are being blocked. Unchecking this checkbox makes the plugin ignore this service.
What Cookies are used on your website?
You can render the table with all cookies collected by your website with simple shortcode:
{{ultimate_gdpr_cookie_list}}
Active cookies will be displayed in a table, like the following:
Note
Your website should be publicly accessible to correctly detect all cookies that are used on it
Cookie consent
- Download consent log - option which allow to download the consent log data stored on website.
Block cookies and analytics
Option from this section allow to block cookies and analytics until a visitor gives consent to store cookies.
- Block selected cookies and scripts until consent is given - Cookies with Can be blocked option checked will be blocked until visitor will not give the consent
- Block analytics until consent is given - Google Analytics, Facebook Pixel, Shopify Analytics, HotJar and Extreme DM tracking will be blocked
- Enable Google Analytics anonymized IP tracking - This will work only when analytics is allowed
Cookie whitelist
Add cookies that will never be blocked. Make sure you have added ct-ultimate-gdpr-cookie and ct-ultimate-gdpr-cookie-level to store cookie consent preferences. Otherwise the app might not work correctly on the store site.
Consent logging
Here admin can decide what will happen if visitor didn’t accepted privacy policy.
- Log their IP address - IP address will be logged
- Log their user agent - The User-Agent request header contains a characteristic string that allows the network protocol peers to identify the application type, operating system, software vendor or software version of the requesting user
Cookie consent pop-up
Select who will see the pop-up, where it will be displayed and when it will appear again after consent is given.
Customize (button) - allow to customize the way how the consent popup will look on the site
Visitors to be asked for consent - from the list admin can choose what type of visitors will see the consent pop-up
- Show pop-up to and block cookies for visitors from the EU only - this option mean that only visitors from EU will see the pop-up an the cookies will be blocked. For other users this functionality won’t be active.
- Show pop-up to and block cookies for all visitors - this will allow to show the pop-up and block the cookies for all visitors no matter from where they are
- Don’t show pop-up to anyone (blocking cookies is still possible as per other settings) - option won’t be active.
Pages to display pop-up - here admin can set on which pages the mentioned above pop-up will be visible
- All pages - visible on all pages created.
- Selected page only - admin will get here an option on which pages the pop-up will be seen.
Default cookie consent level - The level which will be set after visitor clicks the “Accept” button in the pop-up.
Reload page after consent is given - After accepting consent or changing the level (and saving it) the page will auto reload. If this option won’t be choose, the saved changes won’t be added on page until visitor won’t reload the page manually.
Consent expiration time - The time until visitors are asked for consent again.
Cookie settings pop-up
- Customize (button) - allow to customize the way how the consent popup will look on the site
- Enable cookie settings pop-up - checking this option will provide a 3rd button to the consent pop-up
- Display floating button - checking this option will add a floating button that will be added after accepting the cookie consent via Cookie consent pop-up
- Reload page after settings are saved - After changing the level (and saving it) the page will auto reload. If this option won’t be choose, the saved changes won’t be added on page until visitor won’t reload the page manually.
Requests
This section contain all the request send by the visitors using the GDPR & CPPA Toolkit forms.
In the Settings we provide an option:
- Data access - this option based on the fact if it is checked or not will remove empty records from the data file sent to user
In the section below settings option the app store all the messages received from the GDPR & CCPA Toolkit forms.
The table contains of messages from:
- All -
- Data access -
- Data erasure -
- Data rectification -
- Disable accounts -
Example of the request message
(example of the table)
(Example of the inside of a message)
Request form
Content
Terms of service
Here can be set a page as the Terms of service page, set conditions, and set the page where to redirect.
Page
- Terms of service page - here can be choose where the Terms of service page is located.
- Current terms version - if you change the version, visitors will have to give their consent again.
Force redirect
- Automatically redirect users to policy page - Enable automatic redirecting users to the policy page until they accept it.
- User agents (e.g. bots) to not be redirected - Add agents which won’t be redirected to the Term of service page
Consent
- Accept button style - choose one of the available styles for the {{ultimate_gdpr_terms_accept}} button.
