Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Groove.cm is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Groove.cm provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Groove.cm helps deliver the right message to the right audience at the right time.
Groove.cm is an all in one marketing platform operated by Groove Digital LLC. It bundles landing page builders, sales funnels, email marketing, membership sites, webinars, affiliate management, video hosting and a CRM. Pages published with Groove.cm load a Groove tracking script that identifies visitors, ties them to funnel steps and feeds the email automation. When the merchant enables checkout, customer data is processed and stored on Groove infrastructure as well.
Groove.cm sets first party cookies such as groove_visitor (persistent visitor identifier), groove_session (session correlation), groove_funnel (funnel step state), groove_lead (hashed lead identifier) and groove_aff (affiliate attribution). It also tracks email opens and link clicks via a tracking pixel and link redirector, and stores cart, order and member data when the commerce or membership modules are enabled.
Under Article 5(3) of the ePrivacy Directive, the Groove tracking script and the funnel and affiliate cookies cannot be loaded before consent. Email pixels and link tracking also require consent unless the merchant relies on contractual emails strictly necessary for fulfilment. Under the GDPR the merchant is controller and Groove Digital is processor, with a Data Processing Agreement under Article 28 required.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Groove.cm runs on US infrastructure with Cloudflare CDN. EU controllers must put Standard Contractual Clauses in place under Article 46(2)(c) GDPR, complete a transfer impact assessment and rely on the EU US Data Privacy Framework where Groove Digital or its sub processors are certified.
Block the Groove tracking script by default in your CMP and load it after marketing consent. Manage email consent separately, with double opt in for marketing newsletters. Sign the Groove DPA, list AWS and Cloudflare as sub processors, document retention rules in Groove and inform users in your privacy notice with a clear path to access, rectification, erasure and consent withdrawal.
Websites using Groove.cm must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended because Groove.cm combines funnel tracking, email pixels, marketing automation and US hosting at scale. Document consent, the Groove Digital DPA, sub processors (AWS, Cloudflare) and international transfers.
Sample consent text
We use Groove.cm to run our landing pages, funnels and email campaigns. Groove.cm sets cookies on your device and transfers your data to the United States. By clicking Accept, you authorise Groove.cm to load and to process this information. You can withdraw consent at any time.
Third-party domains contacted
groove.cmapp.groove.cmcdn.groove.cmtrack.groove.cmpay.groove.cmCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| groove_visitor | HTTP | 13 months | Persistent Groove.cm visitor identifier used to recognise returning users and attribute funnel steps. |
| groove_session | HTTP | Session | Groove.cm session identifier used to group events within a single browsing session. |
| groove_funnel | HTTP | 30 days | Stores the funnel step state for the visitor so the appropriate content is shown on the next visit. |
| groove_lead | HTTP | 6 months | Hashed lead identifier linking the cookie to a Groove CRM contact once a form has been submitted. |
| groove_aff | HTTP | 60 days | Stores the affiliate identifier that brought the visitor to the funnel, used for commission attribution. |
Groove.cm places tracking cookies for advertising — comply with GDPR using FlowConsent.
Groove.cm sets first party cookies including groove_visitor (persistent ID, ~13 months), groove_session (session correlation), groove_funnel (funnel step state), groove_lead (hashed lead ID) and groove_aff (affiliate attribution). Email opens and clicks are also tracked through a pixel and a link redirector.
Yes. The Groove tracking script, funnel and affiliate cookies and email pixels are not strictly necessary, so prior consent is required under Article 5(3) of the ePrivacy Directive for EU traffic. Transactional checkout cookies can rely on contract performance.
Consent (Art. 6(1)(a) GDPR) for the tracking script, marketing cookies and email pixels. Contract performance (Art. 6(1)(b) GDPR) for checkout, customer accounts and membership areas. Legal obligation (Art. 6(1)(c) GDPR) for invoicing.
Yes. Groove Digital LLC operates from the United States on AWS, with Cloudflare CDN. EU controllers must use Standard Contractual Clauses under Article 46(2)(c) GDPR and rely on the EU US Data Privacy Framework where the relevant entity is certified.
Yes. Groove.cm combines large scale tracking, funnel attribution, email pixels, payment processing and US transfers. Document data flows, actors, transfers and safeguards in a formal DPIA.
Block the Groove tracking script by default, load it after marketing consent, manage email consent with double opt in, sign the Groove DPA, list AWS and Cloudflare as sub processors, document retention and offer a clear consent withdrawal and rights exercise path.
For EU friendly all in one marketing setups consider Brevo (France), Mailerlite, GetResponse (Poland), or combinations such as Webflow plus Brevo plus Stripe for funnels and email, hosted with European data residency.
List Groove Digital LLC as processor, AWS and Cloudflare as sub processors, the cookies and lifetimes, the purposes (funnel tracking, email tracking, payment), the US transfers and their legal basis, the data subject rights and the consent withdrawal mechanism.