LexVibe

Privacy policy, terms and cookie banner for your Shopify store

Shopify runs the storefront, but the legal duties attach to whoever sells through it. A store handles customers' names, addresses and orders, so privacy information is owed, and consent before non-essential trackers such as analytics or ad pixels and, if the store shows AI-generated content, an AI notice apply to whoever runs the store, whichever tool built it. LexVibe works out what your store needs, drafts the documents and gives you a cookie banner to drop in.

What your Shopify store needs

The duties depend on what the store does, not on the tool that built it. These are the usual three:

  • A privacy policy as soon as the store collects personal data, even just sign-up emails. It has to say who is responsible, what is collected and why, and what rights people have. GDPR
  • Consent before non-essential cookies and trackers for visitors in the EU and the UK, and in several US states an opt-out that honours Global Privacy Control. ePrivacy · CCPA/CPRA
  • A clear notice when people interact with AI or see AI-generated content. The transparency duties of Article 50 apply from 2 August 2026. EU AI Act

Each law has its own page with its applicability threshold and a link to its official text, so you can check every claim.

Install LexVibe in Shopify

In Shopify, LexVibe goes in through the theme code: paste one line in theme.liquid before the closing head tag and save. If you would rather not touch the theme yet, scan your published URL first.

Paste the snippet

  1. 1Shopify: Online Store → Themes → Edit code.
  2. 2Open theme.liquid and paste the snippet before </head>.
  3. 3Save.

The same line works on every platform:

<script src="https://golexvibe.com/v1/lexvibe-widget.js" data-lexvibe-app="YOUR_APP_ID" defer></script>

Create your app in the dashboard to get your own app id in place of YOUR_APP_ID. It is free to start.

Make the banner hold back your existing trackers

The banner can only hold back scripts it has been told about. For each analytics or advertising script already on the page, change its type to text/plain and add a data-lexvibe attribute with its category. It then runs only after the visitor accepts that category:

<script type="text/plain" data-lexvibe="analytics" src="https://example.com/analytics.js"></script>

The categories are preferences, analytics and marketing. Scripts left as they are keep running before consent. The free check lists the trackers it finds on your live site, so you know which ones to change.

What you get

  • Privacy policy and terms, hosted at a public URL and updated when regulations change.
  • A cookie banner that blocks non-essential scripts until the visitor accepts, honours Global Privacy Control and records consent.
  • An AI-content notice and an EU AI Act risk classification, if your store shows AI-generated content.
  • A cookie policy only when your site really uses non-essential trackers, so you never publish filler.

Common questions

Where does the snippet go in Shopify?
In Online Store, under Themes, choose Edit code, open theme.liquid, paste the snippet before the closing head tag and save. Those are the same three steps the LexVibe dashboard shows for Shopify.
Can I check my Shopify store before changing anything?
Yes. Paste your published URL in the free check. It reads the live page, detects the trackers, payments and AI calls that really ship to visitors and lists the documents you need, with no signup.
Does my Shopify store need a cookie banner?
It depends on what the store loads. If it uses analytics, advertising pixels or other non-essential trackers and has visitors in the EU or the UK, you need consent before those scripts run, and a banner that only shows a notice without holding the scripts back does not meet that. LexVibe's banner blocks them until the visitor accepts. If the store only uses storage that is strictly necessary, consent is not required, but your privacy policy should still say so.
What happens when I add analytics, payments or AI to my Shopify store later?
The documents describe the store as it was when they were generated, so run the check again after adding an SDK. For apps linked to a LexVibe account, the check lists the processing your hosted documents do not cover yet and recommends regenerating them.

See what your Shopify store is actually missing

Paste your URL. We fetch the live page, detect the trackers, payments and AI calls that really ship to visitors, and tell you which documents and consent you need. No signup.

No signup · result in seconds

More platforms and guides

This page is an engineering summary of publicly available regulatory requirements, generated from LexVibe's framework registry — not legal advice. Every framework links to its official text so you can check it yourself. For decisions about your own compliance posture, consult the primary sources and a lawyer qualified in the relevant jurisdiction.