> How Zendesk Sunshine Conversations works: the __zlcmid cookie it sets, data transfers to the US, GDPR consent requirements and how to stay compliant. > > Canonical: https://www.flowconsent.com/en/services/customer-support/zendesk-sunshine-conversations Customer support # Zendesk Sunshine Conversations Preferences · [Official website](https://www.zendesk.com/platform/conversations) Zendesk Sunshine Conversations powers omnichannel messaging and the Zendesk Web Widget. A JavaScript widget sets cookies such as \_\_zlcmid to persist conversations and recognise returning visitors. Conversation content, identifiers, and metadata are processed by Zendesk in the United States. Because persistent identifiers are involved, prior consent is required under the GDPR and the ePrivacy Directive. [Block Zendesk Sunshine Conversations until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=customer_support) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Customer support](https://www.flowconsent.com/en/services/customer-support) - Consent Preferences - Prior consent Required - Documented cookies 5 - Third-party domains 4 - Servers United States (Zendesk; regional hosting available) Overview ## What does Zendesk Sunshine Conversations do? ## What Zendesk Sunshine Conversations is Zendesk Sunshine Conversations is the messaging platform behind Zendesk omnichannel support and the Zendesk Web Widget. It lets businesses run continuous conversations across the website, mobile apps, and channels such as WhatsApp, Messenger, and SMS from a single thread. A JavaScript widget loads on the page, opens a live messaging session, and keeps the conversation history available when a visitor returns. The result is a persistent support experience rather than a one off chat. ## What data and cookies it collects The widget sets cookies including \_\_zlcmid, a persistent live chat machine identifier that lasts about one year, and \_\_zlcstore, a local storage helper. Session cookies such as \_zendesk\_authenticated, \_zendesk\_shared\_session, and \_help\_center\_session manage the authenticated state and the help centre. Alongside these identifiers, Zendesk processes the messages a visitor sends, contact details they provide, IP address, browser and device information, and metadata about the conversation. ## GDPR and ePrivacy implications A purely functional chat that only stores the open conversation state for the duration of a visit can sometimes rely on legitimate interest. However, \_\_zlcmid is a persistent identifier that recognises a returning visitor across sessions, which goes beyond what is strictly necessary, so Article 5(3) of the ePrivacy Directive requires prior consent. The messages and contact details handled by the widget are personal data under the GDPR, so a lawful basis, transparency, and a record of processing activities are required. ## Consent requirements Because the widget relies on persistent identifiers, it should load only after the visitor accepts the functional or messaging category in your consent management platform. Consent must be freely given, specific, informed, and as easy to withdraw as to give, so pre ticked boxes and implied consent from continued browsing are not sufficient. Where you can offer a strictly necessary mode that drops persistent cookies and stores only the open session, you may present the widget by default and reserve consent for the full experience. ## Data transfers and practical compliance steps Zendesk processes data in the United States, with regional hosting available on some plans, so you must document the transfer under the Data Privacy Framework and the Standard Contractual Clauses and sign the Zendesk Data Processing Agreement. In practice, gate the widget behind your consent management platform, list the Zendesk cookies and their durations in your cookie policy, and name Zendesk, Inc. as a recipient. Review retention so that conversation transcripts and identifiers are not kept longer than necessary, and consider regional hosting to reduce transfer exposure. Compliance ## Zendesk Sunshine Conversations and the GDPR Zendesk Sunshine Conversations is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive); strictly functional chat state may rely on legitimate interest, but the persistent identifiers used here require consent - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, EU US Data Privacy Framework ### Impact assessment (DPIA) Zendesk Sunshine Conversations sets a persistent machine identifier (\_\_zlcmid) lasting about one year that recognises returning visitors, stores conversation transcripts and contact details, and processes IP addresses on US infrastructure. A DPIA should assess the persistence of the identifier, the volume and sensitivity of free text messages that customers may share, the international transfer to the United States, and retention periods, together with mitigations such as consent gating, limited message retention, and regional hosting where available. ### Sample text for your banner > We use Zendesk Sunshine Conversations to provide live messaging support and to keep your conversation history available when you return. Zendesk places cookies on your device to maintain the chat, recognise your browser, and manage your session. These cookies load only after you accept the functional or messaging category, and your messages and contact details may be processed in the United States. You can withdraw your consent at any time through our cookie settings. Cookies and trackers ## What Zendesk Sunshine Conversations sets and contacts - Tracking method Messaging widget JavaScript with cookies - Server location United States (Zendesk; regional hosting available) - Data transferred outside the EU Conversation and identification data is processed by Zendesk, Inc. on infrastructure located in the United States, with regional hosting available on some plans. Transfers rely on the EU US Data Privacy Framework and Standard Contractual Clauses. ### Cookies set (5) | Name | Type | Duration | Purpose | | -------------------------- | ---------- | -------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------- | | \_\_zlcmid | functional | 1 year | Persistent live chat machine identifier. Recognises a returning visitor across sessions so that the messaging widget can restore the conversation history. | | \_\_zlcstore | functional | Persistent (local storage) | Local storage helper used by the chat widget