Skip to main content

Changelog

1.7.14 (2026-10-02)

Improvements

  • The cookie bar, cookie consent buttons and storefront cookie filter now use Magento's built-in JSON handling and no longer depend on a Mirasvit Core helper for it, so the module works with both the current and upcoming Mirasvit Core releases.

Fixed

  • "Agree All", "Decline" and the Google Consent Mode / Microsoft UET consent signals now cover only the cookie groups the visitor is actually shown in the cookie settings window (active groups assigned to the current store view). Before, they also included inactive groups and groups that belong to other store views, so a visitor could end up consenting to a category they never saw.
  • The "Show Decline Button" setting now works when set per website or store view. Before, only the default (global) value was used, so a store-view setting never reached the cookie bar.

1.7.14-beta2 (2026-09-30)

Improvements

  • ⚠️ Removed two unused legacy classes left over from the old cookie-consent storage: Mirasvit\GdprCookie\Model\CookieConsent and Mirasvit\GdprCookie\Model\ResourceModel\CookieConsent\Collection. Cookie consent is recorded through the shared consent storage instead. The database table and the stored consent history are untouched, but any custom code or third-party extension that referenced those two classes needs updating.
  • The "Close" button of the cookie settings window (its label and its screen-reader description) can now be translated, and ships translated in all supported languages.
  • The GDPR data requests, consents, checkboxes, cookies and cookie groups grids in the admin now remember your visible columns, filters and page size between visits.
  • The module now passes the Magento Marketplace coding-standard check, so it can be packaged for the Marketplace again, while the cookie settings window keeps loading correctly on the storefront.

Fixed

  • Reopening the cookie settings window now shows the visitor's previously saved choices again, instead of showing every optional cookie group switched on. This affects every way of opening the window — the "Settings" button on the cookie bar, the "Manage Cookies" button on the Privacy Dashboard, and the footer link.
  • Fixed the storefront cookie filter's list of allowed cookies growing with every cookie the page set (hundreds of entries over a long visit), which made each cookie write slower as the visit went on.
  • Fixed warnings (and errors on PHP 8.5) when removing or anonymising the data of a customer account that has no creation date. Such accounts are still treated as newly created and stay protected by the data-retention period, exactly as before.
  • Fixed a warning when another extension tried to set a cookie without a name; the cookie filter now leaves such calls alone instead of trying to filter a nameless cookie.

1.7.13 (2026-09-09)

Fixed

  • The cookie-consent bar no longer keeps reappearing in Safari when "Block All Cookies" is turned on — the visitor's choice is now remembered.
  • A cookie group is no longer left out of a visitor's saved consent selection in an edge case.
  • Deleting a customer account now also clears that person's data (customer link and IP address) from the cookie-consent and data-request records, keeping only the anonymised history.

1.7.12 (2026-08-25)

Improvements

  • The cookie-consent bar now makes fewer database queries per page, slightly improving the load time of pages where it appears.

1.7.11 (2026-08-06)

Fixed

  • The cookie filter no longer strips the analytics/marketing cookies (e.g. _ga) that a granted default tells Google to accept. "Denied" still blocks those cookies until the visitor accepts.

Improvements

  • Simplified the Google and Microsoft UET "Default Consent" setting to Denied / Granted, removing the "According to the Essential cookies group" and "Custom" options; any previously-stored value now safely falls back to Denied.

1.7.10 (2026-08-05)

Fixed

  • Fixed the mini-cart and cart counter staying stale on stores upgraded from an earlier version, where essential session cookies were blocked before consent was given.
  • Added the missing Checkboxes permission for GDPR, so custom admin roles can be given access to that page.

1.7.10 (2026-08-05)

Fixed

  • Fixed the mini-cart and cart counter staying stale on stores upgraded from an earlier version, where essential session cookies were blocked before consent was given.
  • Added the missing Checkboxes permission for GDPR, so custom admin roles can be given access to that page.

1.7.9 (2026-06-02)

Improvements

  • Changed "Details" button to "Manage Cookies" in the Cookie Consent card on the Privacy Dashboard.

1.7.8 (2026-06-02)

Improvements

  • Added the standard Magento mage-messages cookie (lifetime 10) to the default RequiredCookieList, so flash/success messages (e.g. newsletter subscription confirmations) are no longer blocked before cookie consent is given.

