On 23 September the ChatGPT Ads app in the Shopify App Store stops being an American product. OpenAI’s announcement of 16 September puts it plainly: the app “will be available internationally in markets where ChatGPT Ads are available starting September 23”. Ireland has been one of those markets since 24 August, when ChatGPT Ads went live across 31 European markets on the Free and Go tiers. So within days an Irish merchant will be able to add a first-party OpenAI app to their store in about ninety seconds.
Most of the coverage has gone to the other half of that announcement, the Sponsored Agents test. We read the app listing instead. The part nobody is quoting is the data access section, and it is the part that turns a marketing decision into an engineering one.
TL;DR
- The ChatGPT Ads Shopify app goes international on 23 September 2026, covering Ireland and the other 30 European markets where ChatGPT Ads already run.
- Its declared data access includes customer names and email addresses, IP addresses, browser and OS, browsing behaviour and client ID cookies, plus edit rights over your web pixels and server pixels.
- In the EEA, Shopify will not fire those pixels without a synced consent signal, so a third-party cookie banner that does not talk to Shopify’s Customer Privacy API will quietly report zero conversions.
- Sponsored Agents, the conversational format, is a US-only test today, but it is why your product catalogue is about to be read as sales copy rather than displayed as a grid.
- Leave AI text customisation switched off until somebody owns the review of rewritten and auto-translated product claims.
What actually ships on 23 September
The app itself is not new. The listing records a launch date of 3 September 2026, so it has been live for US merchants for a fortnight. What changes next Wednesday is eligibility, not functionality.
The listing describes five things: connect or create a ChatGPT ad account from inside Shopify, automatically sync your product catalogue to ChatGPT Ads Manager, build ads from that catalogue in a few clicks, run campaigns using a Shopify pixel and conversion events, and report on all of it without leaving Shopify admin.
Sponsored Agents are a separate matter, and worth stating accurately. After clicking an ad, a user can choose to open a clearly labelled conversation with a business-sponsored agent, distinct from ChatGPT’s own answers and separate from the conversation the user was already having. That is in test with selected advertisers in the United States only. It is, however, the direction of travel, and it changes what your catalogue is for.
The install button is a data protection decision
The listing’s data access section reads as follows.
Under customer data: sensitive data, meaning name and email address; and device and activity data, meaning IP address, browser and operating system, browsing behaviour and client ID cookie. Under staff and contributor data: the store owner’s name, email address, phone number and physical address. Under view and edit store data: customers’ browsing behaviour, product listings and collections, marketing events, and, last on the list and first in importance, web pixels and server pixels.
Read that final line again. Installing the app grants the ability to edit the tracking configuration of your storefront, client side and server side. That is a legitimate requirement for an ads integration, and every comparable app asks for something similar. The point is that one person with admin rights can grant all of it without a single conversation with whoever owns your privacy notice.
For an Irish store, that install triggers real paperwork. Your record of processing activities gains a recipient. Your privacy notice gains a category of disclosure to a US company. Your cookie banner gains a vendor, and Regulation 5(3) of S.I. 336/2011 requires consent before non-essential tracking technologies are used at all, with the narrow communications and strictly necessary exemptions in 5(5) doing none of the work here. None of that is difficult. All of it is a week of lead time you do not have if the app goes in on Wednesday afternoon.
The consent plumbing decides whether any of it measures anything
This is the failure mode we expect to see most, and it will be misdiagnosed as poor channel performance.
Shopify’s web pixel extensions honour consent signals through the Customer Privacy API. In markets configured to require consent, which in practice means the EEA and the UK, a pixel only runs once the visitor has granted every permission that pixel declares as required. If you manage consent with a third-party banner app, that app must sync the visitor’s choice back to Shopify through the Customer Privacy API. If it does not, the consent your customer gave exists only in your banner, Shopify never hears about it, and the pixel never fires.
The merchant’s experience of that bug is not an error message. It is a campaign that spends and reports nothing, or reports a fraction of what it drove. Server pixels complicate it further in a useful direction: they do not depend on browser cookies and instead match events on first-party identifiers such as email address or phone number, which is precisely why the app asks for name and email in the first place. Better attribution, and a higher bar for the lawful basis you are relying on. It is the same exercise as auditing the third-party scripts already on your storefront, with a deadline attached.
Your catalogue stops being a grid and becomes an answer
OpenAI’s own illustration of a Sponsored Agent is a shopper who sees a dining table and wants to know whether it fits their space, how many people it seats and how to care for the finish. Those are attribute questions, and the app’s automatic catalogue sync is what supplies the grounding for them.
Almost no merchant writes product data for interrogation. Descriptions are written to look right in a grid and to rank, which means the useful specifics live in a PDF, in a support macro, or in the head of whoever answers the phone. The gap between what a buyer asks before purchasing and what exists as structured data in your catalogue is about to become a revenue line rather than a tidiness problem, and whatever is missing is what your ads cannot answer on any AI surface, not just this one. That is the same measurement problem we described when Google AI Mode turned out to overlap traditional search results by 1.28%.
Leave AI text customisation switched off
One feature in the 16 September release deserves a deliberate decision rather than a default. AI text customisation is opt-in, and when enabled it adapts your existing headlines and descriptions to fit the context of a conversation and automatically translates them into the user’s preferred language. If you sell anything with a specification, a certification, a dosage, a warranty term or a regulated descriptor, that generates claims you have not approved, in languages your team may not read, at a volume nobody reviews. Opt-in is the correct default and we would leave it there until two things exist: a named owner for ad copy claims, and a sampling process that reads the generated variants in each market.
One number on that listing is worth ignoring on purpose. It sits at 3.0 from ten reviews, 40% five stars and 60% one star with nothing in between, and the five-star reviews were posted after one minute and twenty-six minutes of use respectively. That is install-day sentiment from a sample of ten, and it is the only evidence European merchants will have on Wednesday. Treat the first fortnight as a pilot with a named owner and a rollback plan.
What to do before Wednesday
- Update the record of processing activities and the privacy notice before the app goes in, not after. Name the US recipient and the transfer basis you are relying on.
- Confirm your consent platform syncs to Shopify’s Customer Privacy API, and test an accept path and a reject path end to end before you spend anything.
- Pull the twenty most common pre-sales questions from last quarter’s support inbox and fix the top five as structured product fields rather than prose.
- Set a spend cap and a two-week review date. Judge the channel on your own attribution, not the app’s.
The pattern is one we keep meeting: a capability arrives as a one-click install, and the click quietly relocates responsibility from a vendor’s roadmap onto your compliance and measurement stack. The install is free. The plumbing is the work.
REPTILEHAUS builds that plumbing: consent management that reaches the platforms it claims to govern, server-side measurement that survives an audit, and product data structured for the surfaces your customers already use. If you are planning to be in ChatGPT Ads this quarter, get in touch and we will pressure test the setup before it costs you a month of data.
📷 Photo by Kelly Sikkema on Unsplash
