Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Quantcast Measure is a free audience measurement and advertising analytics service operated by Quantcast (San Francisco). The product places a JavaScript pixel and cookies on publisher and advertiser sites to count unique visitors, build cross site audience segments and feed the Quantcast advertising platform. Because data is shared with the Quantcast advertising stack and replicated to the United States, Quantcast Measure is treated as a high risk advertising tracker under the GDPR and the ePrivacy Directive.
Quantcast Measure is the free audience measurement product offered by Quantcast. A JavaScript tag (quantserve.com) is added to every page of the site. The tag drops cookies, hashes user signals and reports impressions and visits to Quantcast servers, where the data is enriched with cross site behavioural data already collected on other sites in the Quantcast network.
Quantcast sets the third party advertising cookies mc, KRTBCOOKIE_ and d, plus the first party __qca cookie used by the publisher to identify a unique browser. These identifiers persist for up to 13 months, are synced with DSPs and SSPs through the IAB TCF, and feed the Quantcast Choice CMP and the Q for Publishers monetisation suite when those products are also deployed.
The cookies fall under Article 5(3) of the ePrivacy Directive, which requires prior consent. The audience profiling activity falls under Article 6(1)(a) GDPR. Because Quantcast Measure is integrated with the Quantcast advertising stack and the IAB TCF chain, legitimate interest is not an admissible legal basis: regulators consistently reject it for cross site advertising profiling.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Quantcast Measure must only load after explicit, granular, opt in consent. Visitors must be able to refuse with the same effort as accepting, change their mind at any time and have their preferences honoured by the IAB TCF signal forwarded to downstream vendors. The service cannot run on consent assumed from continued browsing or scrolling.
Quantcast is headquartered in San Francisco. Personal data is transferred to the United States. Transfers rely on Quantcast self certification under the EU/US Data Privacy Framework and on Standard Contractual Clauses. Despite the DPF adequacy decision, controllers must run a transfer impact assessment given Quantcast US exposure to FISA 702 access requests.
Block the Quantcast tag until consent is granted, configure your CMP to forward the IAB TCF string with Quantcast vendor ID 11, sign the Quantcast DPA and store the DPF certification reference, document the transfer impact assessment, list Quantcast Measure in the privacy and cookie policies and review the configuration after each TCF update.
Websites using Quantcast Measure must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended for Quantcast Measure because of cross site behavioural profiling, persistent identifiers, integration with the Quantcast advertising platform and systematic transfer of personal data to the United States. The DPIA must include the IAB TCF chain of vendors that may receive Quantcast signals.
Sample consent text
We use Quantcast Measure to count visitors and understand how our content is consumed across the web. Quantcast sets advertising cookies, builds audience segments and transfers data to the United States. We only load Quantcast after you click Accept. You can withdraw your consent at any time from the cookie settings.
Third-party domains contacted
quantserve.comquantcast.comquantcount.comrules.quantcount.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| mc | persistent | 13 months | Quantcast advertising cookie used to identify and track unique browsers across the Quantcast network for audience segmentation and IAB TCF cookie syncing. |
| d | persistent | 3 months | Quantcast measurement cookie that stores recent activity and frequency data for cross site audience analysis. |
| KRTBCOOKIE_ | persistent | 13 months | Quantcast/PubMatic cookie sync identifier used in real time bidding to match browsers between SSPs and DSPs. |
| __qca | persistent | 13 months | First party cookie set on the publisher domain to identify a unique browser within the Quantcast Measure visitor count. |
Quantcast Measure collects user analytics data — you legally need a consent banner. Try FlowConsent free.
Quantcast Measure sets the third party advertising cookies mc, KRTBCOOKIE_ and d on quantserve.com, plus the first party __qca cookie. They persist for up to 13 months, are used to identify unique browsers and to sync with DSPs through the IAB TCF.
Yes. The cookies fall under Article 5(3) ePrivacy and the cross site profiling falls under Article 6(1)(a) GDPR. Quantcast Measure must be blocked until the visitor has given explicit, granular opt in consent through your CMP.
Consent (Art. 6(1)(a) GDPR) is the only admissible basis because Quantcast performs cross site behavioural profiling and shares signals with the IAB TCF chain. Legitimate interest is not acceptable.
Yes. Quantcast is headquartered in San Francisco. Personal data is replicated to US data centres. Transfers rely on the EU/US Data Privacy Framework certification and Standard Contractual Clauses, and require a transfer impact assessment given FISA 702 exposure.
Yes. The combination of large scale cross site profiling, persistent identifiers, IAB TCF participation and US transfers triggers the DPIA criteria under WP248 and the EDPB threshold guidance.
Tag block Quantcast until consent, integrate the CMP IAB TCF v2.2 string with vendor ID 11, sign the Quantcast DPA, store the DPF certification record, document a transfer impact assessment and refresh consent at least every 13 months.
Privacy first audience measurement alternatives include Matomo (self hosted in cookieless mode), Plausible, Fathom, AT Internet/Piano Analytics (EU based), Etracker (Germany) and Comscore Direct in the limited cases where consent is collected. None of these match the cross site reach of Quantcast, but they remove the IAB TCF and US transfer issues.
List Quantcast Measure with the publisher (Quantcast International Limited, Ireland), the controller relationship (joint controller for IAB TCF), the cookies (mc, KRTBCOOKIE_, d, __qca) with retention up to 13 months, the legal basis (consent), the IAB TCF vendor ID (11), the transfer destination (United States) and the safeguards (DPF, SCC, TIA).