> How Pingdom RUM handles real user performance data, cookies and beacons under GDPR: transfers to the US and Sweden, legal basis, DPIA and a consent text. > > Canonical: https://www.flowconsent.com/en/services/analytics/pingdom-rum Analytics # Pingdom RUM Analytics · [Official website](https://www.pingdom.com/real-user-monitoring/) Real User Monitoring (RUM) product from SolarWinds Pingdom that captures performance data from actual browsers (page load, Core Web Vitals, errors) to help operations and engineering teams diagnose user experience issues. [Block Pingdom RUM until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Analytics](https://www.flowconsent.com/en/services/analytics) - Consent Analytics - Prior consent Required - Documented cookies 3 - Third-party domains 4 - Servers Sweden (Pingdom origin, SolarWinds infrastructure) and United States Overview ## What does Pingdom RUM do? ## **What Pingdom RUM is** Pingdom RUM is the Real User Monitoring product of SolarWinds Pingdom. It loads a JavaScript snippet that reads browser performance APIs (navigation, paint, web vitals) and posts aggregated beacons back to Pingdom servers so operations and engineering teams can monitor the real user experience of their website. ## **Data and cookies** Pingdom RUM sets first or third party cookies for visitor identification and session deduplication, captures URL, referrer, user agent, viewport, connection type, navigation timings, Core Web Vitals and JavaScript errors. Optional session replay sends a redacted DOM stream. ## **GDPR and ePrivacy implications** Because Pingdom RUM sets cookies on the device for behavioural performance measurement and ships data to a remote infrastructure, Article 5(3) ePrivacy applies and prior consent is required. The CNIL audience measurement exemption usually does not apply because the tool is third party and visitor identifiers persist across sessions. ## **Consent requirements** Gate the RUM snippet behind a consent manager. If you absolutely need pre consent data, switch to anonymous server side performance metrics with no identifier and a short retention, and document the legitimate interest analysis. ## **International data transfers** SolarWinds is a US company and processes part of the Pingdom data outside the EU. Transfers must rely on Standard Contractual Clauses and the EU US Data Privacy Framework as documented in the SolarWinds DPA. Confirm the data path with SolarWinds before deploying. ## **Practical compliance steps** Sign the SolarWinds DPA, gate Pingdom RUM behind consent, exclude session replay by default, mask form inputs and sensitive elements, set short retention for raw beacons, restrict admin access, list Pingdom RUM as a processor in your privacy notice and add it to your cookie banner. Compliance ## Pingdom RUM and the GDPR Pingdom RUM is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Article 6(1)(a) GDPR (consent) for client side RUM that sets cookies and processes pseudonymous identifiers. Article 6(1)(f) (legitimate interest) may apply for short lived, anonymous server side performance metrics with no persistent identifier. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, German TTDSG, French CNIL guidance on audience and performance measurement, Spanish LSSI ### Impact assessment (DPIA) A DPIA is not normally required for a standard RUM deployment. It becomes recommended when session replay is enabled, when the RUM data is joined with user profiles, or when content is highly sensitive (health, finance, public service portals). ### Sample text for your banner > With your consent we use Pingdom RUM (SolarWinds, USA and Sweden) to measure the technical performance of our website (page load, errors, Core Web Vitals). Pingdom RUM sets cookies and sends aggregated performance signals to its infrastructure. Cookies and trackers ## What Pingdom RUM sets and contacts - Tracking method JavaScript RUM beacon, performance API readings, first and third party cookies, optional session replay, server side aggregation - Server location Sweden (Pingdom origin, SolarWinds infrastructure) and United States - Data transferred outside the EU SolarWinds Pingdom is a US headquartered service with historical infrastructure in Sweden. Transfers rely on Standard Contractual Clauses and the EU US Data Privacy Framework as set in the SolarWinds DPA. ### Cookies set (3) | Name | Type | Duration | Purpose | | ----------- | ---- | ---------- | --------------------------------------------------------------------------- | | pa\_vid | http | 13 months | Pseudonymous visitor identifier used to deduplicate users across sessions. | | pa\_session | http | 30 minutes | Session identifier used to group events of the same browsing session. | | pa\_perf | http | 30 days | Stores performance flags used to attribute beacons to a deployment