> Gorgias Chat cookies, GDPR consent, ePrivacy duties, EU data residency, EU US Data Privacy Framework status and best practices for European online stores. > > Canonical: https://www.flowconsent.com/en/services/customer-support/gorgias Customer support # Gorgias Preferences · [Official website](https://www.gorgias.com/) Gorgias is a US French customer support helpdesk built for ecommerce that unifies email, live chat, social media DMs and voice into a single inbox. It integrates natively with Shopify, BigCommerce, Magento and WooCommerce. The Gorgias Chat widget sets first party cookies on the storefront for conversation continuity. [Block Gorgias until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=customer_support) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Customer support](https://www.flowconsent.com/en/services/customer-support) - Consent Preferences - Prior consent Required - Documented cookies 3 - Third-party domains 5 - Servers Gorgias Inc. on Google Cloud Platform; multi region presence in the United States with EU region (Belgium) available for shoppers data Overview ## What does Gorgias do? ## **What is Gorgias** Gorgias is a customer support helpdesk co founded in Paris and now headquartered in San Francisco. Built for ecommerce merchants, it unifies email, live chat, Instagram, Facebook, WhatsApp, SMS and voice into a single agent inbox with deep Shopify, BigCommerce, Magento and WooCommerce integrations. European DTC brands use Gorgias to centralise customer service across channels and to automate replies with AI macros. ## **Cookies and tracking technologies** The Gorgias Chat JavaScript widget sets the gorgias\_voucher\_uuid first party cookie under the storefront domain, plus a gorgias\_chat\_user cookie that links the visitor to an ongoing conversation. It also stores conversation history in localStorage. The widget loads scripts from config.gorgias.chat and assets from gorgias.chat. ## **GDPR and ePrivacy implications** Gorgias acts as a processor for the customer support data the merchant uploads (tickets, customer profile, conversation history). The merchant is the controller and must sign the Gorgias DPA. The chat widget cookies require ePrivacy consent because they are set proactively before the visitor initiates a conversation. The inbox processing relies on contract for the customer relationship and legitimate interest for fraud prevention. ## **Consent requirements** Prior, freely given, specific, informed and unambiguous consent under Article 5(3) ePrivacy is required before the Gorgias Chat widget is initialised. A consent management platform should withhold the gorgias.chat script tag until the visitor accepts the functional or strictly necessary category, depending on whether chat is presented as a comfort feature or as the primary contact channel. ## **Data transfers outside the EEA** Gorgias Inc. is established in the United States. Customer data is processed on Google Cloud Platform US regions by default, with an EU shoppers data option (Belgium region) available for European merchants. Gorgias self certifies under the EU US Data Privacy Framework. Standard Contractual Clauses are included in the Gorgias DPA. ## **Practical compliance steps** Sign the Gorgias DPA, activate EU shoppers data residency for European customers, gate the Gorgias Chat widget behind a consent management platform, list the chat cookies in the cookie policy, document the US transfer under the EU US Data Privacy Framework, and configure ticket retention periods aligned with your customer service SLAs (12 to 24 months is common). Compliance ## Gorgias and the GDPR Gorgias is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis The Gorgias Chat widget sets a visitor identifier cookie before any interaction occurs, which requires Article 6(1)(a) GDPR and Article 5(3) ePrivacy consent. The helpdesk inbox processing (tickets, customer profile) relies on Article 6(1)(b) GDPR (contract) for the merchant customer relationship. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, EU US Data Privacy Framework, national cookie laws (TTDSG, LCEN, LSSI), CCPA for US customers ### Impact assessment (DPIA) A DPIA is recommended when Gorgias is used for high volume ecommerce inboxes, when AI auto reply features are activated (which involve automated decision making under Article 22 GDPR), or when sensitive customer data flows through chat (health, payment disputes). ### Sample text for your banner > Our online shop uses Gorgias to power live chat and customer support. When you open the chat widget or after you accept the functional cookies category, Gorgias sets cookies on your browser to keep your conversation state. Without consent, you can still contact us by email through the contact form. Cookies and trackers ## What Gorgias sets and contacts - Tracking method Customer support helpdesk that connects email, social media and live chat. The Gorgias Chat widget injects a JavaScript SDK that sets first party cookies and stores conversation context in localStorage - Server location Gorgias Inc. on Google Cloud Platform; multi region presence in the United States with EU region (Belgium) available for shoppers data - Data transferred outside the EU Gorgias Inc. is established in the United States (San Francisco) with subsidiaries in France and Australia. Data is processed on Google Cloud Platform US regions by default. Gorgias self certifies under the EU US Data Privacy Framework. Standard Contractual Clauses are included in the Gorgias Data Processing Addendum. ### Cookies set (3) | Name | Type | Duration | Purpose | | ----------------------------------- | ------------ | ---------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | gorgias\_voucher\_uuid | first\_party | 1 year | Gorgias Chat first party visitor identifier set under the