> How Kilkaya, the Nordic real time content analytics platform, handles cookies, consent, EEA data processing and GDPR obligations for publishers and media. > > Canonical: https://www.flowconsent.com/en/services/analytics/kilkaya Analytics # Kilkaya Analytics Kilkaya is a real time content analytics and audience platform built for publishers and media teams. Based in Oslo, Norway, it tracks article performance as it happens, runs headline and AB tests, and builds audience and prediction models. It relies on a first party analytics identifier and behavioural event tracking, so its analytics cookie requires consent under the ePrivacy rules in the European Union. [Block Kilkaya until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Analytics](https://www.flowconsent.com/en/services/analytics) - Consent Analytics - Prior consent Required - Documented cookies 3 - Third-party domains 4 - Servers European Union / EEA (Nordic and EU cloud infrastructure) Overview ## What does Kilkaya do? ## **What Kilkaya is** Kilkaya is a real time content analytics and audience platform created for publishers and media organisations. It shows editorial teams how each article and piece of content performs the moment it goes live, so newsrooms can react quickly. The platform also runs headline and AB testing and builds audience and prediction models. It originates from Oslo, Norway, and has strong Nordic roots, which means its core infrastructure sits inside Europe. ## **Data and cookies** Kilkaya works with a first party analytics identifier and behavioural event tracking. It sets a persistent visitor cookie, typically named kuid, and a short session cookie, and it records page views, scroll behaviour and engagement signals. These events feed the real time dashboards and the audience models. Because the identifier persists across visits, the data can describe an individual reader over time, which brings it within the scope of the data protection rules. ## **GDPR and ePrivacy** The ePrivacy rules, transposed in each member state, govern the act of reading and writing the analytics cookie on a device, while the GDPR governs the processing of the resulting personal data. Storing an analytics cookie that is not strictly necessary needs prior consent under ePrivacy art. 5(3). Where the deployment is configured for strictly anonymised single site audience measurement, the CNIL exemption for audience measurement may remove the consent requirement, but only if the strict conditions are met. ## **Consent** In the default configuration the lawful basis is consent under art. 6(1)(a) of the GDPR, paired with the ePrivacy consent for the cookie. Consent must be freely given, specific, informed and as easy to withdraw as to give. In practice this means Kilkaya should fire only after the visitor accepts the analytics category in your consent banner. Until that point no analytics cookie should be written and no events should be sent. ## **International transfers** As a European provider, Kilkaya processes data within the EEA, so in the standard setup there is no transfer to a third country. A transfer can only arise if a sub processor located outside the EEA is involved. In that case you should rely on the EU Standard Contractual Clauses and a transfer impact assessment. The practical step is to confirm in the contract and the data processing agreement exactly where your data is stored and which sub processors are used. ## **Practical compliance steps** Place Kilkaya behind a consent management platform so it loads only after consent for analytics. List the kuid and session cookies in your cookie policy with their purpose and lifetime. Sign the data processing agreement, document retention periods and review who can access the audience models. If you rely on the audience measurement exemption, keep written evidence that the strict anonymisation and single site conditions are satisfied. Compliance ## Kilkaya and the GDPR Kilkaya is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis consent (art. 6(1)(a)) and ePrivacy art. 5(3) consent for the analytics cookie; where strictly anonymised single site audience measurement is configured, the CNIL exemption may apply - Risk level medium - Applicable regulations GDPR, ePrivacy Directive 2002/58/EC, CNIL guidance on audience measurement, EU Standard Contractual Clauses, TTDSG (Germany), LOPDGDD (Spain), LIL (France) ### Impact assessment (DPIA) A full DPIA is not usually mandatory for standard single site content analytics, but a documented assessment is recommended because Kilkaya builds audience and prediction models from behavioural events. Assess the volume of tracking, profiling logic, retention periods and whether any sub processor sits outside the EEA. Where processing stays anonymised and within the EEA, the residual risk is moderate. ### Sample text for your banner > We use Kilkaya to measure how our content performs and to understand our audience. With your consent, Kilkaya sets a first party analytics cookie and records how you interact with our pages. You can accept or decline, and you may withdraw consent at any time in our cookie settings. Cookies and trackers ## What Kilkaya sets and contacts - Tracking method first party content analytics with behavioural event tracking - Server location European Union / EEA (Nordic and EU cloud infrastructure) ### Cookies set (3) | Name | Type | Duration | Purpose | | ------------- | --------- | ------------------------- | ------------------------------------------------------------------------------------------------------------------------- | | kuid | analytics | persistent (up to 1 year) | Kilkaya first party visitor identifier used to measure content