release. | ### Third-party domains contacted (4) - `pingdom.net` - `rum.pingdom.net` - `pingdom.com` - `static.pingdom.net` Questions ## Frequently asked questions about Pingdom RUM Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does Pingdom RUM set? Pingdom RUM sets pa\_vid (pseudonymous visitor ID), pa\_session (session ID) and pa\_perf (release identifier). When third party domains are used, they appear under pingdom.net. ### Is user consent required? Yes. Pingdom RUM sets identifying cookies for behavioural performance measurement and ships data to a remote third party host. Article 5(3) ePrivacy applies and prior consent is required. ### What is the legal basis? Article 6(1)(a) GDPR (consent) for the client side RUM beacon. Article 6(1)(f) (legitimate interest) may apply for short lived anonymous server side metrics with no persistent identifier. ### Does Pingdom RUM transfer data outside the EU? Yes. SolarWinds operates from the United States with some infrastructure in Sweden. Transfers rely on Standard Contractual Clauses and the EU US Data Privacy Framework as set in the SolarWinds DPA. ### Do I need a DPIA? A DPIA is not normally required. It becomes recommended when session replay is enabled, when RUM data is joined with user profiles or when the website handles sensitive content. ### How do I implement Pingdom RUM compliantly? Sign the SolarWinds DPA, gate the snippet behind consent, exclude session replay by default, mask sensitive form fields, set short retention, restrict admin access, mention Pingdom RUM in the privacy notice and cookie list. ### What are the alternatives? Other RUM tools include New Relic Browser, Datadog RUM, Sentry Performance, Akamai mPulse, Cloudflare Web Analytics, Catchpoint, SpeedCurve and Raygun. Some EU based vendors reduce transfer complexity. ### How do I update the cookie policy? List SolarWinds Pingdom RUM as a processor under performance / analytics, describe the cookies it sets, the purposes, the transfer to the US and Sweden, link to the SolarWinds privacy policy and refresh the entry when integration changes. Same category ## More services: Analytics [See the whole category](https://www.flowconsent.com/en/services/analytics) ### [Quantum Metric](https://www.flowconsent.com/en/services/analytics/quantum-metric) [Quantum Metric is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Quantum Metric offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Quantum Metric empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/quantum-metric) [Analytics](https://www.flowconsent.com/en/services/analytics/quantum-metric) · ### [Hotjar Incoming Feedback](https://www.flowconsent.com/en/services/analytics/hotjar-incoming-feedback) [Hotjar Incoming Feedback is a survey and feedback collection platform that helps businesses gather valuable customer insights through customizable questionnaires, polls, and NPS surveys. It offers advanced logic branching, multi-channel distribution, and real-time analytics. Hotjar Incoming Feedback enables organizations to measure customer satisfaction, collect product feedback, and conduct market research. Its reporting tools transform raw feedback data into actionable insights.](https://www.flowconsent.com/en/services/analytics/hotjar-incoming-feedback) [Analytics](https://www.flowconsent.com/en/services/analytics/hotjar-incoming-feedback) · ### [SealMetrics](https://www.flowconsent.com/en/services/analytics/sealmetrics) [SealMetrics is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. SealMetrics offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, SealMetrics empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/sealmetrics) [Analytics](https://www.flowconsent.com/en/services/analytics/sealmetrics) · ### [Lexer](https://www.flowconsent.com/en/services/analytics/lexer) [Lexer is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Lexer offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Lexer empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/lexer) [Analytics](https://www.flowconsent.com/en/services/analytics/lexer) · ### [WebMetric](https://www.flowconsent.com/en/services/analytics/webmetric) [WebMetric is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. WebMetric supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, WebMetric enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/webmetric) [Analytics](https://www.flowconsent.com/en/services/analytics/webmetric) · ### [Looker](https://www.flowconsent.com/en/services/analytics/looker) [Looker is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Looker supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Looker enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/looker) [Analytics](https://www.flowconsent.com/en/services/analytics/looker) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)