Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Live chat widget that lets website visitors talk to support agents in real time, with conversation transcripts and visitor metadata stored on Chatbaby servers.
Chatbaby is a live chat widget vendor used by ecommerce and SaaS websites to talk to visitors in real time. The widget loads a JavaScript bundle, opens a WebSocket channel, identifies the visitor through first party cookies and stores the conversation transcript on Chatbaby servers.
Chatbaby writes chatbaby_visitor (long lived visitor identifier) and chatbaby_conversation (active conversation token). The widget transmits the conversation content, IP, user agent, page URL and any custom attributes set by the operator (logged in user ID, cart total).
Strictly necessary chat cookies fall under the recital 66 ePrivacy exemption when chat is reactive (the user opens the widget). Proactive engagement rules, behavioural targeting and cross site identifiers require Article 5(3) consent. Transcripts contain personal data and require a clear legal basis (typically contract performance or consent).
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Chatbaby Inc. processes conversations in the United States. Sign Standard Contractual Clauses, complete a Transfer Impact Assessment that addresses US government access and document the transfer in your Record of Processing Activities.
Disable proactive engagement until consent, sign the DPA and SCCs, set short retention for transcripts, train agents on data minimisation, log access to the inbox and surface a clear privacy notice that explains how chat data is handled.
Websites using Chatbaby must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended when Chatbaby is used for proactive engagement triggered by behavioural rules, or when transcripts can incidentally contain sensitive data (medical, financial).
Sample consent text
We use Chatbaby to reply to your live questions. With your consent, the Chatbaby widget stores a conversation identifier on your device and shares the transcript with our support team.
Third-party domains contacted
chatbaby.comcdn.chatbaby.comapp.chatbaby.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| chatbaby_visitor | first_party | 1 year | Persistent visitor identifier used by Chatbaby to recognise returning users and load past conversations. |
| chatbaby_conversation | first_party | Session | Token of the active conversation used to keep the chat thread coherent during a single visit. |
| chatbaby_agent_state | first_party | 1 day | Stores the local state of the chat widget (open, closed, minimised) for the visitor browser. |
Chatbaby uses cookies for user preferences — inform visitors with a consent banner.
chatbaby_visitor (long lived visitor identifier) and chatbaby_conversation (active conversation token). Some integrations also use a third party cookie for cross domain stitching.
Reactive chat (the user opens the widget) is exempt under recital 66 of ePrivacy. Proactive engagement and behavioural targeting require Article 5(3) consent.
Contract performance (Art. 6(1)(b)) for transactional support. Legitimate interest (Art. 6(1)(f)) for service improvement. Consent (Art. 6(1)(a)) for proactive engagement and marketing follow up.
Yes. Chatbaby Inc. processes conversations in the US. Sign SCCs, complete a TIA and document the transfer.
Recommended when transcripts may contain sensitive data, when chat is used for proactive behavioural engagement, or when many agents have access to the inbox.
Disable proactive triggers until consent, sign the DPA and SCCs, set short transcript retention, train agents on data minimisation, log inbox access and surface a clear privacy notice.
EU friendly alternatives include Crisp (France), Userlike (Germany), Chatra (Belgium), LiveChat (Poland), Chatwoot (open source) and Help Scout.
List chatbaby_visitor and chatbaby_conversation with name, purpose, retention and processor (Chatbaby Inc., US). Mention the SCCs and the right of access to transcripts.