- Users required to accept terms of service - choose user’s type which will need to accept terms of service
- Page to redirect to after terms are accepted - set the page to which user will be redirected after accepting terms of service
- Consent expiration time - The time (in days) until visitors are asked for consent again.
Additional options
- Text to be converted to link - Convert any text within your store to a link to the Terms of service page.
Note
If Terms of service page will not be using accept button {{ultimate_gdpr_terms_accept}}, force redirect will never be lifted.
Privacy policy
Here can be set a page as the Privacy Policy page, set conditions, and set the page where to redirect.
|
Page
- Privacy policy page - here can be choose where the Privacy policy page is located.
- Current terms version - if you change the version, visitors will have to give their consent again.
Force redirect
- Automatically redirect users to policy page - Enable automatic redirecting users to the policy page until they accept it.
- Redirect to policy page first - Make this redirect a priority if multiple redirects are set
- User agents (e.g. bots) to not be redirected - Add agents which won’t be redirected to the Term of service page
Consent
- Accept button style - choose one of the available styles for the {{ultimate_gdpr_privacy_accept}} button.
- Users required to accept privacy policy - choose user’s type which will need to accept terms of service
- Page to redirect to after policy is accepted - set the page to which user will be redirected after accepting terms of service
- Consent expiration time - The time (in days) until visitors are asked for consent again.
Additional options
- Text to be converted to link - Convert any text within your store to a link to the Privacy policy page.
Note
If Privacy policy page will not be using accept button {{ultimate_gdpr_privacy_accept}}, force redirect will never be lifted.
Age verification
Age Verification settings
Age verification popup comes with number of predefined skins, we can also set skin to “Custom” and use custom color and styling.
Customize (button) - After clicking it user will be forwarded to Customize age verification pop-up section
Visitors to be asked for consent - Choose if and when users will see the pop-up
- Visitors from California only - Age verification pop-up will be visible only for users from California
- All visitors - Age verification pop-up will be visible for all users
- Don’t show pop-up to anyone - Age verification will be hidden
Pages to display pop-up - Choose for which pages the pop-up will be visible
- All pages
- Selected pages only
Verification expiration time - The time until visitors are asked for verification again.
Age restriction limit - The age which customer needs to be to proceed
Choose the date selected by default - Choose the date selected by default that will be show in the pop-up
Customize age verification pop-up
Content:
Buttons:
- Text - Set text for the submit button
Appearance
Skin - Choose one of the pop-up’s skin which will fit your website the best (there is 16 skins to chose from)
Custom
Red Velvet
Peppermints
Mint Chocolate
Classic createIT
Blueberry with Orange
Blue Velvet
Chocolate Matcha
Classic Dark
Classic Light
Oreo
Blue Shortbread
Light Mint
Blue Cupcake
Matcha
Thin Mint
Position - Choose the possible position from 7 options (Top left, Top gull width, Top right, Bottom left, Bottom full width, Bottom right)
Distance from edge of page - Set the distance from the edge in pixels
Note
This option work only for the Skin style: Custom which can be set in the Appearance of the Customize age verification pop-up section
- Header color - Choose color of the header of the pop-up
- Text color - Choose color of the text of the pop-up
- Background color - Choose background color for the pop-up
- Background image URL - Add background image which will be used for the pop-up
- Shape - Choose shape of the pop-up from available options (Rectangular, Rounded corner 5px, Rounded corners 25px)
- Text color - Choose color of the text for the submit button
- Background color - Choose background color for the submit button
- Border color - Choose color of the border for the submit button
- Border width - Choose width of the border for the submit button
- Shape - Choose shape of the submit button from available options (Pill shape, Rounded corners, Rectangular)
- Text color - Choose color of the text in the date inputs
- Background color - Choose background color of the date inputs
- Border color - Choose color of the border for the date inputs
- Border width - Choose width of the border for the date inputs
- Shape - Choose shape of the date inputs from available options (Pill shape, Rounded corners, Rectangular)
Custom CSS - Add custom styling for the Age verification popup
Shortcodes
Settings
After clicking the Settings link with a cog icon admin will be forwarded to a settings section which are used for the shortcodes the app is using.
