SHOPIFY AGE GATE GUIDE

How a Shopify age gate should fit the order flow

UPDATED AUGUST 28, 2026 · 7 MINUTE READ

A storefront age popup and an ID review solve different problems. The popup asks a visitor to acknowledge the store's minimum age. A post-purchase review lets staff examine an ID connected to a real, paid Shopify order before fulfillment. Keeping those moments separate makes the customer experience and the merchant workflow easier to understand.

What a Shopify age gate does—and does not do

A Shopify storefront age gate is usually a Yes/No or date-entry prompt shown before a visitor browses. It can communicate a store's age policy and discourage visitors who do not meet the minimum age. On its own, it does not authenticate an identity document or prove that the answer is true.

Age Gate App keeps that distinction visible. The storefront prompt is an acknowledgement. The ID request is a separate step shown only after Shopify confirms the order. Store staff—not the popup and not an AI score—make the final review decision.

The four-step Shopify-only flow

1. 1

   Age acknowledgement before browsing

   The visitor confirms that they meet the store's configured minimum age. The prompt can inherit the active theme's type and colors. No ID image is collected here.

2. 2

   The customer shops and pays first

   The customer uses the normal Shopify storefront and checkout. Age Gate App waits for a paid-order signal; it does not place an ID-upload form inside browsing or payment.

3. 3

   ID upload after payment

   On the Shopify Thank You surface, the customer can choose a JPEG or PNG from a phone. The app accepts it only for the specific paid order in the signed Shopify buyer context.

4. 4

   Staff review before fulfillment

   Authorized staff open the embedded app in Shopify admin, inspect the submission, and approve, reject, or request a clearer image. The decision remains connected to the order.

Payment happens before the ID request. Merchants must make that sequence clear in their own storefront policies and should confirm review status before fulfillment.

Where submitted ID files are stored

Age Gate App is built only for Shopify stores, but sensitive files are not placed in a theme, a product record, or the merchant's public Shopify Files library. They are stored in private, app-managed object storage with public access disabled.

• Every accepted image is bound to the same Shopify store and paid order that created the upload capability.
• A staff member must have an authenticated Shopify admin session for that store before the app will authorize a view.
• The image is presented through a short-lived access link instead of a permanent public URL.
• Merchants choose a raw-image retention period from 1 to 30 days; the decision status can remain connected to the order after the raw image is deleted.

The first release does not extract a date of birth, address, or ID number into structured fields. It does not use submitted images to train an AI model. Support tickets are text-only so merchants do not create a second, unmanaged copy of an ID.

What the merchant configures in Shopify

1. Install Age Gate App and review its data-access permissions.
2. Choose the minimum age, popup wording, appearance, memory period, and ID-image retention setting in the embedded app.
3. Enable the storefront app embed in Shopify's Theme Editor.
4. Add the ID-upload block to the Shopify Thank You page and the status block to the supported customer order-status surface.
5. Run a paid test order from entry through deletion before enabling the all-orders workflow.

Version one is intentionally simple: when the review workflow is enabled, it applies to every newly paid order. It does not yet select orders by product, collection, market, or sales channel.

Manual review versus automatic ID verification

Neither approach automatically makes a store compliant everywhere. Merchants remain responsible for choosing a process appropriate for what they sell, where they sell, and how they fulfill orders.