> How Aimerce handles first party identity resolution, server side tracking and Conversion API forwarding under GDPR and ePrivacy. Consent, transfers, DPIA.
>
> Canonical: https://www.flowconsent.com/en/services/advertising/aimerce

Advertising

# Aimerce

Marketing · [Official website](https://www.aimerce.ai/)

AI driven first party data and marketing attribution platform popular with Shopify and headless commerce brands. It rebuilds the post cookie tracking layer, sends Conversion API events to Meta, Google, TikTok and LinkedIn, and powers audience segmentation.

[Block Aimerce until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=advertising) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Advertising](https://www.flowconsent.com/en/services/advertising)

- Consent

  Marketing

- Prior consent

  Required

- Documented cookies

  5

- Third-party domains

  4

- Servers

  United States (primary)

Overview

## What does Aimerce do?

## **What Aimerce is**

Aimerce is an AI driven first party data platform built for Shopify and headless commerce brands. It installs as a Shopify app or a tag plus server side endpoint, recognises returning visitors with a first party identifier, attributes conversions across channels and sends server side Conversion API events to advertising platforms (Meta, Google, TikTok, LinkedIn, Snap, Pinterest).

## **Data and cookies**

Aimerce sets first party cookies on the merchant domain (visitor ID, session ID, attribution data, consent state), hashes signals such as e mail and phone for advanced matching, and processes URLs, referrers, basket content and order values. The resulting unified profile feeds AI based attribution and audience segmentation.

## **GDPR and ePrivacy implications**

First party trackers used for advertising remain subject to Article 5(3) ePrivacy. The CNIL has confirmed in 2023 and reinforced in 2024 that being first party does not exempt a tracker from consent when it serves marketing or behavioural analytics. Hashed personal data remains personal data under EDPB and CJEU rulings.

## **Consent requirements**

Block Aimerce until prior consent. Mirror the consent state into Aimerce and to each Conversion API. Use Google Consent Mode v2 and IAB TCF v2.2 to forward consent so advertising platforms can react with appropriate default modes.

## **International data transfers**

Aimerce processes data in the United States and forwards it to US based advertising platforms. Transfers must be covered by SCCs and the EU US Data Privacy Framework. Document the partner chain in the DPA records and re evaluate when new advertising integrations are added.

## **Practical compliance steps**

Run a DPIA, sign the Aimerce DPA, host the server side proxy on an EU subdomain when possible, integrate Consent Mode v2 and TCF v2.2, restrict the events forwarded, set short retention for raw events, restrict admin access, document each downstream Conversion API and review configuration after every new advertising partner.

Compliance

## Aimerce and the GDPR

Aimerce is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Article 6(1)(a) GDPR (consent) for behavioural identity resolution and advertising forwarding. Article 6(1)(f) (legitimate interest) is insufficient because the EDPB and CNIL consider this type of cross channel marketing as high impact processing.

- Risk level

  high

- Applicable regulations

  GDPR, ePrivacy Directive, German TTDSG, French CNIL guidance on first party tracking and Conversions API, Spanish LSSI, IAB TCF v2.2, Google Consent Mode v2

### Impact assessment (DPIA)

A DPIA is required because Aimerce performs systematic and large scale behavioural profiling combined with cross channel marketing forwarding under Article 35(3)(a) GDPR. Cover the identity matching, hashed signals, retention, downstream advertising partners and the transfer impact assessment.

### Sample text for your banner

> With your consent we use Aimerce to recognise you on our store, link your interactions across pages and securely forward conversion events to advertising platforms (Meta, Google, TikTok, LinkedIn). Some data is processed in the United States with appropriate safeguards. You can withdraw consent at any time.

Cookies and trackers

## What Aimerce sets and contacts

- Tracking method

  First party JavaScript and Shopify app, server side identity resolution, first party cookies, hashed signals, AI driven attribution and event forwarding to advertising Conversions APIs

- Server location

  United States (primary)

- Data transferred outside the EU

  Aimerce is a US based vendor. Hashed identifiers, event data and audience signals are processed in the United States and forwarded to advertising partners (Meta, Google, TikTok, LinkedIn, Snap), most of them also in the US. Transfers rely on Standard Contractual Clauses and the EU US Data Privacy Framework.

