Where stores get surprised
- Checkout and post-purchase pages often load more third parties than the homepage — especially pixels that only fire after Add to cart or Order complete.
- Shopify apps and GTM containers can inject cookies your theme team never listed in the privacy policy.
- Reject all is meaningless if retargeting still fires — a live capture shows whether the banner is respected.
- Seasonal campaigns add short-lived tags; a quick scan before peak traffic avoids last-minute legal escalations.
Suggested scan set
- Homepage and a top landing page from paid or email traffic.
- Product detail page with reviews and recommendations enabled.
- Cart and checkout (or staging equivalent with the same apps).
- Order confirmation / thank-you page where conversion tags concentrate.
CookieComply vs your CMP alone
Your CMP configures categories and shows the banner. CookieComply checks the live shop: which cookies appear, when, and whether classifications match what you tell customers. Keep the CMP for consent collection; re-scan with CookieComply after app installs or theme updates.