CNZZ
CNZZ is a free web analytics service from Alibaba Group (Umeng+) that measures audience, sources of traffic and on site behaviour, widely used by Chinese websites and by international sites targeting Chinese users.
What does CNZZ do?
CNZZ (站长统计) is a free web analytics product owned by Alibaba Group and folded into the Umeng+ platform. It is one of the most popular analytics services in the Chinese internet ecosystem and is frequently embedded by Chinese site builders and apps. European publishers may encounter it on white labelled Chinese themes, on Chinese affiliate networks, or after migrating from a Chinese host.
What CNZZ does
CNZZ is implemented as a JavaScript snippet (typically loaded from s4.cnzz.com or s95.cnzz.com) that fires a beacon on every pageview. The dashboard reports visitors, pageviews, sessions, bounce rate, source and medium, geography and device. Premium tiers add funnel analysis, event tracking, and integration with the Alibaba advertising stack.
Cookies and data collected
CNZZ sets cookies such as CNZZDATA<id> on the publisher domain and uses additional third party cookies on cnzz.com. It collects the IP address, user agent, referrer, page URL, screen resolution, language, and a stable visitor identifier. Reports are accessible from the umeng.com console.
GDPR and ePrivacy implications
IP addresses and persistent identifiers are personal data. The CNZZ tag writes cookies that are not strictly necessary, so Article 5(3) ePrivacy and Article 6(1)(a) GDPR require prior, freely given, specific, informed and unambiguous consent before the tag is loaded. Alibaba acts as an independent controller for its own analytics and advertising purposes, alongside any processor role under contract.
Data transfers to China
All CNZZ events go to Alibaba servers in mainland China. China is not recognised as providing an adequate level of data protection. Transfers therefore require Article 46 safeguards (Standard Contractual Clauses) plus a Transfer Impact Assessment that accounts for Chinese state access powers under PIPL, the Cybersecurity Law and the Data Security Law. As of writing, Alibaba does not publish EU SCCs for CNZZ, making lawful deployment very difficult.
How to deploy it compliantly
Audit your site to confirm CNZZ is intentional. Block the s4.cnzz.com or s95.cnzz.com script by default in your CMP. Load it only after the visitor explicitly accepts the analytics category. Disclose the China transfer in your cookie banner and privacy notice. For European audiences, replace CNZZ with Matomo, Plausible, Piwik PRO or another EU hosted analytics service.
CNZZ and the GDPR
CNZZ is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive)
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive, PIPL, Schrems II case law
Impact assessment (DPIA)
A DPIA is strongly recommended. CNZZ combines large scale behavioural profiling with a systematic transfer to mainland China, where state access powers under PIPL, the Cybersecurity Law and the Data Security Law are broad. Document the purposes, the retention, the SCCs (if Alibaba publishes any), and the Transfer Impact Assessment.
Sample text for your banner
We use CNZZ (Alibaba Umeng+) to measure how our site is used. This service places cookies and transfers your data to servers in China. We only activate it after you click Accept in our cookie banner.
What CNZZ sets and contacts
- Tracking method
- JavaScript tag with first party and third party cookies, server side processing by Alibaba in China
- Server location
- China (operated by Alibaba Group, formerly Umeng)
- Data transferred outside the EU
- CNZZ is operated by Alibaba Group from mainland China. All visitor data is transferred to Chinese servers. China is not on the EU adequacy list and is subject to PIPL, the Cybersecurity Law and the Data Security Law, which grant the Chinese state broad access powers.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| CNZZDATA<id> | http_cookie | 1 year | First party visitor identifier set by the CNZZ tag on the publisher domain, used to recognise returning visitors and compute sessions. |
| umeng_uid | http_cookie | 2 years | Cross site visitor identifier used by the Umeng+ network to consolidate analytics across all sites running CNZZ. |
| umeng_it_v1 | http_cookie | Session | Session signature used by Umeng+ servers to validate the incoming beacon and prevent forged events. |
Third-party domains contacted (5)
s4.cnzz.coms95.cnzz.comcnzz.mmstat.comlog.cnzz.comwww.umeng.com
Frequently asked questions about CNZZ
Can't find your question? Write to us, we answer fast.
What cookies does CNZZ set?
CNZZ sets a CNZZDATA<id> cookie on the publisher domain to identify the visitor across sessions and may use additional cookies on cnzz.com for cross site recognition. The IP, user agent, referrer, URL, resolution and language are also collected on every request.
Does CNZZ require GDPR consent?
Yes. CNZZ writes non strictly necessary cookies and processes IP and persistent identifiers. Article 5(3) ePrivacy and Article 6(1)(a) GDPR require prior consent before the s4.cnzz.com or s95.cnzz.com tag is loaded.
What is the legal basis for processing?
Consent under Article 6(1)(a) GDPR is the appropriate basis. Legitimate interest cannot reasonably be invoked given the third country transfer to China and the role of Alibaba as an independent controller for its own analytics and advertising purposes.
Are data transferred outside the EU?
Yes. All CNZZ data is sent to Alibaba servers in mainland China. China has no EU adequacy decision. Transfers require SCCs and a Transfer Impact Assessment that addresses the access powers granted by PIPL, the Cybersecurity Law, and the Data Security Law.
Do I need a DPIA?
A DPIA is strongly recommended. CNZZ combines systematic visitor profiling, third country transfers, and an independent controller relationship with Alibaba, several criteria that meet the EDPB DPIA threshold.
How do I implement CNZZ compliantly?
Audit the site for unintended CNZZ embeds. If kept, block s4.cnzz.com and s95.cnzz.com in your CMP, require explicit consent, and disclose the transfer in your privacy notice. Otherwise remove the tag and replace it with an EU hosted analytics service.
Are there alternatives to CNZZ?
For European audiences, prefer Matomo, Plausible, Piwik PRO, Fathom or Umami. These tools host data in the EU, support cookieless modes, and are designed with GDPR in mind. Reserve CNZZ only if you specifically need Chinese mainland analytics.
How do I update my cookie policy for CNZZ?
List CNZZ as a third party analytics service in your cookie policy. Mention the CNZZDATA cookies and their lifetime, the cnzz.com third party cookies, the data sent to Alibaba in China, the legal mechanism for the transfer, and the right to withdraw consent.
Panelbear
Panelbear is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Panelbear supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Panelbear enables informed decisions that improve experience and drive results.
Quotemedia
Quotemedia is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Quotemedia offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Quotemedia empowers organizations to optimize strategy and maximize return on investment.
Dimml
Dimml is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Dimml supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Dimml enables informed decisions that improve experience and drive results.
Webeyez
Webeyez is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Webeyez supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Webeyez enables informed decisions that improve experience and drive results.
Enquisite
Enquisite is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Enquisite offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Enquisite empowers organizations to optimize strategy and maximize return on investment.
Akavita
Akavita is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Akavita supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Akavita enables informed decisions that improve experience and drive results.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.