1.7.7 (2026-05-20)

Fixed

  • Fixed widget.xml XSD validation error ("attribute 'translate' is not allowed" on widget and parameter elements); the translate attribute now lives on the child label/description elements where Magento's widget.xsd declares it. Resolves admin libxml errors and lets the GDPR cookie-consent widget register correctly on the Content → Widgets page.

1.7.6 (2026-05-15)

Fixed

  • Expanded geoip2/geoip2 version range to ^2.0 || ^3.0

1.7.5 (2026-04-21)

Improvements

  • Added i18n support for 15 core locales (ar_SA, cs_CZ, de_DE, es_ES, fr_FR, it_IT, ja_JP, nl_NL, pl_PL, pt_BR, pt_PT, sv_SE, tr_TR, uk_UA, zh_Hans_CN)

Fixed

  • Added minimal content to empty _module.less files so Magento 2.4.9 static content deploy no longer fails with "Unable to get content" errors

1.7.4 (2026-03-27)

Fixed

  • Consent checkboxes displayed on store views they were not assigned to

1.7.3 (2025-08-26)

Fixed

  • Cookie bar button used untranslatable text instead of a translatable string

1.7.2 (2025-08-21)

Improvements

  • Cookie bar content is now created after page load to prevent duplicate modal content from appearing in search results

1.7.1 (2025-08-12)

Features

  • Microsoft Ads (UET) consent mode — consent signals are now sent to Microsoft UET tags alongside Google Consent Mode

1.7.0 (2025-06-05)

Improvements

  • Improved WCAG 2.2 AA compliance across cookie bar, consent forms, and privacy dashboard templates (better focus management, ARIA attributes, and semantic markup)

1.6.5 (2025-05-06)

Fixed

  • Consent Button Link widget was only visible when "Show settings button in footer" was enabled — it now works independently

1.6.4 (2025-04-15)

Improvements

  • Compatibility with Magento 2.4.8 (updated PHP nullable type hints to modern syntax)

1.6.3 (2025-03-07)

Features

  • Consent Button Link widget — place a cookie consent settings link anywhere via the Magento widget system

Improvements

  • Default Google Consent signals are now sent even when the cookie bar is not shown for a visitor's region

Fixed

  • Customer data removal failed when gender attribute contained non-standard values
  • HTML tags were displayed in cookie modal descriptions instead of being rendered

1.6.2 (2024-12-23)

Fixed

  • "Registry key isSecureArea already exists" error during customer data operations
  • Allowed cookies were incorrectly appearing in the rejected cookie list in the admin panel

1.6.1 (2024-12-17)

Fixed

  • JavaScript error "Cannot read properties of undefined" when placing an order with no active consent checkboxes on checkout

1.6.0 (2024-12-12)

Features

  • Dynamic consent checkboxes — checkboxes are now created dynamically based on configuration, removing the need for manual setup
  • USA state-level locations — cookie bar display and Google Consent can now be configured per US state, not just per country

Improvements

  • Google Consent Mode signals are now bound to the cookie bar visibility and visitor location, providing more accurate consent per region

1.5.10 (2024-10-30)

Improvements

  • Google Consent Mode v2 signals now work correctly with third-party GTM modules

1.5.9 (2024-10-02)

Improvements

  • Cookie consent is automatically reset when a new cookie group or cookie is enabled, prompting visitors to review updated groups
  • Only unknown (newly detected) rejected cookies are tracked, reducing noise in the rejected cookies report

Fixed

  • Previously registered cookie consent was not properly invalidated after a consent version reset

1.5.8 (2024-09-24)

Fixed

  • Google Consent Mode signals conflicted with WeltPixel GA4 module event tracking

1.5.7 (2024-09-11)

Features

  • Cookie consent versioning — when cookie groups change, existing consent is automatically invalidated and visitors are prompted to re-accept, ensuring GDPR compliance for newly added cookies

1.5.6 (2024-08-30)

Improvements

  • Improved compatibility with WeltPixel GA4 module for Google Consent Mode signals

1.5.5 (2024-08-28)

Fixed

  • Cookie filter did not apply correctly when cookie bar was configured to display only for specific countries

