FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Analytics

EcomScout

AnalyticsOfficial website

EcomScout is a Shopify focused ad attribution and analytics platform that helps direct to consumer brands measure how their advertising spend on Meta, Google, TikTok and Snapchat translates into orders. It uses a JavaScript pixel, first party cookies and server side conversion APIs. For EU merchants, EcomScout transfers shopper data to the United States and triggers GDPR and ePrivacy obligations, including prior consent and a documented data transfer mechanism.

Block EcomScout until consentScan my site
Overview

What does EcomScout do?

What EcomScout is and how it works

EcomScout is a Shopify focused advertising attribution and analytics platform. It loads a JavaScript pixel on the storefront, sets first party cookies that survive iOS Intelligent Tracking Prevention longer than third party cookies, and pushes server side conversion events to Meta, Google Ads, TikTok and Snapchat through their Conversion APIs. The goal is to reduce the signal loss caused by browser restrictions and ad blockers.

What data EcomScout collects

EcomScout collects IP address, user agent, click identifiers (fbclid, gclid, ttclid, scid), UTM parameters, browser fingerprint signals, page view events, add to cart, checkout and purchase events, order value, currency and hashed customer email and phone for advanced matching. Shopify customer identifiers are also relayed via the Shopify pixel APIs.

GDPR and ePrivacy implications

EcomScout writes and reads cookies and forwards identifiers to third party advertising platforms. Both client side cookies and server side conversion calls fall under article 5(3) ePrivacy and require prior consent. Merchants act as the data controller and EcomScout as a processor. A signed DPA, a documented sub processor list and a clear retention policy are required.

Consent requirements

EcomScout, including its server side pipeline, must only fire after the visitor has actively accepted analytics and advertising cookies. Use Shopify's Customer Privacy API and a Consent Management Platform to block the pixel until consent is captured. The same logic must propagate to the server side conversion calls so that a refusal removes the entire signal flow.

International data transfers

EcomScout is hosted in the United States. Shopper data, including IP and hashed identifiers, is transferred to the US. Transfers must rely on Standard Contractual Clauses, on the EU US Data Privacy Framework where EcomScout is certified, and supplementary measures such as encryption in transit and at rest, minimisation and strict access controls.

Practical compliance steps

Sign a DPA with SCCs, connect EcomScout to Shopify's Customer Privacy API, configure the Consent Management Platform to block EcomScout until consent is given, run a DPIA documenting the attribution use case, list EcomScout in the cookie policy with vendor, purposes and retention, set short retention periods on hashed identifiers, and review the integration whenever EcomScout adds new sub processors.

Compliance

EcomScout and the GDPR

EcomScout is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
EcomScout stores information on the device and shares identifiers with a third party for advertising attribution. The legal basis is prior, freely given, specific, informed and unambiguous consent under article 6(1)(a) GDPR combined with article 5(3) ePrivacy.
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive, national cookie laws (CNIL, BfDI, AEPD), EU US Data Privacy Framework.

Impact assessment (DPIA)

A DPIA is recommended where EcomScout is used at scale on EU stores. Document necessity, retention, data minimisation, the use of email hashes, the server side conversion pipeline, the transfer to the US under SCCs, and supplementary measures such as IP truncation and encryption.

Sample text for your banner

We use EcomScout to measure our advertising performance on Meta, Google, TikTok and Snapchat. EcomScout stores cookies on your device and transfers order related data to the United States under Standard Contractual Clauses. We will only activate EcomScout if you click Accept.
Cookies and trackers

What EcomScout sets and contacts

Tracking method
Shopify focused ad attribution and analytics. EcomScout deploys a JavaScript pixel on the storefront, sets first party cookies to identify visitors across sessions, captures click parameters and forwards conversion events server side to Meta, Google, TikTok and Snapchat for improved attribution.
Server location
United States, with cloud infrastructure typically in US AWS regions.
Data transferred outside the EU
EcomScout transfers personal data (IP, advertising identifiers, email hashes, order data) of EU shoppers to the United States. Transfers rely on Standard Contractual Clauses and on the EU US Data Privacy Framework where the vendor is certified.