Privacy settings widget:
- Widget skin - choose one of the available skins for the Privacy settings widget (Default, Simple, Rounded, Tabbed)
- Enable reCAPTCHA - when choose will protect forms within the widget from spam and abuse
Content protection - this option allow to customize message which will be used for the {{ultimate_gdpr_protection level=4}} Hidden content {{/ultimate_gdpr_protection}} shortcode
Privacy center - provide 3 options to customize the privacy center created via {{ultimate_gdpr_center}} shortcode:
- Page with ‘my account’ GDPR form - to this page user will be forwarded after clicking Data Access Url, Forget Me URL, Forget Me URL which are part of the GDPR form
- Contact page - user will be forwarded to this page after clicking Contact page
- Icon color - choose the color which will be used for the icons
Cookie list - provide option which will allow to display all cookies separately (if checked)
Shortcodes
Below the Settings are presented all the available GDPR & CCPA Toolkit’s shortcodes which can be used on the store pages.
- {{ultimate_gdpr_terms_accept}} - will add Terms and Condition button to the page
- {{ultimate_gdpr_privacy_accept}} - will add Privacy Policy button to the page
- {{ultimate_gdpr_cookie_list}} - will add Privacy Policy button to the page
- {{ultimate_gdpr_cookie_modal}} Change cookie settings {{/ultimate_gdpr_cookie_modal}} - allows you to create a link for the Advance cookie settings. You can add it anywhere on your site.
- {{ultimate_gdpr_protection level=4}} Hidden content {{/ultimate_gdpr_protection}} - it hide any content in the shortcode unless the cookie group chosen by the user of the site will meet the requirements.
- {{ultimate_gdpr_center}} - will create a page that have the Privacy tools in the site.
Notifications
Here admin can edit content of all notifications which our app will send to the visitors and subscribers
Notifications recipient
- Email address - If the email address for the request is different than the one used by the store by default, it can be added here
Visitor notifications
Request - list of notifications templates that will be send automatically to the visitor. Each of the template can be edit after clicking on it.
- Email confirmation
- Data erasure
- Data access
- Unsubscribe
- Disable account
- Do not sell data
Data breach - Sent to all the customers and visitors when a data breach happens.
- Data breach - allow to edit the template which will be received by the visitors.
Request notifications
- New request - Sent to request notification subscribers when a visitor puts in a request.
Data Breach
Here admin will find an option to send a notifications to all of the user of the store.
This section contain options to:
- Send notification - Will automatically send notification to all of the users which personal data might be exposure
- Customize notification - Allow admin of the store to modify the content of the message
Settings
Settings contain 3 options:
- Export settings - Option allowing to Export all of the app’s settings. This way the same settings can be used on multiple sites.
- Import settings - Allow to export GDPR & CPPA Toolkit’s settings from a different website
- Reset settings - Will reset back all the changed options to default.
Add to Page
These are samples on how to add the Ultimate GDPR & CCPA features and shortcodes.
Cookie Consent
Note
The plugin can check if the user viewing your site is from European Union by going to Cookies > Cookie consent and activating/checking Show pop-up to and block cookies for visitors from the EU only.
Users that are not from the European Union will not be able to see Ultimate GDPR & CCPA features.
To add a cookie consent on the site, in your dashboard go to Ultimate GDPR & CCPA > Cookie Consent.
You will be redirected to the Cookie consent settings.
In Select pages to display cookie notice on, choose a page on your site that you will like and click theo show the cookie notice.
Note
Display cookie notice on all pages if activated, will let you show the cookie notice in all pages until it is accepted.
Add the needed information and details. For more details on Cookie consent settings, click here.
Note
Admin can download consent logs for admin to know what consent the user gave for Cookie Consent. You can find the download button at the bottom of Ultimate GDPR & CCPA > Cookie Consent.
Terms of service
To add Terms of service on the store, create a page where all the terms of service are written. To achieve it please follow steps below:
Step 1. Log into Shopify account. Go to the side menu of the Shopify dashboard and choose Online Store.
Step 2. On the Pages page, select Add page.
Step 3. On the Add page page, enter “Terms of service” in the Title (1) field, then paste your Terms of service into the Content (2) field.
