Advertising

AdRiver

AdRiver is a Russian third party ad server and ad tech platform operated by Internest LLC. It serves display, video and rich media creatives, manages frequency capping, and tracks impressions, clicks and conversions through persistent cookies on adriver.ru. Because data is transferred to Russia (no adequacy decision) and AdRiver places third party advertising cookies, it is one of the highest risk vendors to deploy on European websites under GDPR and ePrivacy.

Overview

What does AdRiver do?

What is AdRiver?

AdRiver is a Russian third party ad serving and ad tech platform operated by Internest LLC since 2001. It targets advertisers, agencies and publishers in the Russian and CIS markets, supporting display, video, mobile and rich media campaigns with audience targeting, retargeting and brand lift studies. AdRiver historically served as the Russian counterpart to international ad servers like DoubleClick.

Cookies and data collected

AdRiver places persistent third party cookies on adriver.ru, including bt (browser identifier), cid (campaign identifier) and several capping and audience cookies. Server side it logs IP, user agent, timestamp, referring URL and page targeting context. The bt cookie can persist for up to 24 months, supporting cross site retargeting.

GDPR and ePrivacy implications

AdRiver writes non essential third party advertising cookies. Article 5(3) ePrivacy and Article 6(1)(a) GDPR require prior consent. Russia has no EU adequacy decision and is treated as a high risk third country following EDPB recommendations 1/2020 and the post Schrems II case law. Many EU controllers have removed AdRiver from their stacks since 2022.

Consent and transfer requirements

Even with consent, transfers must be supported by SCCs and supplementary measures (encryption, pseudonymisation) plus a thorough Transfer Impact Assessment. Russian Federal Law 152 FZ requires data localisation for Russian residents which conflicts with GDPR principles. The EDPS has flagged Russia as a jurisdiction where access by public authorities is essentially uncontrolled.

Risks for European deployments

In addition to the standard advertising tracking risks, deploying AdRiver on EU facing websites carries reputational, legal and political risks since 2022 EU sanctions on Russia. Most European DPAs and DPOs recommend either replacing AdRiver with an EU based ad server or excluding EU traffic from AdRiver delivery via geofencing.

Practical compliance steps

If AdRiver must remain, sign SCCs Module 2 with supplementary measures, conduct a TIA, restrict AdRiver loading to non EU traffic via server side geofencing, document a strict retention policy and disclose the Russian transfer prominently in the privacy notice. The safer option is to migrate to an EU based ad server (Adform, Equativ).

Compliance

AdRiver and the GDPR

AdRiver is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR + Art. 5(3) ePrivacy) is required for AdRiver advertising cookies and cross site identifiers. Legitimate interest does not apply.
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive, Russian Federal Law 152 FZ on Personal Data, Russian Data Localisation Law

Impact assessment (DPIA)

A DPIA is mandatory. Cross site advertising tracking combined with transfers to a non adequate jurisdiction (Russia) creates a high risk of unlawful access by foreign authorities and lacks effective redress for European data subjects. Most EU DPOs recommend against deploying AdRiver on websites targeting EU audiences.

Sample text for your banner

We use AdRiver to deliver and measure third party advertising on this website. With your consent, AdRiver places third party cookies on your device. AdRiver processes your data in the Russian Federation. You can manage your preferences in the cookie settings.
Cookies and trackers

What AdRiver sets and contacts

Tracking method
Russian third party ad server, programmatic ad delivery, persistent advertising cookies on adriver.ru, cross site frequency capping and reporting
Server location
Russian Federation (AdRiver is operated by Internest LLC, headquartered in Moscow)
Data transferred outside the EU
Data is processed in the Russian Federation, which has no EU adequacy decision. Following the Schrems II ruling and EDPB guidance, transfers must rely on Standard Contractual Clauses with supplementary measures and a thorough Transfer Impact Assessment. Russia is now considered a high risk jurisdiction by most EU DPOs.

Cookies set (3)

NameTypeDurationPurpose
btpersistent24 monthsPersistent third party browser identifier set by AdRiver on adriver.ru used for cross site retargeting and audience profiling.
cidpersistent12 monthsCampaign identifier cookie attributing visits and conversions to specific AdRiver advertising campaigns.
cappersistent6 monthsFrequency capping cookie limiting the number of times a creative is shown to the browser within a campaign window.

Third-party domains contacted (4)

  • adriver.ru
  • content.adriver.ru
  • ad.adriver.ru
  • mng.adriver.ru
Questions

Frequently asked questions about AdRiver

Can't find your question? Write to us, we answer fast.

What cookies does AdRiver set?

AdRiver sets persistent third party cookies on adriver.ru, mainly bt (browser identifier), cid (campaign identifier) and several capping and audience cookies. The bt cookie can persist for up to 24 months.

Does AdRiver require GDPR consent?

Yes. AdRiver writes non essential third party advertising cookies. Article 5(3) ePrivacy and Article 6(1)(a) GDPR require prior, granular and informed consent. Loading AdRiver before consent is unlawful.

What legal basis applies to AdRiver?

Consent is the only valid basis for the cookies. Even with consent the cross border transfer to Russia must be additionally justified through SCCs and supplementary measures.

Does AdRiver transfer data to Russia?

Yes. AdRiver infrastructure is hosted in the Russian Federation. Russia has no EU adequacy decision and is treated as a high risk third country following EDPB recommendations 1/2020.

Do I need a DPIA for AdRiver?

A DPIA is mandatory. The combination of cross site advertising tracking and a transfer to a non adequate third country triggers Article 35 GDPR and requires documented mitigation measures.

How do I implement AdRiver compliantly?

If unavoidable, sign SCCs Module 2 with supplementary technical measures, conduct a strict TIA, geofence AdRiver away from EU traffic, document a tight retention policy and make the Russian transfer transparent in the privacy notice.

Are there alternatives to AdRiver?

EU based ad servers such as Adform (DK), Equativ (FR), Smart AdServer (FR) or Xandr (Microsoft, US/EU) can replace AdRiver functionality without the Russia transfer risk.

How do I update my cookie policy for AdRiver?

List AdRiver as a third party advertising processor operated by Internest LLC, name cookies bt, cid and capping cookies, retention up to 24 months, Russian Federation as destination, SCC reference, and explicitly mention the Schrems II considerations.

Notix

Notix is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Notix offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Notix empowers organizations to optimize strategy and maximize return on investment.

Marketing

TikTok Pixel

TikTok Pixel is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. TikTok Pixel provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, TikTok Pixel helps deliver the right message to the right audience at the right time.

Marketing

LeadsLeap

LeadsLeap is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. LeadsLeap provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, LeadsLeap helps deliver the right message to the right audience at the right time.

Marketing

SM Sold

SM Sold is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. SM Sold provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, SM Sold helps deliver the right message to the right audience at the right time.

Marketing

Voltn

Voltn is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Voltn enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Voltn empowers marketing teams to achieve measurable growth.

Marketing

A8.net

A8.net is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. A8.net supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, A8.net ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.