Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
ThankYou Analytics is a post purchase attribution and survey tool that fires on the order confirmation page to enrich e commerce data with marketing source and feedback fields.
ThankYou Analytics is a post purchase analytics and attribution tool that fires on the order confirmation page of an e commerce site. It enriches the e commerce dataset with marketing source surveys, customer testimonials and incremental attribution signals that paid media platforms cannot supply on their own. Operators integrate it as a JavaScript tag, sometimes alongside server side hooks that forward conversion events to CRM and advertising destinations.
On the thank you page ThankYou Analytics sets a first party visitor cookie, a session identifier and a survey state cookie. Order value, currency, items, hashed email and customer identifier are sent to the platform alongside the survey response. When server side mode is enabled, the same data is also forwarded to advertising networks via the conversion APIs you connect.
The cookies are non essential and the survey collects identifiable information about the customer''s recent purchase, so prior consent is required under article 5(3) of the ePrivacy Directive and the GDPR. The merchant is the controller for the survey and the analytics, ThankYou Analytics is the processor for the storage and computation of those events. Sharing the data with advertising destinations creates additional joint controller relationships that must be reflected in the privacy notice.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Block the ThankYou Analytics tag in your CMP under the analytics or marketing category. Show the survey only after consent is captured, never as a forced overlay. Hash the email and customer identifier before sending them to ThankYou Analytics and gate any onward push to advertising networks behind the same consent state.
ThankYou Analytics processes data on US infrastructure with optional EU residency for enterprise customers. For European deployments, request EU residency in the order form, sign the data processing addendum, and rely on the EU-US Data Privacy Framework or Standard Contractual Clauses depending on certification status.
Document the post purchase tag in the records of processing, restrict the survey to non sensitive questions, set retention on raw events to twelve months or less, expose a clear opt out from the customer account and review forwarded conversion events each quarter to ensure no field has been added without legal review.
Websites using ThankYou Analytics must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is appropriate when ThankYou Analytics is deployed across high volume e commerce, when survey data is enriched with email or order references, when post purchase events are pushed to multiple advertising destinations, or when the data feeds automated marketing decisions and segmentation.
Sample consent text
After your purchase we use ThankYou Analytics to ask a short marketing source question and to enrich our analytics with your order context. By accepting, you allow ThankYou Analytics to set cookies, link your survey response to your order and transfer this data to its servers in the United States.
Third-party domains contacted
thankyouanalytics.comcdn.thankyouanalytics.comapi.thankyouanalytics.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| tya_visitor | Analytics | 13 months | First party visitor identifier used to link survey responses to sessions and to compute incremental attribution. |
| tya_session | Functional | Session | Maintains the ThankYou Analytics widget state during the order confirmation flow. |
| tya_survey_state | Analytics | 30 days | Stores which post purchase survey has already been shown to avoid asking the same customer twice. |
ThankYou Analytics collects user analytics data — you legally need a consent banner. Try FlowConsent free.
ThankYou Analytics sets a first party visitor cookie, a session identifier and a survey state cookie. Lifetimes range from session to 13 months for the visitor identifier used in attribution.
Yes. The cookies are non essential and the survey collects identifiable purchase context, so prior opt in consent is required under article 5(3) of the ePrivacy Directive and the GDPR.
Consent for the analytics cookies, the survey response and any onward push to advertising networks. Legitimate interest may apply to internal fraud or order verification when configured server side without identifying the customer to third parties.
Yes by default. Data is processed on US infrastructure unless EU residency is contracted. Transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.
A DPIA is recommended for high volume e commerce, when survey responses are linked to customer accounts, when post purchase events are forwarded to multiple advertising platforms, or when this data feeds automated marketing decisioning.
Block the tag in your CMP, sign the data processing addendum, request EU residency where available, hash personal identifiers before sending them, and gate any onward advertising push behind the same consent state.
Comparable post purchase attribution and survey tools include KnoCommerce, Fairing, Enquire Labs, EnquireLabs, North Beam, Triple Whale Surveys and homegrown solutions built on Typeform plus Segment.
List the visitor and survey cookies with their lifetime and purpose, name ThankYou Analytics as a processor, document the US transfer and any EU residency option, and link to the customer dashboard where the visitor can opt out.