Appearance

GDPR Extension Benefits ​

The Magebit GDPR Extension helps a Venta/Hyvä store meet GDPR obligations: cookie consent and logging, Google Consent Mode v2, and customer data rights (download, deletion, anonymization) with an admin audit trail.

Feature list ​

Cookie consent management

  • Hyvä-native consent bar with accept, decline, and per-group settings
  • Grouped cookies (Essential / Marketing / Analytics / custom), essential groups always on
  • Cookies auto-cleaned when consent is withdrawn
  • Settings badge to re-open preferences at any time

Google Consent Mode v2

  • Sets consent defaults and updates Google tags as the visitor consents
  • Cookie groups map to permission types (analytics, marketing, functional, preference)

Consent log

  • One row per accept event with customer, IP, email, action, website, and policy version
  • Configurable auto-cleanup interval

Customer Privacy section (My Account)

  • Data download as a ZIP of CSV files
  • Account deletion with a grace period and a cancel option
  • Irreversible anonymization across the customer's data surfaces
  • Consent preferences, policy links, and Data Protection Officer contact
  • Per-card toggles; download, delete, and anonymize require password reauthentication

Anonymization audit log

  • Records each anonymization with a random UUID, timestamp, store, and outcome
  • No PII or customer reference; configurable retention

PII coverage audit (CLI)

  • magebit:gdpr:audit flags tables with PII-shaped columns not covered by any strategy
  • Projects can register custom anonymization strategies for their own modules

Key benefits ​

The consent bar informs visitors about tracking and records their choice per website. Essential cookies stay on; every other group is opt-in, and visitors can review each group before consenting.

Cookie consent bar

Customer data rights ​

Customers manage their own data from My Account: download a copy, request deletion (with a grace period to cancel), or anonymize irreversibly. Anonymization keeps the aggregate sales data a store needs for tax-audit evidence while removing direct identifiers.

Customer Privacy section

Audit trail ​

Every consent is logged for compliance evidence, reviewable under Magebit GDPR > Cookie Consents Log by customer, email, IP, and status. Anonymization events are recorded separately in the Anonymization Log with no PII.

Consent log

Limitations ​

  • Covers cookie consent and customer data rights (download, deletion, anonymization). It does not cover non-cookie obligations such as data breach notification, processing agreements, or contractual records.
  • Anonymization strategies cover Magento core and the bundled Magebit modules. Third-party modules that store customer data need their own strategy (see the audit command and the extension point in the overview).
  • The consent bar styling follows the Venta/Hyvä theme. Layout changes beyond the admin text and group settings require theme work.