Step 4. To add the button to accept the terms of service, add the shortcode: {{ultimate_gdpr_terms_accept}} and click Save.
Step 5. Once your Terms of service page is added to your Shopify dashboard, please navigate to Ultimate GDPR & CPPA Toolkit by Apps > Ultimate GDPR & CPPA and click on the app name. This way you will be redirected to it’s settings.
Step 6. From there go to Content > Terms of service. Here can be set a page as the Terms of service page, conditions, and the page where to redirect after consent is given.
Step 7. In Page section choose previously created page in the Existing page
Add the needed information and details. For more details on Terms of service, click here.
Privacy Policy
To add Privacy Policy on the store, create a page where all the privacy policy are written. To achieve it please follow steps below:
Step 1. Log into Shopify account. On the side menu of the Shopify dashboard and choose Online Store. Click it.
Step 2. On the Pages page, select Add page.
Step 3. On the Add page page, enter “Privacy Policy” in the Title (1) field, then paste your Privacy Policy into the Content (2) field.
Step 4. To add the button to accept the privacy policy, add the shortcode: {{ultimate_gdpr_privacy_accept}} and click Save.
Step 5. Once your Privacy Policy page is added to your Shopify dashboard, please navigate to Ultimate GDPR & CPPA Toolkit by Apps > Ultimate GDPR & CPPA and click on the app name. This way you will be redirected to it’s settings.
Step 6. From there go to Content > Privacy policy. Here can be set a page as the Privacy Policy page, conditions, and the page where to redirect after consent is given.
Step 7. In Page section choose previously created page in the Existing page
Add the needed information and details. For more details on Privacy Policy, click here.
Data erasure
When activating the Ultimate GDPR & CPPA Toolkit our App will provide a ready to use Request data [Ultimate GDPR & CCPA] page. The page can be access by going to Shopify dashboard and from there navigating to Online Store > Pages. This page contain not only Data erasure form but also:
- Data access
- Data rectification
- Restrict processing
Frontend view:
|
Email confirmation
By going to to Notifications > Visitor notifications and clicking the Email confirmation link admin will be forwarded to Email confirmation section. Created there template will be send automatically to the user after sending request for:
using the Request data [Ultimate GDPR & CCPA] page.
Template contains (1):
- Email subject - this will be header of the sended email reply
- Email body - body of the email
- Email confirmation target page URL - URL of the confirmation page. If left empty the correct link will be autodetect.
All 3 section can be created by using Variables. They allow to output the name or URL of the store in the template. The available variables are (2):
- {{shop.name}} - add the shop name to the message template
- {{shop.url}} - add shop URL address to the message template
- {{request.type}} - add the name of the request
- {{request.url}} - add URL of the page from where the request was sended
- {{request.email}} - add email of the user who send request
- {{confirmation_page_url}} - Add link of the confirmation page
Each of the variables can be added by placing the cursor in the text abd clicking variable name. The variable will be automatically insert in the active section.
New request template
By going to to Notifications > Request notifications and clicking the New request link, admin will be forwarded to New request section. Created there template will be send automatically to the admin or Notifications recipient after visitor will confirm the request (template above).
Template contains (1):
- Email subject - this will be header of the sended email reply
- Email body - body of the email
All 3 section can be created by using Variables. They allow to output the name or URL of the store in the template. The available variables are (2):
- {{shop.name}} - add the shop name to the message template
- {{shop.url}} - add shop URL address to the message template
- {{request.type}} - add the name of the request
- {{request.url}} - add URL of the page from where the request was sended
- {{request.email}} - add email of the user who send request
- {{confirmation_page_url}} - Add link of the confirmation page
Each of the variables can be added by placing the cursor in the text abd clicking variable name. The variable will be automatically insert in the active section.
Creating Data erasement response
Please go to Notifications > Visitor notifications and click the Data erasure. Doing that allows to edit the content of the template.
Add there all the needed informations and details using the available variables.
When user send the request, an email confirming (Email confirmation template) the request will be sent to the user. Clicking the {{confirmation_page_url}} link, will mean that owner of the email address confirm the request.
Owner of the website or the Notifications recipient which can be set in Notifications > Notifications recipient field will received message that there were new request created.
