COMPLIANCE · PRIVACY STACK

GDPR Suite.
Consent, kept in-house.

Who it helps
Agencies and stores that handle consent and data-subject requests.
What changes
Cookie consent, data rights and Article 30 records run in Magento, with consent logs in your own database.
  • 18 independent modules, enable only what you need
  • Consent lifecycle and tamper-evident audit log in your DB
  • Google Consent Mode v2, CSP-safe for Hyvä
Screenshot: admin GDPR Readiness Auditor with six checks passed and none failed

The qoliber GDPR Compliance Suite is a complete GDPR solution for Magento 2 and Mage-OS, featuring consent management, cookie control, data subject tools, and full Hyvä compatibility. Built with modular, performance-first architecture and enterprise-grade features, it ensures full compliance without compromising store speed.

Compatible Hyvä Compatible ElasticSuite Compatible Mage-OS
v 1.5.0 — RELEASED 18 days ago composer require qoliber/gdpr-metapackage

Product details

qoliber GDPR Suite

The last privacy stack
you’ll ever install on Magento 2.

18 native modules covering cookie consent, data-subject rights, Article 30 accountability and global privacy regulations — running entirely inside Magento. No SaaS subscriptions, no external APIs, no data leaving your stack.

Replaces Cookiebot, OneTrust and CookieYes — self-hosted, Magento-native.

18
Modules, one price
600+
Automated tests
100k+
Lines of code
2.4.8
Magento / Mage-OS
Why agencies choose qoliber GDPR

Three things every other Magento privacy stack gets wrong.

You own the consent data.

Consent logs and customer privacy data live entirely in your Magento database — not on a third-party processor’s servers.

  • ✓No external APIs in the consent path
  • ✓Full lifecycle: grant, modify, withdraw
  • ✓Tamper-evident audit log, queryable from admin
  • ✓Per-store-view scoping out of the box

No SaaS subscriptions.

Cut the recurring fees and external dependencies. A self-hosted alternative to Cookiebot, OneTrust and CookieYes — written natively for Magento.

  • ✓One-time license, unlimited stores
  • ✓No vendor lock-in, no data egress
  • ✓Composer-managed, fits your pipeline
  • ✓Predictable cost across many client builds

Modular, not monolithic.

18 independent modules. Enable what the client needs, leave the rest out. Repeatable across every project without dragging in dead code.

  • ✓Independent, opt-in components
  • ✓Hyvä, Luma and enterprise-ready
  • ✓PHPStan Level 8, 600+ tests
  • ✓Clean upgrade path between versions
How we compare

Side-by-side with what’s already on the market.

Most cookie tools stop at the banner. qoliber GDPR Suite is engineered as the full privacy infrastructure for Magento — consent, data-subject rights, accountability and reporting.

Feature qoliber GDPR Suite Other Solutions
Privacy Coverage18 integrated modulesTypically split across multiple add-ons
Cookie Consent InfrastructureNative Magento implementationFrequently relies on external services
Recurring Subscription CostsNo recurring SaaS dependencyAdditional monthly fees often required
Consent Data OwnershipStored entirely in MagentoMay rely on external platforms
Article 30 (ROPA)Built-inRarely included
Privacy Readiness AuditingIncludedUsually unavailable
Data Subject RequestsEncrypted single-use exportsBasic downloadable files
Global Privacy SupportGDPR + GPC + multi-region supportUsually EU-focused only
Hyvä CompatibilityNative & CSP-safeLimited or additional implementation needed
ArchitectureModularOften monolithic
Code Quality & TestingPHPStan Level 8 · Magento coding standards · 600+ testsUsually not publicly documented

A general comparison based on publicly available Magento privacy and GDPR solutions currently available on the market.

Engineering DNA

Built like infrastructure — not a banner script.

Every module follows Magento coding standards, ships with type-safe APIs and a real test suite. The suite is meant to live inside enterprise codebases for years, not survive a single launch.

100k+
Lines of production code
600+
Automated tests
PHPStan 8
Quality gate
PHP 8.1–8.5
Supported runtimes

Article 30 ROPA built-in

Records of Processing Activities and readiness auditing — designed for real compliance workflows, not just cookie banners.

Encrypted data exports

Privacy exports delivered through encrypted single-use tokens — never unsecured downloadable files.

Global Privacy frameworks

GDPR, Global Privacy Control (GPC), US state privacy laws and per-store-view privacy configuration.

Consent Mode v2 ready

Native Google Consent Mode v2 implementation, CSP-safe for Hyvä and modern Magento storefronts.

Built for agencies

A repeatable privacy implementation across many client projects — cut custom compliance work on future Magento builds.

Growing privacy ecosystem

Automated cookie audits via mage-scan.com and a repository of pre-built cookie templates deployable in one click.

One license. One privacy stack.

Stop paying recurring fees for privacy infrastructure.

Ship qoliber GDPR Suite once and reuse it across every Magento and Mage-OS build you maintain. All 18 modules, all future updates, agency-friendly licensing.

  • ✓All 18 modules included
  • ✓Hyvä & Luma compatible
  • ✓Free migration from common GDPR plugins
  • ✓Private Packagist access
  • ✓GitLab repository access
  • ✓12 months of updates & support
€399
/ project, one-time

Agency & multi-store licensing available on request.

Includes Composer access, GitLab repository, documentation portal, and a private support channel with the team that built it.

WHAT IT FIXES

More than a cookie banner.

Most cookie tools stop at the banner and keep consent records outside your stack. qoliber GDPR Suite is 18 native Magento modules covering cookie consent, data-subject rights, Article 30 accountability and global privacy regulations — with consent logs stored in your own Magento database.

  • 18 independent modules, enable only what you need ● modular
  • Consent lifecycle and tamper-evident audit log in your DB ● self-hosted
  • Google Consent Mode v2, CSP-safe for Hyvä ● Consent Mode
  • Encrypted, single-use customer data exports ● data rights
  • Article 30 records of processing activities ● ROPA
  • Global Privacy Control, per-store-view configuration ● GPC

INSTALL · COMPOSER

One composer line.

Your license adds the package to your private qoliber repository. Add the repository once, then require the package like any other dependency — no ZIP files, no copying folders into app/code.

# Once per project: add your private qoliber repository
# (the exact command is in your account → Composer & keys)
composer require qoliber/gdpr-metapackage
php bin/magento setup:upgrade
✓ Installed. Updates arrive with composer update.
FROM THE COMMUNITY

Customer reviews

Write a review
Write Your Own Review
You're reviewing: GDPR Compliance Suite
Your Rating:
loader
Loading...

You submitted your review for moderation.