> How Segment Consent Manager controls analytics.js, gates destinations and forwards consent under GDPR and ePrivacy. Cookies, transfers and configuration. > > Canonical: https://www.flowconsent.com/en/services/consent-management/segment-consent-manager Consent management # Segment Consent Manager Essential Segment Consent Manager is the open source library that gates the Segment analytics.js loader behind a consent banner and forwards consent state to all Segment destinations. [Block Segment Consent Manager until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=consent) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Consent management](https://www.flowconsent.com/en/services/consent-management) - Consent Essential - Prior consent Required - Documented cookies 3 - Third-party domains 4 - Servers United States, with optional EU data residency through Segment Twilio EU workspaces Overview ## What does Segment Consent Manager do? ## **What Segment Consent Manager is** Segment Consent Manager is an open source library maintained by Segment, the customer data platform now part of Twilio. It gates the loading of analytics.js and the dispatch of events to Segment destinations behind a customer driven consent banner. The library writes a first party cookie that records which destination categories the visitor has accepted and exposes a programmatic API for inspecting and updating that state. ## **Cookies and data collected** The library writes a tracking-preferences cookie that stores the visitor's consent choices and a destination preferences object. It does not by itself collect user behaviour. Once consent is granted, analytics.js loads and the Segment SDK then sets the standard ajs\_anonymous\_id and ajs\_user\_id cookies and forwards events to the chosen destinations, each of which may set additional cookies. ## **GDPR and ePrivacy obligations** The consent manager itself can be classified as strictly necessary because its purpose is to record an explicit consent decision. The destinations it gates remain subject to consent under article 5(3) of the ePrivacy Directive and the GDPR. The implementation must default reject non essential categories and only load analytics.js after the visitor has accepted at least one destination category that requires it. ## **Consent and configuration** Configure the destinations as categories that map to your CMP, set defaults to reject, and forward the consent context with every Segment event so destinations can apply server side suppression. For European deployments, route events through the EU workspace, document the destinations that fan out to advertising platforms and review the destination list before each release. ## **Data transfers and storage** Segment is owned by Twilio and primarily processes data in the United States. EU customers can opt for the Segment EU workspace, which keeps the events in Ireland and Germany. Without that, transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses, with all sub processors documented in the Twilio data processing addendum. ## **Practical compliance steps** Adopt the EU workspace where possible, sign the DPA, configure default reject in the consent banner, ensure the destination preferences are forwarded with every event, document the destination list in your records of processing activities, and review every new destination request through privacy and security gates. Compliance ## Segment Consent Manager and the GDPR Segment Consent Manager is classified as “Essential”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) for the destinations behind the manager; legitimate interest (Art. 6(1)(f)) for the consent manager itself when configured as strictly necessary - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, EU-US Data Privacy Framework, IAB TCF v2.2, French Loi Informatique et Libertés ### Impact assessment (DPIA) A DPIA is recommended when Segment is connected to many destinations, when the consent manager is the only mechanism gating those destinations, when integrations include advertising platforms with cross border transfers, or when audiences are computed inside Segment for personalisation. ### Sample text for your banner > We use Segment to send analytics events to a small set of approved tools. By accepting, you allow Segment to read and write a consent cookie, load analytics.js and forward your interactions to the destinations you have enabled. Cookies and trackers ## What Segment Consent Manager sets and contacts - Tracking method JavaScript library that gates the Segment analytics.js loader behind a consent banner; consent state is stored in a first party cookie and forwarded to Segment destinations as part of the event context - Server location United States, with optional EU data residency through Segment Twilio EU workspaces - Data transferred outside the EU Consent metadata flows through Segment infrastructure, primarily in the United States. Customers can opt for an EU workspace, in which case data is processed in Ireland or Germany; transfers otherwise rely on the EU-US Data Privacy Framework or Standard Contractual Clauses. ### Cookies set (3) | Name | Type | Duration | Purpose | | -------------------- | ------------------ | -------- | -------------------------------------------------------------------------------------------------------- | | tracking-preferences | Strictly necessary | 1 year | First party cookie that records the visitor consent decisions managed by Segment Consent Manager. | | ajs\_anonymous\_id | Analytics | 1 year | Segment analytics.js anonymous user identifier set after consent