GDPR

miniOrange GDPR Extension for Magento helps store owners ensure compliance with global privacy regulations such as GDPR, CCPA, ePrivacy Directive, and India's Digital Personal Data Protection Act (DPDP) by managing cookie consent, privacy policy consent, and customer data rights in a transparent, automated, and user-friendly way.

The miniOrange GDPR Extension for Magento gives you a complete, self-contained privacy compliance suite inside your Magento admin, organized into two modules Cookie Consent and Personal Data Protection. 

The Cookie Consent module displays a privacy-compliant cookie banner on a visitor's first interaction, giving users full control over their data preferences before any tracking or data collection begins. You control the banner position, title, body text, and button labels directly from the admin, so the banner matches your store's tone and layout without touching theme files. Visitors can Accept All, Reject All, or open Customize Cookies to make granular, category-level choices. 

With automatic third-party script detection, the built-in Script Manager scans your Magento store to identify all scripts actively collecting user data, including analytics tools, advertising pixels, live chat widgets, and social media integrations. This gives store owners complete visibility into all tracking technologies running on their website. Detected scripts are intelligently categorized into meaningful groups such as Necessary, Analytics & Performance, Marketing & Advertising, and Functional, so users can make granular and informed consent choices, improving both compliance and user trust.

The extension also enforces strict consent-based script blocking. All non-essential scripts are automatically blocked from loading until the user explicitly provides consent. This prevents unauthorized data collection and ensures your store remains fully compliant with global privacy standards, including GDPR, CCPA, ePrivacy, and DPDP requirements around user consent and data transparency.

The Personal Data Protection module covers the data-subject side of compliance. Enable a Privacy Policy popup that presents your full policy to visitors and records their explicit acceptance, so you are never relying on implied consent. Every response is written to a timestamped Consent Log, giving you an auditable record of who consented, to what, and when. 

Under Customer Account Privacy, shoppers get self-service control over their own data directly from their account area, so your support team is not manually processing routine privacy requests. Incoming account deletion requests land in a dedicated Delete Requests queue in the admin, where you can review, approve, or reject each one and keep a clean trail of every decision.

For cases where a hard delete is not possible orders, invoices, and financial records you are legally required to retain the Data Deletion & Anonymization tools let you strip or scramble personally identifiable information while keeping the transactional record intact. 

Account & Pricing

You do not need to create an account or register with miniOrange to use our free version. 

If you face any issues while setting up this extension, please contact us at magentosupport@xecurify.com

To use extensions' premium features, you can upgrade to our premium plans. 

Features

• Smart Cookie Consent Banner – Display a privacy-compliant cookie banner on the user's first visit, with configurable position, title, body text, and Accept All / Reject All / Customize Cookies actions.
• Automatic Third-Party Script Detection – Automatically scans and identifies all third-party scripts, including analytics, ads, chat widgets, and social integrations, running on your store.
• Complete Visibility of Data Tracking – Gain full insight into all tools and scripts collecting user data across your Magento website.
• Intelligent Script Categorization – Automatically group detected scripts into categories like Necessary, Analytics & Performance, Marketing & Advertising, and Functional.
• Granular Consent Management – Allow users to enable or disable different categories of cookies and scripts selectively.
• Consent-Based Script Blocking – Block all non-essential scripts by default and load them only after explicit user consent is provided.
• Privacy Policy Consent Popup – Present your full privacy policy in a popup and capture the visitor's explicit acceptance instead of relying on implied consent.
• Consent Logging & Audit Trail – Record every consent response with a timestamp and view the complete log in the admin for audit and regulatory evidence.
• Customer Account Privacy Controls – Let logged-in customers manage their own privacy preferences and data from their account area.
• Account Deletion Request Workflow – Receive, review, approve, or reject right-to-erasure requests from a dedicated admin queue.
• Data Deletion & Anonymization – Anonymize personally identifiable information on records you must legally retain, honouring erasure requests without breaking order or financial history.
• Geo-Based Consent Targeting (Premium) – Show the consent experience only to visitors from selected countries.
• Automated Consent Log Cleaning (Premium) – Automatically purge consent logs after a retention period you define, in days, weeks, or months.
• Global Privacy Compliance – Ensure compliance with GDPR, CCPA, ePrivacy Directive, and DPDP Act (India).

Custom feature requirements

If you want any custom changes or features in this extension, let us know your requirement on magentosupport@xecurify.com and we will add that feature in the extension for you.

Dependencies

NONE

24/7 Support

In case you face any issues or if you have any questions, please feel free to reach out to us on our 24*7 active support at magentosupport@xecurify.com or Contact us.

Website

Check out our website for other extensions from the link here or visit https://plugins.miniorange.com/magento to see all our listed Magento extensions. For more support or info email us at magentosupport@xecurify.com. You can also submit your query from the extension's configuration page.