Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Chatroll is a US based live chat and chatroom widget embedded on websites and live events that sets cookies and exchanges real time messages with visitors.
Chatroll is a real time chat platform that embeds a live chat or chatroom widget into a website. It is used for customer support, community discussion and audience interaction during live events. Site operators copy an embed snippet into a page, and visitors can then send and receive messages instantly.
Chatroll is a US based provider, so the widget connects to servers in the United States. Because it sets cookies and processes the content of conversations, it engages both the GDPR and the ePrivacy Directive when it serves visitors in the EU and EEA.
The widget sets cookies to maintain the chat session, remember a participant between messages and support the real time connection. It also processes the messages that visitors type, any display name they provide, and technical metadata such as IP address, browser type and connection times.
Conversation content can contain personal data that a visitor volunteers, so chat logs should be treated as personal data and retained no longer than necessary for the support or community purpose.
The cookies used by the chat widget are generally not strictly necessary, since the page can load without the chat, so under the ePrivacy Directive they require prior consent. The messages and metadata are personal data processed under the GDPR, with the site operator typically acting as controller and Chatroll as processor.
You should put a data processing agreement in place, provide transparent information about the chat, and ensure visitors can exercise their rights over the conversation data.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Load the Chatroll widget only after the visitor gives freely given, specific, informed and unambiguous consent through your consent platform. Keep the widget blocked by default until consent is recorded, and let visitors withdraw consent as easily as they grant it.
Inform visitors before they start chatting that messages are sent to a US provider, and advise them not to share sensitive information through the chat.
As a US based service, Chatroll processes chat data in the United States, which is a transfer outside the EEA. Such transfers require a valid mechanism, most commonly Standard Contractual Clauses together with a transfer impact assessment and supplementary measures where needed.
Document the transfer in your records of processing and confirm the safeguards offered in the provider terms before deploying the widget on EU facing pages.
List the chat cookies in your cookie policy, gate the widget behind consent, and sign a data processing agreement with Chatroll. Document the US transfer and its safeguards, set a retention period for chat logs, and warn users against posting sensitive data.
Update your privacy notice to describe the chat, configure deletion of old conversations, and ensure your team can respond to access and erasure requests covering chat content.
Websites using Chatroll must obtain user consent under GDPR regulations.
DPIA considerations
Chatroll processes the content of live conversations, which may include personal data that visitors volunteer, alongside connection metadata. Assess whether sensitive information could be shared in chat, the retention of message logs, the use of cookies, and the transfer of data to the United States. Provide clear notice before the chat opens and minimize the data collected.
Sample consent text
This site uses Chatroll to provide live chat. Loading the chat widget sets cookies and sends your messages to Chatroll servers in the United States. The chat loads only with your consent. You can accept or decline below and change your choice at any time.
Third-party domains contacted
chatroll.comwww.chatroll.comembed.chatroll.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| chatroll_session | Functional | Session | Maintains the active chat session and links a participant across messages within a single visit. |
| chatroll_user | Functional | 1 year | Remembers a returning chat participant and their display name between visits. |
| chatroll_connect | Functional | Session | Supports the real time connection and message delivery while the chat widget is open. |
| chatroll_prefs | Functional | 6 months | Stores chat interface preferences such as open or minimized state for the visitor. |
Chatroll uses cookies for user preferences — inform visitors with a consent banner.
Chatroll sets cookies to maintain the chat session, identify a participant between messages and support the real time connection. These are not strictly necessary because the page works without the chat, so they are treated as functional or non essential cookies that require consent before loading.
Yes. The chat widget is not essential to view the page, so under the ePrivacy Directive its cookies require prior consent, and visitors should be told that their messages are sent to a US provider. Block the widget until consent is given and offer the page normally to those who decline.
Setting the non essential cookies relies on consent under Article 6(1)(a) GDPR. Processing the messages a visitor sends is generally necessary to provide the chat they requested, but you should still inform users clearly and limit retention of the conversation logs.
Yes. Chatroll is US based, so messages and metadata are processed in the United States, which is a transfer outside the EEA. You need a valid transfer mechanism such as Standard Contractual Clauses, a transfer impact assessment and any supplementary measures.
A DPIA is worth completing because chat can capture unpredictable personal data and involves a US transfer. Assess the likelihood of sensitive information being shared, log retention, the cookies set and the transfer safeguards, then apply mitigations such as warnings and short retention.
Gate the widget behind consent, list its cookies in your cookie policy, and sign a data processing agreement with Chatroll. Document the US transfer, set a retention period for chat logs, warn visitors not to share sensitive data, and update your privacy notice to describe the chat.
Alternatives include other live chat and community chat tools such as Crisp, Tawk.to, LiveChat and self hosted options like Rocket.Chat. When comparing them, consider hosting location, the cookies each sets, available data processing terms and whether an EU hosting region is offered.
Add an entry describing the chat cookies, their functional purpose and their durations, and note that they load only after consent. Explain that messages are sent to a US provider, describe how to withdraw consent, and review the entry whenever the chat configuration changes.