FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Analytics

Looker

Analytics

Looker is a Google Cloud business intelligence platform that embeds dashboards, looks and explores via iframe and the Embed SDK.

Block Looker until consentScan my site
Overview

What does Looker do?

What is Looker

Looker is a business intelligence and analytics platform acquired by Google in 2020 and integrated into Google Cloud. It models data through LookML, runs queries on warehouses such as BigQuery, Snowflake or Redshift, and exposes dashboards, looks and explores through a web interface and an Embed SDK.

What cookies and data Looker processes

An embedded Looker dashboard sets session cookies (LOOKER_SESSION, LOOKERAUTH) on the Looker domain (your_instance.looker.com or your_instance.cloud.looker.com), plus a CSRF token. Looker receives the viewer IP, user agent, dashboard identifier and every interaction (filter changes, drilldowns). Through Signed Embed URLs your application also passes user attributes used for row level security.

GDPR and ePrivacy implications

Embedding Looker on a public page writes cookies and processes personal data; Article 5(3) ePrivacy and Article 6 GDPR require consent. Behind authentication, in an internal application, the session cookies are strictly necessary and contract performance applies. The dashboards themselves often contain personal data (customer, employee or patient records) which must be governed by row level security and a clear sharing policy.

Consent and legal basis

Consent before loading Looker on a public site. Contract performance for internal BI behind SSO. Legitimate interest for internal usage analytics. Sensitive data requires an Art. 9 GDPR basis. When Looker is used to expose customer dashboards as part of a SaaS product, contract performance with the customer covers the processing.

Data transfers and hosting

Looker instances can be hosted in EU Google Cloud regions (europe west1 in Belgium, europe west3 in Frankfurt and others), keeping the dashboard and metadata in the EU. Google LLC remains the controller of the platform itself and operates support from the US, so the EU US Data Privacy Framework and Google Cloud Standard Contractual Clauses must cover the transfer.

Practical compliance steps

Pick an EU Looker region, use Signed Embed URLs to pass user attributes for row level security, enforce LookML access_filters on sensitive fields, integrate with your SSO provider, audit who accesses which dashboard, and keep query history retention short. Block public Looker embeds until consent through your CMP.

Compliance

Looker and the GDPR

Looker is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR) for embedded dashboards on public pages; contract performance (Art. 6(1)(b) GDPR) for internal BI behind authentication
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, EU US Data Privacy Framework, Google Cloud DPA

Impact assessment (DPIA)

A DPIA is recommended when Looker dashboards expose personal data of customers, employees or patients to broad audiences, when public embeds are used without row level security, or when looks feed automated decisions.

Sample text for your banner

We use Looker dashboards to display interactive analytics. Looker writes session cookies on your device, may receive your IP address and processes data through Google Cloud infrastructure in the EU and the United States. We only load Looker if you accept.
Cookies and trackers

What Looker sets and contacts

Tracking method
iframe and JavaScript Embed SDK for dashboards, looks and explores
Server location
Google Cloud regions worldwide; EU multi region available on customer hosted instances
Data transferred outside the EU
Looker is owned by Google LLC. Looker instances can be hosted in EU Google Cloud regions, but Google LLC support and infrastructure operations remain US headquartered. Transfers rely on the EU US Data Privacy Framework and the Google Cloud Standard Contractual Clauses.

Cookies set (3)

NameTypeDurationPurpose
LOOKER_SESSIONthird_partysessionSession identifier for the Looker viewer
LOOKERAUTHthird_party30 daysAuthentication state for the Looker user
CSRF TOKENthird_partysessionCross site request forgery protection token

Third-party domains contacted (3)

  • looker.com
  • cloud.looker.com
  • lookercdn.com
Questions

Frequently asked questions about Looker

Can't find your question? Write to us, we answer fast.

Which cookies does Looker set?

An embedded Looker view writes LOOKER_SESSION (session identifier), LOOKERAUTH (authentication state) and a CSRF token on the Looker domain. Self hosted Looker can be configured to use custom cookie names.

Is consent required to embed Looker?

For public embeds, yes. Looker writes cookies and loads JavaScript on the visitor device, so Article 5(3) ePrivacy applies. For dashboards behind an authenticated portal, the cookies are strictly necessary and contract performance applies.

Which legal basis applies?

Consent for public dashboards. Contract performance for SaaS dashboards delivered to customers, and for employee facing analytics under an employment contract. Sensitive data requires Art. 9 GDPR coverage.

Are there transfers to the United States?

EU Looker regions keep the dashboards and metadata in the EU, but Google LLC operates support and the underlying platform from the US. Transfers are covered by the EU US Data Privacy Framework and Google Cloud Standard Contractual Clauses.

Do I need a DPIA?

Recommended when dashboards expose personal data to broad audiences, when public embeds are used without row level security, or when looks feed automated decisions.

How do I implement Looker compliantly?

Choose an EU region, use Signed Embed URLs, enforce LookML access_filters and user_attributes, audit access through Looker activity logs, keep query history short, and add Looker to your records of processing activities.

Are there alternatives to Looker?

Power BI, Tableau, Qlik, Metabase, Apache Superset, ToucanToco (France), Lightdash and Cube. EU based options reduce transfer complexity.

How do I update my cookie policy?

List Looker session cookies (LOOKER_SESSION, LOOKERAUTH, CSRF token) with purpose, duration and controller. Mention the EU US Data Privacy Framework and Google Cloud DPA in the transfers section.

Same category

More services: Analytics

See the whole category

EcomScout

EcomScout is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. EcomScout supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, EcomScout enables informed decisions that improve experience and drive results.

Analytics

Mint

Mint is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Mint supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Mint enables informed decisions that improve experience and drive results.

Analytics

Fathom

Fathom is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Fathom offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Fathom empowers organizations to optimize strategy and maximize return on investment.

Analytics

ClickTale

ClickTale is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. ClickTale offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, ClickTale empowers organizations to optimize strategy and maximize return on investment.

Analytics

FormWise

FormWise is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. FormWise integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, FormWise makes advanced AI accessible to all teams.

Analytics

Leadinfo

Leadinfo is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Leadinfo offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Leadinfo empowers organizations to optimize strategy and maximize return on investment.

Analytics

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site