> What Google Analytics Enhanced eCommerce tracks, the cookies it uses, US data transfers and how to collect consent and stay GDPR compliant in the EU. > > Canonical: https://www.flowconsent.com/en/services/analytics/google-analytics-enhanced-ecommerce Analytics # Google Analytics Enhanced eCommerce Analytics Enhanced eCommerce is a Google Analytics feature that captures granular shopping events such as product views, add to cart actions, checkout steps and purchases, giving rich revenue insight but also processing detailed behavioural data that requires consent under the GDPR. [Block Google Analytics Enhanced eCommerce until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Analytics](https://www.flowconsent.com/en/services/analytics) - Consent Analytics - Prior consent Required - Documented cookies 4 - Third-party domains 4 - Servers United States Overview ## What does Google Analytics Enhanced eCommerce do? ## **What Google Analytics Enhanced eCommerce is** Enhanced eCommerce is an extension of Google Analytics that records the full shopping journey. Instead of only counting page views, it captures product impressions, product clicks, add to cart and remove from cart actions, checkout steps, promotions and completed purchases with revenue and item detail. Online retailers use it to analyse funnels, product performance and basket value across Universal Analytics and the GA4 ecommerce model. ## **What data and cookies it collects** The feature relies on the standard Google Analytics cookies, including \_ga and the GA4 \_ga\_ container cookie that persist a pseudonymous client identifier, plus \_gid and the \_gat throttling cookie. Around these it attaches structured ecommerce parameters such as product identifiers, categories, quantities, prices and order values. Combined, this builds a detailed, persistent profile of how an individual browses and buys. ## **GDPR and ePrivacy implications** The client identifier is personal data, so analytics processing falls under the GDPR, and writing the cookies falls under Article 5(3) of the ePrivacy Directive. European authorities have repeatedly found that default Google Analytics deployments raise compliance issues, particularly around transfers and the use of data for Google services. Enhanced eCommerce increases the volume and sensitivity of the behavioural data involved. ## **Consent requirements** Analytics cookies are not strictly necessary, so you must obtain prior consent before Enhanced eCommerce loads and collects data. Use a consent management platform to block the tags until the visitor accepts, and apply Google Consent Mode so that measurement only runs with consent. Pre ticked boxes and implied consent are not valid in the European Union. ## **Data transfers and configuration** Data is processed by Google in the United States, relying on the EU US Data Privacy Framework and standard contractual clauses. Reduce exposure by enabling IP truncation, disabling data sharing with Google products and advertising signals where not needed, shortening retention, and accepting the Google data processing terms. Document the transfer and these safeguards in your records of processing. ## **Practical compliance steps** Gate all Enhanced eCommerce tags behind marketing or analytics consent, configure Consent Mode, avoid sending direct identifiers such as email in event parameters, and turn off advertising features unless separately consented. Describe the analytics cookies, the shopping data and the US transfer in your cookie policy, and review the data layer regularly so no personal data leaks into ecommerce events. Compliance ## Google Analytics Enhanced eCommerce and the GDPR Google Analytics Enhanced eCommerce is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent under Article 6(1)(a) GDPR - Risk level high - Applicable regulations GDPR, ePrivacy Directive (2002/58/EC) ### Impact assessment (DPIA) Assess the volume and granularity of shopping behaviour collected, the linkage of purchases to a persistent client identifier, the use of data for Google advertising signals, and the lawfulness of US transfers. A DPIA is advisable where ecommerce tracking is combined with advertising features or large transaction volumes. ### Sample text for your banner > We use Google Analytics with Enhanced eCommerce to understand how visitors shop and to improve our store. This sets analytics cookies and may transfer data to Google in the United States. We only do this with your consent. Cookies and trackers ## What Google Analytics Enhanced eCommerce sets and contacts - Tracking method Google Analytics JavaScript (gtag.js or GA4 ecommerce events) that records detailed product and transaction events through first party cookies and the Measurement Protocol - Server location United States - Data transferred outside the EU Ecommerce events and identifiers are processed by Google LLC in the United States and other Google data centres. Transfers rely on the EU US Data Privacy Framework and standard contractual clauses. IP truncation and data residency controls reduce but do not remove the transfer. ### Cookies set (4) | Name | Type | Duration | Purpose | | --------------------- | --------- | -------- | -------------------------------------------------------------------------------------------------------------------- | | \_ga | Analytics | 2 years | Stores a pseudonymous client identifier used to distinguish users and tie ecommerce events to a session and visitor. | | \_ga\_\ | Analytics | 2 years | GA4 cookie