FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

Cleverbridge

PreferencesOfficial website

Cleverbridge is a Cologne based ecommerce and subscription billing platform that handles checkout, recurring payments, tax and fraud prevention for software and digital goods vendors. When its hosted checkout or cart is used, it sets cookies for session management, fraud prevention and conversion attribution and processes buyer and order data. Under the GDPR and the ePrivacy Directive, its non essential cookies require prior consent.

Block Cleverbridge until consentScan my site
Overview

What does Cleverbridge do?

What is Cleverbridge?

Cleverbridge is an ecommerce, subscription billing and payments platform founded in 2005 and headquartered in Cologne, Germany, with offices in the United States and Japan. It provides software and SaaS companies with a hosted checkout, global payment processing, recurring billing, tax handling and fraud prevention. Vendors send buyers to a Cleverbridge cart or embed its checkout in their store.

What data and cookies does it collect?

When the Cleverbridge checkout loads it sets cookies for session management, fraud prevention and conversion attribution and reads device data such as IP address and browser. To process an order or subscription, Cleverbridge handles identity, contact, billing and payment data and screens transactions for fraud. Some cookies are persistent identifiers used to recognise the device and attribute the sale.

GDPR and ePrivacy implications

The attribution and analytics cookies are not strictly necessary, so storing them is governed by Article 5(3) of the ePrivacy Directive and requires consent. Cleverbridge often acts as merchant of record or reseller, which affects whether it is a controller or processor, so the roles and the lawful basis for each purpose must be defined.

Consent requirements

Block Cleverbridge non essential cookies until the buyer accepts them through a Consent Management Platform, while cookies strictly necessary to complete a requested purchase may load. Log consent, make refusal as easy as acceptance, and ensure the checkout does not set tracking identifiers before opt in.

Data transfers

Cleverbridge processes personal data primarily in the European Union, with some processing in the United States. Transfers to the US must rely on Standard Contractual Clauses or the EU US Data Privacy Framework, supported by a Transfer Impact Assessment. Because the main processing is in the EU, the transfer exposure is lower than for non EU providers.

Practical compliance steps

List the Cleverbridge cookies and domains in your cookie policy and gate non essential ones behind consent. Clarify whether Cleverbridge acts as your processor or as merchant of record and controller, sign the appropriate terms, and document your transfer safeguards. Review the integration when Cleverbridge updates its checkout.

Compliance

Cleverbridge and the GDPR

Cleverbridge is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR)
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive (Cookie Law)

Impact assessment (DPIA)

Cleverbridge processes identity, contact, billing and payment data and screens transactions for fraud. Key DPIA considerations: (1) attribution and analytics cookies are persistent identifiers needing consent; (2) Cleverbridge often acts as reseller or merchant of record, which affects whether it is a controller or processor; (3) some processing may occur in the United States, requiring transfer safeguards; (4) the lawful basis for each purpose must be defined. A DPIA is advisable in case of extensive profiling or large volumes of payment data.

Sample text for your banner

We use Cleverbridge to process your order and payments. The Cleverbridge checkout sets cookies and processes your identity, billing and payment data, and screens the transaction for fraud. You can withdraw your consent to non essential cookies at any time through our cookie settings.
Cookies and trackers

What Cleverbridge sets and contacts

Tracking method
Hosted JavaScript checkout and cookies
Server location
European Union (Germany) and United States
Data transferred outside the EU
Cleverbridge is headquartered in Cologne, Germany, with operations in the United States. Personal data is primarily processed in the EU, but some processing may occur in the US under Standard Contractual Clauses or the EU US Data Privacy Framework with a Transfer Impact Assessment.

Cookies set (3)

NameTypeDurationPurpose
cb_sessionFunctionalSessionMaintains the buyer session through the Cleverbridge checkout.
_cb_attrAttribution / Analytics1 yearPersistent identifier used to attribute completed orders and recognise returning devices.
cb_fraudSecurity6 monthsSupports device recognition and fraud screening during checkout.

Third-party domains contacted (3)

  • cleverbridge.com
  • secure.cleverbridge.com
  • cdn.cleverbridge.com
Questions

Frequently asked questions about Cleverbridge

Can't find your question? Write to us, we answer fast.

What cookies does Cleverbridge set?

Cleverbridge sets cookies for session management, fraud prevention and conversion attribution when its checkout loads. The attribution and analytics cookies are persistent identifiers that are not strictly necessary, so they require consent, while a narrow set needed to complete a requested purchase may be treated as essential.

Does Cleverbridge require cookie consent?

Yes for the non essential cookies. The attribution and analytics cookies Cleverbridge sets need prior consent under the GDPR and the ePrivacy Directive, so they should not load until the buyer accepts. Cookies strictly necessary to process a requested purchase can rely on a different basis.

What is the legal basis for Cleverbridge?

Consent under Article 6(1)(a) GDPR covers the attribution cookies, while processing needed to complete a purchase relies on contract under Article 6(1)(b). Fraud prevention may rely on legitimate interest. Whether Cleverbridge is your processor or an independent controller as merchant of record changes who relies on which basis.

Does Cleverbridge transfer data outside the EU?

Cleverbridge processes data mainly in the EU, with some processing in the United States. US transfers must use Standard Contractual Clauses or the EU US Data Privacy Framework with a Transfer Impact Assessment, but because the core processing stays in the EU the transfer exposure is comparatively low.

Do I need a DPIA for Cleverbridge?

A DPIA may not be mandatory for a standard checkout, but it is advisable if you combine Cleverbridge with extensive profiling or process large volumes of payment data. Document the purposes, the controller roles, fraud screening and transfer safeguards to demonstrate accountability.

How do I implement Cleverbridge compliantly?

Add Cleverbridge through a CMP that blocks non essential cookies until consent, keep purchase essential cookies separate, and confirm whether it acts as your processor or as merchant of record. Sign the relevant terms, disclose cookies and recipients, and document transfer safeguards.

Are there alternatives to Cleverbridge?

Other merchant of record and billing platforms include Paddle, FastSpring, Digital River and 2Checkout (Verifone). Paddle and Cleverbridge are EU friendly options that can simplify transfer compliance. All set checkout and tracking cookies, so consent gating and clear roles remain the priority.

How do I update my cookie policy for Cleverbridge?

Describe the Cleverbridge cookies, their purpose and duration, list the Cleverbridge domains, and state that data is processed in the EU and, to a limited extent, the US. Clarify the controller roles in your privacy notice and keep both aligned with the integration.

Same category

More services: E-commerce

See the whole category

Levar

Levar is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Levar enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Levar empowers marketing teams to achieve measurable growth.

Preferences

Lazada

Lazada is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Lazada integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Lazada helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Epicor

Epicor is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Epicor supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Epicor ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Clayful

Clayful is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Clayful integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Clayful helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

BON Loyalty

BON Loyalty is a customer loyalty and rewards platform designed to help businesses increase customer retention and lifetime value. It enables merchants to create customizable loyalty programs with points, tiers, referral bonuses, and exclusive rewards. BON Loyalty integrates with e-commerce platforms and POS systems, providing detailed analytics on customer engagement and program performance. BON Loyalty helps businesses build lasting customer relationships and drive sustainable revenue growth.

Preferences

twingle

Twingle is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Twingle supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Twingle ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site