FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

Avangate

PreferencesOfficial website

Avangate, now part of 2Checkout and Verifone, is an ecommerce and subscription billing platform that provides a hosted checkout, global payments, recurring billing and fraud prevention for software and digital goods vendors. When its checkout or cart is used, it sets cookies for session management, fraud prevention and conversion attribution and processes buyer and order data. Under the GDPR and the ePrivacy Directive, its non essential cookies require prior consent.

Block Avangate until consentScan my site
Overview

What does Avangate do?

What is Avangate?

Avangate is an ecommerce, subscription billing and payments platform originally founded in the Netherlands, now operating as part of 2Checkout under Verifone. It gives software and SaaS vendors a hosted checkout, global payment processing, recurring billing, tax handling and fraud prevention. Merchants direct buyers to an Avangate or 2Checkout cart or embed its checkout in their store.

What data and cookies does it collect?

When the Avangate checkout loads it sets cookies for session management, fraud prevention and conversion attribution and reads device data such as IP address and browser. To process an order or subscription, it handles identity, contact, billing and payment data and screens transactions for fraud. Some cookies are persistent identifiers used to recognise the device and attribute the sale.

GDPR and ePrivacy implications

The attribution and analytics cookies are not strictly necessary, so storing them is governed by Article 5(3) of the ePrivacy Directive and requires consent. Avangate frequently acts as merchant of record, taking on the controller role for the transaction, so the roles and the lawful basis for each purpose must be defined.

Consent requirements

Block Avangate non essential cookies until the buyer accepts them through a Consent Management Platform, while cookies strictly necessary to complete a requested purchase may load. Log consent, make refusal as easy as acceptance, and ensure no tracking identifiers are set before opt in.

Data transfers

Avangate processes data in the European Union, in the Netherlands and Romania, and in the United States as part of Verifone. Transfers to the US must rely on Standard Contractual Clauses or the EU US Data Privacy Framework with a Transfer Impact Assessment. Confirm where each part of the processing takes place.

Practical compliance steps

List the Avangate cookies and domains in your cookie policy and gate non essential ones behind consent. Clarify whether Avangate is your processor or the merchant of record and controller, sign the appropriate terms, and document your transfer safeguards. Review the integration when 2Checkout updates its checkout.

Compliance

Avangate and the GDPR

Avangate is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR)
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive (Cookie Law)

Impact assessment (DPIA)

Avangate processes identity, contact, billing and payment data and screens transactions for fraud. Key DPIA considerations: (1) attribution and analytics cookies are persistent identifiers needing consent; (2) Avangate often acts as merchant of record, taking on the controller role for the transaction; (3) some processing occurs in the US within Verifone, requiring transfer safeguards; (4) the lawful basis for each purpose must be defined. A DPIA is advisable in case of extensive profiling or large volumes of payment data.

Sample text for your banner

We use Avangate (2Checkout) to process your order and payments. The Avangate checkout sets cookies and processes your identity, billing and payment data, and screens the transaction for fraud. You can withdraw your consent to non essential cookies at any time through our cookie settings.
Cookies and trackers

What Avangate sets and contacts

Tracking method
Hosted JavaScript checkout and cookies
Server location
European Union (Netherlands and Romania) and United States
Data transferred outside the EU
Avangate, now part of 2Checkout and Verifone, processes data in the European Union (Netherlands and Romania) and the United States. Transfers to the US rely on Standard Contractual Clauses or the EU US Data Privacy Framework with a Transfer Impact Assessment.

Cookies set (3)

NameTypeDurationPurpose
av_sessionFunctionalSessionMaintains the buyer session through the Avangate checkout.
_av_attrAttribution / Analytics1 yearPersistent identifier used to attribute completed orders and recognise returning devices.
av_fraudSecurity6 monthsSupports device recognition and fraud screening during checkout.

Third-party domains contacted (3)

  • avangate.com
  • secure.avangate.com
  • secure.2checkout.com
Questions

Frequently asked questions about Avangate

Can't find your question? Write to us, we answer fast.

What cookies does Avangate set?

Avangate sets cookies for session management, fraud prevention and conversion attribution when its checkout loads. The attribution and analytics cookies are persistent identifiers that are not strictly necessary, so they require consent, while a narrow set needed to complete a requested purchase may be treated as essential.

Does Avangate require cookie consent?

Yes for the non essential cookies. The attribution and analytics cookies Avangate sets need prior consent under the GDPR and the ePrivacy Directive, so they should not load until the buyer accepts. Cookies strictly necessary to process a requested purchase can rely on a different basis.

What is the legal basis for Avangate?

Consent under Article 6(1)(a) GDPR covers the attribution cookies, while processing needed to complete a purchase relies on contract under Article 6(1)(b). Fraud prevention may rely on legitimate interest. As merchant of record, Avangate often acts as an independent controller, which shapes who relies on which basis.

Does Avangate transfer data outside the EU?

Avangate processes data in the EU (Netherlands and Romania) and the United States as part of Verifone. US transfers must use Standard Contractual Clauses or the EU US Data Privacy Framework with a Transfer Impact Assessment, so confirm where each part of the processing occurs and document it.

Do I need a DPIA for Avangate?

A DPIA may not be mandatory for a standard checkout, but it is advisable if you combine Avangate with extensive profiling or process large volumes of payment data. Document the purposes, the controller roles, fraud screening and transfer safeguards to demonstrate accountability.

How do I implement Avangate compliantly?

Add Avangate through a CMP that blocks non essential cookies until consent, keep purchase essential cookies separate, and confirm whether it acts as your processor or as merchant of record. Sign the relevant terms, disclose cookies and recipients, and document transfer safeguards.

Are there alternatives to Avangate?

Other merchant of record and billing platforms include Paddle, Cleverbridge, FastSpring and Digital River. Several of these process data largely in the EU, which can simplify transfer compliance. All set checkout and tracking cookies, so consent gating and clear roles remain the priority.

How do I update my cookie policy for Avangate?

Describe the Avangate cookies, their purpose and duration, list the Avangate and 2Checkout domains, and state that data is processed in the EU and the US. Clarify the controller roles in your privacy notice and keep both aligned with the integration.

Same category

More services: E-commerce

See the whole category

Race Roster

Race Roster is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Race Roster enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Race Roster empowers marketing teams to achieve measurable growth.

Preferences

Shopapps

Shopapps is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Shopapps integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Shopapps helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Deco.cx

Deco.cx is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Deco.cx enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Deco.cx empowers marketing teams to achieve measurable growth.

Analytics

Deliverr

Deliverr is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Deliverr integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Deliverr helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

MSAAQ

MSAAQ is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. MSAAQ integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, MSAAQ helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

CommentSold

CommentSold is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. CommentSold integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, CommentSold helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site