Deco CX
Deco CX is an edge native commerce frontend platform that lets retailers build storefronts on Deno Deploy with built in A/B testing, personalisation, and observability.
What does Deco CX do?
Deco CX is an edge native commerce frontend platform. It lets retailers build composable storefronts powered by Deno Deploy and global CDNs, with first class support for A/B testing, on site personalisation, observability and integrations with VTEX, Shopify, Linx and other commerce engines. It is widely used in Latin America and is gaining traction with European retailers seeking a headless alternative.
What Deco CX does
Deco CX deploys Preact based pages on Deno Deploy edge nodes. The runtime evaluates routing, rendering and personalisation rules on the edge, calls the commerce backend over HTTPS, and emits structured events to the Deco Live analytics pipeline. Editors drive the experience through a visual admin that pushes changes in real time to the edge.
Cookies and data collected
Deco CX sets first party cookies on your domain to assign A/B test variants (deco_flags, deco_segment), persist a visitor identifier (deco_uid), and keep the locale and currency preferences. Server side, every page render emits an event with the IP, user agent, URL, A/B variant, and cart state. Events flow to Deco Live in the United States.
GDPR and ePrivacy implications
The first party cookies used purely for A/B testing and personalisation are not strictly necessary under Article 5(3) ePrivacy, so consent is required for non essential variations. Deco CX acts as a processor under your DPA for storefront delivery, plus an independent controller for product analytics if you enable Deco Live. Disclose the platform in your privacy notice.
Data hosting and transfers
Deno Deploy runs at the edge close to the visitor, including EU points of presence. The Deco control plane and Deco Live analytics run primarily in the United States. Transfers rely on Standard Contractual Clauses and on the EU-US Data Privacy Framework where applicable. Document the transfer mechanism in your record of processing activities.
How to deploy it compliantly
Sign the DPA, separate strictly necessary cookies (cart, locale) from analytics and A/B testing cookies. Wire the Deco CX consent block to your CMP so personalisation activates only after opt in. Minimise the user properties you pass to Deco Live, configure retention, and review the AI subprocessors used for any recommendation feature.
Deco CX and the GDPR
Deco CX is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) for personalisation and analytics, contract (Art. 6(1)(b)) for the storefront delivery
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive, LGPD, EU-US Data Privacy Framework
Impact assessment (DPIA)
A DPIA is recommended when Deco CX runs heavy personalisation or AI driven recommendations. Document the event pipeline, the third party AI subprocessors, the SCC mechanism for the US data plane, and the retention period for customer level data.
Sample text for your banner
We use Deco CX to deliver and personalise this storefront. Deco CX sets first party cookies on our domain and sends events to its servers in the United States. Personalisation and analytics only activate after you accept the relevant category in our cookie banner.
What Deco CX sets and contacts
- Tracking method
- Edge native commerce frontend platform built on Deno Deploy, with first party cookies for A/B testing and personalisation, server side event streaming
- Server location
- Global edge network (Deno Deploy and Cloudflare Workers); origin in the United States with regional caches in EU
- Data transferred outside the EU
- Deco CX is operated by deco.cx, a Brazilian and US company. Production runs on Deno Deploy global edge with control plane and analytics in the United States. Transfers rely on Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable.
Cookies set (4)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| deco_flags | http_cookie | 30 days | Stores the A/B test variant assignments for the visitor so the same experience is served across requests. |
| deco_segment | http_cookie | 30 days | Stores the personalisation segment computed at the edge for the visitor. |
| deco_uid | http_cookie | 1 year | Stable visitor identifier set on the merchant domain and used to consolidate Deco Live analytics. |
| deco_locale | http_cookie | 1 year | Stores the user preferred locale and currency for subsequent visits. |
Third-party domains contacted (4)
deco.cxdeno.devapi.deco.cxassets.decocache.com
Frequently asked questions about Deco CX
Can't find your question? Write to us, we answer fast.
What cookies does Deco CX set?
Deco CX sets first party cookies on your domain: deco_flags for A/B test assignment, deco_segment for personalisation, deco_uid as a stable visitor identifier, plus locale and currency cookies. Server side, every page render emits an event to Deco Live.
Does Deco CX require GDPR consent?
For strictly necessary functions (cart, locale, currency), no. For A/B testing, personalisation, and analytics, yes. Article 5(3) ePrivacy requires consent before non essential cookies are written and before personalisation events are sent.
What is the legal basis for processing?
Contract performance under Article 6(1)(b) GDPR for the storefront and the order. Consent under Article 6(1)(a) for the A/B testing and personalisation cookies, the Deco Live analytics, and any AI recommendation features.
Are data transferred outside the EU?
Edge rendering happens close to the visitor (including EU). Deco Live and the control plane run primarily in the United States. Transfers rely on SCCs and the EU-US Data Privacy Framework where applicable.
Do I need a DPIA?
A DPIA is recommended when Deco CX runs heavy personalisation, AI driven product recommendations, or large scale A/B testing on consumer journeys. Document the event flow, the AI subprocessors, and the retention.
How do I implement Deco CX compliantly?
Sign the DPA, split your cookies into strictly necessary and consent based, wire the Deco CX consent block to your CMP, configure retention for Deco Live, and disclose Deco CX in your privacy notice with the categories and the US transfer mechanism.
Are there alternatives to Deco CX?
Alternatives include Vercel Commerce, Shopify Hydrogen, Nuxt Commerce, Saleor Storefront, Next.js Commerce, frontastic, and BloomReach Storefront. Some can be deployed entirely on EU edges if European data residency is a constraint.
How do I update my cookie policy for Deco CX?
List the deco_flags, deco_segment, deco_uid, locale and currency cookies with their lifetime and purpose. Explain that Deco CX renders the storefront at the edge and sends events to Deco Live in the United States. Link to the Deco privacy policy.
Mobicred
mobicred is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. mobicred supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, mobicred ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Prime AI
Prime AI is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Prime AI integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Prime AI makes advanced AI accessible to all teams.
Accentuate Custom Fields
Accentuate Custom Fields is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Accentuate Custom Fields supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Accentuate Custom Fields ensures your website delivers a smooth, uninterrupted experience to every visitor and.
Bobonus
Bobonus is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Bobonus provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Bobonus helps deliver the right message to the right audience at the right time.
Ureserv
Ureserv is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Ureserv provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Ureserv helps deliver the right message to the right audience at the right time.
ChannelAdvisor
ChannelAdvisor is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. ChannelAdvisor is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, ChannelAdvisor offers reliable solutions that scale with organizational needs and evolving web standards.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.