performance and build audience models. | | \_kk\_session | analytics | session | Short lived session cookie used to group events within a single visit for real time analytics. | | \_kk\_uid | analytics | persistent (up to 1 year) | Secondary Kilkaya first party analytics identifier used to deduplicate visits and support audience and prediction models. | ### Third-party domains contacted (4) - `kilkaya.com` - `cl.kilkaya.com` - `count.kilkaya.com` - `cdn.kilkaya.com` Questions ## Frequently asked questions about Kilkaya Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies and identifiers does Kilkaya set? Kilkaya uses a first party setup. It typically sets a persistent visitor identifier called kuid for analytics and a short lived session cookie. These store a reader identifier and engagement data used for the real time dashboards and audience models. ### Is consent required to use Kilkaya? Yes, in the standard configuration. Because the analytics cookie is not strictly necessary, ePrivacy art. 5(3) requires prior consent before it is set. Kilkaya should therefore load only after the visitor accepts the analytics category in your consent banner. ### What is the legal basis for processing? The lawful basis is consent under art. 6(1)(a) of the GDPR, combined with ePrivacy consent for the cookie. In some cases a strictly anonymised single site audience measurement configuration may fall under the CNIL exemption, which removes the consent requirement if the strict conditions are met. ### Does Kilkaya transfer data to the United States or other third countries? No in the standard setup. Kilkaya is a European provider that processes data within the EEA. A transfer only arises if a sub processor outside the EEA is used, in which case you rely on the EU Standard Contractual Clauses, so confirm the data location in your contract. ### Do we need a DPIA for Kilkaya? A full DPIA is not usually mandatory for standard single site content analytics. However, a documented assessment is recommended because Kilkaya builds audience and prediction models from behavioural events. Review the tracking volume, retention and whether processing stays anonymised and inside the EEA. ### How do we implement Kilkaya in a compliant way? Load Kilkaya through a consent management platform so it fires only after analytics consent. List the kuid and session cookies in your cookie policy with purpose and lifetime, sign the data processing agreement, and document retention periods. Verify the data location and any sub processors in the contract. ### What are the alternatives to Kilkaya? Other content analytics and audience tools exist, including European options and privacy first analytics that can run without persistent identifiers. The right choice depends on whether you need real time editorial insight, headline testing and audience modelling, and on your appetite for consent dependent tracking. ### How should we update our cookie policy for Kilkaya? Add Kilkaya as an analytics provider in your cookie policy. Describe the kuid visitor identifier and the session cookie, their purpose, their duration and the fact that they are first party. State that data is processed within the EEA and explain how visitors can withdraw consent. Same category ## More services: Analytics [See the whole category](https://www.flowconsent.com/en/services/analytics) ### [LeadsSight](https://www.flowconsent.com/en/services/analytics/leadssight) [LeadsSight is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. LeadsSight offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, LeadsSight empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/leadssight) [Analytics](https://www.flowconsent.com/en/services/analytics/leadssight) · ### [Rambler](https://www.flowconsent.com/en/services/analytics/rambler) [Rambler is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Rambler offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Rambler empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/rambler) [Analytics](https://www.flowconsent.com/en/services/analytics/rambler) · ### [Leadspace](https://www.flowconsent.com/en/services/analytics/leadspace) [Leadspace is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Leadspace offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Leadspace empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/leadspace) [Analytics](https://www.flowconsent.com/en/services/analytics/leadspace) · ### [Adobe DTM](https://www.flowconsent.com/en/services/analytics/adobe-dtm) [Adobe DTM is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Adobe DTM supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Adobe DTM enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/adobe-dtm) [Analytics](https://www.flowconsent.com/en/services/analytics/adobe-dtm) · ### [Service Management Group](https://www.flowconsent.com/en/services/analytics/service-management-group) [Service Management Group is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Service Management Group offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Service Management Group empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/service-management-group) [Analytics](https://www.flowconsent.com/en/services/analytics/service-management-group) · ### [PatientLoop](https://www.flowconsent.com/en/services/analytics/patientloop) [PatientLoop is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. PatientLoop supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, PatientLoop enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/patientloop) [Analytics](https://www.flowconsent.com/en/services/analytics/patientloop) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)