comScore
Comscore is a US-based audience measurement provider used by publishers, broadcasters, advertisers, and agencies to measure the size and behaviour of digital audiences. The Comscore Direct Tag (a JavaScript snippet loading from sb.scorecardresearch.com) collects beacon events from each page view. In several European markets, Comscore operates joint industry currencies (MMX, Video Metrix) and accreditation arrangements with national measurement bodies.
What does comScore do?
What Comscore is
Comscore is a US-based audience measurement company founded in 1999, headquartered in Reston, Virginia. It serves publishers, broadcasters, advertisers, and agencies with currencies that quantify the size and composition of digital and cross-media audiences. The Comscore Direct Tag, deployed on publisher pages, collects per-page-view beacons. The data is combined with panel data and (where available) telco data to compute audience metrics published as JIC currencies in many European countries.
What data Comscore processes
The Direct Tag fires a beacon to scorecardresearch.com on each page view, including the page URL, referrer, visitor identifier (UID cookie set on the scorecardresearch.com domain), user agent, device class, and publisher-provided custom dimensions (content category, section, demographic flags). Comscore stitches the data into visitor and household profiles using its panel, then publishes audience metrics on its planning platforms.
GDPR and ePrivacy implications
The UID cookie is a third-party persistent identifier. It is non-essential under ePrivacy and TTDSG and requires consent before being set. The data processing also requires Art. 6(1)(a) consent because of the cross-site profiling potential. National DPAs (notably the CNIL in France) have signalled that audience measurement may be exempt from consent only if it is strictly anonymous and limited to the publisher (no cross-site reconciliation), which the standard Comscore product is not.
International data transfers
Beacon hits are centralised in the United States for processing. Transfers rely on Standard Contractual Clauses under Art. 46(2)(c) GDPR and on Comscore Inc.'s EU-US Data Privacy Framework certification. In specific JIC arrangements (Médiamétrie/Comscore in France, agof in Germany), the local measurement body may operate intermediate processing in the EU, but the underlying Comscore systems remain US-based.
Practical compliance steps
Sign the Comscore DPA, gate the Direct Tag behind your CMP, list Comscore in your cookie policy with the UID cookie details, document the SCCs and the DPF certification in the privacy notice, document a DPIA covering the cross-site profiling aspect, and check whether the local JIC has additional measurement-specific guidance (Médiamétrie, agof, IAB Tech Lab TCF).
comScore and the GDPR
comScore is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) for audience measurement cookies and identifiers
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive (Cookie Law), TTDSG, CCPA, JIC measurement methodology (Médiamétrie, agof, comScore MMX accreditation)
Impact assessment (DPIA)
Comscore Direct Tag collects per-page-view beacons including a persistent visitor identifier (UID cookie on scorecardresearch.com), referrer, URL, device class, and (in some configurations) custom dimensions provided by the publisher. Key DPIA considerations: (1) the UID cookie is a third-party persistent identifier with cross-site tracking potential; (2) the data is centralised in the US for analysis, requiring SCCs and DPF; (3) Comscore combines measurement data with panel data and other publisher signals, which raises the privacy stakes; (4) in some EU markets (notably France with Médiamétrie/Comscore, Germany with agof) the measurement is operated under industry agreements that may include sectoral safeguards; (5) audience measurement is generally considered subject to consent, although some EU DPAs accept anonymous configurations as exempt.
Sample text for your banner
We use Comscore, a US-based audience measurement service, to measure the size and demographics of our website audience. Comscore sets a third-party cookie (UID on scorecardresearch.com) to count unique visitors and combines this data with panel data in the United States. Transfers rely on Standard Contractual Clauses and the EU-US Data Privacy Framework. You can decline Comscore measurement via the cookie banner.
