Menu

Magento 2 CCPA Extension

version 2.1.1
Price: $199.00
  • CE: 2.3.x - 2.4.3
    EE: 2.3.x - 2.4.3
  • 100%
    Open Code
  • 60 Days
    Refund Policy
  • Free
    Lifetime Updates

Data Privacy Extensions:
GDPR
CCPA
LGPD

The Magento CCPA extension makes your website fully compliant with the California Consumer Privacy Act (CCPA). It helps to protect the rights of both the merchants (data controllers) and Magento site visitors.



  • Ensures compliance with all CCPA rights: the right to opt-out of the sale of the personal information, to opt-in, to access and delete personal data, to know which information is collected, and the right to equality.

  • Customers and guest visitors can submit a "Do Not Sell My Personal Information" request.

  • Merchants can enable cookie consent notice, view all downloads, and account erasure requests, manage customer consents, and setup notifications.


  • CE: 2.3.x - 2.4.3
    EE: 2.3.x - 2.4.3
  • 100%
    Open Code
  • 60 Days
    Refund Policy
  • Free
    Lifetime Updates
Product Details
Version: 2.1.1
Documentation: User Guide
Live Demo: View
Code Visibility: 100% Open Code
Supported CE - EE: CE 2.3.x - 2.4.3
EE 2.3.x - 2.4.3
License: Single Magento Installation
Support Plan: 3 Months (Free),
6 Months, 12 Months
Refund Policy: 60 Days (View)
Updates: Free Lifetime Updates

Key Features of Magento 2 CCPA Extension

All-In-One CCPA Solution for Magento 2

All-In-One CCPA Solution for Magento 2

  • CCPA Magento Extension introduces the "Privacy Center Dashboard" designed to display all CCPA options in one place.
  • Customers can view Privacy Policy, Cookie Policy, submit a "Do Not Sell My Personal Information" request, Update their Email Preferences, Download Account Data, and Delete their Accounts.
  • CCPA plugin integrates with your existing Privacy Policy, Cookie Policy, and other CMS Pages and makes a full history of changes
Full Compliance with the California Consumer Privacy Act (CCPA)

Full Compliance with the California Consumer Privacy Act (CCPA)

  • The extension helps Companies that collect and process data of California State residents to become fully compliant with the local data privacy law.
  • Merchants can limit certain privacy features to California residents only, while other U.S. citizens won't see the additional messages, checkboxes, or documents.
  • This Magento 2 Extension covers all consumer rights under the CCPA law. Your customers have the "right to access" (download personal data), the "right to delete" personal data, the "right to opt-out of the sale of personal information", "the right to opt-in for minors", and "the right to know".
Do Not Sell My Personal Information Page

Do Not Sell My Personal Information Page

  • CCPA plugin automatically creates a "Do Not Sell My Personal Information" page at your Magento store, allowing all visitors (registered customers and guests) to opt-out of the sale of the personal info.
  • The link to this page is automatically added to the website footer and "My Account" page.
  • Merchants can edit "do not sell" page contents, enable or disable the page, view, and export to CSV a full history of the submitted "do not sell" requests from the backend.
Download Consumer Personal Information

Download Consumer Personal Information

  • Customers and Guests can download an archive of their account data (customer information, addresses, full order history, price and stock alerts, products in the cart, reviews, wishlist, compared products, etc.).
  • Downloading customer information is a password-protected process (a "verifiable consumer request" as per CCPA). Consumer information will be downloaded in Spreadsheet (Excel, CSV) file format, allowing to easily transfer it to another service.
  • Admin can keep track of all download requests from Magento backend.
  • Built-in API support allows you to download data from third-party applications.
Permanently Delete Customer Account

Permanently Delete Customer Account

  • Customers can request to delete the personal information from your store permanently. Accounts will be automatically deleted within 24 hours after the removal request was submitted.
  • The account owner or the Admin can cancel the account removal requests.
  • Merchants can view a full log of account removal requests from the Magento backend.
  • Built-in API support allows you to delete or anonymize data from third-party applications.
Geo-Targeting For California State Residents

