> GoSquared and the GDPR: first party analytics cookies, live chat data, Customer Data Hub profiling, US transfers and consent for European sites. > > Canonical: https://www.flowconsent.com/en/services/analytics/gosquared Analytics # GoSquared Analytics GoSquared is a real time website analytics, live chat and customer data platform from the United Kingdom. It tracks visitor behaviour and traffic sources, powers a live chat inbox, and unifies visitor profiles in its Customer Data Hub. Because it relies on first party cookies and can identify individual visitors, it requires consent under European privacy law. [Block GoSquared until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Analytics](https://www.flowconsent.com/en/services/analytics) - Consent Analytics - Prior consent Required - Documented cookies 3 - Third-party domains 3 - Servers GoSquared is operated by a UK based company. Collected analytics and customer data are processed on cloud infrastructure that includes servers located in the United States, so visitor data leaves the European Economic Area. Overview ## What does GoSquared do? ## **What GoSquared is** GoSquared is a real time website analytics, live chat and customer data platform operated by a United Kingdom based company. It shows live visitor activity, traffic sources, popular pages and conversion trends, and it pairs this analytics view with a live chat inbox for talking to visitors directly. Its Customer Data Hub unifies behavioural events and contact details into a single profile for each known person. Website owners install a small first party JavaScript snippet, and additional server side and API based tracking is available for known users. Because the product can identify individuals and build profiles, it sits closer to a customer data platform than to a purely anonymous analytics tool. ## **Cookies and data it collects** GoSquared sets first party cookies in the visitor browser. The gs\_u cookie stores a randomly generated device identifier and lasts around two years, the gs\_v cookie stores the identifier assigned when a visitor is identified for the Customer Data Hub and also lasts around two years, and the short lived gs\_p cookie records the previously viewed page for up to sixty seconds. The platform collects pageviews, sessions, device and browser details, referrers and engagement, and anonymises IP addresses by default. When live chat or identification is used it can also store names, email addresses and conversation content. These cookies are first party only and do not track visitors across unrelated websites. ## **GDPR and ePrivacy implications** Under the ePrivacy Directive, storing or reading analytics cookies that are not strictly necessary requires prior consent, and the gs\_u and gs\_v cookies fall into that category. Under the GDPR, the identifiers and profiles GoSquared creates are personal data, so a valid lawful basis and clear information are required. Because the Customer Data Hub builds identifiable profiles and live chat captures conversation content, the processing goes beyond simple aggregate measurement. National rules such as the German TTDSG and guidance from the French CNIL reinforce that consent must be obtained before these cookies are set. Treating GoSquared as a tool that needs informed consent is the safest position for European websites. ## **Consent requirements and CMP integration** The GoSquared tracking snippet should be loaded only after the visitor has given consent through your consent management platform. Configure the snippet so that it is blocked by default and triggered only when the analytics or chat category is accepted. Most consent platforms let you assign the GoSquared script to a custom category and fire it on the consent event. Consent must be freely given, specific and revocable, so provide an equally easy way to withdraw it and stop further tracking. If you use the Customer Data Hub or live chat, make sure the consent text mentions profiling and support conversations, not just basic analytics. ## **International data transfers** GoSquared is provided by a United Kingdom company and processes data on cloud infrastructure that includes servers in the United States, so visitor data is transferred outside the European Economic Area. Transfers to the United States rely on Standard Contractual Clauses and, where the provider participates, the EU US Data Privacy Framework, supplemented by safeguards such as IP anonymisation. Transfers to the United Kingdom are covered by the existing adequacy decision. You should record these transfers in your records of processing and reference the relevant safeguards in your privacy policy. A transfer impact assessment helps document that the safeguards are effective for the data involved. ## **Practical compliance steps** Start by signing a data processing agreement with GoSquared and confirming the configured data regions and retention settings. Block the tracking snippet until consent is captured, and map the GoSquared cookies to the correct category in your consent platform. List the gs\_u, gs\_v and gs\_p cookies and their durations in your cookie policy, and explain the analytics, chat and Customer Data Hub purposes. Keep IP anonymisation enabled and use the Deletion API to honour erasure and objection requests promptly. Review the setup periodically so that the cookie inventory, transfer documentation and consent records stay accurate. Compliance ## GoSquared and the GDPR GoSquared is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (GDPR Article 6(1)(a)) is required because GoSquared sets first party analytics cookies and can build identifiable visitor profiles through its Customer Data Hub. Legitimate Interest (Article 6(1)(f)) is generally not sufficient given the profiling and live chat data processing involved. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, TTDSG (Germany), CNIL guidelines, LOPDGDD (Spain), EU US Data Privacy Framework ### Impact assessment (DPIA) A data protection impact assessment is recommended when GoSquared is used beyond basic aggregate analytics. The Customer Data Hub builds unified, identifiable visitor profiles, and the live chat inbox captures conversation content that can include personal data. Combining behavioural tracking with identification increases the risk of profiling, so the assessment should document the categories of data, retention periods and the lawful basis. International transfers to United States infrastructure and the use of the Deletion API for erasure requests should also be assessed. Where high risk profiling is likely, a full DPIA under GDPR Article 35 is advisable. ### Sample text for your banner > We use GoSquared to understand how visitors use our site and to provide live chat support. This sets first party cookies and may create a visitor profile. Do you accept these analytics and chat cookies? Cookies and trackers ## What GoSquared sets and contacts - Tracking method A first party JavaScript tracking snippet collects pageviews, sessions, device and traffic source data in real time, and powers the live chat widget and Customer Data Hub. Visitors are identified