> How Monitus analytics for Volusion handles cookies, consent and US data transfers under the GDPR and ePrivacy rules, with practical compliance guidance. > > Canonical: https://www.flowconsent.com/en/services/analytics/monitus Analytics # Monitus Analytics · [Official website](https://www.monitus.net) Monitus is an ecommerce analytics suite that enhances Google Analytics for Volusion stores, adding enhanced ecommerce tracking through cookies and tags. [Block Monitus until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Analytics](https://www.flowconsent.com/en/services/analytics) - Consent Analytics - Prior consent Required - Documented cookies 4 - Third-party domains 4 - Servers United States (Google Analytics infrastructure and Monitus application servers) Overview ## What does Monitus do? ## **What Monitus is** Monitus is a United States based ecommerce analytics suite that historically served Volusion stores. It extends Google Analytics with enhanced ecommerce reporting, giving merchants a clearer view of product performance, funnels and revenue. Monitus achieves this by injecting tracking tags into store pages and forwarding structured event data to Google Analytics. It positions itself as an analytics enhancement layer rather than a standalone advertising network. ## **What data and cookies it collects** Monitus relies on Google Analytics cookies such as \_ga, \_gid and \_gat, which store pseudonymous identifiers used to recognise returning browsers and to throttle request rates. It also tracks page views, product interactions, cart activity and completed purchases, including order values and identifiers. This information can be linked to a single device or visitor over time, which makes it personal data under the GDPR. Where transactional details are attached, the profile becomes more identifying and therefore more sensitive. ## **GDPR and ePrivacy implications** Storing and reading analytics cookies on a user device requires prior consent under Art. 5(3) of the ePrivacy Directive, since these cookies are not strictly necessary to deliver the service. The associated profiling and analytics processing must also satisfy the GDPR, which means a valid lawful basis, transparency and respect for data subject rights. Because Monitus channels data into Google Analytics, the controller must account for Google as a processor and for the international transfer that follows. Regulators across Europe have repeatedly scrutinised Google Analytics deployments, so careful configuration is essential. ## **Consent requirements** Consent is the appropriate lawful basis for this analytics activity, and it must be freely given, specific, informed and unambiguous. The Monitus and Google Analytics tags should be blocked until the visitor actively opts in through a consent management platform. Pre ticked boxes, implied consent or simply continuing to browse do not meet the standard. Users must also be able to withdraw consent as easily as they gave it, after which tracking must stop. ## **International data transfers** Both Monitus and Google Analytics process data in the United States, which is a third country for European users. Transfers can rely on the EU US Data Privacy Framework where the recipient is certified, or on Standard Contractual Clauses supported by a transfer impact assessment and supplementary measures. The controller should confirm the current certification status of each recipient and document the chosen mechanism. Features such as IP truncation and reduced data retention help lower the risk associated with these transfers. ## **Practical compliance steps** Map every cookie and tag that Monitus and Google Analytics deploy, then gate them behind a compliant consent banner. Maintain a data processing agreement with the relevant providers and record the transfer mechanism for the United States. Configure data minimisation options, set conservative retention periods and disclose the tools clearly in the cookie policy. Finally, test the consent flow regularly to ensure that no tracking fires before the visitor agrees. Compliance ## Monitus and the GDPR Monitus is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent under Art. 6(1)(a) GDPR for the analytics processing, together with prior consent for storing and reading cookies under Art. 5(3) ePrivacy Directive - Risk level high - Applicable regulations GDPR, ePrivacy Directive, EU US Data Privacy Framework ### Impact assessment (DPIA) Because Monitus performs systematic behavioural tracking of website visitors and combines it with transactional data that can identify individuals, a data protection impact assessment is recommended. Assess the volume of profiling, the international transfer of data to Google and Monitus servers in the United States, and the effectiveness of consent gating. Document the lawful basis, retention periods and the supplementary measures applied to the US transfers. ### Sample text for your banner > We use Monitus and Google Analytics to understand how visitors browse and shop on our store. These tools set cookies and may transfer data to the United States. They run only after you accept analytics cookies. Cookies and trackers ## What Monitus sets and contacts - Tracking method JavaScript tag based enhanced ecommerce tracking layered on top of Google Analytics and Google Tag Manager - Server location United States (Google Analytics infrastructure and Monitus application servers) - Data transferred outside the EU Behavioural and transactional analytics data is transmitted to Google Analytics in the United States and to Monitus application servers in the United States. Transfers from the EU to the US rely on the EU US Data Privacy Framework where the recipient is certified, otherwise on Standard Contractual Clauses combined with a transfer impact assessment and supplementary measures. ### Cookies set (4) | Name | Type | Duration | Purpose | | ---------------- | ----------- | -------- | -------------------------------------------------------------------------------------------------------------------------------------------------- | | \_ga | third party | 2 years | Stores a pseudonymous client identifier used by Google Analytics to distinguish visitors for the enhanced