FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

Grappos

PreferencesOfficial website

How Grappos handles cookies and personal data, and what European websites must do to use it in a GDPR and ePrivacy compliant way.

Block Grappos until consentScan my site
Overview

What does Grappos do?

What Grappos is

Grappos is a store and product locator widget. It is a store and product locator widget that beverage brands embed so visitors can find nearby stockists on a map. When it runs on a website it operates as a third party processor whose scripts, cookies and network requests are loaded into the browsers of your European visitors.

Data and cookies Grappos collects

In a typical deployment Grappos processes approximate or precise geolocation, search queries, device data and map interaction events. Most of this information qualifies as personal data under the GDPR because it can be linked to an identifiable person, directly or through online identifiers stored on the device.

GDPR and ePrivacy implications

Any storage of or access to information on a visitor device is governed by Article 5(3) of the ePrivacy Directive, transposed into national law across the EU. The GDPR then governs the subsequent processing, so Grappos must have a valid legal basis, a clear retention period and transparent information for the data subject.

Consent requirements

Because Grappos sets cookies or identifiers that are not strictly necessary to deliver a service the visitor explicitly requested, prior, freely given, specific and informed consent is required before it loads. Scripts must stay blocked until the visitor accepts, and refusal must be as easy as acceptance.

International data transfers

Grappos is hosted on Amazon Web Services in the United States and integrates Mapbox, so geolocation and request data may be processed in a third country. Transfers of personal data outside the European Economic Area need an appropriate safeguard such as an adequacy decision or Standard Contractual Clauses, together with a transfer impact assessment where required.

Practical compliance steps

List Grappos in your records of processing and your cookie policy, load it only through a consent management platform, document the consent you collect and review the vendor data processing agreement at least once a year. Test the site with consent refused to make sure no identifier is set before a choice is made.

Compliance

Grappos and the GDPR

Grappos is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR) together with Art. 5(3) ePrivacy Directive for non essential cookies
Risk level
medium
Applicable regulations
GDPR; ePrivacy Directive 2002/58/EC; national rules (TTDSG, CNIL guidelines, LSSI)

Impact assessment (DPIA)

Assess the volume and sensitivity of data processed through Grappos, whether visitors are profiled or tracked across sites, and any transfer outside the EEA. A formal DPIA is advisable where Grappos enables large scale monitoring or combines data from several sources.

Sample text for your banner

We use Grappos to power parts of this site. It may store cookies and identifiers on your device and process related data. With your consent we activate Grappos. You can withdraw your consent at any time from the cookie settings.
Cookies and trackers

What Grappos sets and contacts

Tracking method
Widget cookies, geolocation and mapping scripts
Server location
the United States
Data transferred outside the EU
Grappos is hosted on Amazon Web Services in the United States and integrates Mapbox, so geolocation and request data may be processed in a third country.

Cookies set (3)

NameTypeDurationPurpose
grappos_sessionnecessarySessionMaintains the locator session
grappos_locpreferences30 daysStores the last searched location
_gaanalytics2 yearsUsage measurement

Third-party domains contacted (2)

  • grappos.com
  • api.mapbox.com
Questions

Frequently asked questions about Grappos

Can't find your question? Write to us, we answer fast.

What cookies does Grappos set?

Grappos typically stores session identifiers and, depending on configuration, analytics or marketing cookies. The exact names and lifetimes appear in the cookie table on this page, and you should scan your own site because deployments differ.

Do I need consent to use Grappos?

Yes. Grappos sets cookies or identifiers that are not strictly necessary, so under Article 5(3) ePrivacy you must obtain prior consent before it loads.

What is the legal basis for Grappos?

The non essential cookies rely on consent under Article 6(1)(a) GDPR combined with Article 5(3) ePrivacy. Strictly necessary processing can rely on contract under Article 6(1)(b) or legitimate interest under Article 6(1)(f).

Does Grappos transfer data to the United States or other third countries?

Grappos is hosted on Amazon Web Services in the United States and integrates Mapbox, so geolocation and request data may be processed in a third country. Any such transfer needs Standard Contractual Clauses or an adequacy decision and a transfer impact assessment.

Do I need a DPIA for Grappos?

A DPIA is required when processing is likely to result in a high risk, for example large scale tracking or profiling. Where Grappos monitors behaviour at scale or combines data sources, run a DPIA before going live.

How do I implement Grappos in a compliant way?

Load Grappos only after consent through a consent management platform, keep it blocked by default, document each consent, list it in your records and cookie policy, and sign a data processing agreement with the vendor.

Are there alternatives to Grappos?

Yes. Depending on your goal you can choose privacy first or cookieless tools, or self hosted options that keep data in the EEA. Whichever you pick, the same consent and transparency duties apply.

How do I update my cookie policy for Grappos?

Add Grappos to the cookie policy with its purpose, the cookies it sets, their duration and the recipient, note any third country transfer and the safeguard used, and refresh the entry whenever you change configuration or after a new cookie scan.

Same category

More services: E-commerce

See the whole category

Omega Commerce

Omega Commerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Omega Commerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.

Preferences

Recras

Recras is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Recras supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Recras ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Enrollware

Enrollware is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Enrollware integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Enrollware helps organizations maintain robust websites that meet user expectations and technical requirements.

E-commerce

Avada Boost Sales

Avada Boost Sales is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Avada Boost Sales supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Avada Boost Sales remains a leading web development choice.

Preferences

Evolok

Evolok is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Evolok enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Evolok empowers marketing teams to achieve measurable growth.

Marketing

Powergap

Powergap is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Powergap supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Powergap ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site