Cookie Consent Manager with Consent Mode v2 (GDPR, KVKK)
Add-on ID: kv_cookie_consent_mode · Edition: CS-Cart & Multi-Vendor · Latest version: 1.1.1 · Compatible with: CS-Cart & Multi-Vendor 4.17.2 – 4.21.x, PHP 7.4 – 8.3 · Changelog: view
A cookie banner and preference center for CS-Cart and Multi-Vendor stores that sell to visitors covered by the GDPR, the ePrivacy Directive, the UK GDPR or Turkey’s KVKK. Visitors choose between four categories (necessary, preferences, analytics, marketing). Until they agree, the add-on blocks known third-party scripts and video embeds, keeps Google tags in a denied Consent Mode v2 state, and holds back Meta and TikTok pixels. Every choice is logged as proof of consent.
It is a one-time-license add-on that runs entirely in your store: no SaaS account, no monthly fee, no external script and no data sent to a third party.
Key features
Section titled “Key features”- Banner in three layouts (bar, box, popup) with Accept all, Reject all and Customize buttons of equal size and color on the first layer.
- Preference center with on/off switches per category, the list of services in each category, a floating “Cookie settings” button and a footer links block to reopen it at any time.
- Follows your theme: colors, fonts and rounded corners come from the active theme style. Light, dark and custom accent options are available.
- Automatic script blocking: known scripts are rewritten to
type="text/plain" data-kv-consent="<category>"on the server and run only after consent. Built-in services: Google Analytics, Google Tag Manager, Google Ads, Meta Pixel, TikTok Pixel, Hotjar, Microsoft Clarity, YouTube and Vimeo embeds. Add your own rules or tag scripts manually. - Video placeholders for blocked YouTube and Vimeo iframes, with “Load once” and “Always allow” buttons.
- Google Consent Mode v2: the default command is the first script in
<head>, before any tag. It setsad_storage,analytics_storage,ad_user_data,ad_personalization,functionality_storage,personalization_storageandsecurity_storage, with denied defaults for the EEA, UK and Switzerland and a configurable default elsewhere. Every choice sends anupdate. Basic and advanced implementations are both supported. - Meta and TikTok consent APIs:
fbq('consent', 'grant'|'revoke')andttq.grantConsent()/ttq.revokeConsent(). - Consent log: anonymous consent ID, time, choices, policy version and truncated IP. Filter it, export it as CSV and set a retention period.
- Policy versioning: raise the policy version and every visitor is asked again.
- Withdrawal: when a category is switched off, its known cookies are deleted and the page reloads so the scripts stop.
- Public consent API for other add-ons:
window.kvConsent, thekv:consent-changedDOM event and the PHP functionfn_kv_cookie_consent_mode_has_consent(). - Works with the core GDPR add-on: it detects its cookie notice and turns it off in one click, so shoppers never see two banners.
- Ecommerce Tracking Pro integration: our GA4 add-on follows this banner automatically.
- Every text is a language variable you can edit in the admin panel.
Compatibility
Section titled “Compatibility”| CS-Cart / Multi-Vendor | 4.17.2 – 4.21.x (tested on CS-Cart 4.17.2, Multi-Vendor 4.17.2 and Multi-Vendor 4.21.2) |
| PHP | 7.2.5 – 8.3 (the code is PHP 7.4-compatible; tested with PHP 8.1 and 8.3) |
| Themes | Responsive, Bright theme and child themes of Responsive |
| Optional | GDPR add-on, Ecommerce Tracking Pro, Meta Conversions API by Kavio Labs |
How it works in one paragraph
Section titled “How it works in one paragraph”On every storefront page the add-on prints a small inline script right after <head>. It sets the Consent Mode defaults and exposes window.kvConsent. A server-side output filter rewrites the scripts and iframes of the selected services so the browser does not run them. When the visitor makes a choice, the script writes a first-party cookie (kv_consent), sends a Consent Mode update and the Meta/TikTok signals, runs the scripts of the granted categories in their original order, loads the videos and logs the choice. On the next page the server reads the cookie and leaves allowed scripts untouched, so they run in their original place.
Legal note: not legal advice. This add-on is a technical tool. Whether your store complies with the GDPR, ePrivacy rules, the UK GDPR, KVKK or other laws depends on your texts, your services and how you configure them. Ask a qualified lawyer or your data protection officer. See the FAQ.
Google, Google Analytics, Google Tag Manager, Google Ads and YouTube are trademarks of Google LLC. Meta and Facebook are trademarks of Meta Platforms, Inc. TikTok, Hotjar, Microsoft Clarity and Vimeo are trademarks of their owners. This add-on is not endorsed by any of them.