Jirafe
Jirafe was an ecommerce analytics platform that measured shopper behaviour, conversion, and cart abandonment for stores built on systems such as Magento and Demandware. It loaded a JavaScript tag that set analytics cookies to identify visitors and sessions. Jirafe was acquired by SAP Hybris around 2015 and the standalone product was subsequently discontinued. If a site still loads a legacy Jirafe tag, it should be audited and most likely removed, and while present it requires consent under the GDPR and the ePrivacy Directive.
What does Jirafe do?
What Jirafe was
Jirafe was a dedicated ecommerce analytics platform aimed at online retailers. It collected and visualised shopper behaviour, traffic, conversion funnels, and cart abandonment, and was commonly used alongside commerce systems such as Magento and Demandware. The product was acquired by SAP Hybris around 2015, and the standalone Jirafe service was subsequently discontinued. As a result, a live Jirafe deployment is uncommon today, and any reference to it usually points to a legacy tag left in a theme or tag manager.
What data and cookies it collected
As an analytics tool, Jirafe loaded a JavaScript tag that set cookies to recognise returning visitors and to group activity into sessions. Typical Jirafe analytics cookies included a visitor identifier cookie with a lifetime of roughly one to two years and a session cookie. Alongside the cookies it would process IP addresses, pages and products viewed, and ecommerce events such as add to cart and purchase. Because product documentation is no longer maintained, exact cookie names and durations should be confirmed with a live cookie scan rather than assumed.
GDPR and ePrivacy implications
Where a Jirafe tag is still present, the cookies are read from and written to the visitor terminal for analytics rather than strictly necessary purposes, so Article 5(3) of the ePrivacy Directive requires prior consent. The visitor identifier and behavioural data are personal data under the GDPR, which means a lawful basis, transparency, and a record of processing activities are required. A particular concern is that an unmaintained legacy tag may continue to set cookies and possibly send data without any current contract or oversight.
Consent requirements
As an analytics technology, Jirafe is not strictly necessary, so it must not load before the visitor has actively accepted the analytics or statistics category. Pre ticked boxes and implied consent do not meet the GDPR standard. In practice, however, the more important step for most sites is not to fine tune consent for Jirafe but to confirm whether the tag is still firing at all, because a discontinued service that keeps loading is a liability rather than a benefit.
Transfers and practical compliance steps
Historically Jirafe processed data on infrastructure in the United States, so any surviving transfer should be assessed under the Standard Contractual Clauses. The recommended action is to audit your site and tag manager for any Jirafe tag or domain, and to remove it unless you can demonstrate an active, contracted purpose. While it remains, gate it behind your consent management platform, document the cookies in your cookie policy, and verify the exact cookies and endpoints with a scan because the original documentation is no longer reliable.
Jirafe and the GDPR
Jirafe is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive)
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
Jirafe was an ecommerce analytics platform that tracked shopper behaviour and cart abandonment using a visitor identifier cookie and session cookies, and it was discontinued after the SAP Hybris acquisition. The main DPIA concern is a legacy tag continuing to set cookies and potentially transfer data without any current contract, oversight, or maintained documentation. Assess whether the tag still fires, the cookies and data it sets, the lack of a controller relationship, and any residual transfer, with the primary mitigation being removal of the tag.
Sample text for your banner
This site previously used Jirafe to analyse how shoppers browse and buy. Jirafe placed analytics cookies on your device to recognise your browser and group your activity into sessions. These cookies load only after you accept the analytics category. If you have reached this notice, please be aware that Jirafe is a discontinued service and any remaining tag is in the process of being reviewed and removed.
What Jirafe sets and contacts
- Tracking method
- JavaScript analytics tag with cookies
- Server location
- United States
- Data transferred outside the EU
- Where a legacy Jirafe tag is still active, analytics data was processed on infrastructure located in the United States. Any such transfer should be assessed under the Standard Contractual Clauses, though in practice a current Jirafe deployment is unlikely because the product was discontinued.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| jirafe | analytics | About 1 to 2 years (typical, verify with a scan) | Representative Jirafe visitor identifier cookie used to recognise returning shoppers and attribute behaviour over time. Because the product is discontinued, treat this as a typical example and confirm the exact name and duration with a live cookie scan. |
| __jirafe | analytics | Session (typical, verify with a scan) | Representative Jirafe session cookie used to group a shopper's activity into a single visit. As documentation is no longer maintained, verify whether this cookie is still set on your site rather than assuming its presence. |
| jirafe_ec | analytics | Session (typical, verify with a scan) | Representative ecommerce event cookie associated with Jirafe used to support measurement of actions such as product views and cart activity. Confirm with a cookie scan because the original specification is no longer authoritative. |
Third-party domains contacted (3)
cdn.jirafe.comapi.jirafe.comjirafe.com
Frequently asked questions about Jirafe
Can't find your question? Write to us, we answer fast.
Which cookies does Jirafe set?
Jirafe typically set analytics cookies such as a visitor identifier cookie lasting about one to two years and a session cookie. Because the product is discontinued and its documentation is no longer maintained, treat these names as representative and confirm the exact cookies on your site with a live cookie scan.
Do I need consent to use Jirafe?