Other place to check the current Requests and their status is in the Requests section of the main menu.
After approving the request by checking the box next to the email and choosing Mark as fulfilled, and saving the changes by clicking Save the status of the request will change from verified to fulfilled. The data will be removed and user will recived email, that the data was erasement.
Data Access!!
When activating the Ultimate GDPR & CPPA Toolkit our App will provide a ready to use Request data [Ultimate GDPR & CCPA] page. The page can be access by going to Shopify dashboard and from there navigating to Online Store > Pages. This page contain not only Data access form but also:
- Data erasure
- Data rectification
- Restrict processing
Frontend view:
|
Email confirmation
By going to Notifications > Visitor notifications and clicking the Email confirmation link, admin will be forwarded to Email confirmation section. Created there template will be send automatically to the user after sending request for:
using the Request data [Ultimate GDPR & CCPA] page.
Template contains (1):
- Email subject - this will be header of the sended email reply
- Email body - body of the email
- Email confirmation target page URL - URL of the confirmation page. If left empty the correct link will be autodetect.
All 3 section can be created by using Variables. They allow to output the name or URL of the store in the template. The available variables are (2):
- {{shop.name}} - add the shop name to the message template
- {{shop.url}} - add shop URL address to the message template
- {{request.type}} - add the name of the request
- {{request.url}} - add URL of the page from where the request was sended
- {{request.email}} - add email of the user who send request
- {{confirmation_page_url}} - Add link of the confirmation page
Each of the variables can be added by placing the cursor in the text abd clicking variable name. The variable will be automatically insert in the active section.
New request template
By going to to Notifications > Request notifications and clicking the New request link admin will be forwarded to New request section. Created there template will be send automatically to the admin or Notifications recipient after visitor will confirm the request (template above).
Template contains (1):
- Email subject - this will be header of the sended email reply
- Email body - body of the email
All 2 section can be created by using Variables. They allow to output the name or URL of the store in the template. The available variables are (2):
- {{shop.name}} - add the shop name to the message template
- {{shop.url}} - add shop URL address to the message template
- {{request.type}} - add the name of the request
- {{request.url}} - add URL of the page from where the request was sended
- {{request.email}} - add email of the user who send request
- {{confirmation_page_url}} - Add link of the confirmation page
Each of the variables can be added by placing the cursor in the text abd clicking variable name. The variable will be automatically insert in the active section.
Creating Data access response
Please go to Notifications > Visitor notifications and click the Data access link. Doing that allows to edit the content of the template.
Add there all the needed informations and details using the available variables.
When user send the request, an email confirming (Email confirmation template) the request will be sent to the user. Clicking the {{confirmation_page_url}} link, will mean that owner of the email address confirm the request.
Owner of the website or the Notifications recipient which can be set in Notifications > Notifications recipient field will received message that there were new request created.
Other place to check the current Requests and their status is in the Requests section of the main menu.
After approving the request by checking the box next to the email and choosing Mark as fulfilled, and saving the changes by clicking Save the status of the request will change from verified to fulfilled. The data will be removed and user will recived email, that the data was erasement.
NONONONONO***
To add the Data Access request on your site, create a page where your want to show the Personal Data Access tab.
In the page you created, add the shortcode: [ultimate_gdpr_myaccount]
After publishing the page with the Data Access request, in your dashboard go to Ultimate GDPR & CCPA > Data Access.
You will be redirected to the Data access settings.
Add the needed information and details. For more details on Data Access settings, click here.
When a user sends a request, it is posted in Data access requests list.
An email with data attached will be sent to the user once the admin of the site selected the email of the user he would like to approve the request and clicked on Send data to selected emails button.
Data Rectification
To add the Data Rectification request on your site, create a page where your want to show the Data Rectification tab.
In the page you created, add the shortcode: [ultimate_gdpr_myaccount]
After publishing the page with the Data Rectification, in your dashboard go to Ultimate GDPR & CCPA > Data Rectification.
You will be redirected to the Data Rectification settings.
Add the needed information and details. For more details on Data Rectification settings, click here.
When a user sends a request, an email to confirm the request will be sent to the user. The user must first confirm the request before it is posted in Data rectification requests list.