Geo-Targeting For California State Residents

  • Plumrocket CCPA module includes GeoIP functionality, allowing it to detect the country and state where your viewer is located and personalize the content for that viewer on the fly.
  • Merchants can restrict the "Do Not Sell My Personal Information Page" to visitors from California state, using the GeoIP lookup and Customer Billing Address.
  • Cookie Consent Banner and Consent Checkboxes can be enabled for California State visitors only and disabled for the rest of the world.
CCPA Cookie Banner

CCPA Cookie Banner

  • Display a Cookie Consent Notice at your Magento 2 store and conveniently change the design of the cookie banner, choose different templates, change texts, and the background colors from the backend.
  • Consumers can customize cookie preferences by turning on/off specific cookie categories (marketing, preferences, statistics, etc) and browsing the list of included cookies in each category.
  • The users will have a choice of whether to opt-in or not. Cookies will be used only after the user clicks on the "Accept Cookies" button.
Consent Management

Consent Management

  • Add your consent checkboxes (such as "I agree to the Privacy Policy" or "I agree to the TOS", "I am over 16 years old" (for minors), etc) on the registration page, checkout page, contact us page and newsletter subscription page. You can also add consent checkboxes manually using our developer's guide.
  • All consents can be viewed by a customer from the "My Account" section as well as by Merchant from the Magento backend.
  • You may use the built-in GeoLocation feature to display the "Confirm you're at least 16 years old" checkbox only to consumers from California State. Merchants can keep track of all minors or simply restrict registrations and checkout to all minors from California state.
Popup and Email Notifications

Popup and Email Notifications

  • Schedule popup notifications and display a popup window to all customers upon successful login. Request customer consent to the updated versions of the "Privacy Policy", TOS, Cookie Policy, or any other agreement.
  • Notify users by email when their account data was successfully downloaded or a removal request created.
Built-in Support of Plumrocket Data Privacy Extensions

Built-in Support of Plumrocket Data Privacy Extensions

  • Plumrocket offers a full set of data privacy extensions for Magento 2 - GDPR, CCPA, LGPD.
  • CCPA Magento 2 Extension will work seamlessly with other Plumrocket data privacy extensions on the same Magento store, allowing your company to become compliant with all major data privacy laws.
  • Whether your business is local or international, our extensions cover all major data protection regulations in the US and around the world.
Compatible with Custom & Third party Magento 2 themes

Compatible with Custom & Third party Magento 2 themes

  • Magento 2 CCPA module was designed to work flawlessly on any third party Magento 2 theme. Whether it is your custom theme or a popular theme like Ultimo, Shopper, Fortis, etc. – it supports them all.
  • Compatible with the latest Community and Enterprise Editions of Magento 2 Ecommerce Platform.

Overview of Magento 2 CCPA Extension

CCPA Module from Plumrocket is an all-in-one CCPA solution for Magento 2 that comes with easy to use Privacy Center Dashboard and flexible admin settings to ensure the compliance of your store with the California Consumer Privacy Act of 2018 (Senate Bill No. 1121).

All Features:

  • Features for Customers
    • Privacy Center Dashboard
      • Magento 2 CCPA extension adds a new section in the Magento Customer Account - “Privacy Center” with a list of CCPA options and Privacy FAQ.
      • In the Privacy Center dashboard, the customer can choose to view the Privacy Policy, Cookie Policy, submit the Do Not Sell Personal Info Request, Update Email Preferences, Download Account Data, and Delete Personal Information.
    • Account Data Download
      • Consumers can download their account data as per Section 1 of the CCPA – “The "Right To Access" Personal Information in Portable Format. The data will be provided in both human-readable and machine-readable formats (Excel, CSV). Customers can later transfer their personal data to another service (eCommerce store or another location).
    • Account Data Removal
      • Users can request to remove their personal data from your store. Section 2 of CCPA - the "Right To Delete" Personal Information allows them to do so. Within 24 hours all personal data will be automatically deleted and anonymized.
      • Customers can cancel data removal requests when they sign-in to their account within 24 hours after the data removal request was submitted. Administrators can do the same from the Magento backend.
      • CCPA plugin will prevent customers with pending orders from deleting their accounts until all orders are completed or canceled.
      • All account removal requests and data download requests are password-protected to ensure the security of customer accounts.
    • Do Not Sell My Personal Information
      • Consumers can submit a request to prevent merchants from selling their personal information. This CCPA feature allows both guest users and registered customers to submit this form on a separate page. Customers can access this form at any time from the Privacy Center Dashboard and change their preferences.
    • Cookie Consent Notice
      • With the CCPA Cookie Consent Banner enabled, customers, can choose whether to allow usage of all non-essential cookies. All essential cookies required for the proper functioning of the Magento 2 store will continue to work.
    • CCPA Consent & Opt-In
      • Customers can provide consent to the Privacy Policy, Cookie Policy, or any other policy on the account registration page, checkout page, contact us page, and newsletter subscription pages.
    • Popup and Email Notifications
      • Customers can be notified about any policy update via popup notification.
      • Transactional emails are used to notify customers about all account removal requests and data download requests.