1.5.4 (2024-08-01)

Fixed

  • AJAX requests for cookie consent returned broken responses in some configurations

1.5.3 (2024-07-17)

Fixed

  • Google Default Consent signals were not sent when the cookie bar was disabled

1.5.2 (2024-07-11)

Features

  • Google Consent default settings — configure default consent state (granted/denied) for each Google Consent type before the visitor interacts with the cookie bar

1.5.1 (2024-07-04)

Fixed

  • Cookie settings modal incorrectly used an H1 heading tag, causing SEO and accessibility issues

1.5.0 (2024-07-03)

Features

  • Breeze theme support — cookie bar, consent settings, and privacy dashboard are fully compatible with the Breeze frontend theme

1.4.6 (2024-06-21)

Fixed

  • Inline scripts in cookie bar and consent mode now comply with Content Security Policy (CSP) using nonce-based rendering

1.4.5 (2024-05-28)

Fixed

  • Essential cookie groups are now always allowed before the visitor makes a selection, preventing functional cookies from being blocked on first page load

1.4.4 (2024-05-21)

Improvements

  • Simplified default consent settings — all Google Consent types now default to "denied" until the visitor accepts

Fixed

  • Default cookie groups were not restored correctly during module updates

1.4.3 (2024-05-17)

Improvements

  • Google Consent v2 signals are now dynamically mapped to allowed cookie groups — granting a group automatically updates the corresponding consent type

Fixed

  • "Invalid Form Key" error appeared when Track Rejected Cookies was enabled

1.4.2 (2024-05-10)

Improvements

  • Wildcard cookie matching — use patterns like _ga* to match multiple cookies within a single cookie definition

1.4.1 (2024-05-08)

Fixed

  • Cookie bar HTML content appeared in Google search snippets

1.4.0 (2024-05-07)

Features

  • Automatic rejection of unallowed cookies — cookies that belong to non-accepted groups are now actively removed from the browser, not just blocked from being set

1.3.10 (2024-04-24)

Fixed

  • "Argument 1 must be of string type" error when requesting account deletion or anonymization
  • Privacy dashboard layout was broken on mobile devices

1.3.9 (2024-04-02)

Improvements

  • Added setting to show or hide the Privacy Dashboard link in the customer account sidebar
  • Dashboard sections (anonymize, download, delete) now show or hide based on which features are enabled in configuration

Fixed

  • Date format on the My Consent Choices page did not respect the store's locale

1.3.8 (2024-04-01)

Improvements

  • Improved consent checkbox styling in the newsletter subscription form

1.3.7 (2024-03-21)

Fixed

  • Customer address data was not fully anonymized during account anonymization

1.3.6 (2024-03-20)

Features

  • Order status filter for anonymization — choose which order statuses are eligible for automatic anonymization of old orders

1.3.5 (2024-03-07)

Improvements

  • Updated Hyva theme compatibility for cookie bar and consent components

1.3.4 (2024-03-05)

Features

  • Privacy Dashboard — a dedicated customer account page where logged-in customers can view their consent history, download personal data, request anonymization, or delete their account from a single location

1.3.3 (2024-03-05)

Fixed

  • Google Consent Mode now sends "denied" state by default until the visitor actively makes a choice, preventing implicit consent

1.3.2 (2024-03-01)

Improvements

  • Google Consent v2 template now works correctly when the consent code snippet is placed in the default Magento theme's HTML Head section

1.3.1 (2024-02-29)

Features

  • Guest consent management — guest visitors can now view and change their cookie consent preferences from the cookie settings modal

1.3.0 (2024-02-28)

Features

  • Google Consent Mode v2 — automatically sends consent signals to Google tags based on visitor cookie choices, supporting ad_storage, analytics_storage, ad_user_data, and ad_personalization
  • Hide cookie bar option — cookie bar can be hidden while still sending Google Consent signals via a footer settings button

Improvements

  • Cookie descriptions on the frontend are now translatable per store view

1.2.17 (2024-02-02)

Features

  • Automatic anonymization of old orders — anonymize order data older than a configured number of days via cron job

Fixed

  • Order data was not anonymized when a customer requested account deletion

1.2.16 (2023-12-22)