for at least one analytics destination. | | ajs\_user\_id | Analytics | 1 year | Segment analytics.js authenticated user identifier set when an identify call has been made. | ### Third-party domains contacted (4) - `segment.com` - `cdn.segment.com` - `api.segment.io` - `twilio.com` Questions ## Frequently asked questions about Segment Consent Manager Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Segment Consent Manager set? The library writes a tracking-preferences first party cookie that stores the visitor consent decisions and a destination preferences object. After consent, analytics.js sets ajs\_anonymous\_id and ajs\_user\_id, and the chosen destinations may set additional cookies. ### Do I need consent to use Segment Consent Manager? The consent manager itself can be loaded as strictly necessary because it records the decision. The destinations it gates require prior consent under the ePrivacy Directive and the GDPR. ### What is the legal basis for processing data through Segment Consent Manager? The consent record itself relies on legitimate interest or legal obligation depending on jurisdiction. Each destination behind the manager requires its own legal basis, typically consent for analytics and advertising. ### Does Segment Consent Manager transfer data to the United States? Segment is owned by Twilio and processes data primarily in the United States. EU customers can opt for the Segment EU workspace; otherwise transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses. ### Do I need a DPIA for Segment Consent Manager? A DPIA is recommended when many destinations are connected, when advertising platforms are part of the chain, when audience segments are computed inside Segment, or when consent forwarding is the only suppression mechanism for downstream destinations. ### How do I implement Segment Consent Manager compliance correctly? Configure default reject, map destinations to categories, forward consent context with every event, route through the EU workspace if available, sign the Twilio DPA and document the destination list in the records of processing activities. ### What are the alternatives to Segment Consent Manager? For consent management you can use OneTrust, Didomi, Cookiebot, Sourcepoint, Axeptio or open source projects such as Klaro and Orestbida. For event routing, mParticle, RudderStack, Snowplow and Twilio Engage are common alternatives to Segment itself. ### How should I update my cookie policy when I deploy Segment Consent Manager? List the tracking-preferences cookie alongside the analytics.js cookies, name Segment as a processor and link to its sub processor list, document the destinations enabled, and disclose any US transfer with the safeguards in place. Same category ## More services: Consent management [See the whole category](https://www.flowconsent.com/en/services/consent-management) ### [Metomic](https://www.flowconsent.com/en/services/consent-management/metomic) [Metomic is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Metomic integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Metomic helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/consent-management/metomic) [Essential](https://www.flowconsent.com/en/services/consent-management/metomic) · ### [Cookie Script](https://www.flowconsent.com/en/services/consent-management/cookie-script) [Cookie Script is a consent management platform (CMP) that helps websites comply with GDPR, CCPA, and global privacy regulations. It provides customizable cookie consent banners, preference centers, and automated compliance scanning. Cookie Script manages user consent across tracking technologies, generates compliance reports, and integrates with tag management systems. With geo-targeted policies and TCF 2.0 support, Cookie Script ensures worldwide privacy compliance.](https://www.flowconsent.com/en/services/consent-management/cookie-script) [Essential](https://www.flowconsent.com/en/services/consent-management/cookie-script) · ### [Quantcast Choice](https://www.flowconsent.com/en/services/consent-management/quantcast-choice) [Quantcast Choice is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Quantcast Choice supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Quantcast Choice ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/quantcast-choice) [Essential](https://www.flowconsent.com/en/services/consent-management/quantcast-choice) · ### [Ketch](https://www.flowconsent.com/en/services/consent-management/ketch) [Ketch is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Ketch integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Ketch helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/consent-management/ketch) [Essential](https://www.flowconsent.com/en/services/consent-management/ketch) · ### [PieEye](https://www.flowconsent.com/en/services/consent-management/pieeye) [PieEye is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. PieEye integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, PieEye helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/consent-management/pieeye) [Essential](https://www.flowconsent.com/en/services/consent-management/pieeye) · ### [KIProtect](https://www.flowconsent.com/en/services/consent-management/kiprotect) [Kiprotect is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Kiprotect supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Kiprotect ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/consent-management/kiprotect) [Essential](https://www.flowconsent.com/en/services/consent-management/kiprotect) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)