GDPR Compliance Suite

Run the whole consent lifecycle — the cookie banner, the consent record behind it, versioned privacy policies, data subject rights and the EU right of withdrawal — inside your own Magento 2 or Mage-OS store, so when a regulator, an auditor or a customer asks, the evidence comes out of your database, not a vendor's dashboard. Twenty-one focused modules help you implement GDPR, CCPA/CPRA and Directive (EU) 2023/2673 obligations without another per-domain SaaS subscription.

Latest version: 1.1.0 — changelog

Why it matters

Reduce legal exposure. Opt-in consent, server-side consent evidence and real data subject request flows support your GDPR Art. 6–8 and 12–21 obligations. (Consult your legal counsel — technical tooling supports, but does not by itself constitute, compliance.)
Consent you can actually produce. Every acceptance is written server-side with the policy version, store view, timestamp and truncated IP — the accountability GDPR Article 7(1) asks for, not just a cookie in the browser.
The withdrawal button is now mandatory. Directive (EU) 2023/2673 has required a plain online withdrawal function since 19 June 2026. The suite ships one, with the eligibility window and refund handling behind it.
Data subject requests stop being manual. Access, export, rectification, anonymization, deletion, restriction and objection each have a real flow for customers and guests, processed by cron with an audit trail.
No revenue-tracking blind spots. Google Consent Mode v2 with URL passthrough and ads-data redaction keeps Google Ads/GA4 measurement working within consent limits.

What you get

Feature	Benefit
Cookie consent banner with category management, cookie inventory and automatic cookie detection	Collect valid opt-in consent from day one — and stop paying a per-domain banner service
Google Consent Mode v2, GTM and Yireo GTM adapters	Your tag stack follows the visitor's choice without custom integration work
Consent definitions on registration, checkout, newsletter and contact forms	Put the right checkbox on the right form once; every grant and revoke lands in an audit log
Versioned privacy policies with published/draft status and server-side acceptance evidence	Policy changed? Customers are re-asked automatically, and every acceptance stays on record
Data subject request desk — access, export (TXT/CSV/JSON), rectification, anonymization, deletion, restriction, objection	Handle Art. 15–21 requests from customers and guests in admin grids instead of your inbox
Right of withdrawal — 14-day window, guarded cancellation and credit memo, durable-medium acknowledgement	Meet the Directive (EU) 2023/2673 online-withdrawal requirement with refunds under control
Privacy center in the customer account	Customers self-serve consents, policies, requests and withdrawals — fewer support tickets
Compliance dashboard, readiness auditor, Article 30 processing activities, lawful-basis review, audit export	See where you stand at a glance and hand an auditor evidence, not screenshots
US opt-out compliance mode — "Do Not Sell or Share" link, Global Privacy Control (GPC) signals	Sell into CCPA/CPRA states with the same suite

Why merchants pick this suite

Hyvä-native. Seven Hyvä companion modules with strict-CSP-safe templates that compile on Hyvä 1.3, 1.4 and 1.5 — and a Luma-only store never installs Hyvä code.
API-first. Read-only REST for policy consents and withdrawals, GraphQL for the whole withdrawal flow, and a qoliber:gdpr:consent:list CLI — see the API reference.
No SaaS in the path. The banner, the cookie inventory, the consent log and request processing all run inside your store; visitor consent data never leaves your database.
Speaks your customers' language. Banner copy, customer-facing forms and emails ship translated in five locales, overridable per store view.

GDPR compliance dashboard in the Magento admin

Also available in: German, French, Spanish and Polish (de_DE, fr_FR, es_ES, pl_PL), alongside English (en_US).

Supported versions: PHP 8.1–8.5; Magento 2 / Mage-OS (magento/framework); Hyvä 1.3, 1.4 and 1.5 for the optional Hyvä companion modules.

Why it matters

What you get

Why merchants pick this suite

Next steps