Cookies set (3)

NameTypeDurationPurpose
ec_visitorpersistent1 yearFirst party visitor identifier used by EcomScout to stitch sessions to a single shopper for attribution. Requires consent.
ec_sessionsession30 minutesShort lived session identifier used by EcomScout to group page views and events into a session. Requires consent.
ec_utmpersistent90 daysStores the first touch UTM parameters and click identifiers seen on entry, used for marketing attribution. Requires consent.

Third-party domains contacted (3)

  • ecomscout.io
  • app.ecomscout.io
  • cdn.ecomscout.io
Questions

Frequently asked questions about EcomScout

Can't find your question? Write to us, we answer fast.

What cookies does EcomScout set?

EcomScout sets first party cookies on the Shopify storefront to identify the visitor across sessions, store the first touch UTM and click parameters, and tie page views to orders. It can also write to localStorage. Cookie names typically start with ec_ or ecs_ depending on the deployment, and may include an attribution session identifier and a long lived visitor identifier.

Does EcomScout require user consent?

Yes. EcomScout reads and writes information on the device and forwards data to Meta, Google, TikTok and Snapchat. Article 5(3) ePrivacy requires prior consent for both the cookie storage and the third party sharing. Server side conversion calls inherit the same requirement when they rely on identifiers obtained from the device.

What is the legal basis for using EcomScout?

The legal basis is consent under article 6(1)(a) GDPR combined with article 5(3) ePrivacy. Advertising attribution is not strictly necessary, so legitimate interest cannot replace the consent requirement set by ePrivacy. The merchant must capture and log the consent before EcomScout fires.

Does EcomScout send data to the US?

Yes. EcomScout is hosted in the United States. Shopper data is transferred to US infrastructure and must be covered by Standard Contractual Clauses, by the EU US Data Privacy Framework where applicable, and by supplementary safeguards such as encryption, minimisation and strict access controls.

Do we need a DPIA for EcomScout?

A DPIA is recommended whenever the store processes large volumes of EU shopper data with EcomScout. The DPIA must cover the cross border transfer, the use of email hashes, the server side conversion pipeline, retention, and any risk of indirect re identification.

How do we implement EcomScout compliantly?

Sign the DPA with SCCs, integrate EcomScout with Shopify's Customer Privacy API, block the pixel and server side calls through a Consent Management Platform until consent is recorded, document EcomScout in the records of processing, list it in the cookie policy and run a DPIA.

What alternatives to EcomScout exist?

Alternatives include Triple Whale, Northbeam, Polar Analytics, Lifesight, native Shopify Analytics with consented enrichment, server side GTM hosted in the EU, Piwik PRO, and Matomo with custom attribution. Several can be hosted within the EEA, which reduces transfer risk.

How do we update the cookie policy when using EcomScout?

List EcomScout in the cookie policy with vendor name, purposes, categories of data, cookie names, lifetime, third country transfer to the US and legal basis (consent). Provide a link to opt out and to the EcomScout privacy notice. Refresh every time the vendor adds new sub processors or new tracking methods.

Same category

More services: Analytics

See the whole category

Survicate

Survicate is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Survicate supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Survicate enables informed decisions that improve experience and drive results.

Analytics

CallRoot

CallRoot is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. CallRoot offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, CallRoot empowers organizations to optimize strategy and maximize return on investment.

Analytics

Jirafe

Jirafe is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Jirafe supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Jirafe enables informed decisions that improve experience and drive results.

Analytics

Google Tag Manager

Google Tag Manager is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Google Tag Manager supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Google Tag Manager enables informed decisions that improve experience and drive results.

Analytics

Segmetrics

Segmetrics is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Segmetrics supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Segmetrics enables informed decisions that improve experience and drive results.

Analytics

Wisetracker

Wisetracker is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Wisetracker supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Wisetracker enables informed decisions that improve experience and drive results.

Analytics

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site