storefront domain. Used to keep the visitor associated with chat conversations and to attribute conversion events back to Gorgias. | | gorgias\_chat\_user | first\_party | 1 year | Links the visitor to an ongoing chat conversation in the Gorgias inbox. Allows resumption of the conversation across pages and devices. | | gorgias\_chat\_state (localStorage) | first\_party | Persistent | Conversation history and widget state stored in browser localStorage on the storefront domain. | ### Third-party domains contacted (5) - `config.gorgias.chat` - `gorgias.chat` - `api.gorgias.io` - `gorgias.io` - `gorgias.com` Questions ## Frequently asked questions about Gorgias Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does the Gorgias Chat widget set? The widget sets gorgias\_voucher\_uuid (first party visitor identifier) and gorgias\_chat\_user (linked to an ongoing conversation). It also stores conversation history in browser localStorage on the storefront domain. ### Does Gorgias require user consent? Yes. The chat widget cookies are dropped proactively, before any visitor interaction. Prior, freely given, specific, informed and unambiguous consent under Article 5(3) ePrivacy is required. A consent management platform must hold back the script until consent is granted. ### What legal basis applies to Gorgias? The Chat widget cookies rely on Article 6(1)(a) GDPR consent. The Gorgias inbox processing relies on Article 6(1)(b) GDPR (contract) for the merchant customer relationship and Article 6(1)(f) GDPR (legitimate interest) for fraud prevention and service operations. ### Does Gorgias transfer data to the United States? Yes by default. Gorgias Inc. is established in the US and processes data on Google Cloud Platform US regions. European merchants can activate the EU shoppers data option (Belgium). Gorgias self certifies under the EU US Data Privacy Framework. Standard Contractual Clauses are included in the Gorgias DPA. ### Is a DPIA required for Gorgias? A DPIA is recommended for high volume ecommerce inboxes, when AI auto reply features (which involve automated decision making under Article 22 GDPR) are activated, or when sensitive customer data flows through chat such as health complaints or payment disputes. ### How do I implement Gorgias compliantly? Sign the Gorgias DPA, activate EU shoppers data residency, gate the Chat widget behind a consent management platform, list the chat cookies in the cookie policy, document the US transfer, set ticket retention periods aligned with your SLAs and remove the chat script from pages where consent has not been collected yet. ### Are there EU based alternatives to Gorgias? EU based helpdesk alternatives include Crisp (France), Userlike (Germany), Tidio (Poland), HelpCrunch (Ukraine and EU regions), Freshdesk (with EU hosting) and self hosted alternatives such as Chatwoot, ChatGPT plugin based stacks and FreeScout. ### How do I update my cookie policy for Gorgias? Add a dedicated chat or customer support category disclosing gorgias\_voucher\_uuid and gorgias\_chat\_user with name, domain, duration and purpose. Disclose the US transfer and EU shoppers data residency, link to the Gorgias privacy notice and provide a way to clear the chat history (logout button or localStorage purge). Same category ## More services: Customer support [See the whole category](https://www.flowconsent.com/en/services/customer-support) ### [Alive5](https://www.flowconsent.com/en/services/customer-support/alive5) [Alive5 is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Alive5 supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Alive5 ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/alive5) [Preferences](https://www.flowconsent.com/en/services/customer-support/alive5) · ### [Buttonizer](https://www.flowconsent.com/en/services/customer-support/buttonizer) [Buttonizer is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Buttonizer integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Buttonizer helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/buttonizer) [Marketing](https://www.flowconsent.com/en/services/customer-support/buttonizer) · ### [Help.com](https://www.flowconsent.com/en/services/customer-support/help-com) [Help.com is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Help.com offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Help.com empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/customer-support/help-com) [Analytics](https://www.flowconsent.com/en/services/customer-support/help-com) · ### [Olark](https://www.flowconsent.com/en/services/customer-support/olark) [Olark is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. Olark integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, Olark enhances satisfaction by ensuring tailored browsing experiences for every visitor.](https://www.flowconsent.com/en/services/customer-support/olark) [Preferences](https://www.flowconsent.com/en/services/customer-support/olark) · ### [SnatchBot](https://www.flowconsent.com/en/services/customer-support/snatchbot) [SnatchBot is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. SnatchBot integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, SnatchBot helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/snatchbot) [Preferences](https://www.flowconsent.com/en/services/customer-support/snatchbot) · ### [Acquire Cobrowse](https://www.flowconsent.com/en/services/customer-support/acquire-cobrowse) [Acquire Cobrowse is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Acquire Cobrowse provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Acquire Cobrowse helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/customer-support/acquire-cobrowse) [Marketing](https://www.flowconsent.com/en/services/customer-support/acquire-cobrowse) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)