> How ThankYou Analytics tracks post purchase attribution and surveys under GDPR and ePrivacy. Cookies, US transfers, lawful basis and consent guidance.
>
> Canonical: https://www.flowconsent.com/en/services/analytics/thankyou-analytics

Analytics

# ThankYou Analytics

Analytics

ThankYou Analytics is a post purchase attribution and survey tool that fires on the order confirmation page to enrich e commerce data with marketing source and feedback fields.

[Block ThankYou Analytics until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Analytics](https://www.flowconsent.com/en/services/analytics)

- Consent

  Analytics

- Prior consent

  Required

- Documented cookies

  3

- Third-party domains

  3

- Servers

  United States, with optional EU residency for enterprise customers

Overview

## What does ThankYou Analytics do?

## **What ThankYou Analytics is**

ThankYou Analytics is a post purchase analytics and attribution tool that fires on the order confirmation page of an e commerce site. It enriches the e commerce dataset with marketing source surveys, customer testimonials and incremental attribution signals that paid media platforms cannot supply on their own. Operators integrate it as a JavaScript tag, sometimes alongside server side hooks that forward conversion events to CRM and advertising destinations.

## **Cookies and data collected**

On the thank you page ThankYou Analytics sets a first party visitor cookie, a session identifier and a survey state cookie. Order value, currency, items, hashed email and customer identifier are sent to the platform alongside the survey response. When server side mode is enabled, the same data is also forwarded to advertising networks via the conversion APIs you connect.

## **GDPR and ePrivacy obligations**

The cookies are non essential and the survey collects identifiable information about the customer's recent purchase, so prior consent is required under article 5(3) of the ePrivacy Directive and the GDPR. The merchant is the controller for the survey and the analytics, ThankYou Analytics is the processor for the storage and computation of those events. Sharing the data with advertising destinations creates additional joint controller relationships that must be reflected in the privacy notice.

## **Consent and configuration**

Block the ThankYou Analytics tag in your CMP under the analytics or marketing category. Show the survey only after consent is captured, never as a forced overlay. Hash the email and customer identifier before sending them to ThankYou Analytics and gate any onward push to advertising networks behind the same consent state.

## **Data transfers and storage**

ThankYou Analytics processes data on US infrastructure with optional EU residency for enterprise customers. For European deployments, request EU residency in the order form, sign the data processing addendum, and rely on the EU-US Data Privacy Framework or Standard Contractual Clauses depending on certification status.

## **Practical compliance steps**

Document the post purchase tag in the records of processing, restrict the survey to non sensitive questions, set retention on raw events to twelve months or less, expose a clear opt out from the customer account and review forwarded conversion events each quarter to ensure no field has been added without legal review.

Compliance

## ThankYou Analytics and the GDPR

ThankYou Analytics is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Consent (Art. 6(1)(a) GDPR) for the post purchase analytics and attribution cookies; legitimate interest (Art. 6(1)(f)) for fraud and order verification when configured server side

- Risk level

  high

- Applicable regulations

  GDPR, ePrivacy Directive, EU-US Data Privacy Framework, CCPA, French Loi Informatique et Libertés

### Impact assessment (DPIA)

A DPIA is appropriate when ThankYou Analytics is deployed across high volume e commerce, when survey data is enriched with email or order references, when post purchase events are pushed to multiple advertising destinations, or when the data feeds automated marketing decisions and segmentation.

### Sample text for your banner

> After your purchase we use ThankYou Analytics to ask a short marketing source question and to enrich our analytics with your order context. By accepting, you allow ThankYou Analytics to set cookies, link your survey response to your order and transfer this data to its servers in the United States.

Cookies and trackers

## What ThankYou Analytics sets and contacts

- Tracking method

  JavaScript tag fired on the order confirmation page that captures order value, items and customer identifiers, then sends server side post purchase events to attribution and CRM destinations

- Server location

  United States, with optional EU residency for enterprise customers

- Data transferred outside the EU

  Personal data is processed by ThankYou Analytics on US infrastructure. The transfer relies on Standard Contractual Clauses and the EU-US Data Privacy Framework where the operator is certified.

