Spatie Support Bubble
Spatie Support Bubble is an open source Laravel package developed by the Belgian agency Spatie. It adds a small bubble in the corner of a website that lets visitors send short feedback messages. Everything runs inside the operator's own Laravel application: no third party server, no tracking cookies, no scripts loaded from external domains. For EU operators, this makes it a very low risk component under GDPR and ePrivacy, since Spatie itself never receives end user data.
What does Spatie Support Bubble do?
What Spatie Support Bubble is
Spatie Support Bubble is an open source Laravel package developed by Spatie, an Antwerp based agency well known in the Laravel ecosystem. It adds a small floating bubble in the corner of a website. Visitors click the bubble to send a short feedback message that flows into the operator's own database. The package is MIT licensed and is hosted in the operator's Laravel application, with no calls to Spatie servers.
Data processed
Feedback text typed by the visitor, the page URL, and any additional context the operator decides to capture (authenticated user identifier, language, environment metadata). The operator decides what is stored and where.
GDPR and ePrivacy
No tracking cookies are set, no third party scripts are loaded, no data leaves the operator's infrastructure. Article 5(3) ePrivacy does not require consent. GDPR transparency obligations still apply: tell users in the privacy notice that feedback collected through the bubble is stored and reviewed, and document the retention period.
Consent
No prior consent is required to display the bubble. Submitting feedback is itself an explicit user action. Keep the form short and remind the user not to include sensitive personal data, and offer a link to the privacy notice next to the submit button.
International transfers
The Spatie Support Bubble does not send anything to Spatie or to any third country by itself. The international transfer dimension depends entirely on where the operator hosts the Laravel application. EU operators using EU hosting have no transfer to disclose.
Practical steps
Add a privacy notice paragraph for the feedback bubble, set a retention period on stored feedback (e.g. delete after 12 months), restrict access to the feedback dashboard, and review whether any sensitive content received should be redacted. Pin the package version and read the changelog before upgrading.
Spatie Support Bubble and the GDPR
- Legal basis
- The Spatie Support Bubble does not set tracking cookies and does not load any third party script. Article 5(3) ePrivacy does not require consent. Submitted feedback is processed on the basis of the operator's legitimate interest in improving the service, with transparency under articles 13 and 14 GDPR.
- Risk level
- low
- Applicable regulations
- GDPR, ePrivacy Directive. Belgian APD guidance applicable to Spatie as a publisher of the package; the operator follows its own national rules.
Impact assessment (DPIA)
A DPIA is not required for the Spatie Support Bubble itself. It can be appropriate if feedback contains sensitive content (medical complaints, accident reports) or if the operator enriches messages with significant personal data such as IP or session replays.
Sample text for your banner
Our website includes a small feedback bubble built with the open source Spatie Support Bubble package. Feedback you send is processed only on our own servers. No third party tracking, no cookies and no consent is required for the bubble itself.
What Spatie Support Bubble sets and contacts
- Tracking method
- Open source Laravel package by Spatie (Belgium) that adds a small support bubble widget to a website. Visitors click the bubble to send a short feedback message that is processed by the website itself (self hosted Laravel application). No third party server is involved unless the website operator configures one.
- Server location
- Self hosted. The Spatie Support Bubble package runs entirely within the operator's Laravel application, on the operator's own infrastructure. Spatie itself receives no data from end users.
- Cookieless mode available
- Yes
Third-party domains contacted (2)
spatie.begithub.com/spatie/laravel-support-bubble
Frequently asked questions about Spatie Support Bubble
Can't find your question? Write to us, we answer fast.
What cookies does Spatie Support Bubble set?
None by default. The package is a small Vue/Livewire component that posts feedback directly to the operator's Laravel application. The session cookie used by Laravel itself is strictly necessary and not specific to the Support Bubble.
Does the Support Bubble require user consent?
No. No information is stored on the device beyond what is strictly necessary, and no third party is involved. Article 5(3) ePrivacy does not require consent.
What is the legal basis?
Legitimate interest of the operator in collecting feedback to improve the service, combined with the user's own explicit action when submitting feedback. Transparency under articles 13 and 14 GDPR remains mandatory.
Does the Support Bubble transfer data outside the EU?
By default no. Feedback stays on the operator's server. International transfer depends solely on where the operator hosts the Laravel application.
Do we need a DPIA?
Not for the package itself. A DPIA can be appropriate when feedback collected may include sensitive content (medical complaints, accident reports) or when the operator pairs feedback with other identifiers at scale.
How do we implement Spatie Support Bubble compliantly?
Mention the bubble in the privacy notice, define a retention period, restrict access to feedback dashboards, advise users not to share sensitive personal data through the bubble, pin the package version and follow Spatie's security updates.
What alternatives exist?
Alternatives include Userback (Australia), Feedbear, Frill, Canny, Sleekplan, native HelpScout or Intercom widgets, and other open source widgets such as a simple Laravel form. EU hosted or self hosted options minimise transfer risk.
How do we update the cookie policy?
You normally do not list the Spatie Support Bubble in the cookie policy because no tracking cookies are set. Add a privacy notice section explaining that feedback is collected and how it is processed.
Ideta
Ideta is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Ideta integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Ideta helps organizations maintain robust websites that meet user expectations and technical requirements.
SightCall
SightCall is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. SightCall enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, SightCall empowers marketing teams to achieve measurable growth.
Five9
Five9 is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Five9 integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Five9 helps organizations maintain robust websites that meet user expectations and technical requirements.
LiveHelp
LiveHelp is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. LiveHelp supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, LiveHelp ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
BookingKoala
BookingKoala is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. BookingKoala supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, BookingKoala ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
DearDoc
DearDoc is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. DearDoc supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, DearDoc ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.