> IBM Coremetrics, now Acoustic Analytics: cookies, persistent visitor IDs, US data transfers, ePrivacy duties and GDPR compliant use on European websites. > > Canonical: https://www.flowconsent.com/en/services/analytics/ibm-coremetrics Analytics # IBM Coremetrics Analytics · [Official website](https://ibm.com/software/marketing-solutions/coremetrics) IBM Coremetrics is an enterprise digital analytics platform that originated at Coremetrics, was acquired by IBM in 2010 and is now operated by Acoustic as Acoustic Analytics. It places a JavaScript tag and cookies on retail and enterprise sites to capture page views, conversions, search terms and click level events, and to build persistent visitor profiles for segmentation and personalisation. Data is processed in the United States, which makes Coremetrics a high risk tracker under the GDPR and the ePrivacy Directive. [Block IBM Coremetrics until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Analytics](https://www.flowconsent.com/en/services/analytics) - Consent Analytics - Prior consent Required - Documented cookies 5 - Third-party domains 4 - Servers Operated by Acoustic, L.P. (United States) after the IBM Watson Marketing divestment. Production data is stored mainly in the United States with regional points of presence. EU customers can request EU data residency on the Acoustic Analytics platform. Overview ## What does IBM Coremetrics do? ## **What IBM Coremetrics is** IBM Coremetrics is the legacy name of an enterprise digital analytics suite, now operated and rebranded by Acoustic as Acoustic Analytics. It targets retail, banking and large enterprise customers with deep funnel reporting, product affinity analysis and segmentation. Implementation is based on the eluminate.js page tag loaded from data.coremetrics.com or a CNAME on the customer domain. ## **What data Coremetrics collects** Coremetrics records page views, search terms, basket adds, transactions, click coordinates and time on page. It assigns a persistent visitor ID stored in the CoreID6 cookie and links activity across sessions and devices when login data is provided. Customer data (registered ID, email hash) can be sent in custom attributes. Optional Click to Identify enriches the visitor profile with personally identifiable information. ## **GDPR and ePrivacy implications** The CoreID6 and CoreID6\_HHTL cookies fall under Article 5(3) ePrivacy and require prior consent. The persistent profiling activity falls under Article 6(1)(a) GDPR. Because Coremetrics is integrated with Acoustic Marketing Cloud and exports data to advertising activations, legitimate interest is not admissible. ## **Consent requirements** The eluminate.js tag must be blocked until explicit, granular opt in consent has been given through the CMP. Refusal must be as easy as accepting. The CoreID6 cookie has a default lifetime of 15 years, which is incompatible with the CNIL maximum 13 month retention for analytics cookies and must be reduced server side or via the Coremetrics admin console. ## **International data transfers** Acoustic, L.P. is headquartered in the United States. Coremetrics ingestion endpoints (data.coremetrics.com, libs.coremetrics.com) operate from US data centres. Personal data is therefore transferred to the United States. Customers must rely on the Acoustic DPF certification or signed Standard Contractual Clauses, document a transfer impact assessment and consider EU data residency on Acoustic Analytics where available. ## **Practical compliance steps** Block eluminate.js until consent, reduce CoreID6 cookie lifetime to 13 months, sign the Acoustic DPA, store the DPF reference, run a transfer impact assessment, document the joint flows with Acoustic Marketing Cloud, list Coremetrics in the privacy and cookie policies and review the configuration after each Acoustic platform release. Compliance ## IBM Coremetrics and the GDPR IBM Coremetrics is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) for the cookies and the cross site profiling, plus Article 5(3) ePrivacy Directive for the storage of identifiers on the device. Legitimate interest is not admissible because Coremetrics builds persistent visitor profiles linked across sessions and shares data with the Acoustic marketing cloud. - Risk level high - Applicable regulations GDPR, ePrivacy Directive, French CNIL guidelines, German TTDSG, Spanish LSSI, Italian Garante guidelines, UK PECR ### Impact assessment (DPIA) A DPIA is recommended for IBM Coremetrics because it builds large scale persistent visitor profiles, captures click level data, may be combined with the Acoustic marketing cloud and transfers personal data to the United States. The DPIA must address visitor ID persistence, retention and joint controllership with Acoustic. ### Sample text for your banner > We use IBM Coremetrics, operated by Acoustic, to measure how our site is used and to personalise the experience. Coremetrics sets cookies, builds a persistent visitor ID and transfers data to the United States. We only load Coremetrics after you click Accept. You can withdraw consent at any time from the cookie settings. Cookies and trackers ## What IBM Coremetrics sets and contacts - Tracking method JavaScript page tag (eluminate.js) loaded from coremetrics.com (now operated by Acoustic). Sets first party and third party cookies, captures page views, navigation, conversions, click level events and links activity to a persistent visitor ID. Server side ingestion to the Coremetrics/Acoustic Analytics warehouse for segmentation and reporting. - Server location Operated by Acoustic, L.P. (United States) after the IBM Watson Marketing divestment. Production data is stored mainly in the United States with regional points of presence. EU customers can request EU data residency on the Acoustic Analytics platform. - Data transferred outside the EU Data is transferred to the United States where the Acoustic Coremetrics Analytics platform is hosted. Acoustic relies on the EU/US Data Privacy Framework