Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Rock Content is a content marketing platform and creative agency network headquartered in Brazil with US operations. It supplies on demand content production, SEO planning, content analytics, interactive content experiences (Ion) and a marketplace of freelance writers. Rock Content installs tracking pixels on customer websites for content performance analytics and lead capture, and transfers data to Brazil and the United States, which requires consent and a documented transfer chain for European deployments.
Rock Content is a content marketing company founded in Brazil and now active in Latin America, the United States and Europe. It provides on demand content production through a marketplace of freelance writers, SEO planning, performance analytics, interactive content via the Ion product (acquired in 2019), and a creator network used by enterprises to scale content marketing.
Rock Content collects content engagement signals (article reads, scroll depth, time on page), lead capture form submissions, Ion interactive content responses (quizzes, calculators, assessments), IP addresses, user agents, UTM parameters and behavioural data fed back to CRM and marketing automation tools.
Rock Content is a third party processor. Its tracking cookies are not strictly necessary and require prior consent under Art. 5(3) ePrivacy. Behavioural profiling, lead scoring and content recommendations driven by personal data must be based on consent under Art. 6(1)(a) GDPR. Interactive content collecting sensitive information requires explicit consent and may trigger Art. 9 GDPR safeguards.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Block Rock Content trackers and Ion interactive content scripts in your Consent Management Platform. Only fire the scripts after consent for analytics and marketing has been granted. Provide a clear privacy notice on every interactive experience and limit data collected to what is strictly relevant to the content.
Rock Content processes data in Brazil and on AWS regions in the US and São Paulo. Operators must sign Standard Contractual Clauses, document a Transfer Impact Assessment evaluating Brazilian and US legal regimes, and consider supplementary measures such as IP truncation and pseudonymisation of lead identifiers.
Sign the Rock Content DPA and SCCs, document Rock Content in your Article 30 register, integrate a CMP that gates trackers and Ion content, restrict freelance access to only the data they need, define retention rules for content leads and interactive responses, and update your privacy notice to disclose the Brazil and US transfers.
Websites using Rock Content must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended when Rock Content is used at scale for behavioural content scoring, when first party CRM data is uploaded for audience matching, or when interactive content collects sensitive information through quizzes and assessments.
Sample consent text
We use Rock Content, a Brazilian content marketing platform, to measure your engagement with our articles, ebooks and interactive content, build content audiences and orchestrate marketing follow up. This involves transferring your personal data outside the European Union.
Third-party domains contacted
rockcontent.comion.rockcontent.comcdn.rockcontent.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| rc_uid | Marketing | 1 year | Unique Rock Content visitor identifier used to link content engagement to leads. |
| rc_session | Analytics | Session | Tracks the current content session: pages viewed, scroll depth, time spent. |
| rc_ion | Marketing | 6 months | Stores the interactive content state and quiz responses for personalised follow up. |
Rock Content places tracking cookies for advertising — comply with GDPR using FlowConsent.
Rock Content sets a marketing visitor identifier used for lead attribution, an analytics session cookie for content engagement metrics, and a cookie used by Ion interactive experiences to persist quiz and assessment responses. The marketing and analytics cookies require prior consent.
Yes. Rock Content tracking cookies are not strictly necessary, so Art. 5(3) of the ePrivacy Directive requires consent. Behavioural profiling and lead scoring rely on consent under Art. 6(1)(a) GDPR.
Consent (Art. 6(1)(a) GDPR) for tracking and behavioural analytics. Performance of a contract (Art. 6(1)(b)) for lead nurturing once a customer relationship exists. Legitimate interest (Art. 6(1)(f)) for security and audit, with a documented balancing test.
Yes. Rock Content is based in Brazil with operations in the United States. Transfers require Standard Contractual Clauses and a Transfer Impact Assessment evaluating both regimes.
A DPIA is recommended when Rock Content is used at scale, when interactive content collects sensitive responses, or when behavioural scoring drives automated marketing decisions. It can be mandatory under Art. 35 GDPR.
Sign the Rock Content DPA and SCCs, gate trackers behind a CMP, document the Brazil and US transfers, limit interactive content data collection, configure retention rules and update the privacy notice.
Yes. Storyly (Turkey with EU hosting), Contentful (Germany), Sanity (Norway, headless content) and dedicated European content marketing agencies offer comparable services with EU data residency.
List Rock Content cookies (rc_uid, rc_session, rc_ion) with name, purpose, duration and provider. Disclose Rock Content S.A. as a sub processor in Brazil with US operations and the transfer chain. Re trigger the consent banner.