Fixed

  • Privacy settings page was accessible without being logged in — now requires authentication

1.2.15 (2023-10-24)

Improvements

  • ⚠️ Removed the per-cookie store view assignment (store_ids field) — cookie visibility is now controlled solely through cookie groups. The store_ids column has been removed from the mst_gdpr_cookie table

1.2.14 (2023-09-18)

Fixed

  • "I agree to the Privacy Policy" checkbox in the newsletter subscription form did not render correctly with the Hyva theme

1.2.13 (2023-09-05)

Fixed

  • Cookie filter was applying across all store views instead of respecting the current store view

1.2.12 (2023-05-25)

Features

  • Mass actions for customer requests — approve or deny multiple customer data requests at once from the admin grid

Fixed

  • Checkout consent checkbox compatibility with Magento 2.4.4

1.2.11 (2023-04-26)

Fixed

  • Certain cookies were not removed when the visitor declined their cookie group

1.2.10 (2023-02-22)

Fixed

  • Admin menu conflict with the Mirasvit Affiliate module

1.2.9 (2023-02-16)

Improvements

  • Renamed CSS classes in the cookie settings modal to avoid conflicts with third-party themes

1.2.8 (2023-02-01)

Fixed

  • Cookie settings modal layout was broken on small screen devices

1.2.7 (2023-01-19)

Fixed

  • Cookie group checkboxes were difficult to select on mobile devices

1.2.6 (2023-01-16)

Improvements

  • Cookie bar background is now fully opaque for better readability

1.2.5 (2022-09-01)

Improvements

  • "Accept All" button now accepts all cookie groups at once without opening the settings modal

1.2.4 (2022-07-06)

Fixed

  • Store view assignment was not saved correctly when editing a cookie or cookie group

1.2.3 (2022-06-20)

Improvements

  • Consent comment is now displayed on customer account pages when the account was registered via Social Login

Fixed

  • ⚠️ Removed db_schema_whitelist.json files — Magento's declarative schema no longer requires them from this version onward

1.2.2 (2022-06-10)

Fixed

  • PHP 8.1 compatibility — resolved deprecation notices for nullable parameters in model classes

1.2.1 (2022-06-09)

Fixed

  • Customer account removal failed during the auto-remove cron process

1.2.0 (2022-05-23)

Improvements

  • ⚠️ Migrated all database schema definitions from InstallSchema/UpgradeSchema scripts to declarative schema (db_schema.xml). Data patches replace UpgradeData scripts

1.1.25 (2022-05-18)

Fixed

  • Cookie settings modal layout was broken on small screen devices
  • Module configuration did not respect multistore scope — settings from one store could override another

1.1.24 (2022-05-09)

Fixed

  • Reverted incorrect assignment of _ga cookie to the Google Analytics group during module upgrade

1.1.23 (2022-05-04)

Fixed

  • Privacy Settings link was visible in customer account sidebar even when all Personal Data Protection features were disabled

1.1.22 (2022-04-18)

Improvements

  • Added "Allow for all countries" setting — show the cookie bar to all visitors regardless of their location

1.1.21 (2022-03-25)

Features

  • Disable Decline button — option to hide the "Decline" button on the cookie bar, leaving only "Accept" and "Settings"

1.1.20 (2022-03-25)

Fixed

  • Cookie bar layout was broken on mobile devices
  • Compatibility with Magento 2.2.4 and below

1.1.19 (2022-02-01)

Features

  • Privacy Settings page — a dedicated page linked from the customer account sidebar where customers can manage their data protection requests

Improvements

  • Cookie settings modal shows additional details (description, duration) for each cookie
  • Redesigned cookie settings modal with improved layout and styling

1.1.18 (2022-01-31)

Improvements

  • Cookie settings modal now displays additional details per cookie (description, duration, provider)
  • Improved styling and layout of the cookie settings modal

1.1.17 (2022-01-21)

Features

  • Country-based cookie bar — show the cookie bar only to visitors from selected countries using GeoIP lookup

1.1.16 (2022-01-06)

Features

  • Decline button — visitors can now decline all non-essential cookies from the cookie bar with a single click

1.1.15 (2021-12-29)