An email to notify the user that the request is accepted will be sent once the admin of the site selected the email of the user he would like to approve the request and clicked on Send data to selected emails button.
Unsubscribe
To add the Unsubscribe request on your site, create a page where your want to show the Unsubscription tab.
In the page you created, add the shortcode: [ultimate_gdpr_myaccount]
After publishing the page with the Unsubscribe, in your dashboard go to Ultimate GDPR & CCPA > Unsubscribe.
You will be redirected to the Unsubscribe settings.
Add the needed information and details. For more details on Unsubscribe settings, click here.
When a user sends a request, an email to confirm the request will be sent to the user.
Depending on the option set in the Unsubscribe settings:
Cookies Management
Customize cookie consent pop-up
To customize the look and content of the cookie popup, go to Cookies > Cookie consent and choose Customize in Cookie Consent pop-up
|
Default Content - Details in the cookie popup that informs the user of its use.
- Header - Set the text for the header of the pop-up
- Description - Set the text for the description of the pop-up
Buttons In this section set text for the buttons used in the pop-up
Accept
- Text - can add custom text. If the field will be left blank the app will use the default text.
Change settings
- Text - can add custom text. If the field will be left blank the app will use the default text.
Read more
- Text - can add custom text. If the field will be left blank the app will use the default text.
- Page to open - choose the page to which user will be forwarded after clicking the button (can be choose from Existing page, Custom URL) the button also can be hidden choosing No page option.
- Open in new tab - if checked, Read more page will be open in new tab.
Note
To see the Change settings button in the cookie consent pop-up make sure to check the Enable cookie settings pop-up on path (Cookie > Cookie consent).
Translation for ... - This section allows to create a Default Content for a different language. If the checkbox is checked (1) the translation will be used when certain language is detected.
|
Select who will see the Cookie consent pop-up
To select who will see the pop-up, where it will be displayed and when it will appear again after consent is given please go to Cookies > Cookie consent and scroll to Cookie consent pop-up section
|
Visitors to be asked for consent - from the list admin can choose what type of visitors will see the consent pop-up
- Show pop-up to and block cookies for visitors from the EU only - this option mean that only visitors from EU will see the pop-up an the cookies will be blocked. For other users this functionality won’t be active.
- Show pop-up to and block cookies for all visitors - this will allow to show the pop-up and block the cookies for all visitors no matter from where they are
- Don’t show pop-up to anyone (blocking cookies is still possible as per other settings) - option won’t be active.
Pages to display pop-up - here admin can set on which pages the mentioned above pop-up will be visible
- All pages - visible on all pages created.
- Selected page only - admin will get here an option on which pages the pop-up will be seen.
Default cookie consent level - The level which will be set after visitor clicks the “Accept” button in the pop-up.
Reload page after consent is given - After accepting consent or changing the level (and saving it) the page will auto reload. If this option won’t be choose, the saved changes won’t be added on page until visitor won’t reload the page manually.
Consent expiration time - The time until visitors are asked for consent again.
Adding cookie settings pop-up on site
To show the Change settings button in the Cookie consent pop-up make sure to check the Enable cookie settings pop-up (1) To show the Trigger button on the site please check the Display floating button (2) option. Both can be found in Cookie Consent > Cookie settings pop-up.
Customize cookie settings pop-up
To customize the look and content of the cookie settings pop-up, go to Cookies > Cookie consent and choose Customize in Cookie settings pop-up
- Header - set the header text of the pop-up
- Default level - choose the default level which will be active for the visitor
- Available features header / Not available features header - allow to add custom text for those section. If left empty the app will use the default text
- Available Levels - Each of the 5 levels can be edited independently. To edited specific page please click on it.
- Label - set the name of the label or leave it empty to use the default one
- Available features - add available features of this group.
- Not available features - add available features of this group.
- Don’t display this level in the pop-up - ich checked this level will not be shown in the settings pop-up
Currently available cookies level are:
- Essential - for cookies which are strictly necessary for your website to be able to operate or to provide user with a requested service
- Functional - these are cookies that are designed for purposes such as enhancing a website’s functionality. These are either not strictly essential for the website or functionality which user has requested to work, or are cookies which serve non-essential purposes in addition to their essential purpose.
