> For the complete documentation index, see [llms.txt](https://help.littledata.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.littledata.io/partner-recipes/cookie-consent-integrations/integrating-onetrust-shopify.md).

# Integrating OneTrust with Shopify

[OneTrust](https://onetrust.com) provides a comprehensive way to manage users' cookie preferences, and ensure [GDPR cookie compliance](/partner-recipes/cookie-consent-integrations/shopify-customer-consent-api.md).

OneTrust's app relays these consent choices to Shopify, and Littledata then picks up the cosent choices to automatically update consent in common marketing data destinations.

Here's how to set up OneTrust with Shopify for cookie compliance.

## 1. Install the OneTrust Shopify app

OneTrust's [Shopify app](https://apps.shopify.com/onetrust-consent-management) syncs the consent states with Shopify's customer privacy API.

You can [change the mapping](https://my.onetrust.com/s/article/UUID-a19a7752-4386-f65f-f109-fd6bde724bcf?language=en_US) of OneTrust Category IDs to Shopify consent categories in their app.

![OneTrust Shopify mapping](/files/slV3LM1EV1uRDQYGLh7Q)

We recommend this mapping:

| Shopify category | OneTrust Category ID |
| ---------------- | -------------------- |
| Analytics        | C0002                |
| Marketing        | C0004                |
| Sale of data     | -                    |
| Preferences      | C0003                |

## 2. Install Littledata's app

Install Littledata's [Shopify to Google Analytics](/integrations/shopify-to-google-analytics/littledata-shopify-install-guide.md) or [Shopify to Segment](/integrations/shopify-to-segment/installation.md) connection.

If you previously had Littledata installed, ensure that **Respect user tracking consent** is enabled in the [data pipeline settings](/advanced/developer/data-pipeline-settings.md).

## 3. Tracking respects OneTrust choices

For Google, the consent is used in [Consent Mode v2](/integrations/shopify-to-google-analytics/using-google-consent-modev2.md).

For other marketing channels (e.g. Meta, TikTok) the event tracking is turned on if users are opted into **Marketing** coookies.

For Segment, we [pass the full consent object](/integrations/shopify-to-segment/segment-consent-management.md) in all events for use with Segment Consent Management and in downstream destinations.

## How this looks

Here's an example of OneTrust setup with Age UK.

![Age UK cookie popup](https://res.cloudinary.com/littledata/w_1024,h_401,c_fit/littledata-blog-images/2021/06/Screenshot-2021-06-09-at-15.00.08.png)

When the user clicks "Accept all Cookies", the tracking in Littledata starts and consent is updated in downstream destinations.

![Age UK cookie settings](https://res.cloudinary.com/littledata/w_1024,h_557,c_fit/littledata-blog-images/2021/06/Screenshot-2021-06-09-at-15.01.33.png)

Then, if the user opts out of "Cookies for performance", the tracking stops.

## How this works

When consent choices are updated in OneTrust, Littledata gets a callback from Shopify with the updated cookie consent preferences.

e.g. if the user has consented to 'Cookies for performance' (tracked as category `C0002` in OneTrust's consent preferences), the `userCanBeTracked()` field is set to `true`in Shopify and Littledata's passes cookies to Google Analytics.

This will also work with any other [cookie banner apps](/partner-recipes/cookie-consent-integrations/shopify-customer-consent-api.md) which integrate with Shopify's Customer Privacy API.

If the user later revokes consent to Cookies for performance, then `userCanBeTracked()` is set to `false`.