  • FEATURES FOR MERCHANTS
    • Account Data Download
      • The following data can be downloaded from the Customer Account in CSV file format - customer information, addresses, full order history, reviews, price and stock alerts, products in the cart, wishlist, compared products, etc
      • Additional information can be exported from Magento using the provided API. Follow our developer’s guide if you need to include customer data from your third-party extensions in the downloadable ZIP archive.
      • Admin can track all account download requests via “Log of Account Data Downloads” in Magento Admin.
    • Account Data Removal
      • Magento order history will be anonymized and kept in the database as “Guest Orders” for accounting purposes
      • By default, the CCPA extension will delete all personal data and anonymize Magento Orders. However, the provided CCPA API allows you to change default settings and anonymize all customer data instead of deleting it.
      • Admin can cancel all pending data removal requests directly from the “Log of Account Removal Requests”.
    • Do Not Sell My Personal Information
      • Merchants can view a full history of customer activity on “Do Not Sell My Personal Information” at the “CCPA Action Log” page. This page displays when the user allowed and denied to sell their personal information.
      • Merchants can view and download the list of unique opt-out requests at “Customer Opt-out List”. Users who denied the sale of their personal information can be exported in CSV file format.
    • Cookie Consent Notice
      • Cookie Notice functionality is based on Plumrocket Cookie Consent Extension for Magento 2.
      • Cookie functionality allows enabling cookies only after the customer consent is given.
      • Your visitors can manage cookie consent categories and view all listed cookies in the cookie settings panel.
    • CCPA Consent & Opt-In
      • Plumrocket CCPA extension allows admin to add custom consent checkboxes in multiple locations on Magento frontend and track all customer consents via “Log of Customer Consents” in the Magento backend.
      • Each Consent Checkbox can be separately configured to be displayed only to visitors from California State.
    • CCPA Settings in CMS Pages
      • CCPA functionality will be automatically integrated into all CMS pages and can be enabled for each page separately.
      • Admin can enable versions for specific CMS pages and view revision history.
    • Popup and Email Notifications
      • Enable popup notifications and notify customers about policy updates upon successful login. This is useful when asking customers to agree to the updated version of the "Privacy Policy", TOS, Cookie Policy, or any other agreement.
      • Extension intercepts all login & registration attempts via Social Login (Facebook Login, Twitter Login, or other social networks) and displays Popup Notification requiring customers to agree before using the website.

  • 100% open code Magento 2 extension

Reviews of Magento 2 CCPA Extension

Every customer will automatically receive a 100 reward points for each approved review.

Write a Review
  • The best solution for our needs.
    United States Germain Brivio posted on December 10, 2021. Review for Magento 2.x
    I needed a CCPA-compliant solution for my forms, which was easy to install and not overpriced. I can highly recommend this extension.
  • Customer photo
    Amazing!
    Turkey ERCAN KÖKSEL posted on January 31, 2020. Review for Magento 2.x
    Easy to use and edit with handy tips. Support was great and very helpful and informative. Very well designed and flexible to use all over my website. Thank you Plumrocket!
  • Best GDPR extension and good support
    I'm using it on: www.saidagustoespresso.com
    Italy Fiorita Vittoria posted on December 19, 2019. Review for Magento 2.x
    Perfect fits GDPR needs, the extension didn't cause any problems after installation. Some fix needed, resolved in 3 days by Plumrocket team with ticket support.
  • Plumrocket and no problems :)
    I'm using it on: imoli2.pl, imoli1.pl, everlastingbrows.com, imoli3.pl
    Poland Radosław Mól posted on November 29, 2019. Review for Magento 2.x
    The module works without any problems. We had to add domains to the test servers and this also went quickly and without problems. Plumrocket creates very good extensions for Magento.recomend Plumrocket. Great extension and support! Thank you.
  • Customer photo
    Great and no issues
    I'm using it on: jendeindustries.com
    United States chris taylor posted on April 13, 2019. Review for Magento 2.x
    Only reason for a 4 star the price as always is a bit much with them.
    Only complaint about plum rocket is they seem lazy on maintaining extensions any times you will buy it and is out dated and needs fixing on their end, they do get it fixed within 3 or so days but instead of maintaining them they wait for clients to raise an issue.
  • It is my favorite GDPR extension
    I'm using it on: forcuties.com
    Bulgaria Teodor Tihin posted on January 07, 2019. Review for Magento 2.x
    This is my second extension from Plumrocket and it works like a charm, like the first one.
    It is highly customizable and covers all my GDPR needs.
    I lost many hours in discovering until I found this.
    I recommend it!
Show All 6 Reviews