that persists session state and campaign information for the specific measurement property. | | \_gid | Analytics | 24 hours | Distinguishes users within a single day to support daily reporting of shopping behaviour. | | \_gat | Analytics | 1 minute | Throttles the request rate to the Analytics servers during high traffic. | ### Third-party domains contacted (4) - `www.googletagmanager.com` - `www.google-analytics.com` - `analytics.google.com` - `stats.g.doubleclick.net` Questions ## Frequently asked questions about Google Analytics Enhanced eCommerce Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does Enhanced eCommerce use? It uses the standard Google Analytics cookies: \_ga and the GA4 \_ga\_ container cookie that persist a pseudonymous client identifier for up to two years, \_gid for daily distinction and \_gat for request throttling. Ecommerce data is attached to events rather than to extra cookies. ### Is consent required? Yes. Analytics cookies are not strictly necessary, so prior consent is required under the ePrivacy Directive before Enhanced eCommerce loads. The tags must stay blocked until the visitor accepts and Consent Mode should reflect their choice. ### What is the legal basis? Consent under Article 6(1)(a) GDPR. Because the data feeds Google services and can support advertising, legitimate interest is not a safe basis for analytics tracking in the European Union. ### Does it send data to the United States? Yes. Google processes the data in the United States and other regions under the EU US Data Privacy Framework and standard contractual clauses. Enable IP truncation and disable unnecessary data sharing to reduce exposure. ### Do I need a DPIA? A DPIA is advisable, especially for high traffic stores or when ecommerce data is combined with Google advertising features. It should assess profiling, retention and the US transfer. ### How do I implement it compliantly? Block the tags behind a consent banner, configure Google Consent Mode, accept the Google data processing terms, shorten retention, and ensure no direct identifiers such as email are pushed into ecommerce events. ### Are there alternatives? Privacy first analytics such as Matomo, Plausible or Piano Analytics offer ecommerce reporting with EU hosting and lighter cookie use. They can reduce transfer risk but analytics consent is still generally required. ### How do I update my cookie policy? List the \_ga, \_ga\_ container, \_gid and \_gat cookies with purpose and duration, explain that detailed shopping events are collected, and disclose the transfer to Google in the United States. Align the entry with your banner categories. Same category ## More services: Analytics [See the whole category](https://www.flowconsent.com/en/services/analytics) ### [Prisme](https://www.flowconsent.com/en/services/analytics/prisme) [Prisme is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Prisme integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Prisme makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/analytics/prisme) [Analytics](https://www.flowconsent.com/en/services/analytics/prisme) · ### [Lead Forensics](https://www.flowconsent.com/en/services/analytics/lead-forensics) [Lead Forensics is a lead generation platform designed to help businesses capture, qualify, and convert website visitors into sales-ready leads. It offers smart forms, interactive content, and behavioral tracking to identify high-intent prospects. Lead Forensics integrates with CRM and marketing automation tools to streamline lead nurturing. With scoring models and analytics, Lead Forensics helps teams focus on the most promising opportunities, improving pipeline quality and revenue growth.](https://www.flowconsent.com/en/services/analytics/lead-forensics) [Analytics](https://www.flowconsent.com/en/services/analytics/lead-forensics) · ### [WebSTAT](https://www.flowconsent.com/en/services/analytics/webstat) [WebSTAT is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. WebSTAT supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, WebSTAT enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/webstat) [Analytics](https://www.flowconsent.com/en/services/analytics/webstat) · ### [WPS Visitor Counter](https://www.flowconsent.com/en/services/analytics/wps-visitor-counter) [WPS Visitor Counter is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. WPS Visitor Counter supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, WPS Visitor Counter remains a leading web development choice.](https://www.flowconsent.com/en/services/analytics/wps-visitor-counter) [Analytics](https://www.flowconsent.com/en/services/analytics/wps-visitor-counter) · ### [ThankYou Analytics](https://www.flowconsent.com/en/services/analytics/thankyou-analytics) [ThankYou Analytics is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. ThankYou Analytics offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, ThankYou Analytics empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/thankyou-analytics) [Analytics](https://www.flowconsent.com/en/services/analytics/thankyou-analytics) · ### [SalesViewer](https://www.flowconsent.com/en/services/analytics/salesviewer) [SalesViewer is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. SalesViewer offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, SalesViewer empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/salesviewer) [Analytics](https://www.flowconsent.com/en/services/analytics/salesviewer) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)