Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
American quizzes platform that offers embeddable trivia widgets and runs an ad funded media business with a third party programmatic stack.
Sporcle is a US based online trivia platform that publishes user generated quizzes. Quiz pages can be embedded on third party websites through an iframe widget, which brings the Sporcle ad stack along: header bidding, programmatic exchanges and audience tagging vendors.
The Sporcle embed sets a sporcle_uid (long lived visitor identifier), a session cookie and several third party advertising cookies (Google ad, AppNexus, Magnite, Index Exchange, Criteo). Each ad partner reads its own profile and may sync identifiers across sites.
All Sporcle and partner cookies fall under Article 5(3) ePrivacy and require prior consent. Sporcle integrates the IAB Transparency and Consent Framework (TCF v2.2) so that consent strings can be passed down the ad stack. Without consent, the embed must not load.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Sporcle Inc. and most of its ad partners are US controllers. Sign Standard Contractual Clauses with Sporcle, document a Transfer Impact Assessment that addresses US government access (FISA 702, EO 12333) and check the DPF certification status of every partner you keep.
Block the Sporcle iframe before consent, propagate the IAB TCF consent string, list every advertising vendor in the cookie register, sign the DPA, and consider a non advertising fallback (link out instead of embed) for users who refuse.
Websites using Sporcle must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended because the Sporcle embed loads multiple advertising vendors that profile users for personalised ads, with a transfer to the United States.
Sample consent text
This page embeds a Sporcle quiz. With your consent, Sporcle and its advertising partners may set cookies and process your data in the United States to serve personalised ads.
Third-party domains contacted
sporcle.comcdn.sporcle.comstatic.sporcle.comembed.sporcle.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| sporcle_uid | first_party | 2 years | Persistent visitor identifier used by Sporcle to recognise the same browser across pages and quizzes. |
| sporcle_session | first_party | Session | Session identifier used to keep state during a quiz attempt. |
| euconsent-v2 | first_party | 6 months | IAB Transparency and Consent Framework consent string (TCF v2.2) propagated to advertising vendors loaded by the Sporcle embed. |
| _ad_partner | third_party | 1 year | Generic third party advertising cookie set by partners loaded inside the Sporcle iframe (AppNexus, Magnite, Index Exchange, Criteo). |
Sporcle collects user analytics data — you legally need a consent banner. Try FlowConsent free.
sporcle_uid (long lived visitor ID), sporcle_session and a fleet of advertising cookies set by Google ad, AppNexus, Magnite, Index Exchange, Criteo and other partners.
Yes, and explicitly so. The Sporcle ad stack only fires after consent is captured and the IAB TCF string is propagated.
Consent (Art. 6(1)(a) GDPR) for advertising cookies and audience targeting. Legitimate interest is not a sound basis for behavioural advertising under EDPB Guidelines.
Yes. Sporcle Inc. and most of the partner exchanges are US controllers. SCCs are needed and a TIA must address US government access concerns.
Recommended. The combination of personalised advertising, multiple processors and a US transfer makes the DPIA a sensible default.
Block the iframe before consent, integrate IAB TCF v2.2, sign the DPA and SCCs, list every partner cookie in the register, document retention and provide a non advertising fallback.
EU based or self hosted alternatives include Riddle (Germany), Apester (privacy mode), Outgrow (with EU residency), or building quizzes with Typeform or self hosted JavaScript.
List every cookie set by the embed, including ad partners, with name, purpose, retention and processor. Mention the US transfer and the SCCs.