InSales
InSales is a hosted e-commerce SaaS platform popular in Russia and the CIS that lets businesses build online stores and sync sales across marketplaces. When used for a storefront it sets first party session and cart cookies and offers built in analytics. Because it is hosted in the Russian Federation, data location and third country transfer questions are central for European operators.
What does InSales do?
What InSales is
InSales is a hosted software as a service e-commerce platform widely used in Russia and the CIS region. It lets merchants build and run online stores, manage inventory and customer relationships and synchronise sales across large marketplaces. As a SaaS product the store front end, the customer data and the order processing run on infrastructure operated by the vendor.
Data and cookies it processes
In a standard deployment the storefront sets first party cookies to hold the session, remember the cart and keep account holders signed in. The platform processes customer contact details, delivery and billing addresses and order history, and its built in analytics may set additional measurement cookies. Marketing integrations can introduce further non essential cookies.
GDPR and ePrivacy implications
If a European business uses InSales to serve EEA visitors, the GDPR applies and the merchant is the controller. Strictly necessary cookies do not need consent under Article 5(3) of the ePrivacy Directive, but analytics and marketing cookies do. The most significant issue is data location, since the platform is hosted in the Russian Federation rather than the EEA.
Consent requirements
Operating the store and fulfilling orders rests on the performance of a contract and needs no consent. Prior, informed and freely given consent must be collected before any analytics or marketing cookies load, and visitors must be able to withdraw it as easily as they gave it. A consent banner should block non essential tracking until the user agrees.
Data transfers outside the EEA
Because hosting is in the Russian Federation, a country without a European Commission adequacy decision, using InSales for EEA customers means transferring personal data to a third country. This requires Standard Contractual Clauses, a documented transfer impact assessment and supplementary measures, with particular attention to the risk of government access and the practical enforceability of data subject rights.
Practical compliance steps
Confirm where data is stored, sign a data processing agreement and Standard Contractual Clauses, complete a transfer impact assessment, classify and gate cookies through a consent platform and document everything in your records of processing. Given the elevated transfer risk, weigh whether an EEA hosted alternative is more appropriate for European customers.
InSales and the GDPR
InSales is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Contract for processing orders and operating the store (Article 6(1)(b) GDPR); consent for analytics and marketing cookies (Article 6(1)(a) GDPR and Article 5(3) ePrivacy Directive); legitimate interest for security (Article 6(1)(f) GDPR)
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
A DPIA is strongly recommended because hosting in the Russian Federation is a transfer to a third country with no adequacy decision and a heightened risk profile. Assess the data categories processed, the transfer mechanism and its effectiveness, the risk of government access and whether an EEA hosted alternative would better protect data subjects.
Sample text for your banner
We use essential cookies to run our online store and process your orders. With your consent we also use analytics and marketing cookies. Please note that our store platform is hosted outside the European Economic Area. You can accept, reject or manage cookies at any time.
What InSales sets and contacts
- Tracking method
- Hosted SaaS e-commerce platform with first party storefront and session cookies, built in analytics and marketplace integrations
- Server location
- Russian Federation
- Data transferred outside the EU
- InSales is a Russian hosted SaaS platform, so personal data of European visitors and customers is typically processed on infrastructure located in the Russian Federation, a country outside the EEA without a European Commission adequacy decision. Transfers therefore require Standard Contractual Clauses and a documented transfer impact assessment, and the heightened risk of government access should be assessed carefully.
Cookies set (4)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| insales_session | Strictly necessary | Session | Maintains the storefront session and keeps the visitor signed in to their account |
| cart_id | Strictly necessary | Up to 30 days | Holds the contents of the shopping cart across page views |
| csrf_token | Strictly necessary | Session | Protects checkout and account forms against cross site request forgery |
| insales_visit | Analytics | Up to 1 year | Built in store analytics measuring visits and conversions, set only after consent |
Third-party domains contacted (2)
insales.rustatic.insales.ru
Frequently asked questions about InSales
Can't find your question? Write to us, we answer fast.
What cookies does InSales set?
In a standard storefront it sets first party strictly necessary cookies for the session, the cart and form security. Its built in analytics and any marketing integrations may add non essential cookies, which should load only after the visitor consents.
Is consent required to use InSales?
Strictly necessary cookies for running the store need no consent. Consent is required before loading the built in analytics or any marketing cookies, and the privacy notice should also flag the non EEA hosting.
What is the legal basis for the processing?
Operating the store and fulfilling orders relies on performance of a contract, security relies on legitimate interest, and analytics and marketing rely on consent under the GDPR and ePrivacy Directive.
Does it transfer data outside the EEA?
Yes. InSales is hosted in the Russian Federation, which has no EU adequacy decision, so serving EEA customers means a third country transfer requiring Standard Contractual Clauses and a transfer impact assessment.
Is a DPIA needed?
A DPIA is strongly recommended because the hosting is in a third country without adequacy and carries a heightened risk of government access and limited enforceability of rights.
How do I implement it compliantly?
Confirm the data location, sign a data processing agreement and Standard Contractual Clauses, complete a transfer impact assessment, gate non essential cookies behind a consent banner and update your records of processing and privacy notice.
What are the alternatives?
EEA hosted e-commerce platforms and self hosted store software keep data within Europe and avoid the third country transfer issues that arise with Russian hosting.
How do I update my cookie policy?
List each InSales cookie with its purpose and duration, separate necessary from optional cookies, clearly state that the store is hosted outside the EEA and keep the notice consistent with your consent banner.
Shopserve
Estore Shopserve is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Estore Shopserve supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Estore Shopserve ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Constructor
Constructor is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Constructor integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Constructor helps organizations maintain robust websites that meet user expectations and technical requirements.
Talex
Talex is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Talex supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Talex ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Plytix
Plytix is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Plytix supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Plytix ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Piano
Piano is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Piano provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Piano helps deliver the right message to the right audience at the right time.
%22%2F%3E%0A%3Cdefs%3E%0A%3ClinearGradient%20id%3D%22paint0_linear_14%3A300%22%20x1%3D%227.08293%22%20y1%3D%2273.3505%22%20x2%3D%22214.166%22%20y2%3D%2273.3505%22%20gradientUnits%3D%22userSpaceOnUse%22%3E%0A%3Cstop%20stop-color%3D%22%23F3A79F%22%2F%3E%0A%3Cstop%20offset%3D%221%22%20stop-color%3D%22%23E2001A%22%2F%3E%0A%3C%2FlinearGradient%3E%0A%3C%2Fdefs%3E%0A%3C%2Fsvg%3E)
France Express
France Express is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. France Express supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, France Express ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.