### Cookies set (3)

| Name               | Type       | Duration  | Purpose                                                                                                          |
| ------------------ | ---------- | --------- | ---------------------------------------------------------------------------------------------------------------- |
| tya\_visitor       | Analytics  | 13 months | First party visitor identifier used to link survey responses to sessions and to compute incremental attribution. |
| tya\_session       | Functional | Session   | Maintains the ThankYou Analytics widget state during the order confirmation flow.                                |
| tya\_survey\_state | Analytics  | 30 days   | Stores which post purchase survey has already been shown to avoid asking the same customer twice.                |

### Third-party domains contacted (3)

- `thankyouanalytics.com`
- `cdn.thankyouanalytics.com`
- `api.thankyouanalytics.com`

Questions

## Frequently asked questions about ThankYou Analytics

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does ThankYou Analytics set?

ThankYou Analytics sets a first party visitor cookie, a session identifier and a survey state cookie. Lifetimes range from session to 13 months for the visitor identifier used in attribution.

### Do I need consent to use ThankYou Analytics?

Yes. The cookies are non essential and the survey collects identifiable purchase context, so prior opt in consent is required under article 5(3) of the ePrivacy Directive and the GDPR.

### What is the legal basis for processing data through ThankYou Analytics?

Consent for the analytics cookies, the survey response and any onward push to advertising networks. Legitimate interest may apply to internal fraud or order verification when configured server side without identifying the customer to third parties.

### Does ThankYou Analytics transfer data to the United States?

Yes by default. Data is processed on US infrastructure unless EU residency is contracted. Transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.

### Do I need a DPIA for ThankYou Analytics?

A DPIA is recommended for high volume e commerce, when survey responses are linked to customer accounts, when post purchase events are forwarded to multiple advertising platforms, or when this data feeds automated marketing decisioning.

### How do I implement ThankYou Analytics compliance correctly?

Block the tag in your CMP, sign the data processing addendum, request EU residency where available, hash personal identifiers before sending them, and gate any onward advertising push behind the same consent state.

### What are the alternatives to ThankYou Analytics?

Comparable post purchase attribution and survey tools include KnoCommerce, Fairing, Enquire Labs, EnquireLabs, North Beam, Triple Whale Surveys and homegrown solutions built on Typeform plus Segment.

### How should I update my cookie policy when I deploy ThankYou Analytics?

List the visitor and survey cookies with their lifetime and purpose, name ThankYou Analytics as a processor, document the US transfer and any EU residency option, and link to the customer dashboard where the visitor can opt out.

Same category

## More services: Analytics

[See the whole category](https://www.flowconsent.com/en/services/analytics)

### [Pollster](https://www.flowconsent.com/en/services/analytics/pollster)

[Pollster is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Pollster supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Pollster enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/pollster)

[Analytics](https://www.flowconsent.com/en/services/analytics/pollster)

·

### [Northbeam](https://www.flowconsent.com/en/services/analytics/northbeam)

[Northbeam is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Northbeam offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Northbeam empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/northbeam)

[Analytics](https://www.flowconsent.com/en/services/analytics/northbeam)

·

### [Callcap](https://www.flowconsent.com/en/services/analytics/call-cap)

[Call Cap is a cloud-based communication platform that provides voice calling, VoIP, and telephony solutions for businesses. It supports call tracking, recording, IVR systems, and intelligent call routing. Call Cap integrates with CRM and helpdesk tools, enabling teams to manage voice interactions from a unified interface. With analytics and reporting, Call Cap helps businesses measure call performance and improve customer engagement.](https://www.flowconsent.com/en/services/analytics/call-cap)

[Analytics](https://www.flowconsent.com/en/services/analytics/call-cap)

·

### [Airbridge](https://www.flowconsent.com/en/services/analytics/airbridge)

[Airbridge is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Airbridge supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Airbridge enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/airbridge)

[Analytics](https://www.flowconsent.com/en/services/analytics/airbridge)

·

### [MyStat](https://www.flowconsent.com/en/services/analytics/mystat)

[MyStat is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. MyStat offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, MyStat empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/mystat)

[Analytics](https://www.flowconsent.com/en/services/analytics/mystat)

·

### [OpenPanel](https://www.flowconsent.com/en/services/analytics/openpanel)

[OpenPanel is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. OpenPanel supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, OpenPanel enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/openpanel)

[Analytics](https://www.flowconsent.com/en/services/analytics/openpanel)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)