using first party cookies tied to the project token, and IP addresses are anonymised by default. Server side and API based tracking are also available for sending events and identifying known users. - Server location GoSquared is operated by a UK based company. Collected analytics and customer data are processed on cloud infrastructure that includes servers located in the United States, so visitor data leaves the European Economic Area. - Data transferred outside the EU Yes. Visitor and customer data are processed on infrastructure that includes the United States. Transfers outside the EEA rely on Standard Contractual Clauses (2021/914) and, where applicable, the EU US Data Privacy Framework, supplemented by IP anonymisation and other safeguards. ### Cookies set (3) | Name | Type | Duration | Purpose | | -------------- | --------------------- | ---------- | -------------------------------------------------------------------------------------------------------- | | gs\_u\_{TOKEN} | first party analytics | 2 years | Stores a randomly generated device identifier used to recognise a returning browser for analytics. | | gs\_v\_{TOKEN} | first party analytics | 2 years | Stores the visitor identifier assigned when a visitor is identified for the Customer Data Hub and Inbox. | | gs\_p\_{TOKEN} | first party analytics | 60 seconds | Records the previously viewed page within a session to attribute the next pageview. | ### Third-party domains contacted (3) - `data.gosquared.com` - `api.gosquared.com` - `cdn.gosquared.com` Questions ## Frequently asked questions about GoSquared Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does GoSquared set? GoSquared sets first party cookies including gs\_u, which stores a random device identifier for about two years, and gs\_v, which stores the identifier of a visitor identified for the Customer Data Hub, also for about two years. A short lived gs\_p cookie records the previously viewed page for up to sixty seconds. These cookies are first party only and do not track visitors across other websites. ### Is consent required to use GoSquared? Yes. The gs\_u and gs\_v cookies are analytics and identification cookies that are not strictly necessary, so the ePrivacy Directive requires prior consent before they are set. Because the Customer Data Hub and live chat can identify visitors, consent is the appropriate basis. You should block the tracking snippet until the visitor accepts. ### What is the legal basis for GoSquared? The lawful basis is consent under GDPR Article 6(1)(a), because GoSquared sets non essential cookies and can build identifiable visitor profiles. Legitimate interest under Article 6(1)(f) is generally not sufficient given the profiling and live chat content involved. Consent must be informed, freely given and easy to withdraw. ### Does GoSquared transfer data to the United States? Yes. GoSquared is a United Kingdom company that processes data on cloud infrastructure including United States servers, so visitor data is transferred outside the EEA. These transfers rely on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, supplemented by IP anonymisation. You should document the transfers and reference the safeguards in your privacy policy. ### Do I need a DPIA for GoSquared? A data protection impact assessment is recommended when you use the Customer Data Hub or live chat, because they create identifiable profiles and capture conversation content. The assessment should cover the data categories, retention, the consent basis and the United States transfers. A full DPIA under Article 35 is advisable where high risk profiling is likely. ### How do I implement GoSquared compliantly? Sign a data processing agreement, keep IP anonymisation enabled, and load the tracking snippet only after consent through your consent management platform. Map the gs\_u, gs\_v and gs\_p cookies to the correct category and list them in your cookie policy. Use the Deletion API to handle erasure and objection requests promptly. ### What are some alternatives to GoSquared? Privacy friendly analytics alternatives include cookieless tools such as Plausible, Fathom, Cronitor and Splitbee, which avoid identification cookies. If you need live chat and a customer data hub, the trade off is that those features inherently process more personal data. Choosing a cookieless option can reduce or remove the need for a consent banner. ### How do I update my cookie policy for GoSquared? List the gs\_u, gs\_v and gs\_p cookies with their purposes and durations, and state that they are first party. Explain the analytics, live chat and Customer Data Hub processing, and mention the transfers to the United States and the safeguards used. Review the entries whenever GoSquared changes its cookies or your configuration. Same category ## More services: Analytics [See the whole category](https://www.flowconsent.com/en/services/analytics) ### [Koala](https://www.flowconsent.com/en/services/analytics/koala) [Koala is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Koala supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Koala enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/koala) [Analytics](https://www.flowconsent.com/en/services/analytics/koala) · ### [Perfmatters](https://www.flowconsent.com/en/services/analytics/perfmatters) [Perfmatters is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Perfmatters supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Perfmatters enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/perfmatters) [Analytics](https://www.flowconsent.com/en/services/analytics/perfmatters) · ### [Piwik PRO Core](https://www.flowconsent.com/en/services/analytics/piwik-pro-core) [Piwik PRO Core is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Piwik PRO Core offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Piwik PRO Core empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/piwik-pro-core) [Analytics](https://www.flowconsent.com/en/services/analytics/piwik-pro-core) · ### [web-vitals](https://www.flowconsent.com/en/services/analytics/web-vitals) [web-vitals is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. web-vitals supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, web-vitals ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/analytics/web-vitals) [Analytics](https://www.flowconsent.com/en/services/analytics/web-vitals) · ### [OpenPanel](https://www.flowconsent.com/en/services/analytics/openpanel) [OpenPanel is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. OpenPanel supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, OpenPanel enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/openpanel) [Analytics](https://www.flowconsent.com/en/services/analytics/openpanel) · ### [LeadBoxer](https://www.flowconsent.com/en/services/analytics/leadboxer) [LeadBoxer is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. LeadBoxer supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, LeadBoxer enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/leadboxer) [Analytics](https://www.flowconsent.com/en/services/analytics/leadboxer) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)