DoubleClick Floodlight
DoubleClick Floodlight is the activity tagging system used by Google Campaign Manager 360 and Display & Video 360 to measure conversions and build remarketing audiences. Each Floodlight tag fires on a defined event (purchase, sign up, page view), writes the IDE cookie on doubleclick.net and reports the event to fls.doubleclick.net, which makes it a third party advertising tracker requiring prior consent in the EU.
What does DoubleClick Floodlight do?
What is DoubleClick Floodlight?
DoubleClick Floodlight is the activity tagging framework used by Google Campaign Manager 360 (CM360) and Display & Video 360 (DV360) to measure user actions on advertiser websites. Floodlight tags are pixels, iframes or gtag.js calls that fire on events such as page views (counter tags) or transactions (sales tags). They are a foundational tool of the Google Marketing Platform stack and are usually deployed alongside Google Tag Manager.
Cookies and identifiers
Floodlight relies on the IDE cookie set on doubleclick.net for behavioural attribution and frequency capping. It also writes a test_cookie before each request to detect cookie support and may interact with NID on google.com. Custom u variables can transmit additional context (transaction value, product ID, user identifiers) that easily becomes personal data depending on configuration.
GDPR and ePrivacy implications
Floodlight is a third party advertising tracker. Article 5(3) of the ePrivacy Directive requires prior consent before any cookie is read or written, and Article 6(1)(a) GDPR requires consent for the underlying behavioural advertising processing. Several decisions from European DPAs (CNIL, AEPD, Garante) have applied directly to Floodlight or to its parent stack.
Consent and Consent Mode v2
Floodlight tags must remain blocked until the visitor accepts the marketing category. When using gtag.js, Consent Mode v2 lets Floodlight degrade to a cookieless ping when ad_storage and ad_user_data are denied. Modelled conversions can fill the gap, but no cookie or identifier may be set without consent.
Data transfers to the United States
Floodlight events, IP addresses, advertising identifiers and any custom variables are sent to Google LLC infrastructure in the United States. Google self certifies under the EU U.S. Data Privacy Framework, which provides a legal mechanism for the transfer that must be documented in your records of processing and disclosed in your privacy policy.
Implementing Floodlight compliantly
Block all Floodlight tags through your tag manager until consent is captured. Activate Consent Mode v2, route Floodlight via Google Tag Manager Server when possible to minimise client side data, and never put raw email addresses, phone numbers or user IDs in Floodlight u variables without explicit consent. Document Floodlight, CM360 and DV360 in your privacy policy and records of processing.
DoubleClick Floodlight and the GDPR
DoubleClick Floodlight is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Prior consent under Article 6(1)(a) GDPR and Article 5(3) of the ePrivacy Directive: Floodlight is an advertising attribution and remarketing tool that writes the IDE cookie on doubleclick.net and shares behavioural data with Google.
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive, EU U.S. Data Privacy Framework, IAB TCF v2.2
Impact assessment (DPIA)
A DPIA is recommended because Floodlight powers cross site behavioural advertising, audience lists, attribution and US transfers. Setups including custom variables (uXX values) carrying personal data need particular scrutiny.
Sample text for your banner
We use DoubleClick Floodlight to measure ad campaigns and build advertising audiences with Google Campaign Manager 360 and Display & Video 360. With your consent, Google may store advertising cookies on your device, link your activity to a previous ad exposure and transfer data to Google LLC in the United States. You can refuse or withdraw consent at any time from the cookie settings.
What DoubleClick Floodlight sets and contacts
- Tracking method
- Floodlight tags (image pixel or iframe) and Floodlight global site tag (gtag.js with config DC-XXXXXX) that send activity events (purchases, sign ups, page views) to fls.doubleclick.net for Campaign Manager 360 and Display & Video 360 attribution.
