When doing business in the European Union (EU), you have to follow the General Data Protection Regulation (GDPR) requirements. GDPR rules allow customers to control their personal data your store may want to collect and store or share. For instance, users can request the deletion of the data, accept or deny using the cookie, etc.
GDPR Magento 2 module helps to comply with GDPR law and still collect consents by rendering GDPR-friendly forms. In fact, it is an important functionality when collecting EU customers' data.
With our extension you can:
- Ask users to consent to different types of data processing
- Show GDPR-friendly forms with opt-in checkboxes or buttons
- Show forms for gaining consents in different site forms
- Display Cookie consent banner
- Easily access all consents accepted by customers
- Add “Privacy Tools” page at the user's account to let him view the list of given consents
- Allow users request the account removal
Our module follows the "right to be forgotten" established in GDPR rules. It allows for deleting the account on user request. This and other extension feature will help you to provide a trustworthy service to all of your customers. In the module backend, you can process the user request manually or delete the request as well as cancel it.
Extension approved on Magento Marketplace
- Free installation
- Activate up to 10 times
- All extensions $79
- Approved on Magento Marketplace
Magento Open Source Compatibility
Magento Community 2.4.9, Magento Community 2.4.8, Magento Community 2.4.7, Magento Community 2.4.6, Magento Community 2.4.5, Magento Community 2.4.4
Adobe Commerce Compatibility
Adobe Commerce 2.4.9, Adobe Commerce 2.4.6, Adobe Commerce 2.4.5, Adobe Commerce 2.4.8, Adobe Commerce 2.4.7
Installation instructions and manuals
Clear and simple GDPR-friendly forms
We developed our extension to help you add GDPR-compliance forms on your Magento 2 site. Using forms you let your visitors give consent to collecting their personal data. With the module you can show the banner, checkboxes as well as buttons to let users accept and save consents, or deny. M2 GDPR module allows for display opt-in forms on the customer registration page, Contact Us page, submit testimonial form, newsletter subscription, and product reviews page. During the first visit, your customers will also see the cookie banner with consent button.
Configurable settings for GDPR-forms
M2 GDPR module includes easy-to-use settings separately for different types of consent. Through the configuration, you can enable/disable a consent checkbox, set a sort order, choose a location (forms) to show a consent checkbox or button, and specify a checkbox label text. HTML and Magento’s WYSIWYG directives are supported. In addition, you receive a clear admin interface for processing the data deletion request. You can set a name for the string when replacing personal user data. You can also set the number of days to wait the request processing enabled.
“Privacy Tools” page
Our Magento 2 GDPR module includes the “Privacy Tools” page which is visible for registered customers. The account privacy page plays an important role in building your website's credibility. They can easily manage the page at their account navigation panel. On “Privacy Tools” page users can view the list of given consents and request to delete the account. Your clients are permitted to withdraw newsletter consent via “Newsletter Subscriptions Management” section of the page. The feature is good not only for your customers.
Cookie consent feature with a cookie bar
With the extension, you can inform visitors about the purposes and usage of the cookies. Via the cookie banner, users will be able to give consent to all by clicking the button or accept the preferable cookies by ticking checkboxes and save. Our module blocks all optional cookies until the visitor accepts to consent. You can use included separate Cookie Registry page to control cookie settings and register an unlimited count of additional cookies and groups. You will regularly check if all cookies that are used on the site are in the consent list. It's also easy to modify the content for the Cookie banner and Cookie settings page.
GDPR 1.9.3
8th of October 2026- Security: High — improved output handling on the cookie settings page.
- Security: Medium — strengthened validation and limits for cookies detected on the storefront.
- Security: Medium — improved validation of cookie consents submitted from the storefront.
GDPR 1.9.2
28th of August 2026- Breeze: fixed the built-in Magento cookie notice staying visible on the storefront when it was shown from a delayed script.
GDPR 1.9.1
30th of June 2026- Fixed PHP 8.5 warning ("Using null as an array offset is deprecated") when loading Cookie Groups grid data.
- Added Danish (da_DK) translation.
GDPR 1.9.0
8th of June 2026- When client clicks on the "Allow Selection" button, the module will now redirect client back to the page after cookie settings are saved.
- Added cleanup of the Blocked Cookies registry. Now, only 100 last entries will be preserved in the log.
- "Blocked cookies" title changed to "Unregistered cookies".
- Show cookies count in the "Unregistered cookies" button title. See the screenshot.
- Automatically remove cookie from Unregistered list when you register it.
- Fixed error on PHP 8.5 when trying to register blocked cookie.
GDPR 1.8.5
19th of March 2026- Added Bing Consent mode.
- Updated Breeze color variables.
GDPR 1.8.4
11th of February 2026- Changed type of argument to type object/string, bool given.
GDPR 1.8.3
5th of December 2025- Fixed adding google consent scripts above google tag manager scripts.
- Updated Breeze integration.
GDPR 1.8.0
18th of June 2025- Improved display of accepted newsletter subscription consents for registered customers. If a customer subscribed with multiple emails, a consent entry is shown for each email.
- Added integration with the newsletter confirmation feature. Now, if a customer has not confirmed the subscription, the consent is marked as "Awaiting confirmation".
- Newsletter consent is automatically revoked when a customer is unsubscribed from the email newsletter by an administrator.
GDPR 1.7.13
9th of April 2025- PHP 8.4 support added.
- Magento 2.4.8 support added.
GDPR 1.7.11
26th of February 2025- Breeze: fixed js error when enabling focus-trap on slow internet connections
Write Your Own Review