What comScore sets and contacts
- Tracking method
- JavaScript measurement library (Direct Tag, sb.scorecardresearch.com/cs/) plus pixel beacons; mobile SDKs for in-app measurement
- Server location
- United States (Comscore, Inc., headquartered in Reston, Virginia) with edge data collection across Europe and worldwide
- Data transferred outside the EU
- Comscore, Inc. is a US-based audience measurement company. Beacon hits and computed audience data are processed in the United States. Transfers rely on Standard Contractual Clauses under Art. 46(2)(c) GDPR and on the EU-US Data Privacy Framework, where Comscore Inc. is certified. For European publishers, Comscore offers an EU-only processing option for some products (notably MMX Multi-Platform in certain markets).
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| UID | Marketing / Audience measurement | ~2 years | Third-party persistent identifier set on the scorecardresearch.com domain. Used by Comscore to recognise the same browser across all sites measured by the Comscore Direct Tag and compute audience reach metrics. |
| XCLGFbrowser | Marketing / Audience measurement | 1 year | Browser identifier used by some Comscore Mobile Metrix and Multi-Platform measurement products to detect mobile vs desktop visitors and prevent double-counting. |
| sb-id (first-party mode) | Marketing / Audience measurement | 13 months | First-party cookie set when the publisher deploys the Comscore First-Party Mode to avoid third-party cookie restrictions in modern browsers. Same measurement purpose as the UID third-party cookie. |
Third-party domains contacted (6)
comscore.comwww.comscore.comscorecardresearch.comsb.scorecardresearch.comb.scorecardresearch.comc.scorecardresearch.com
Frequently asked questions about comScore
Can't find your question? Write to us, we answer fast.
What cookies does Comscore set?
Comscore sets the UID cookie on scorecardresearch.com (third-party domain), with a persistence of about 2 years. Additional first-party cookies (sb-id or similar) may be set via Comscore First-Party Mode. The UID identifies the visitor across all sites measured by Comscore.
Does Comscore require user consent?
Yes. Comscore is third-party audience measurement that combines the UID across sites. Under ePrivacy and TTDSG it qualifies as non-essential and requires consent. Some EU DPAs (CNIL) reject the consent exemption for audience measurement as soon as data is shared with a third party.
What is the legal basis for using Comscore?
Consent (Art. 6(1)(a) GDPR) for both the cookies and the underlying personal data processing.
Does Comscore transfer data to the United States?
Yes. Beacon hits are processed by Comscore Inc. in the United States. Transfers rely on Standard Contractual Clauses under Art. 46(2)(c) GDPR and on the EU-US Data Privacy Framework certification.
Do I need a DPIA for Comscore?
Yes for sites with significant traffic. The cross-site profiling and the US transfers are significant DPIA factors. Document the necessity (industry currency), the consent mechanism, the SCCs, and the DPF.
How do I implement Comscore compliantly?
Sign the Comscore DPA, gate the Direct Tag behind your CMP, integrate with TCF if you participate in the IAB framework, list Comscore in the cookie policy, document the SCCs/DPF, and align with national JIC requirements (Médiamétrie, agof).
What are the alternatives to Comscore?
Other audience measurement providers include Nielsen Digital Ad Ratings (US), Kantar (UK), GfK (Germany), Médiamétrie (France, in some markets directly), Mediametrie/Net Ratings, Adsquare, and emerging EU-led measurement alliances.
How do I update the cookie policy for Comscore?
List the UID cookie on scorecardresearch.com (third-party, ~2 years, audience measurement purpose). Specify the controller (Comscore Inc., US), the SCCs and DPF for the US transfer, and the CMP toggle that allows visitors to refuse Comscore measurement.
Air360
Air360 is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Air360 supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Air360 enables informed decisions that improve experience and drive results.
Invoca
Invoca is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Invoca offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Invoca empowers organizations to optimize strategy and maximize return on investment.
Naver RUA
Naver RUA is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Naver RUA supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Naver RUA enables informed decisions that improve experience and drive results.
Google Analytics Enhanced eCommerce
Google Analytics Enhanced eCommerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Google Analytics Enhanced eCommerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make.
BizSpring
BizSpring is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. BizSpring supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, BizSpring enables informed decisions that improve experience and drive results.
ANS
ANS is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. ANS offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, ANS empowers organizations to optimize strategy and maximize return on investment.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.