Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Product reviews and social proof app for ecommerce on Shopify that loads scripts, sets cookies and collects review and behavioural data, with data sent to the US and Canada.
Fera, also known as Fera.ai, is a product reviews and social proof app for ecommerce stores, widely used on Shopify. It collects, manages and displays customer reviews, photos and videos and shows social proof to encourage purchases.
Fera loads scripts on the storefront that render review widgets, generate a session token for each shopper and capture behavioural signals used for social proof and conversion analytics.
Fera sets cookies and uses local storage to generate a secure session token, recognise returning shoppers and store widget state. It collects review content, photos and videos, and behavioural data such as pages viewed and interactions.
Because the session token links activity and reviews to an identifiable shopper, and because behavioural data is collected, this is personal data under the GDPR. Some tracking is delivered through third party context, which raises the sensitivity.
Fera reads and writes information on the shopper's device, so the ePrivacy Directive applies and consent is generally required before the non essential cookies are set.
Under the GDPR the store is the controller and Fera acts as a processor. The key issue is the transfer of personal data to the United States and Canada, which requires an appropriate transfer mechanism and a transfer risk assessment.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
The tracking and social proof cookies set by Fera are not strictly necessary, so prior consent through a compliant consent banner is required before the scripts that set them load.
Consent should also inform the shopper about the international transfer of their data. The widgets that involve tracking should stay blocked until the shopper accepts, while purely functional review display may be handled separately.
Fera processes data on infrastructure in the United States and Canada, so personal data of European shoppers is transferred outside the European Union.
Canada benefits from an adequacy decision for commercial data, while transfers to the United States require a valid mechanism such as the EU US Data Privacy Framework or standard contractual clauses, supported by a transfer risk assessment.
Add Fera to your records of processing, sign the data processing agreement, confirm the transfer mechanism for the United States and gate the tracking scripts behind consent in your consent management platform.
Inform shoppers about the transfer in your privacy notice, list the cookies and their durations in your cookie policy, minimise the behavioural data collected and set a proportionate retention period for reviews and tracking data.
Websites using Fera must obtain user consent under GDPR regulations.
DPIA considerations
Fera collects review and behavioural data and transfers it to the US and Canada, so a DPIA is strongly advised. Assess the international transfer, the behavioural tracking used for social proof, the linkage of reviews to shoppers, and the retention of personal data, then document mitigations such as transfer safeguards, consent gating and data minimisation.
Sample consent text
We use Fera to collect and display product reviews and social proof. With your consent, Fera sets cookies and processes data, including transfers to the United States and Canada, to link your reviews to your session and show relevant social proof. You can accept or decline these cookies at any time.
Third-party domains contacted
fera.aiapp.fera.aicdn.fera.aireviews.fera.aiCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| fera_session | First party | Session | Generates a secure session token to link a review to the current shopper |
| fera_visitor | First party | 12 months | Recognises the returning shopper to display tailored reviews and social proof |
| fera_widget | First party | 6 months | Stores widget preferences and display state for review components |
| fera_track | Third party | 12 months | Records behavioural data used for social proof and conversion analytics |
| fera_cart | First party | 30 days | Associates review prompts with recent purchase activity |
Fera uses cookies for user preferences — inform visitors with a consent banner.
Fera sets cookies and uses local storage for a secure session token, a returning visitor identifier, widget state and behavioural tracking for social proof. The session token links a review to the current shopper. Exact names and durations depend on the configuration, so confirm them in your store.
Yes. The tracking and social proof cookies are not strictly necessary, so the ePrivacy Directive requires prior consent before the scripts that set them load. Because Fera also transfers data abroad, the consent flow and privacy notice should make that transfer clear.
The storing and reading of cookies relies on consent under the ePrivacy Directive. The behavioural processing for social proof generally relies on consent, and the international transfer requires a valid transfer mechanism in addition to the lawful basis. Document both in your records.
Yes. Fera processes data on infrastructure in the United States and Canada, so European shopper data is transferred outside the EU. Canada has an adequacy decision for commercial data, while US transfers need a mechanism such as the Data Privacy Framework or standard contractual clauses.
A DPIA is strongly advised because Fera combines behavioural tracking with an international transfer to the United States and Canada. Assess the transfer, the profiling for social proof and the retention of personal data, then document safeguards such as transfer mechanisms and consent gating.
Sign the data processing agreement, confirm the US transfer mechanism, and gate the tracking scripts behind consent in your consent management platform. Inform shoppers about the transfer, list the cookies in your policy, minimise behavioural data and set a proportionate retention period.
Alternatives include European or EU hosted reviews and social proof apps that keep data within the European Economic Area, which removes the international transfer concern. The right choice depends on your platform and how much behavioural tracking you need.
List each Fera cookie with its purpose and duration, state that it is used for reviews and social proof, note that data is transferred to the United States and Canada, and explain that tracking cookies load only after consent. Review the policy when the configuration changes.