- Analytics - Analytical (or performance) cookies track and gather data about what a user does on a website.
- Advertising - Targeting (or advertising) cookies record information about your visit to and use of our website, for advertising purposes.
- Save button
- Text- Set custom text for the Save button or leave it blank to use the default one
What Cookies are used on your website
You can show a table with all cookies collected by your website with simple shortcode: {{ultimate_gdpr_cookie_list}}
Active cookies will be displayed in a table, like the following:
Note
Your website should be publicly accessible to correctly detect all cookies that are used on it
Whitelist Cookies
When a scenario that the set default privacy group is ‘Block all’ and the user will select ‘Block all’ cookie, the user will see the cookie popup over and over since the user blocked saving cookies and there is no way for the system to know that the user already accepted the cookie consent.
Whitelist cookies are cookies that are allowed even if you choose to Block all cookies in the site.
You can add whitelisted cookies in Cookies > Cookie consent > Cookie whitelist:
This way you can allow selected cookies to be accepted even if cookie setting is set to ‘Block all’.
Note
User’s privacy settings (whether he accepts cookies or not, and what group of cookies) consent is saved in our ultimate-gdpr-cookie
Display Advance Cookie Setting with link
In the Ultimate GDPR & CCPA Toolkit we provide an option to open cookie modal using a link, which you can display/add in any page on the site.
To do this, you can use shortcode: {{ultimate_gdpr_cookie_modal}} & {{/ultimate_gdpr_cookie_modal}}
You can add these shortcodes in the page that you would like to add the link.
Sample format:
{{ultimate_gdpr_cookie_modal}} Change cookie settings {{/ultimate_gdpr_cookie_modal}}
Front end:
Wish to customise the Advance Cookie Settings, but don’t know how? Please follow this part of our documentation.
Cookie Groups
Note
The Cookie Setting pop-up will show when Enabled cookie settings pop-up (1) is activated in Ultimate GDPR & CCPA Toolkit > Cookies > Cookie Consent > Cookie settings pop-up.
To activate the floating button (showed after accepting Cookie consent pop-up) please activate Display floating button (2) on the same path
The Cookie Groups for Ultimate GDPR & CCPA Toolkit are cookie levels, where you would need to pass level 1 to get to level 2. These levels have cookies that are set in them and when you pass to another level, these cookies will also remain.
This will allow tracking of only the necessary cookies or possible cookies.
- Essential - For cookies which are strictly necessary for your website to be able to operate or to provide user with a requested service
- Functional - These are cookies that are designed for purposes such as enhancing a website’s functionality. These are either not strictly essential for the website or functionality which user has requested to work, or are cookies which serve non-essential purposes in addition to their essential purpose.
- Analytics - Analytical (or performance) cookies track and gather data about what a user does on a website.
- Advertising - Targeting (or advertising) cookies record information about users visit to and use of your website, for advertising purposes.
When a user opens the site for the FIRST time, the cookie group would depend on what the admin have set. These are the ways to set the default cookie group:
Block Cookies Until User Gives Consent/Set a Default Cookies Group
You can set this option in Cookies > Cookie Consent
This will block all the cookies that are not in the cookies whitelist (1).
The second option (2) will also block analytics cookies (like Google Analytics, Facebook ect.)
Sample:
Note
When a user has already used your site, the cookie group that the user has set before will be remembered unless the cache has been cleared on the users side.
This is used to limit the cookies that are in the site to gather details about the user.
Read these parts of the documentation for:
Use Services Manager
This is where the cookies that are detected are saved. You can change the cookies’s details here. You can also make a customized cookie to be blocked/accepted in your site.
To detect cookies that are used in your site, click the Scan for cookies button at Home section of the app or on path Cookies > Cookie manager.
Note
To have the Block All cookies functionality working, you must first detect all cookies and save them in the Services Manager.
The cookies that are detected is then shown in the Cookies > Cookie manager.
In Cookies > Cookie manager you will see:
Basic information:
- Title - Used only for admin user to navigate through services.
- Purpose - Purpose of the cookie.
