Overview
Postscript is an SMS marketing platform built exclusively for Shopify merchants. The platform enables e-commerce brands to grow SMS subscriber lists, send promotional text message campaigns, automate SMS flows triggered by customer behavior (abandoned cart, post-purchase, browse abandonment, winback), and run two-way conversational messaging. Postscript integrates deeply with Shopify's customer data, order data, and event infrastructure.
SMS marketing has distinct consent requirements compared to email — US carriers and the TCPA (Telephone Consumer Protection Act) impose strict opt-in requirements for marketing text messages, and Postscript's platform is built around capturing and documenting that consent.
What This Script Does
Postscript's script deploys on Shopify storefronts to power SMS list growth and behavioral trigger tracking:
SMS opt-in popup capture: Postscript's primary on-site mechanism is rendering opt-in popup forms (lightboxes, slide-ins, embedded forms) that invite visitors to subscribe to SMS marketing. The forms collect the visitor's mobile phone number and record their explicit opt-in consent to receive marketing text messages. Postscript stores the consent record — including timestamp, IP address, and the specific opt-in disclosure language displayed — to comply with TCPA documentation requirements.
Behavioral event tracking: To power automated SMS flows, Postscript's script tracks on-site behavioral events: page views (to detect content browsed), product views (which products a visitor looked at), add-to-cart events, checkout initiation, and checkout abandonment. These events feed Postscript's automation engine, which uses them to trigger relevant SMS messages (e.g., an abandoned cart SMS 30 minutes after a visitor leaves mid-checkout).
Session and visitor identification: Postscript sets cookies to identify returning visitors and link their on-site behavior to their SMS subscriber profile. For subscribers who have provided their phone number, Postscript can link subsequent visits (via browser cookie) to the subscriber record, enabling behavioral personalization of SMS campaigns.
Shopify customer data sync: Postscript syncs with Shopify customer records, order history, and product catalog. Subscriber data (phone number, consent record, purchase history, browsing behavior) is stored in Postscript's platform and used for segmentation and campaign targeting.
Conversion attribution: Postscript tracks whether recipients of SMS messages subsequently visit the store and make a purchase, attributing revenue to specific SMS campaigns and flows. Attribution cookies link the SMS click to the subsequent website session and conversion.
Consent & Compliance
Postscript is a marketing platform with layered consent requirements:
- TCPA (US): The TCPA requires express written consent before sending marketing text messages. Postscript's opt-in forms are designed to capture this consent with required disclosure language. Violations of TCPA carry statutory damages of $500–$1,500 per message, making consent documentation critical.
- GDPR / ePrivacy: The behavioral tracking cookies Postscript sets (for abandoned cart trigger detection, visitor identification, and conversion attribution) require prior opt-in consent under the ePrivacy Directive. Phone number collection for SMS marketing requires explicit consent under GDPR Article 6(1)(a). The behavioral profiling connected to SMS targeting requires consent.
- CCPA/CPRA: Phone number collection and behavioral tracking for direct marketing constitutes collection of personal information. California residents have the right to opt out of the "sharing" of personal information for behavioral advertising. SMS marketing using behavioral data may trigger CPRA sharing disclosure requirements.
- Carrier compliance: Postscript operates on US carrier networks (AT&T, Verizon, T-Mobile) and must comply with carrier anti-spam requirements and the CTIA Messaging Principles and Best Practices guidelines in addition to TCPA obligations.
Should You Block This Without Consent?
Yes. Postscript is an SMS marketing automation platform that collects phone numbers for direct marketing outreach and tracks on-site behavioral events for campaign targeting. Both the data collection and the behavioral tracking require explicit consent — under GDPR/ePrivacy in the EU and under TCPA opt-in requirements in the US. Block until marketing consent is obtained.
Is Postscript GDPR compliant?
Postscript typically loads marketing trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Postscript can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Postscript, not on Postscript itself.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
sdk.postscript.ioMarketingsdk.postscript.io is a marketing domain operated by Postscript, used to serve ads, build audiences, and measure ad conversions.
Cookies Postscript Sets (1)
_psFPPostscript first-party visitor identifier for SMS marketing attribution.
Frequently Asked Questions
Related Vendors
Manage consent for Postscript
ConsentStack automatically detects and manages Postscript trackers so your site stays compliant with global privacy regulations.