Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Polar Analytics is an ecommerce business intelligence platform that centralises data from Shopify, advertising platforms and other tools into one analytics dashboard for online stores. Most of its data, such as orders and marketing metrics, is pulled server to server through APIs, but it also offers an optional first party attribution pixel that sets a cookie to connect visits to purchases. As a United States company that processes customer and order data and can run a tracking pixel, it raises both processor and consent obligations.
Polar Analytics is a business intelligence and analytics product built for direct to consumer ecommerce brands. It connects to Shopify, Meta, Google, Klaviyo and other sources, unifies the data, and presents revenue, acquisition, retention and marketing performance in dashboards. Much of the work happens through server to server API connectors, but Polar also offers a first party pixel that improves marketing attribution by linking on site behaviour to orders.
Through its connectors, Polar ingests order, customer and marketing data from the tools you connect, which includes personal data such as customer names, emails and purchase history. If you install the Polar attribution pixel, it sets a first party cookie that stores a visitor identifier and records page views and events so that a later purchase can be attributed to a marketing source. The backend data is processed on your behalf, while the pixel actively tracks visitors on your site.
Two different rules apply. For the order and customer data Polar processes through APIs, Polar acts as your processor under GDPR article 28, so you need a data processing agreement and a lawful basis for the underlying processing, typically contract or legitimate interest. For the optional attribution pixel, the cookie it sets is not strictly necessary and requires prior consent under article 5(3) of the ePrivacy Directive, so keep the pixel blocked until the visitor accepts.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Polar Analytics is a United States company, so the order, customer and attribution data it processes is transferred to a third country and must rely on the EU US Data Privacy Framework or standard contractual clauses. Because the data includes identifiable customer information, document the transfer carefully, sign the data processing agreement, and limit the personal data you send to what the analytics actually need.
Sign a data processing agreement with Polar and record the United States transfer and its safeguards. If you use the attribution pixel, gate it behind marketing consent and confirm no Polar cookie is set before consent. Minimise the personal data sent through the connectors, set a retention period, and describe Polar Analytics, its purpose and the transfer in your privacy policy.
Websites using Polar Analytics must obtain user consent under GDPR regulations.
DPIA considerations
Polar Analytics centralises identifiable customer and order data and can run a tracking pixel, with transfers to the United States, which can require a DPIA under GDPR art. 35, especially for large stores. Assess the customer data ingested, the attribution pixel, the retention, the data processing agreement and the transfer mechanism, and minimise the personal data sent to the platform.
Sample consent text
This online store uses Polar Analytics to understand our sales and marketing performance. Most data is shared securely from our systems, and with your consent the Polar attribution pixel sets a cookie to connect your visit to a possible purchase. Polar processes this data in the United States under standard contractual clauses. No attribution cookie is set until you accept marketing cookies, and you can change or withdraw your consent at any time.
Third-party domains contacted
polaranalytics.compixel.polaranalytics.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _polar_id | First party, set by the optional attribution pixel | 6 months | Stores a visitor identifier used by the optional Polar attribution pixel to link on site behaviour to later purchases. |
Polar Analytics collects user analytics data — you legally need a consent banner. Try FlowConsent free.
Most of Polar runs server to server and sets no cookies, but the optional Polar attribution pixel sets a first party cookie that stores a visitor identifier and links on site behaviour to later purchases. That attribution cookie is not strictly necessary and requires consent.
For the backend connectors you do not need cookie consent, but you do need a lawful basis and a data processing agreement. For the optional attribution pixel, the cookie requires prior consent under article 5(3) of the ePrivacy Directive, so keep it blocked until the visitor accepts marketing cookies.
Polar acts as your processor for the order and customer data under GDPR article 28, with the underlying processing typically resting on contract or legitimate interest. The attribution pixel relies on consent under GDPR article 6(1)(a) and ePrivacy article 5(3).
Yes. Polar Analytics is a United States company, so the customer, order and attribution data is transferred to the US under the EU US Data Privacy Framework or standard contractual clauses. Document the transfer and the safeguards in your records.
Often, for larger stores. Centralising identifiable customer data, running an attribution pixel and transferring data to the US can be high risk under GDPR article 35. Assess the customer data, the pixel, the retention and the transfer.
Sign a data processing agreement, document the US transfer, minimise the personal data sent through the connectors, set a retention period, and if you use the attribution pixel gate it behind marketing consent and verify no Polar cookie fires before acceptance.
Other ecommerce analytics and BI tools include Triple Whale, Lifetimely, Glew and self hosted dashboards built on your own data warehouse. EU hosted or warehouse based options reduce the transfer question by keeping the customer data closer to home.
If you use the attribution pixel, list it and its cookie, the purpose and the United States transfer in your cookie policy, and review it when you change connectors or attribution settings. The server to server connectors belong in your privacy policy and processing records rather than the cookie banner.