Fera
Product reviews and social proof app for ecommerce on Shopify that loads scripts, sets cookies and collects review and behavioural data, with data sent to the US and Canada.
What does Fera do?
What Fera is
Fera, also known as Fera.ai, is a product reviews and social proof app for ecommerce stores, widely used on Shopify. It collects, manages and displays customer reviews, photos and videos and shows social proof to encourage purchases.
Fera loads scripts on the storefront that render review widgets, generate a session token for each shopper and capture behavioural signals used for social proof and conversion analytics.
What data and cookies it collects
Fera sets cookies and uses local storage to generate a secure session token, recognise returning shoppers and store widget state. It collects review content, photos and videos, and behavioural data such as pages viewed and interactions.
Because the session token links activity and reviews to an identifiable shopper, and because behavioural data is collected, this is personal data under the GDPR. Some tracking is delivered through third party context, which raises the sensitivity.
GDPR and ePrivacy implications
Fera reads and writes information on the shopper's device, so the ePrivacy Directive applies and consent is generally required before the non essential cookies are set.
Under the GDPR the store is the controller and Fera acts as a processor. The key issue is the transfer of personal data to the United States and Canada, which requires an appropriate transfer mechanism and a transfer risk assessment.
Consent requirements
The tracking and social proof cookies set by Fera are not strictly necessary, so prior consent through a compliant consent banner is required before the scripts that set them load.
Consent should also inform the shopper about the international transfer of their data. The widgets that involve tracking should stay blocked until the shopper accepts, while purely functional review display may be handled separately.
International data transfers
Fera processes data on infrastructure in the United States and Canada, so personal data of European shoppers is transferred outside the European Union.
Canada benefits from an adequacy decision for commercial data, while transfers to the United States require a valid mechanism such as the EU US Data Privacy Framework or standard contractual clauses, supported by a transfer risk assessment.
Practical compliance steps
Add Fera to your records of processing, sign the data processing agreement, confirm the transfer mechanism for the United States and gate the tracking scripts behind consent in your consent management platform.
Inform shoppers about the transfer in your privacy notice, list the cookies and their durations in your cookie policy, minimise the behavioural data collected and set a proportionate retention period for reviews and tracking data.
Fera and the GDPR
Fera is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent under the ePrivacy Directive and the GDPR for tracking cookies and for the international transfer of personal data
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
Fera collects review and behavioural data and transfers it to the US and Canada, so a DPIA is strongly advised. Assess the international transfer, the behavioural tracking used for social proof, the linkage of reviews to shoppers, and the retention of personal data, then document mitigations such as transfer safeguards, consent gating and data minimisation.
Sample text for your banner
We use Fera to collect and display product reviews and social proof. With your consent, Fera sets cookies and processes data, including transfers to the United States and Canada, to link your reviews to your session and show relevant social proof. You can accept or decline these cookies at any time.
What Fera sets and contacts
- Tracking method
- JavaScript widget with cookies and local storage for reviews and social proof
- Server location
- United States and Canada
- Data transferred outside the EU
- Fera processes data on infrastructure in the United States and Canada, so personal data of European visitors is transferred outside the European Union and requires an appropriate transfer mechanism.
Cookies set (5)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| fera_session | First party | Session | Generates a secure session token to link a review to the current shopper |
| fera_visitor | First party | 12 months | Recognises the returning shopper to display tailored reviews and social proof |
| fera_widget | First party | 6 months | Stores widget preferences and display state for review components |
| fera_track | Third party | 12 months | Records behavioural data used for social proof and conversion analytics |
| fera_cart | First party | 30 days | Associates review prompts with recent purchase activity |
Third-party domains contacted (4)
fera.aiapp.fera.aicdn.fera.aireviews.fera.ai
Frequently asked questions about Fera
Can't find your question? Write to us, we answer fast.
Which cookies does Fera set?
Fera sets cookies and uses local storage for a secure session token, a returning visitor identifier, widget state and behavioural tracking for social proof. The session token links a review to the current shopper. Exact names and durations depend on the configuration, so confirm them in your store.
Is consent required for Fera?
Yes. The tracking and social proof cookies are not strictly necessary, so the ePrivacy Directive requires prior consent before the scripts that set them load. Because Fera also transfers data abroad, the consent flow and privacy notice should make that transfer clear.
What is the legal basis for processing with Fera?
The storing and reading of cookies relies on consent under the ePrivacy Directive. The behavioural processing for social proof generally relies on consent, and the international transfer requires a valid transfer mechanism in addition to the lawful basis. Document both in your records.
Does Fera transfer data outside the EU, to the US in particular?
Yes. Fera processes data on infrastructure in the United States and Canada, so European shopper data is transferred outside the EU. Canada has an adequacy decision for commercial data, while US transfers need a mechanism such as the Data Privacy Framework or standard contractual clauses.
Is a DPIA needed for Fera?
A DPIA is strongly advised because Fera combines behavioural tracking with an international transfer to the United States and Canada. Assess the transfer, the profiling for social proof and the retention of personal data, then document safeguards such as transfer mechanisms and consent gating.
How do I implement Fera compliantly?
Sign the data processing agreement, confirm the US transfer mechanism, and gate the tracking scripts behind consent in your consent management platform. Inform shoppers about the transfer, list the cookies in your policy, minimise behavioural data and set a proportionate retention period.
What are the alternatives to Fera?
Alternatives include European or EU hosted reviews and social proof apps that keep data within the European Economic Area, which removes the international transfer concern. The right choice depends on your platform and how much behavioural tracking you need.
How do I update the cookie policy for Fera?
List each Fera cookie with its purpose and duration, state that it is used for reviews and social proof, note that data is transferred to the United States and Canada, and explain that tracking cookies load only after consent. Review the policy when the configuration changes.
Practo
Practo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Practo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Practo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
ReturnGO
ReturnGO is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. ReturnGO integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, ReturnGO makes advanced AI accessible to all teams.
Loadify
Loadify is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Loadify supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Loadify remains a leading web development choice.
PuppetVendors
PuppetVendors is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. PuppetVendors integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, PuppetVendors helps organizations maintain robust websites that meet user expectations and technical requirements.
Ecwid
Ecwid is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Ecwid integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Ecwid helps organizations maintain robust websites that meet user expectations and technical requirements.
Corksy
Corksy is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Corksy supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Corksy ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.