Change Log of Magento 2 CCPA Extension

Last Update:  May 11, 2022
Legend:  - new feature - bug fix
CCPA Extension for Magento 2 - v2.1.1 Apr 05, 2022

v2.1.1 - Apr 05, 2022

  • Fixed a db_schema installation error

v2.1.0 - Mar 09, 2022

  • Added Opt-Out Admin Notifications
  • Migrated install/upgrade scripts to declarative schema
  • Minor changes and improvements

v2.0.2 - Oct 25, 2021

  • Minor changes and improvements

v2.0.1 - Apr 08, 2021

  • Fixed an issue when a user changed the Default Billing Address to California and still could not use the Do Not Sell My Personal Information page

v2.0.0 - Nov 05, 2020

  • CCPA bundle is released. Starting from this version all CCPA specific functionality is separated from the Data Privacy extension. This version of Magento CCPA bundle now includes a number of additional extensions - CCPA, Data Privacy Extension, Cookie Consent Extension, Geo IP Lookup Extension.

v1.0.1 - Sep 17, 2020

  • Improved compatibility with MSP_ReCaptcha extension.

v1.0.0 - Jul 30, 2020

  • Created CCPA Magento 2 Extension
Cookie Consent Extension for Magento 2 - v1.5.0 May 05, 2022

v1.5.0 - May 05, 2022

  • Added support of Google Tag Manager Consent Mode, now the administrator can flexibly adjust how each individual Google Tag will work depending on the client's cookie agreement

v1.4.1 - Apr 12, 2022

  • Added support of Magento 2.4.4 version
  • Minor changes and improvements

v1.4.0 - Mar 21, 2022

  • Added a new way to integrate third-party scripts with the extension functionality, read more details in the updated Developer Guide
  • Minor changes and improvements

v1.3.0 - Feb 04, 2022

  • Migrated install/upgrade scripts to declarative schema
  • Discontinued support of Magento 2.2.x
  • Minor changes and improvements

v1.2.5 - Jan 28, 2022

  • Fixed the compatibility issue with the default Magento Cookie Restriction Mode. When a site visitor has accepted default Magento Cookie Restriction Notice, the Cookie Consent Banner provided by the extension does not appear
  • Minor changes and improvements

v1.2.4 - Oct 25, 2021

  • Minor changes and improvements

v1.2.3 - Sep 21, 2021

  • Fixed ACL settings for admin users
  • Minor changes and improvements

v1.2.2 - Jun 18, 2021

  • Fixed an issue with ModSecurity that prohibited the use of “*” (asterisk) in SQL queries and blocked access to the site (REQUEST-942-APPLICATION-ATTACK-SQLI rule). The use of “*” is changed to “all” when users accept all cookies

v1.2.1 - Mar 26, 2021

  • Fixed Cookie Consent Log grid filtering by Email field

v1.2.0 - Feb 17, 2021

  • Added the ability to add a link to the footer "Cookie Settings" which opens the Cookie Settings Panel
  • Added Cookie Settings Button widget to display "Cookie Settings" button or link
  • Added "Cookie Settings" link on the "My Privacy Center" page in the Data Privacy module
  • Resolved PHP error that occurred during module installation.
  • Fixed the setting Cookie Settings Panel → Decline Button → Show. The button disappears when enabled, previously it was always displayed regardless of the setting

