Short answer: almost always yes. The platform doesn't decide it; what matters is whether your site sets cookies that aren't strictly necessary. Most Shopify stores and WordPress sites do, through analytics, ad pixels, embedded videos or plugins.
Shopify
Shopify itself uses cookies for things like the cart and checkout, which are strictly necessary. But most stores also add:
- Marketing pixels: Meta Pixel, Google Ads, TikTok, Pinterest
- Analytics: Google Analytics or Shopify's own analytics
- Apps: reviews, chat widgets, upsell apps, email pop-ups
Those need consent from EU visitors before they run. Shopify offers a basic built-in banner in its customer privacy settings. If you want automatic cookie scanning, per-category choices and Google Consent Mode v2, you can use a dedicated consent tool instead. Cookiefy works with Shopify by adding its script to your theme or through Google Tag Manager. Read more about Cookiefy for Shopify.
WordPress
WordPress core only sets cookies for logged-in users and people who leave comments, so a plain WordPress site may set none for ordinary visitors. In practice, though, most sites use plugins that do, for example:
- Statistics: Google Site Kit, MonsterInsights, Jetpack Stats
- WooCommerce add-ons for marketing and tracking
- Embeds: YouTube videos, Google Maps, social media feeds
- Forms and chat that load third-party scripts
Cookiefy has an official WordPress plugin that adds the banner without editing code.
How to know for sure
Don't guess: plugins and apps often add cookies you didn't know about. Run a free cookie scan on your site. If it finds anything other than strictly necessary cookies before a visitor has consented, you need a banner that blocks them until they say yes.
Cookiefy is free for 1 website.
This is general information, not legal advice. For your specific situation, ask a lawyer or your data protection authority.