Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Realytics is a French TV attribution analytics company based in Paris. It measures how television advertising influences web traffic and conversions, a practice known as drive to web. Its tag captures site visits and sessions correlated with the airing of TV spots, using a cookie and an IP based analysis. Because this involves analytics and advertising attribution, it needs consent under the GDPR and the ePrivacy rules.
Realytics is a French analytics company based in Paris that specialises in television attribution. It measures how TV advertising influences web traffic and online conversions, a discipline often called drive to web. When a brand airs a spot, Realytics looks at the spike in site visits that follows and links it to the broadcast. This gives advertisers a clearer view of how their television budget performs online.
The Realytics tag captures site visits and sessions and correlates them with the timing of TV spot airings. To do this it uses a cookie, such as an attribution identifier, together with an analysis based on IP address and time. The data involved includes online identifiers and browsing behaviour, which are personal data under the GDPR. Even though the goal is statistical measurement, the tracking is not strictly necessary to deliver the website.
The Realytics cookie falls under article 5(3) of the ePrivacy Directive, which requires prior consent for storage that is not strictly necessary. The French regulator, the CNIL, treats advertising attribution as a purpose that needs consent rather than an exemption. The processing of the collected data is then governed by the GDPR, with consent as the legal basis under article 6(1)(a). Publishers in the European Union should therefore load the tag only after the visitor agrees.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Consent must be freely given, specific, informed and unambiguous, and refusing must be as easy as accepting. In line with CNIL guidance, the Realytics tag should stay blocked until the visitor opts in through a consent banner. The banner should clearly describe the television attribution purpose so the choice is meaningful. Visitors must also be able to withdraw their consent at any time without penalty.
Realytics is a French provider that processes data within the European Union, so the core service does not require any transfer to a third country. This keeps the international transfer risk low compared with tools hosted outside the European Economic Area. You should still verify the location of any sub processor named in the contract, since hosting or support partners can change. Documenting where the data is processed remains a good practice for accountability.
To use Realytics lawfully, gate the tag behind a consent management platform so it loads only after opt in. Describe the attribution cookie in your cookie policy, mention Realytics in your privacy notice and sign a data processing agreement that lists any sub processor. Keep proof of consent and review the configuration when campaigns or partners change. With these steps, advertisers can measure their television impact while respecting the rights of website visitors.
Websites using Realytics must obtain user consent under GDPR regulations.
DPIA considerations
Realytics correlates television airings with website visits using a cookie and IP based analysis, which involves online identifiers and behavioural data. A screening assessment helps decide whether a full data protection impact assessment is needed, especially around the scale of analytics, the retention of the attribution cookie and the role of any sub processor. Data stays within the European Union for the core service, which lowers the transfer risk.
Sample consent text
We use Realytics to understand whether our television advertising brings visitors to this site. With your consent, Realytics sets an attribution cookie and analyses session data to link your visit with recent TV spots. You can accept or refuse this measurement, and you can change your choice at any time.
Third-party domains contacted
realytics.iostatic.realytics.iotag.realytics.iocdn.realytics.ioCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| rl_visitor | first party attribution | up to 13 months | Stores a persistent visitor identifier used to correlate a website visit with the airing of a TV spot. |
| rl_session | first party analytics | session | Identifies a single browsing session so visits can be grouped and matched to recent television advertising. |
| rl_campaign | first party advertising | up to 6 months | Stores the TV campaign context linked to a visit so the airing can be matched to later activity on the site. |
Realytics collects user analytics data — you legally need a consent banner. Try FlowConsent free.
Realytics relies on an attribution cookie, often a visitor identifier such as rl_visitor, together with a session value such as rl_session. The cookie helps connect a website visit to a recent TV spot, supported by an analysis based on IP address and time. Because the purpose is advertising attribution, the cookie needs consent.
Yes. The Realytics cookie falls under article 5(3) of the ePrivacy Directive, so prior consent is needed before it is stored. The CNIL treats television attribution as a purpose that requires consent. The related processing relies on consent under article 6(1)(a) of the GDPR.
The legal basis is consent, both to store the attribution cookie under ePrivacy and to process the data under article 6(1)(a) of the GDPR. The CNIL guidance does not exempt advertising measurement from consent. You should record each consent decision and let visitors withdraw it easily.
For the core service, no. Realytics is a French provider that processes data within the European Union, so no transfer to a third country is required. You should still check the contract for any sub processor that might be located elsewhere. Keeping data in the European Economic Area lowers the transfer risk.
A full data protection impact assessment is not always mandatory, but a short screening is wise. Consider the scale of the analytics, the duration of the attribution cookie and the role of any sub processor. Because data stays within the European Union and the purpose is statistical, the risk is usually moderate rather than high.
Load the Realytics tag only after opt in through a consent management platform. Describe the attribution cookie in your cookie policy, mention Realytics in your privacy notice and sign a data processing agreement that lists any sub processor. Keep proof of consent and review the configuration when campaigns change.
Other television attribution and web analytics tools exist, including providers hosted within the European Union. The right choice depends on your campaigns, your reporting needs and where the data is processed. Whatever the tool, consent and a clear legal basis remain necessary for advertising attribution.
Add an entry that names the Realytics attribution cookie, its purpose of television attribution and its duration. State that data is processed within the European Union and explain how visitors can refuse or withdraw consent. Keep the policy aligned with the consent banner so the two always match.