to store widget state and configuration on the visitor device. | | \_zendesk\_authenticated | functional | Session | Indicates that the visitor is authenticated within the Zendesk session and maintains the signed in state for the current visit. | | \_zendesk\_shared\_session | functional | Session | Maintains a shared session across Zendesk components such as the widget and the help centre during the current visit. | | \_help\_center\_session | functional | Session | Manages the visitor session within the Zendesk help centre so that navigation and article views remain consistent during the visit. | ### Third-party domains contacted (4) - `static.zdassets.com` - `ekr.zdassets.com` - `yourbrand.zendesk.com` - `widget-mediator.zopim.com` Questions ## Frequently asked questions about Zendesk Sunshine Conversations Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does Zendesk Sunshine Conversations set? The messaging widget sets cookies such as \_\_zlcmid, a persistent live chat machine identifier that lasts about one year, and \_\_zlcstore, a local storage helper. Session cookies including \_zendesk\_authenticated, \_zendesk\_shared\_session, and \_help\_center\_session manage the authenticated state and the help centre for the current visit. ### Do I need consent to use Zendesk Sunshine Conversations? Yes. Because the widget relies on a persistent identifier (\_\_zlcmid) that recognises returning visitors, it is not strictly necessary, so under Article 5(3) of the ePrivacy Directive and the GDPR you must obtain prior, opt in consent before it loads. A reduced mode that only keeps the open session may be presented by default. ### What is the legal basis for Zendesk Sunshine Conversations? The reading and writing of the persistent cookies relies on consent under the ePrivacy Directive, and the processing of messages and contact details relies on consent under Article 6(1)(a) of the GDPR. Strictly functional chat state that lasts only for the visit may rely on legitimate interest, but the persistent identifiers used here require consent. ### Does Zendesk Sunshine Conversations transfer data to the United States? Yes. Zendesk, Inc. processes conversation and identification data on infrastructure in the United States, although regional hosting is available on some plans. Transfers are covered by the EU US Data Privacy Framework and Standard Contractual Clauses, which you should reference in your privacy notice. ### Do I need a DPIA for Zendesk Sunshine Conversations? A full DPIA is not always mandatory, but it is recommended because the widget uses a persistent identifier, handles free text messages that may contain sensitive information, and transfers data internationally. Document the purposes, data categories, retention, and safeguards, and reassess if you enable identification or link chat data to other profiles. ### How do I implement Zendesk Sunshine Conversations in a compliant way? Load the widget only after the visitor accepts the functional or messaging category in your consent management platform, and keep the persistent cookies blocked until then. Sign the Zendesk Data Processing Agreement, set sensible retention for transcripts, document the cookies in your cookie policy, and consider regional hosting where available. ### Are there alternatives to Zendesk Sunshine Conversations? Alternatives include EU based or self hosted messaging tools such as Crisp, Tidio, or open source options like Chatwoot, which can keep data in the EU and reduce transfer exposure. They may not match the omnichannel breadth of Sunshine Conversations, so the right choice depends on your channel mix and data residency needs. ### How do I update my cookie policy for Zendesk Sunshine Conversations? List each Zendesk cookie, its purpose, and its duration, name Zendesk, Inc. as a recipient, and disclose the transfer to the United States. Keep the entries in sync with a regular cookie scan so that new or renamed Zendesk cookies are reflected accurately. Same category ## More services: Customer support [See the whole category](https://www.flowconsent.com/en/services/customer-support) ### [Prosperous Ai](https://www.flowconsent.com/en/services/customer-support/prosperous-ai) [Prosperous AI is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Prosperous AI integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Prosperous AI makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/customer-support/prosperous-ai) [Analytics](https://www.flowconsent.com/en/services/customer-support/prosperous-ai) · ### [Calenso](https://www.flowconsent.com/en/services/customer-support/calenso) [Calenso is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Calenso supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Calenso ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/calenso) [Preferences](https://www.flowconsent.com/en/services/customer-support/calenso) · ### [AnimalChat](https://www.flowconsent.com/en/services/customer-support/animalchat) [AnimalChat is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. AnimalChat integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, AnimalChat helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/animalchat) [Preferences](https://www.flowconsent.com/en/services/customer-support/animalchat) · ### [Giosg](https://www.flowconsent.com/en/services/customer-support/giosg) [Giosg is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Giosg supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Giosg ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/giosg) [Preferences](https://www.flowconsent.com/en/services/customer-support/giosg) · ### [Mottle](https://www.flowconsent.com/en/services/customer-support/mottle) [Mottle is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Mottle integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Mottle helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/customer-support/mottle) [Preferences](https://www.flowconsent.com/en/services/customer-support/mottle) · ### [DialogTab](https://www.flowconsent.com/en/services/customer-support/dialogtab) [DialogTab is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. DialogTab supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, DialogTab ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/customer-support/dialogtab) [Preferences](https://www.flowconsent.com/en/services/customer-support/dialogtab) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)