Yes, while any Jirafe tag is present. Its analytics cookies are not strictly necessary, so Article 5(3) of the ePrivacy Directive and the GDPR require prior, opt in consent before the tag loads. In most cases, however, the better answer is to remove the tag because the service is discontinued.
What is the legal basis for Jirafe?
For any surviving Jirafe tag the basis is consent under Article 6(1)(a) of the GDPR and Article 5(3) of the ePrivacy Directive, as with other analytics. Legitimate interest is not appropriate because the cookies require consent and there is unlikely to be a current processing agreement with a discontinued service.
Does Jirafe transfer data to the United States?
Historically Jirafe processed data on infrastructure in the United States, so a legacy tag could still send data there. Any such transfer should be assessed under the Standard Contractual Clauses, but in practice the realistic step is to confirm whether the tag still transmits anything and to remove it.
Do I need a DPIA for Jirafe?
If a Jirafe tag is still active you should at least document the processing, but the more pressing issue is that a discontinued, unmaintained tag may operate without a controller relationship or oversight. Assess whether it still fires, what it sets and sends, and the residual transfer, with removal as the primary mitigation.
How do I handle Jirafe compliantly?
Audit your site, theme, and tag manager for any Jirafe tag, script, or domain. If you cannot demonstrate an active, contracted purpose, remove it. While it remains, gate it behind your consent management platform, document the cookies, and verify the exact behaviour with a cookie scan rather than relying on old documentation.
Are there alternatives to Jirafe?
Since Jirafe is discontinued, you should replace it rather than maintain it. Modern ecommerce analytics options include privacy focused tools such as Matomo, as well as the analytics features built into platforms like Magento, Shopify, or your current commerce system, chosen according to your data residency and consent needs.
How do I update my cookie policy for Jirafe?
If any Jirafe cookies remain, list each one with its purpose and duration and note that the service is being phased out. Once the tag is removed, delete the Jirafe entries from your cookie policy and confirm with a cookie scan that no Jirafe cookies are still being set.
%22%3E%0A%20%20%20%20%20%20%20%20%3Crect%20width%3D%2232%22%20height%3D%2232%22%20fill%3D%22%23FAFAFA%22%20%2F%3E%0A%20%20%20%20%20%20%20%20%3Cpath%0A%20%20%20%20%20%20%20%20%20%20%20%20d%3D%22M32%2016.7508C32%2022.3659%2029.3602%2027.3334%2025.3106%2030.3735C20.8784%2033.6985%2014.6102%2031.7121%2012.728%2026.3577C12.2195%2024.9142%2011.8985%2023.1993%2011.8985%2021.1671C11.8985%2011.735%2025.4133%205.64405%2024.5942%205.64405C23.775%205.64405%2017.2192%2010.9474%2012.9231%2010.9474C3.20621%2010.9448%200.802662%2015.5762%200.802662%2021.9521L0.79239%2021.9628C0.355848%2020.5651%200.0887888%2019.084%200.0194544%2017.5492C-0.43763%207.39928%207.21728%20-0.540993%2016.9136%200.0288597C25.326%200.52345%2032%207.82132%2032%2016.7481V16.7508Z%22%0A%20%20%20%20%20%20%20%20%20%20%20%20fill%3D%22%23003642%22%20%2F%3E%0A%20%20%20%20%20%20%20%20%3Cpath%0A%20%20%20%20%20%20%20%20%20%20%20%20d%3D%22M7.80785%2017.2856C8.25033%2017.2856%208.609%2016.9102%208.609%2016.447C8.609%2015.9838%208.25033%2015.6084%207.80785%2015.6084C7.36538%2015.6084%207.00666%2015.9838%207.00666%2016.447C7.00666%2016.9102%207.36538%2017.2856%207.80785%2017.2856Z%22%0A%20%20%20%20%20%20%20%20%20%20%20%20fill%3D%22%23003642%22%20%2F%3E%0A%20%20%20%20%3C%2Fg%3E%0A%20%20%20%20%3Cdefs%3E%0A%20%20%20%20%20%20%20%20%3CclipPath%20id%3D%22clip0_3365_4100%22%3E%0A%20%20%20%20%20%20%20%20%20%20%20%20%3Crect%20width%3D%2232%22%20height%3D%2232%22%20fill%3D%22white%22%20%2F%3E%0A%20%20%20%20%20%20%20%20%3C%2FclipPath%3E%0A%20%20%20%20%3C%2Fdefs%3E%0A%3C%2Fsvg%3E)
HumCommerce
HumCommerce is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. HumCommerce integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, HumCommerce helps organizations maintain robust websites that meet user expectations and technical requirements.
Ensighten
Ensighten is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Ensighten offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Ensighten empowers organizations to optimize strategy and maximize return on investment.
Mapp
Mapp is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Mapp supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Mapp enables informed decisions that improve experience and drive results.
SimpleSat
SimpleSat is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. SimpleSat offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, SimpleSat empowers organizations to optimize strategy and maximize return on investment.
Acoustic Experience Analytics
Acoustic Experience Analytics is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Acoustic Experience Analytics offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Acoustic Experience Analytics empowers organizations to optimize strategy and maximize.
Cabin
Cabin is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Cabin supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Cabin enables informed decisions that improve experience and drive results.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.