Improvements

  • Added ARIA label to cookie group checkboxes in the settings modal for screen reader accessibility

1.1.14 (2021-12-07)

Fixed

  • Cookie settings icon styling was inconsistent across themes

1.1.13 (2021-11-24)

Improvements

  • Improved WCAG accessibility on customer account data protection pages — added ARIA attributes, proper label associations, and keyboard-friendly expand/collapse for request forms

1.1.12 (2021-11-19)

Features

  • Optional cookie groups — configure which cookie groups are optional (can be toggled by visitors) and which are always active

Fixed

  • Consent checkbox validation on the checkout page prevented order placement in some configurations

1.1.11 (2021-09-08)

Fixed

  • Google Analytics _ga cookie was not removed when the visitor declined the Analytics cookie group

1.1.10 (2021-09-06)

Fixed

  • Cookie settings modal was inaccessible when the lock screen overlay was active

1.1.9 (2021-08-03)

Fixed

  • Consent checkbox on checkout was incompatible with third-party extensions that modify the checkout page layout

1.1.8 (2021-07-12)

Fixed

  • Consent checkbox appeared multiple times on checkout when multiple payment methods were available

1.1.7 (2021-06-24)

Fixed

  • Consent checkbox conflicted with Magento's built-in Terms and Conditions on the checkout page

1.1.6 (2021-06-15)

Improvements

  • Consent checkbox text can now be configured separately per store view

1.1.5 (2021-06-02)

Improvements

  • Allowed cookie groups are now displayed in the admin Customers Consents grid
  • Added frontend translations for consent-related messages

1.1.4 (2021-05-26)

Fixed

  • Cookie settings modal displayed an incorrect title

1.1.3 (2021-05-25)

Fixed

  • Admin menu items for the Cookie module were not displayed correctly

1.1.2 (2021-05-25)

Fixed

  • Removed unused Cookie Consent link from the admin menu
  • Cookie bar description text was not rendered correctly

1.1.1 (2021-04-21)

Fixed

  • Auto-remove cron failed to create removal requests for expired customer data

1.1.0 (2020-12-15)

Fixed

  • Cookie group admin pages had incorrect ACL permissions, preventing access for non-admin users

1.0.10 (2020-10-28)

Fixed

  • GDPR Consent admin menu item pointed to an incorrect controller action

1.0.9 (2020-10-26)

Fixed

  • GDPR Consent menu was invisible to admin users without full admin permissions due to incorrect ACL resource names

1.0.8 (2020-10-02)

Fixed

  • Cookie group names and descriptions were not translatable on the frontend
  • "Agree" button in the cookie bar did not respond to clicks

1.0.7 (2020-09-11)

Improvements

  • Added translation files (i18n) for all three sub-modules, enabling full localization of the cookie bar, consent forms, and admin interface

1.0.6 (2020-08-21)

Features

  • Cookie management admin panel — manage individual cookies and cookie groups from the admin, with full CRUD operations, store view scoping, and a consent log
  • Cookie bar with group selection — visitors can review and toggle individual cookie groups before accepting
  • Automatic data removal — customer data is automatically removed after a configurable retention period via cron job
  • Decline button — visitors can decline all non-essential cookies from the cookie bar

Improvements

  • Compatibility with Magento 2.4
  • ⚠️ Module split into three sub-modules: Gdpr (core data protection), GdprConsent (consent checkboxes), and GdprCookie (cookie bar and management). Existing data is preserved via migration

1.0.5 (2020-05-22)

Features

  • Admin notification — a notification badge appears in the admin panel when there are pending customer data requests

1.0.4 (2020-04-06)

Fixed

  • Cookie bar was not displayed correctly on mobile devices (responsive CSS)

1.0.3 (2020-03-11)

Improvements

  • Customer data export now includes order data in the downloadable CSV
  • Duplicate removal requests are now prevented — submitting a second request while one is pending shows an appropriate message

1.0.2 (2020-02-25)

Features

  • Lock screen mode — an overlay blocks page interaction until the visitor makes a cookie consent choice

Improvements

  • Improved text clarity on data protection request pages

1.0.1 (2020-02-21)

Improvements

  • Added ACL resource definitions for admin permission control

1.0.0 (2020-02-19)

  • Initial release