ecommerce reports that Monitus produces. | | \_gid | third party | 24 hours | Stores a short lived visitor identifier used by Google Analytics to distinguish visitors within a single day. | | \_gat | third party | 1 minute | Used by Google Analytics to throttle the request rate and limit the volume of data collected on high traffic stores. | | monitus\_session | first party | Session | Maintains the Monitus tracking session so that browsing and purchase events on the Volusion store are correctly attributed. | ### Third-party domains contacted (4) - `monitus.net` - `www.google-analytics.com` - `www.googletagmanager.com` - `stats.g.doubleclick.net` Questions ## Frequently asked questions about Monitus Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does Monitus set? Monitus relies mainly on the Google Analytics cookies \_ga, \_gid and \_gat, which store pseudonymous identifiers and control the request rate. It may also set a first party session cookie to keep ecommerce events associated with the right visit. None of these cookies are strictly necessary, so they require consent. ### Is consent required to use Monitus? Yes. Because Monitus uses analytics cookies that are not strictly necessary, prior consent is required under Art. 5(3) of the ePrivacy Directive. The Monitus and Google Analytics tags must stay blocked until the visitor actively opts in, and consent must be as easy to withdraw as it was to give. ### What is the legal basis for the processing? The appropriate legal basis is consent under Art. 6(1)(a) GDPR, combined with the prior consent requirement of the ePrivacy Directive for cookie storage. Legitimate interest is generally not suitable here because the activity involves non essential tracking and profiling. The consent must be freely given, specific, informed and unambiguous. ### Does Monitus transfer data to the United States? Yes. Monitus and Google Analytics process data on infrastructure in the United States, which is a third country for European visitors. Transfers should rely on the EU US Data Privacy Framework where the recipient is certified, or on Standard Contractual Clauses with a transfer impact assessment and supplementary measures. ### Is a DPIA needed for Monitus? A data protection impact assessment is recommended because Monitus performs systematic behavioural tracking and links it to transactional data. The assessment should weigh the scale of profiling, the US transfers and the residual risk to visitors. Documenting the safeguards demonstrates accountability to supervisory authorities. ### How do I implement Monitus compliantly? Block all Monitus and Google Analytics tags behind a consent management platform so nothing fires before opt in. Sign a data processing agreement, record the US transfer mechanism, and enable data minimisation features such as IP truncation. Test the consent flow regularly and keep the cookie inventory up to date. ### Are there alternatives to Monitus? European hosted or privacy focused analytics tools such as Matomo, Plausible or Fathom can reduce or remove third country transfers and, in some configurations, operate without consent based cookies. These options may offer less native Volusion ecommerce depth, so evaluate the trade off between functionality and privacy. Any replacement still needs a documented lawful basis and clear disclosure. ### How should I update my cookie policy for Monitus? List the Monitus and Google Analytics cookies by name, purpose and duration, and identify Google and Monitus as recipients in the United States. Explain that consent is required and describe how visitors can withdraw it. Keep the policy synchronised with the actual tags deployed and review it whenever the configuration changes. Same category ## More services: Analytics [See the whole category](https://www.flowconsent.com/en/services/analytics) ### [Service Management Group](https://www.flowconsent.com/en/services/analytics/service-management-group) [Service Management Group is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Service Management Group offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Service Management Group empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/service-management-group) [Analytics](https://www.flowconsent.com/en/services/analytics/service-management-group) · ### [Vev](https://www.flowconsent.com/en/services/analytics/vev) [Vev is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Vev offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Vev empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/vev) [Analytics](https://www.flowconsent.com/en/services/analytics/vev) · ### [Iconosquare](https://www.flowconsent.com/en/services/analytics/iconosquare) [Iconosquare is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Iconosquare offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Iconosquare empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/iconosquare) [Analytics](https://www.flowconsent.com/en/services/analytics/iconosquare) · ### [The Hotels Network](https://www.flowconsent.com/en/services/analytics/the-hotels-network) [The Hotels Network is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. The Hotels Network offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, The Hotels Network empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/the-hotels-network) [Analytics](https://www.flowconsent.com/en/services/analytics/the-hotels-network) · ### [Tencent Analytics](https://www.flowconsent.com/en/services/analytics/tencent-analytics) [Tencent Analytics is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Tencent Analytics supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Tencent Analytics enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/tencent-analytics) [Analytics](https://www.flowconsent.com/en/services/analytics/tencent-analytics) · ### [Marchex](https://www.flowconsent.com/en/services/analytics/marchex) [Marchex is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Marchex offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Marchex empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/marchex) [Analytics](https://www.flowconsent.com/en/services/analytics/marchex) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)