certification, Standard Contractual Clauses and a published transfer impact assessment. ### Cookies set (5) | Name | Type | Duration | Purpose | | ------------------ | ---------- | --------------------------------------------- | -------------------------------------------------------------------------------------------------- | | CoreID6 | persistent | 13 months (default 15 years, must be reduced) | Persistent unique visitor identifier used by Coremetrics to link sessions and pages across visits. | | CoreM\_State\_Live | persistent | 13 months | Stores the latest visitor activity state and last interaction timestamp. | | CoreID6\_HHTL | persistent | 13 months | Variant of the CoreID6 visitor identifier used for households or shared device tracking. | | cmTPSet | persistent | 1 year | Indicates whether third party cookie placement was successful for the Coremetrics tag. | | 90279749\_clogin | persistent | 13 months | Internal identifier used by the Coremetrics login experience tracking. | ### Third-party domains contacted (4) - `data.coremetrics.com` - `libs.coremetrics.com` - `welcome.coremetrics.com` - `acoustic.com` Questions ## Frequently asked questions about IBM Coremetrics Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does IBM Coremetrics set? Coremetrics sets the first party cookies CoreID6, CoreM\_State\_Live, CoreID6\_HHTL, cmTPSet and 90279749\_clogin used to identify a unique visitor and link sessions. CoreID6 has a default lifetime of 15 years that must be reduced to 13 months for EU compliance. ### Do I need consent to use IBM Coremetrics? Yes. The cookies fall under Article 5(3) ePrivacy and the cross session profiling falls under Article 6(1)(a) GDPR. The eluminate.js tag must be blocked until explicit, granular opt in consent has been collected. ### What is the legal basis for IBM Coremetrics? Consent (Art. 6(1)(a) GDPR). Legitimate interest is not admissible because Coremetrics builds persistent visitor profiles, can be enriched with personally identifiable information and is integrated with Acoustic Marketing Cloud advertising activations. ### Does IBM Coremetrics transfer data to the US? Yes. Acoustic, L.P. is a US company and the Coremetrics ingestion endpoints run in the United States. Transfers rely on the EU/US Data Privacy Framework and Standard Contractual Clauses, and require a documented transfer impact assessment. ### Do I need a DPIA for IBM Coremetrics? Yes. The combination of large scale persistent profiling, click level capture, integration with the Acoustic Marketing Cloud and US transfers triggers the DPIA criteria of WP248 and the EDPB threshold guidance. ### How do I implement IBM Coremetrics compliantly? Tag block eluminate.js until consent, reduce CoreID6 cookie lifetime to 13 months, sign the Acoustic DPA, store the DPF certification reference, document the transfer impact assessment, list Coremetrics in the privacy and cookie policies and audit the configuration after each Acoustic platform release. ### What are the alternatives to IBM Coremetrics? Modern alternatives for enterprise digital analytics include Adobe Analytics, Google Analytics 4 with EU data residency add ons, AT Internet/Piano Analytics (EU based), Contentsquare and Matomo Cloud. None of them eliminate compliance work entirely, but Piano Analytics and Matomo Cloud offer EU only hosting by default. ### How do I update the cookie policy for IBM Coremetrics? List IBM Coremetrics with the operator (Acoustic, L.P.), the purpose (digital analytics and personalisation), the cookies (CoreID6, CoreM\_State\_Live, CoreID6\_HHTL) with retention reduced to 13 months, the legal basis (consent), the transfer destination (United States) and the safeguards (DPF, SCC, TIA). Same category ## More services: Analytics [See the whole category](https://www.flowconsent.com/en/services/analytics) ### [RocketTools](https://www.flowconsent.com/en/services/analytics/rocket-tools) [Rocket Tools is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Rocket Tools supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Rocket Tools enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/rocket-tools) [Analytics](https://www.flowconsent.com/en/services/analytics/rocket-tools) · ### [Koala](https://www.flowconsent.com/en/services/analytics/koala) [Koala is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Koala supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Koala enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/koala) [Analytics](https://www.flowconsent.com/en/services/analytics/koala) · ### [Roistat](https://www.flowconsent.com/en/services/analytics/roistat) [Roistat is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Roistat supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Roistat enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/roistat) [Analytics](https://www.flowconsent.com/en/services/analytics/roistat) · ### [Ensighten](https://www.flowconsent.com/en/services/analytics/ensighten) [Ensighten is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Ensighten offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Ensighten empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/ensighten) [Analytics](https://www.flowconsent.com/en/services/analytics/ensighten) · ### [AvidTrak](https://www.flowconsent.com/en/services/analytics/avidtrak) [AvidTrak is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. AvidTrak supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, AvidTrak enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/avidtrak) [Analytics](https://www.flowconsent.com/en/services/analytics/avidtrak) · ### [Conduit](https://www.flowconsent.com/en/services/analytics/conduit) [Conduit is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Conduit offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Conduit empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/conduit) [Analytics](https://www.flowconsent.com/en/services/analytics/conduit) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)