Exitshop
How Exitshop handles cookies and personal data, and what European websites must do to use it in a GDPR and ePrivacy compliant way.
What does Exitshop do?
What Exitshop is
Exitshop is a marketing popup and conversion optimisation tool. It is an exit intent popup and conversion tool that shows targeted offers when a visitor is about to leave a page. When it runs on a website it operates as a third party processor whose scripts, cookies and network requests are loaded into the browsers of your European visitors.
Data and cookies Exitshop collects
In a typical deployment Exitshop processes behavioural and exit intent signals, device identifiers, email addresses captured in forms and conversion analytics. Most of this information qualifies as personal data under the GDPR because it can be linked to an identifiable person, directly or through online identifiers stored on the device.
GDPR and ePrivacy implications
Any storage of or access to information on a visitor device is governed by Article 5(3) of the ePrivacy Directive, transposed into national law across the EU. The GDPR then governs the subsequent processing, so Exitshop must have a valid legal basis, a clear retention period and transparent information for the data subject.
Consent requirements
Because Exitshop sets cookies or identifiers that are not strictly necessary to deliver a service the visitor explicitly requested, prior, freely given, specific and informed consent is required before it loads. Scripts must stay blocked until the visitor accepts, and refusal must be as easy as acceptance.
International data transfers
Exitshop processes behavioural data on servers in the United States, a third country without an adequacy decision. Transfers of personal data outside the European Economic Area need an appropriate safeguard such as an adequacy decision or Standard Contractual Clauses, together with a transfer impact assessment where required.
Practical compliance steps
List Exitshop in your records of processing and your cookie policy, load it only through a consent management platform, document the consent you collect and review the vendor data processing agreement at least once a year. Test the site with consent refused to make sure no identifier is set before a choice is made.
Exitshop and the GDPR
Exitshop is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) together with Art. 5(3) ePrivacy Directive for non essential cookies
- Risk level
- high
- Applicable regulations
- GDPR; ePrivacy Directive 2002/58/EC; national rules (TTDSG, CNIL guidelines, LSSI)
Impact assessment (DPIA)
Assess the volume and sensitivity of data processed through Exitshop, whether visitors are profiled or tracked across sites, and any transfer outside the EEA. A formal DPIA is advisable where Exitshop enables large scale monitoring or combines data from several sources.
Sample text for your banner
We use Exitshop to power parts of this site. It may store cookies and identifiers on your device and process related data. With your consent we activate Exitshop. You can withdraw your consent at any time from the cookie settings.
What Exitshop sets and contacts
- Tracking method
- Behavioural tracking cookies and marketing scripts
- Server location
- the United States
- Data transferred outside the EU
- Exitshop processes behavioural data on servers in the United States, a third country without an adequacy decision.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| exitshop_vid | marketing | 1 year | Identifies the visitor across sessions for targeting |
| exitshop_shown | functional | 30 days | Records that a popup has already been displayed |
| _ga | analytics | 2 years | Conversion measurement |
Third-party domains contacted (2)
exitshop.comexitshop.net
Frequently asked questions about Exitshop
Can't find your question? Write to us, we answer fast.
What cookies does Exitshop set?
Exitshop typically stores session identifiers and, depending on configuration, analytics or marketing cookies. The exact names and lifetimes appear in the cookie table on this page, and you should scan your own site because deployments differ.
Do I need consent to use Exitshop?
Yes. Exitshop sets cookies or identifiers that are not strictly necessary, so under Article 5(3) ePrivacy you must obtain prior consent before it loads.
What is the legal basis for Exitshop?
The non essential cookies rely on consent under Article 6(1)(a) GDPR combined with Article 5(3) ePrivacy. Strictly necessary processing can rely on contract under Article 6(1)(b) or legitimate interest under Article 6(1)(f).
Does Exitshop transfer data to the United States or other third countries?
Exitshop processes behavioural data on servers in the United States, a third country without an adequacy decision. Any such transfer needs Standard Contractual Clauses or an adequacy decision and a transfer impact assessment.
Do I need a DPIA for Exitshop?
A DPIA is required when processing is likely to result in a high risk, for example large scale tracking or profiling. Where Exitshop monitors behaviour at scale or combines data sources, run a DPIA before going live.
How do I implement Exitshop in a compliant way?
Load Exitshop only after consent through a consent management platform, keep it blocked by default, document each consent, list it in your records and cookie policy, and sign a data processing agreement with the vendor.
Are there alternatives to Exitshop?
Yes. Depending on your goal you can choose privacy first or cookieless tools, or self hosted options that keep data in the EEA. Whichever you pick, the same consent and transparency duties apply.
How do I update my cookie policy for Exitshop?
Add Exitshop to the cookie policy with its purpose, the cookies it sets, their duration and the recipient, note any third country transfer and the safeguard used, and refresh the entry whenever you change configuration or after a new cookie scan.
Qstomizer
Qstomizer is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Qstomizer provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Qstomizer helps deliver the right message to the right audience at the right time.
BLAZE
BLAZE is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. BLAZE integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, BLAZE helps organizations maintain robust websites that meet user expectations and technical requirements.
WooCommerce Multilingual
WooCommerce Multilingual is a website translation and localization platform that helps businesses reach global audiences by delivering content in multiple languages. It provides automated translation, human editing workflows, and seamless CMS integration. WooCommerce Multilingual supports dynamic content translation, multilingual SEO optimization, and locale-specific formatting. With language detection and visitor routing, WooCommerce Multilingual ensures every user receives content in their preferred language.
Tossdown
Tossdown is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Tossdown integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Tossdown helps organizations maintain robust websites that meet user expectations and technical requirements.
Shopmaker
Shopmaker is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Shopmaker supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Shopmaker ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
OrderMyGear
OrderMyGear is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. OrderMyGear integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, OrderMyGear helps organizations maintain robust websites that meet user expectations and technical requirements.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.