Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Bazaarvoice Curation collects, moderates, and displays social user generated content from Instagram, TikTok, and other networks on e-commerce sites with analytics and personalisation cookies.
Bazaarvoice Curation is a user generated content (UGC) tool that allows retailers and brands to discover, license, moderate, and publish social media content from Instagram, TikTok, X, and other networks directly on their product pages. The widget injects JavaScript on the retailer site, loads media from Bazaarvoice CDNs, and tracks engagement to attribute UGC to conversions. While the core display feature is functional, the personalisation and analytics modules add tracking cookies that bring the tool firmly into GDPR territory.
Bazaarvoice sets first and third party cookies such as BVImplmain_site (configuration and feature flags, twelve months), BVBRANDID (anonymous visitor ID, twelve months), and BVBRANDSID (session, browser session). It collects IP address, device fingerprint, viewing behaviour, and conversion data. Cookies that are strictly necessary for the widget to render content may load without consent, but personalisation, analytics, and attribution cookies require prior consent.
For the UGC display itself, you can rely on contract (Art. 6(1)(b)) for the strictly necessary part. For analytics, personalisation, and attribution cookies, the legal basis is the user''s consent under Art. 6(1)(a) of the GDPR combined with Art. 5(3) of the ePrivacy Directive. Display of identifiable user content from social networks also requires you to verify that the original creator has agreed to the commercial use, often via the Bazaarvoice rights request workflow.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Bazaarvoice is headquartered in Austin, Texas, and data is processed primarily in the US, with EU edge nodes for CDN delivery. International transfers rely on Standard Contractual Clauses and the EU, US Data Privacy Framework where applicable. You must document this in your records of processing and inform users in your privacy notice.
Configure the Bazaarvoice widget in privacy mode until consent is captured, only enabling personalisation and analytics after acceptance. Use the bvconsent JavaScript API to pass the user''s consent state. Document third party domains in your cookie policy, list Bazaarvoice as a processor, and ensure your DPA reflects the EU, US Data Privacy Framework status.
European alternatives include Photoslurp (now part of Bazaarvoice), Tagbox, and Stackla (Nosto). Self hosting UGC galleries via static media imports avoids tracking entirely. Server side rendering of curated content removes the need for client side cookies, at the cost of real time personalisation.
Websites using Bazaarvoice Curation must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended when the curation widget is paired with personalisation and analytics features. The risks include profiling visitors and combining first party shopping data with third party social signals.
Sample consent text
We use Bazaarvoice Curation to display social content from Instagram, TikTok, and other networks. With your consent, the widget can set cookies to personalise the gallery and measure engagement.
Third-party domains contacted
bazaarvoice.comdisplay.ugc.bazaarvoice.comapps.bazaarvoice.comcdn.bazaarvoice.comnetwork.bazaarvoice.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| BVImplmain_site | third_party | 12 months | Stores the Bazaarvoice implementation configuration and feature flags for the widget |
| BVBRANDID | third_party | 12 months | Anonymous visitor identifier used for personalisation and attribution |
| BVBRANDSID | third_party | Session | Session identifier for the current browsing session |
| BV_UA | third_party | 12 months | User agent fingerprint for analytics and bot detection |
| BVConsent | first_party | 12 months | Stores the visitor consent state passed to Bazaarvoice |
Bazaarvoice Curation places tracking cookies for advertising — comply with GDPR using FlowConsent.
It typically sets BVImplmain_site (twelve months, configuration), BVBRANDID (twelve months, visitor ID), BVBRANDSID (session, current visit), and analytics cookies through its analytics module. Some integrations also write to localStorage.
Cookies that are strictly necessary to render the widget can load without consent, but personalisation, analytics, and attribution cookies require prior consent under Art. 5(3) of the ePrivacy Directive.
Contract for the basic UGC display you have agreed to with users, and consent (Art. 6(1)(a) GDPR) for personalisation and analytics. You also need a lawful basis to display identifiable user content (often consent obtained via the Bazaarvoice rights workflow).
Yes. Bazaarvoice is based in Austin, Texas. EU personal data may be transferred to US servers under Standard Contractual Clauses and, where applicable, the EU, US Data Privacy Framework.
A DPIA is recommended when analytics and personalisation are enabled, especially for large e-commerce sites combining shopping data and UGC engagement.
Use the bvconsent JavaScript API to gate non essential cookies, sign a DPA with Bazaarvoice, document third party domains in your cookie policy, and ensure the rights request workflow is in place for every UGC creator.
Yes: Photoslurp, Tagbox, Stackla (Nosto), and self hosted static UGC galleries. Each has different trade offs between automation and privacy.
Add an entry for each Bazaarvoice cookie, list the bazaarvoice.com domains, indicate retention periods, and link to the Bazaarvoice privacy policy.