Consent modes (Settings): Shopify consent (default) follows Shopify's Customer Privacy API. Strict only runs after window.aicro.consent(true). Off is for stores outside consent jurisdictions.
Without consent, shoppers see your original store, and nothing is stored or sent.
Event records contain a pseudonymous visitor ID, page type, device class and order value. They contain no names, emails, addresses or IP addresses.
Retention: events older than your retention setting are deleted daily.
GDPR webhooks:customers/data_request, customers/redact and shop/redact are handled. Shop redaction deletes all of that store's data.