v1.1.2 - Jan 28, 2021

  • Minor changes and improvements

v1.1.1 - Dec 10, 2020

  • Added the ability to set blur background under the Cookie Consent Banner
  • Added the ability to set cookies in a free format, such as cookie_ *, where the asterisk replaces any number of characters.
  • Minor changes and improvements
  • Fixed Cookie Consent Banner option - "Overlay Background Color"

v1.1.0 - Oct 16, 2020

  • Added the ability to display Cookie Banner as a pop-up
  • Added the ability to block the site (Full-Screen Cookie Wall) until a customer allows the use of cookies or configures cookies.
  • Added the ability to select the categories to be chosen in Settings Panel when a customer first enters to configure cookies by category

v1.0.2 - Sep 17, 2020

  • Corrected the display of the "Duration" field's description on "Edit Cookie" page in the backend.
  • “Decline All“ action is now recorded in a log when “Decline All“ or “Decline“ is selected.

v1.0.1 - Aug 05, 2020

  • Fixed a bug when Cookie Restriction Mode was always disabled if our module was disabled.
  • Fixed cookie "user_allowed_save_cookie", now the cookie is saved in the same format as it is saved by default in Magento.

v1.0.0 - Jul 30, 2020

  • Created Cookie Consent Magento 2 Extension
Data Privacy Extension for Magento 2 - v3.2.1 Feb 02, 2022

v3.2.1 - Feb 02, 2022

  • Fixed anonymization of user emails in the Removal Requests grid

v3.2.0 - Dec 02, 2021

  • Added the ability to delete and anonymize user data from the admin panel
  • Minor changes and improvements

v3.1.0 - Oct 25, 2021

  • Improved module architecture to simplify customizations and third-party integrations
  • Discontinued support of Magento 2.2.x

v3.0.3 - Apr 08, 2021

  • Fixed the display of the My Consents link on the My Privacy Center page. Now it is hidden from guests. Previously, when clicking on the My Consents link, guests were redirected to a 404 page.

v3.0.2 - Dec 21, 2020

  • Added integration with Plumrocket Popup Login extension.

v3.0.1 - Nov 13, 2020

  • Added integration with Plumrocket LGPD Magento 2 Extension

v3.0.0 - Nov 05, 2020

  • From this version CCPA and GDPR functionality has been separated into two new products. Please check CCPA Extension and GDPR Extension changelogs for more information.

v2.0.4 - Oct 23, 2020

  • Resolved PHP error of sorting Consent Log grid by Email field.

v2.0.3 - Aug 28, 2020

  • Fixed error “Registry key "prgdpr_skip_save_consents" already exists“ that occurred while registering via social network using Social Login Pro

v2.0.2 - Aug 13, 2020

  • Added compatibility with PHP 7.4
  • Minor changes and improvements
  • Fixed error “We can't save the customer“ occurred during registration with a subscription

v2.0.1 - Aug 01, 2020

  • Fixed issue with consent checkboxes disappearing when customers switch payment methods at the checkout on IE 11

v2.0.0 - Jul 30, 2020

  • Renamed extension to Data Privacy
  • CCPA functionality is separated into CCPA extension (included with this version of Data Privacy extension)
  • Cookie management functionality is separated into Cookie Consent extension (included with this version of Data Privacy extension)
  • Added support of widgets in CMS page that is displayed in a pop-up related to consent checkbox

v1.7.6 - Jul 09, 2020

  • Fixed PHP error that appeared when personal data was downloaded.

v1.7.5 - May 25, 2020

  • Added integration with Newsletter Popup extension

v1.7.4 - Apr 08, 2020

  • Fixed the bug with data export for Magento Cloud

v1.7.3 - Mar 16, 2020

  • Fixed errors when exporting or deleting the data

v1.7.2 - Feb 27, 2020

  • All guests consents are recorded and can be viewed in 'Log of Customer Consents' in the backend
  • Fixed an issue with check-box displayed on "My Consents" page not related to Geo Location of the customer

v1.7.1 - Feb 19, 2020

  • Fixed error that was displayed during the module update to the latest version

v1.7.0 - Feb 18, 2020

  • Added "My consents" page

v1.6.0 - Jan 30, 2020

  • Added a possibility to upload and delete personal information for guests.

