Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
LaunchRock is a United States based coming soon and viral waitlist landing page builder that captures signup emails and tracks referrals and basic visitor analytics. Because it sets analytics and referral cookies, consent is generally required before those cookies load. Its data is hosted in the United States, so transfers from the EEA or the UK need a safeguard such as standard contractual clauses.
LaunchRock is a landing page builder designed for coming soon pages and viral waitlists, letting teams collect signups before a product is publicly available. Visitors submit their email to join the list, and LaunchRock supports referral mechanics that reward people for sharing the page with others. To make this work it captures signup emails, tracks where referrals come from, and records basic visitor analytics such as page views and conversions. The service is operated from the United States, and the signup and analytics data it collects are hosted there.
LaunchRock sets cookies to support its analytics and its referral tracking, so that it can attribute a signup to the person who shared the link and measure how the page performs. These cookies are not strictly necessary to display the page, which means they are treated as non essential under the ePrivacy rules and generally require consent before they are placed. Because referral tracking can connect one visitor to another through shared links, the data it generates can be more revealing than simple page counts. You should document which cookies appear on your LaunchRock page and describe their purpose clearly.
For the analytics and referral cookies, consent is the appropriate legal basis, and it should be collected before those cookies load on the visitor device. The email signup itself is handled on the basis that the user actively requests to join the waitlist, but you must still tell people clearly what they are signing up for and how you will contact them. If you later use those emails for broader marketing, confirm that your basis covers that use and that you offer an easy way to opt out. Keeping consent and signup handling separate makes each one easier to justify.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Because LaunchRock is a United States service and stores data there, using it with visitors in the EEA or the UK involves a transfer of personal data to a third country. The United States does not benefit from a general adequacy decision, so you typically need an appropriate safeguard such as standard contractual clauses, supported by a transfer risk assessment that considers the data involved. You should confirm what contractual terms LaunchRock offers and whether any supplementary measures are needed for your use case. Document the transfer mechanism so you can demonstrate that the cross border flow is properly governed.
Connect your LaunchRock page to a consent management platform so that analytics and referral cookies only load after the visitor agrees, and name LaunchRock in your cookie notice and privacy policy. Be transparent at the signup form about what you collect, why, and that the data is processed in the United States, and keep the form fields to what you genuinely need. Put the transfer safeguard in place, set a sensible retention period for the waitlist, and provide a clear way for people to unsubscribe or request deletion. Reviewing the live page against this checklist before launch avoids surprises later.
LaunchRock carries a medium compliance risk that comes mainly from its United States hosting and its use of analytics and referral cookies rather than from the volume of data, since waitlists are usually limited to an email and some referral signals. The risk rises if you grow the list, reuse the emails for unrelated marketing, or combine the referral data with other profiles. Review your setup whenever you change how the page is used, and recheck the transfer safeguard and consent flow periodically. A short regular review keeps the waitlist compliant as your launch plans evolve.
Websites using LaunchRock must obtain user consent under GDPR regulations.
DPIA considerations
Assess that LaunchRock collects signup emails and tracks referrals and visitor analytics, and that this data is hosted in the United States, which involves a third country transfer for EEA and UK visitors. A DPIA or at least a documented transfer risk assessment is advisable, covering the safeguard used, the categories of data captured, retention, and how consent is obtained for cookies. Pay particular attention to referral tracking, which can link individuals across shares and increase the sensitivity of the dataset.
Sample consent text
We use LaunchRock to run our waitlist and measure how people discover and share it. This sets analytics and referral cookies, and your details are processed in the United States. With your consent we will enable these cookies, and you can decline or change your choice at any time in our cookie settings.
Third-party domains contacted
launchrock.comlaunchrock-static.s3.amazonaws.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| lr_ref | Analytics and referral | Up to 12 months | Stores referral attribution so a signup can be credited to the person who shared the waitlist link. |
| lr_visitor | Analytics | Up to 12 months | Identifies a visitor for basic page analytics such as views and conversion measurement. |
| lr_session | Functional | Session | Maintains the visitor session state on the waitlist page during a single visit. |
LaunchRock collects user analytics data — you legally need a consent banner. Try FlowConsent free.
LaunchRock sets cookies to support visitor analytics and its referral tracking, which attributes a signup to the person who shared the page. These cookies are not needed simply to display the page, so they count as non essential. You should inspect your live page and list the specific cookies and their durations in your cookie notice.
Yes, because LaunchRock places analytics and referral cookies that are not strictly necessary, you generally need prior consent before they load. The email signup itself is based on the user choosing to join the waitlist, but the cookies require a separate consent step. Use a consent banner so the cookies only fire after the visitor agrees.
Consent is the legal basis for the analytics and referral cookies under the GDPR and ePrivacy framework. The email collection is processed because the user actively requests to join the list, and any later marketing use should be covered by an appropriate basis and an easy opt out. Record both elements separately so each is clearly justified.
Yes, LaunchRock is a United States based service and hosts signup and analytics data there, so using it with EEA or UK visitors involves a third country transfer. Because the United States lacks a general adequacy decision, you typically need standard contractual clauses and a transfer risk assessment. Confirm the safeguards LaunchRock offers and document them.
A DPIA or at least a documented transfer risk assessment is advisable because LaunchRock collects personal data, uses referral tracking, and transfers data to the United States. The assessment should cover the data captured, retention, the transfer safeguard, and how consent is obtained. Referral tracking deserves attention because it can link individuals across shares.
Load the analytics and referral cookies only after consent through a consent management platform, and name LaunchRock in your cookie notice and privacy policy. Be transparent at the signup form about what you collect and that data is processed in the United States, put a transfer safeguard in place, and set a clear retention period. Offer an easy way to unsubscribe or request deletion.
Other waitlist and coming soon page tools include Mailchimp landing pages, ConvertKit, KickoffLabs, and Prefinery, some of which offer EU hosting or clearer transfer terms. The right choice depends on your hosting preference, referral needs, and how you manage consent. Compare each on data location, cookie behavior, and transfer safeguards.
Add LaunchRock to your cookie policy, listing the analytics and referral cookies it sets along with their purpose and duration. State that signup and analytics data are processed in the United States and describe the transfer safeguard you rely on. Explain how visitors can manage or withdraw consent, and revisit the policy when you change your LaunchRock setup.