### Cookies set (5)

| Name             | Type | Duration   | Purpose                                                                                                |
| ---------------- | ---- | ---------- | ------------------------------------------------------------------------------------------------------ |
| aimerce\_vid     | http | 13 months  | First party pseudonymous visitor identifier used for cross session and cross device matching.          |
| aimerce\_session | http | 30 minutes | Session identifier for the current visit.                                                              |
| aimerce\_attrib  | http | 30 days    | Stores last and first touch attribution data used by the AI attribution model.                         |
| aimerce\_consent | http | 6 months   | Mirrors the consent state from the CMP so Aimerce only fires when allowed.                             |
| aimerce\_hash    | http | 13 months  | Stores a hashed personal identifier (email or phone) for advanced matching with advertising platforms. |

### Third-party domains contacted (4)

- `aimerce.ai`
- `cdn.aimerce.ai`
- `api.aimerce.ai`
- `collect.aimerce.ai`

Questions

## Frequently asked questions about Aimerce

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Which cookies does Aimerce set?

Aimerce sets first party cookies on the merchant domain: aimerce\_vid (visitor ID, 13 months), aimerce\_session (session, 30 min), aimerce\_attrib (attribution, 30 days), aimerce\_consent (consent state, 6 months) and aimerce\_hash (hashed personal identifier).

### Is user consent required?

Yes. Aimerce does behavioural identity resolution and feeds advertising APIs, which is non essential under Article 5(3) ePrivacy. CNIL guidance is explicit: first party trackers used for advertising or behavioural analytics need consent.

### What is the legal basis?

Article 6(1)(a) GDPR (consent) for behavioural identity resolution and Conversion API forwarding. Legitimate interest under Article 6(1)(f) is not sufficient for this type of cross channel marketing.

### Does Aimerce transfer data to the US?

Yes. Aimerce is US based and forwards events to advertising platforms in the United States. Transfers rely on SCCs and the EU US Data Privacy Framework, documented in the Aimerce DPA.

### Do I need a DPIA?

Yes. Aimerce performs systematic and large scale profiling combined with cross channel marketing forwarding, which falls under Article 35(3)(a) GDPR. Cover identity matching, hashed signals, retention, advertising partners and the transfer impact assessment.

### How do I implement Aimerce compliantly?

Block the snippet and server proxy before consent, mirror consent state to Aimerce and downstream APIs, host the proxy on an EU subdomain when possible, sign the DPA, restrict the events forwarded, set short retention, control admin access, document each Conversion API and review on every new integration.

### What are the alternatives?

Other first party / server side tracking platforms include Stape, Addingwell, Jentis (EU), AdFixus, Snowplow, RudderStack, Segment, Tealium iQ and Google Tag Manager server side containers. EU vendors reduce transfer complexity.

### How do I update the cookie policy?

List Aimerce as a processor, describe the first party cookies, the purposes (identity resolution, conversion measurement, advertising attribution), the retention, the downstream Conversion APIs, link to the Aimerce privacy policy and refresh on every new integration.

Same category

## More services: Advertising

[See the whole category](https://www.flowconsent.com/en/services/advertising)

### [KUKUI](https://www.flowconsent.com/en/services/advertising/kukui)

[KUKUI is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. KUKUI provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, KUKUI helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/kukui)

[Marketing](https://www.flowconsent.com/en/services/advertising/kukui)

·

### [CPEx](https://www.flowconsent.com/en/services/advertising/cpex)

[CPEx is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. CPEx enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, CPEx empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/advertising/cpex)

[Marketing](https://www.flowconsent.com/en/services/advertising/cpex)

·

### [Jeeng](https://www.flowconsent.com/en/services/advertising/jeeng)

[Jeeng is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Jeeng provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Jeeng helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/jeeng)

[Marketing](https://www.flowconsent.com/en/services/advertising/jeeng)

·

### [Curaytor](https://www.flowconsent.com/en/services/advertising/curaytor)

[Curaytor is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Curaytor enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Curaytor empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/advertising/curaytor)

[Marketing](https://www.flowconsent.com/en/services/advertising/curaytor)

·

### [Twyne](https://www.flowconsent.com/en/services/advertising/twyne)

[Twyne is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Twyne enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Twyne empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/advertising/twyne)

[Marketing](https://www.flowconsent.com/en/services/advertising/twyne)

·

### [Interago](https://www.flowconsent.com/en/services/advertising/interago)

[Interago is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Interago enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Interago empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/advertising/interago)

[Marketing](https://www.flowconsent.com/en/services/advertising/interago)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)