Scripts that create cookies:
Cookies to block:
- Cookie names - Comma separated names of cookies which are to be blocked. It’s important use actual name of cookie, not name of service.
Properties:
Level - Assign cookie to a level on which it will be allowed on site.
Domain - select the domain to which the cookie belongs
Type - Pick the group the cookies belong.
Can be blocked - Option to activate or deactivate. Only services which are active, are being blocked.
Note
Only services which are active, are being blocked. Unchecking this checkbox makes the app ignore this service.
How to add Third Party Cookies
When a third party cookie is not detected by the cookie scanner, you can add the third party cookies manually.
To add third party cookies, you can add the Cookie name of the cookies that you would like to block in Cookie > Cookie manager under Cookie names.
Sample third party setup:
Tracking Users Anonymously (Google Analytics)
To use this feature correctly, these are some pointers:
In the Cookies > Cookie manager, uncheck the Can be blocked so that Google Analytics won’t be blocked.
The Google Analytics Tracking ID should be added in Ultimate GDPR & CCPA > Cookie popup for the feature to work since Google Analytics will be blocked as long as the consent isn’t given.
Enable the option for anonymization in Ultimate GDPR & CCPA > Cookie popup. This option will allow you to track anonymously without collecting any user data in compliance with GDPR & CCPA.
What does Tracking Users Anonymously exactly mean?
After following the instruction above, IP of all users visiting the website will be altered before sending the tracking data to Google. This will make impossible for search engines to directly assign tracking data to an exact IP Address making this action GDPR & CCPA compliance even if the user didn’t accept cookie consent.
For more advanced information for this functionality access this link.
If you want to block a specific cookie
To find a script to block, view page source, search for ‘<script>’, ‘<noscript>’ and ‘<iframe>’ tags. Then, to block a tag, copy any of its content fragment, eg.
In the Service Name field, you should add the script that needs to be block in the site. For example:
for script:
<script type='text/javascript' src='http://ct11.pinky.createit/boilerplate/wp-includes/js/jquery/jquery.js?ver=1.12.4'></script>
- you can copy: ‘jquery.js’
for tag:
<noscript>var x=start_tracking();</noscript>
- you can copy: ‘start_tracking()’
for iframe:
<iframe width="200" height="113" src="https://www.youtube.com/embed/xxxxx?feature=oembed" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe>
- you can copy: ‘youtube.com’ or ‘encrypted-media’ or any other part of the tag content
Note
It’s best to copy as large and unique tags content as possible, to avoid blocking other, non related tags by accident. By default, if particular services cookies are detected, these scripts contents are set to be blocked
Addthis:
addthis_widget
Google Analytics
google-analytics.com/analytics.js
Facebook Pixel:
"pixel-cat.",
"fbq('init'",
"www.facebook.com/tr?id",
"/pixelyoursite/"
How to check for cookies
Mozilla Firefox
In Firefox, press F12 and navigate to Storage tab. There a list of cookies with all necessary information should be displayed.
Google Chrome
In Google Chrome, press F12 and navigate to Application tab. Click on the drop down arrow beside Cookies below Storage. The list of cookies with all necessary information should be displayed.
App
Cookies can also be detected using plugin’s built in mechanism called “Scan for cookies”. Cookie detection can be done using one button.
Navigate to Home or Cookies > Cookie manager. You will find there DScan for cookies button.
Please be patient, since this process might take a while. If no cookies were found please wait for around one hour and try again. In case this does not help please contact our support.
Content Protection
This feature is used by using this shortcode: {{ultimate_gdpr_protection level=4}} & {{/ultimate_gdpr_protection level=4}}
This feature will hide any content inside the shortcode unless the cookie group chosen by the user of the site will meet the requirements of the shortcode.
To add the shortcode in the page, follow this format:
{{ultimate_gdpr_protection level=4}} Hidden content {{/ultimate_gdpr_protection}}
Note
The level in {{ultimate_gdpr_protection level=4}} is the cookie group condition that needs to be meet for the blur to clear.
Level |
Cookie Group |
1 |
Essentials |
2 |
Functionality |
3 |
Analytics |
4 |
Advertising |
A label/notice will be shown in front of the blurred area.
Sample when condition is meet