Note: This article is for information only and does not constitute legal advice. For a legally binding assessment, please consult a licensed attorney.
TL;DR
- Building the § 356a BGB withdrawal button yourself is technically possible — the effort is not the button, but the detailed legal requirements and ongoing maintenance.
- Realistic DIY cost: a one-off several thousand euros of development plus ongoing upkeep on every legal or theme change.
- A single misimplemented requirement (forced login, mandatory reason, missing acknowledgment) is enough for a warning — typically €500–€2,500 per case.
- A vetted app like Retractly shifts the implementation and maintenance risk — with a permanently free plan.
The button is not the problem
Adding a "Vertrag widerrufen" button is trivial. What gets expensive and risky is the sum of detailed legal requirements from § 356a BGB that must all be correct at once:
- exact labelling ("Vertrag widerrufen" / "Widerruf bestätigen")
- placement reachable from every subpage, visually highlighted
- login-free access for guest orders too
- two-step flow with limited mandatory fields (no mandatory reason)
- automatic acknowledgment on a durable medium with content + date + time
- a confirmation text that does not imply validity
- a complete audit trail as burden of proof
- for cross-border: all relevant EU official languages
Each point is its own warning ground. The full list is in the 12-point checklist.
The hidden costs of DIY
| Cost block | DIY | Vetted app |
|---|---|---|
| Initial development | several thousand € (flow, form, mail, audit trail) | €0 (install) |
| Legal sign-off | needed separately | needed separately (legal texts remain your task) |
| Multilingual support | extra effort per language | included (24 EU official languages) |
| Maintenance on legal change | developer effort each time | by the provider |
| Maintenance on theme/Shopify update | regression risk on every update | by the provider |
| Warning risk on error | borne by you alone | reduced via vetted implementation |
Initial development is just the tip. The real item is ongoing upkeep: § 356a is new; interpretation and case law will evolve. A DIY solution must be updated on every change — otherwise it silently goes stale.
The warning scenario
The math: a single warning typically costs €500–€2,500 (attorney costs + cease-and-desist with a contractual penalty on repeat). On top, insufficient information extends the withdrawal deadline to 12 months + 14 days — i.e. customers can still withdraw months later. That quickly exceeds the savings of a DIY build. More: Avoiding withdrawal-rights warnings.
When DIY can still make sense
Being honest: DIY can fit if you
- have your own dev team with legal/compliance support,
- run a headless/custom architecture no standard app integrates cleanly into,
- want the flow deeply embedded in internal systems (ERP, CRM) anyway.
For most standard Shopify setups, the maintenance and risk advantage of a vetted app prevails.
What to look for in an app
- Correct labels out of the box (not freely editable into unlawful texts)
- Login-free flow, for guests too
- Acknowledgment as a durable medium (email is sufficient — a PDF is not legally required)
- EU hosting & GDPR: DPA, documented data processing
- Audit trail for burden of proof
- Multilingual support if you sell cross-border
Retractly meets these: menu link on onboarding (no theme code), login-free customer portal, statutory labels, automatic acknowledgment as a durable medium per Art. 11(3) Directive 2011/83 in 24 EU official languages, EU hosting in Frankfurt, audit log. There is a permanently free plan with unlimited withdrawals; the Pro plan unlocks email branding and Shopify Flow triggers, among others. The step-by-step guide shows the concrete rollout.
The app provides the technical implementation. The substantive accuracy of withdrawal instructions and other legal texts remains — whether DIY or app — your responsibility, to be reviewed by a lawyer.
FAQ
What is cheaper? Short term, DIY without license fees seems cheaper; factoring in maintenance and warning risk, usually not.
Can an app cover everything? The technology yes. Legal texts (withdrawal instructions, privacy) remain your task.
Do I need a PDF for the confirmation? No. The email is sufficient as a durable medium (Art. 11(3) Directive 2011/83).
What does Retractly cost? There is a permanently free plan with unlimited withdrawals. Current prices are shown in the Shopify App Store.
Further reading:
- Retractly — EU withdrawal button for Shopify
- Withdrawal button checklist 2026: 12 points
- Setting up the withdrawal button in Shopify: guide
- Avoiding withdrawal-rights warnings
Primary legal sources: § 355 BGB · § 356 BGB · § 312k BGB · EU Directive 2023/2673