v1.5.1 - Jan 27, 2020

  • Fixed compatibility with Magento 2.2.0

v1.5.0 - Jan 13, 2020

  • Added an ability to enable CCPA functionality only for California Residents
  • Improvements of "Do Not Sell My Personal Information" for the guests
  • Minor changes and improvements

v1.4.5 - Dec 20, 2019

  • CCPA update: Added "Do Not Sell My Personal Information" Page for guests and customers. All requests are now recorded in a separate data grid in Magento backend.

v1.4.4 - Dec 13, 2019

  • Added support for California Consumer Privacy Act of 2018 ('CCPA')

v1.4.2 - Oct 28, 2019

  • Fixed the issue with the configuration of Consent Location check-box

v1.4.1 - Oct 04, 2019

  • Fixed error in XMLHttpRequest on account's page
  • Fixed error with duplicated pop-up display after clients confirmation

v1.4.0 - Jun 28, 2019

  • The consent checkboxes are moved to the separate grid in backend
  • Added possibility to create the custom locations for consent checkboxes
  • The simplified custom display of consent checkboxes on any page
  • Discontinued support of Magento 2.1.x
  • Fixed issue with data export of Magento customer on the nginx servers

v1.3.1 - Mar 25, 2019

  • Improved compatibility with smartwave themes
  • Fixed issue with customers' data removal on their demand
  • Minor improvements and fixes

v1.3.0 - Jan 25, 2019

  • Added the support of Magento Enterprise
  • Fixed a bug for Single Store Mode

v1.2.0 - Oct 25, 2018

  • Added a possibility to make checkboxes optional
  • Add new position where checkboxes can be located - Contact Us page
  • Added possibility to Decline Cookies
  • Fixed issue with clicking on checkbox link, when CMS is not set for it
  • Optimized the consent logs recording process
  • Minor changes and improvements

v1.1.1 - Oct 18, 2018

  • Improved support of SmartWave Porto Magento Theme
  • Improved support of Infortis Ultimo Magento Theme
  • Improved support of Weltpixel Pearl Magento Theme
  • Fixed argument error on Checkout Page
  • Fixed error with Amazon Pay on Checkout Page

v1.1.0 - Sep 20, 2018

  • Added integration with Plumrocket GeoIP Lookup Magento extension
  • Added tracking of cookies consent in admin logs
  • Fixed incompatibility issues with Magento versions 2.1.x
  • Fixed error that occurred during export of wishlist products, that are out of stock
  • Minor improvements
  • Minor bug fixes

v1.0.1 - Sep 13, 2018

  • Fixed error on the checkout when extension is disabled
  • Minor improvements

v1.0.0 - Jul 19, 2018

  • Released GDPR Extension for Magento 2
GeoIP Lookup Extension for Magento 2 - v1.3.1 May 11, 2022

v1.3.1 - May 11, 2022

  • Fixed extension installation error related to invalid db_schema.xml

v1.3.0 - May 02, 2022

  • Added support of Magento 2.4.4 version
  • Discontinued support of Magento 2.2.x
  • Migrated install/upgrade scripts to declarative schema

v1.2.5 - Oct 25, 2021

  • Updated the Iptocountry base
  • Minor changes and improvements

v1.2.4 - Mar 30, 2021

  • Minor changes and improvements

v1.2.3 - Dec 21, 2020

  • Minor changes and improvements
  • Resolved an issue of identifying a user's IP address if a site uses Cloudflare CDN

v1.2.2 - Jul 30, 2020

  • Added integration with Cookie Consent extension.

v1.2.1 - Jul 14, 2020

  • Minor changes and improvements

v1.2.0 - Jul 07, 2020

  • Discontinued support of Magento 2.1.x
  • Added integration with Cookie Consent module.
  • Changed API URL format
  • Fixed 500 Internal Server Error when using GeoIP API

v1.1.3 - Dec 13, 2019

  • Added support for CCPA
  • Minor fixes in the design of the backend

v1.1.2 - Oct 04, 2019

  • Updated code to be in line with the latest Magento coding standards (EQP3)

v1.1.1 - Apr 03, 2019

  • Minor improvments

v1.1.0 - Nov 21, 2018

  • Added the support of service priority selection via code and API
  • Improved support of IpApi.com (previously called Nekudo)
  • Optimized Maxmind performance

v1.0.0 - Sep 20, 2018

  • Created GeoIP Lookup for Magento 2