- Server location
- United States (Google global infrastructure)
- Data transferred outside the EU
- Floodlight events, IP addresses and advertising identifiers are transferred to Google LLC servers in the United States under the EU U.S. Data Privacy Framework.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| IDE | third_party | 13 months | Set on doubleclick.net by Floodlight for behavioural attribution, frequency capping and conversion measurement in Campaign Manager 360 and Display & Video 360. |
| test_cookie | third_party | 15 minutes | Set on doubleclick.net to verify that the browser supports cookies before firing the Floodlight pixel. |
| NID | third_party | 6 months | Set on google.com to store user preferences for Google ads and personalisation, used by Floodlight for cross device matching. |
Third-party domains contacted (5)
fls.doubleclick.netdoubleclick.netgoogleads.g.doubleclick.netwww.googletagmanager.comstats.g.doubleclick.net
Frequently asked questions about DoubleClick Floodlight
Can't find your question? Write to us, we answer fast.
Which cookies does DoubleClick Floodlight set?
Floodlight relies primarily on the IDE cookie set on doubleclick.net for behavioural attribution and frequency capping, plus test_cookie before each request and may interact with the NID cookie on google.com used for personalisation.
Does Floodlight require consent?
Yes. Floodlight is a third party advertising tracker that writes non essential cookies, so prior, specific and informed consent is required under Article 5(3) of the ePrivacy Directive and Article 6(1)(a) GDPR before any tag fires.
What is the legal basis for Floodlight?
Consent is the only suitable legal basis. Legitimate interests cannot be used because the processing is for cross site behavioural advertising and includes US transfers, both of which require an explicit opt in.
Are data transferred to the United States?
Yes. Floodlight events, IP addresses, advertising identifiers and any custom u variables are transferred to Google LLC in the United States. Google self certifies under the EU U.S. Data Privacy Framework, but the transfer must be disclosed in the privacy policy.
Do I need a DPIA for Floodlight?
A DPIA is recommended because Floodlight powers cross site behavioural advertising, audience lists, attribution and US transfers. Setups with custom variables containing personal data require particular scrutiny.
How do I deploy Floodlight compliantly?
Block all Floodlight tags through your CMP until consent, enable Consent Mode v2, prefer Google Tag Manager Server for server side delivery, and never put raw email, phone or user IDs in u variables without explicit consent.
Are there alternatives to Floodlight?
Privacy first alternatives include first party server side conversion measurement (CM360 server side via GTM Server, Adobe Analytics, Matomo Goals) which avoids client side cookies and reduces data shared with Google.
How do I update my cookie policy?
Add a section that names DoubleClick Floodlight, Campaign Manager 360 and Display & Video 360, lists the cookies (IDE, test_cookie, NID) with purpose and duration, mentions the transfer to Google LLC in the United States and links to Google's privacy policy.
LKQD
LKQD is a wiki and knowledge management platform enabling teams to create, organize, and share internal documentation. It provides collaborative editing, version control, and advanced search. LKQD supports rich content formatting, file attachments, and permission-based access. With customizable templates and cross-referencing, LKQD helps organizations build comprehensive knowledge bases that improve team productivity and information accessibility across the organization.
Pixenio
Pixenio is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Pixenio supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Pixenio enables informed decisions that improve experience and drive results.
ArcSpan
ArcSpan is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. ArcSpan enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, ArcSpan empowers marketing teams to achieve measurable growth.
Facebook SDK
Facebook SDK is a development framework and toolkit providing developers with a structured foundation for building modern web applications. It offers reusable components, standardized architecture patterns, and comprehensive documentation. Facebook SDK accelerates development through code generation, testing utilities, and build optimization. With an active community and extensive ecosystem, Facebook SDK enables teams to build scalable, maintainable applications following industry best practices.
Snapchat Pixel
Snapchat Pixel is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Snapchat Pixel provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Snapchat Pixel helps deliver the right message to the right audience at the right time.
Pixel Motion
Pixel Motion is a web animation library that enables developers and designers to create smooth, engaging animations for websites and applications. It provides a comprehensive API for complex animations, transitions, and interactive effects with optimal performance. Pixel Motion supports CSS, SVG, and JavaScript animations with hardware acceleration and timeline control, helping create immersive user experiences that enhance engagement without compromising speed.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.