FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

Blaze

PreferencesOfficial website

Blaze (BLAZE Solutions Inc., USA) is a B2B ecommerce and point of sale platform purpose built for cannabis retailers, providing online ordering, inventory, compliance and payment workflows.

Block Blaze until consentScan my site
Overview

What does Blaze do?

What BLAZE is and what it does on your website

BLAZE is a web technology service that delivers embedded modules, tracking and partner integrations to host websites. It is deployed via an asynchronous JavaScript snippet that fetches configuration from the BLAZE API, renders interactive components and reports usage events back to the BLAZE backend. Typical use cases include in page widgets, behavioural triggers, on site personalisation and downstream integrations with marketing and analytics platforms.

Cookies and data collected by BLAZE

The BLAZE snippet writes first party cookies for visitor identification, session correlation and consent state. It also sends event payloads containing the visitor IP, user agent, referrer, page URL, custom attributes and interaction events to the BLAZE backend. Personal data may flow back to BLAZE before reaching the destination integrations, which makes BLAZE a processor of personal data for the website operator.

GDPR and ePrivacy implications

Under Article 5(3) of the ePrivacy Directive, the BLAZE script cannot be loaded before consent because it sets non strictly necessary cookies. Under the GDPR the website operator is controller and the BLAZE provider is processor, with a Data Processing Agreement under Article 28 required, plus a sub processor list and retention rules.

International transfers

BLAZE infrastructure is based in the United States, with assets delivered through global CDN edge nodes. Transfers must be covered by Standard Contractual Clauses under Article 46(2)(c) GDPR and may rely on the EU US Data Privacy Framework where the relevant entity is certified. A transfer impact assessment is recommended.

Compliance checklist for EU operators

Block the BLAZE snippet by default in your CMP and load it only after explicit consent, sign the BLAZE DPA, list CDN and infrastructure sub processors, document retention rules, separate strictly necessary from optional behaviour and offer a clear way for visitors to access, rectify, erase their data or withdraw consent.

Compliance

Blaze and the GDPR

Blaze is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Art. 6(1)(a) GDPR consent for analytics, marketing and non strictly necessary cookies set by the storefront, Art. 6(1)(b) GDPR for cart and order processing once a shopper places an order, Art. 6(1)(c) GDPR for legal obligations relating to age verification and cannabis specific regulations (where applicable), Art. 6(1)(f) GDPR for fraud prevention. Art. 5(3) ePrivacy Directive applies to all non strictly necessary cookies.
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive, TTDSG (Germany), LOPDGDD (Spain), Loi Informatique et Libertes (France), Schrems II ruling, EU US Data Privacy Framework, Standard Contractual Clauses, CCPA, PCI DSS, age verification and cannabis specific laws (where applicable)

Impact assessment (DPIA)

A DPIA under Art. 35 GDPR is strongly recommended whenever Blaze is used for an EU facing storefront because of the systematic processing of shopper data, sensitive purchase patterns related to cannabis, age verification, payment data, transfers to the United States and integration with multiple third party providers (Stripe, analytics, marketing). The DPIA must assess proportionality, the necessity of US transfers, data minimisation and retention.

Sample text for your banner

Our online store is powered by Blaze (BLAZE Solutions Inc., United States). With your consent, Blaze and its sub processors set analytics and marketing cookies, process your order and payment details and transfer your personal data to the United States under the EU US Data Privacy Framework and Standard Contractual Clauses. Click Accept to continue.
Cookies and trackers

What Blaze sets and contacts

Tracking method
Hosted ecommerce and point of sale platform accessed via web application and API. The Blaze JavaScript application sets first party session and authentication cookies on app.blaze.me and may load third party scripts for analytics (Google Analytics, Segment), payments (Stripe) and customer support. Tracks browsing, cart events and purchase flows.
Server location
United States. Blaze (BLAZE Solutions Inc.) is headquartered in Newport Beach, California and operates AWS infrastructure in US regions.
Data transferred outside the EU
As a US headquartered SaaS vendor, Blaze processes customer and shopper data in the United States. Any EU based dispensary or retailer using Blaze for an EU facing online store must rely on Standard Contractual Clauses and a Transfer Impact Assessment under Schrems II. Note that Blaze is primarily designed for US cannabis retailers and EU usage is uncommon.

Cookies set (12)

NameTypeDurationPurpose
blaze_sessionfirst_partysessionSession token used by Blaze to authenticate dispensary staff and shoppers across requests to app.blaze.me.
blaze_visitorHTTP13 monthsPersistent BLAZE visitor identifier used to recognise returning users across sessions.
blaze_visitorfirst_party1 yearPersistent visitor identifier used to recognize returning shoppers, link orders and feed analytics.
blaze_sessionHTTP30 minutesBLAZE session identifier used to correlate events within a single browsing session.
_blaze_cartfirst_party30 daysStores cart contents so a shopper can resume an order across visits.
blaze_consentHTTP6 monthsStores the consent state for BLAZE to suppress repeated banners.
blaze_variantHTTP30 daysStores the personalisation or A/B test variant assigned to the visitor.
blaze_age_verifiedfirst_party30 daysRecords that the user has completed age verification, required for cannabis ecommerce.
_gathird_party2 yearsGoogle Analytics 4 cookie commonly loaded with Blaze storefronts to measure traffic and conversions.
__stripe_midthird_party1 yearStripe fraud prevention identifier loaded during checkout to assess payment risk.
__stripe_sidthird_party30 minutesStripe session identifier used during the checkout flow for fraud detection.
ajs_anonymous_idthird_party1 yearSegment anonymous user identifier used when Blaze stores forward events to Segment for analytics and marketing.

Third-party domains contacted (10)

  • blaze.com
  • app.blaze.me
  • api.blaze.me
  • cdn.blaze.com
  • events.blaze.com
  • blaze.me
  • api.blaze.com
  • cdn.blaze.me
  • js.stripe.com
  • www.google-analytics.com
Questions

Frequently asked questions about Blaze

Can't find your question? Write to us, we answer fast.

What cookies does Blaze set?

Blaze sets first party session, authentication and cart cookies on its domain (blaze_session, blaze_visitor, _blaze_cart) and typically loads third party cookies via Google Analytics, tag managers and Stripe for payment fraud prevention.

Is consent required to load Blaze?

Yes. Beyond strictly necessary session cookies, Blaze relies on analytics, marketing and third party scripts that fall under Art. 5(3) ePrivacy and Art. 6(1)(a) GDPR. Prior consent through a CMP is required before non strictly necessary scripts load.

What legal basis applies to processing through Blaze?

Art. 6(1)(b) GDPR for cart and order management, Art. 6(1)(c) GDPR for age verification and tax records, Art. 6(1)(a) GDPR for analytics and marketing cookies, Art. 6(1)(f) GDPR for fraud prevention. Cannabis specific data may trigger Art. 9 GDPR safeguards.

Does Blaze transfer data to the United States?

Yes. Blaze is a US headquartered SaaS vendor hosted on AWS in US regions. EU operators must use SCCs (and the EU US DPF where Blaze is certified), perform a Transfer Impact Assessment and consider additional safeguards.

Do I need a DPIA for Blaze?

Yes. The combination of large scale shopper tracking, payments, age verification, potentially sensitive purchase data and US transfers triggers Art. 35 GDPR. A DPIA is strongly recommended.

How do I implement Blaze GDPR compliantly?

Block analytics and marketing scripts until consent is collected via a CMP, sign the Blaze DPA with SCCs, document the TIA, ensure PCI DSS through Stripe, limit data sent to Blaze, set short retention for browsing and cart data and audit local cannabis regulations.

What are the alternatives to Blaze?

For EU facing ecommerce, alternatives include Shopify (with EU regions where available), PrestaShop, Sylius and WooCommerce. None of them currently match Blaze's deep cannabis specific compliance features but they may offer better data protection posture for EU operators.

How do I update my cookie policy to include Blaze?

Document Blaze and its sub processors (Stripe, Google Analytics, support tools) with cookie names, durations, purposes and the US transfer basis (SCCs, EU US DPF where applicable). Update at least annually and after any change to the Blaze integration.

Same category

More services: E-commerce

See the whole category

Shop Pay Installments

Shop Pay Installments is a comprehensive e-commerce platform that provides businesses with all the tools needed to build, manage, and grow an online store. From product catalog management and secure payment processing to inventory tracking and order fulfillment, Shop Pay Installments delivers a complete commerce solution. It features responsive storefront themes, SEO-optimized product pages, and powerful marketing tools to help merchants increase visibility and drive sales across channels.

Preferences

Dominate WooCommerce

Dominate WooCommerce is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Dominate WooCommerce offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Dominate WooCommerce empowers organizations to optimize strategy and maximize return on investment.

Preferences

Wair

Wair is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Wair provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Wair helps deliver the right message to the right audience at the right time.

Preferences

Linx Commerce

Linx Commerce is a comprehensive e-commerce platform that provides businesses with all the tools needed to build, manage, and grow an online store. From product catalog management and secure payment processing to inventory tracking and order fulfillment, Linx Commerce delivers a complete commerce solution. It features responsive storefront themes, SEO-optimized product pages, and powerful marketing tools to help merchants increase visibility and drive sales across channels.

Preferences

Rapid Search

Rapid Search is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Rapid Search integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Rapid Search helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Bloom

Bloom is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Bloom supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Bloom ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site