Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Jilt is a US based email marketing and abandoned cart recovery tool for e commerce stores. It uses email tracking pixels and cart cookies to detect abandoned baskets, link browsing to a contact and send automated recovery and marketing emails.
Jilt is an email marketing and abandoned cart recovery platform built for e commerce stores on platforms such as WooCommerce, Shopify and Easy Digital Downloads. It captures cart and checkout activity, identifies shoppers who leave without buying, and sends automated recovery emails, welcome series and broadcast campaigns designed to recover lost revenue.
Jilt processes contact details such as name and email address, cart contents, order history and behavioural events. It sets cart and visitor cookies to associate browsing with a contact, and embeds tracking pixels in emails to record opens and clicks. This combination builds a behavioural profile that links a real identity to purchasing intent, which is personal data under the GDPR.
Marketing emails and the cookies and pixels that power tracking fall squarely within the ePrivacy Directive and the GDPR. Sending promotional email generally requires prior opt in consent, and email open and click pixels require consent because they are not strictly necessary. The store is the data controller and Jilt acts as a processor, so a data processing agreement is mandatory.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Collect explicit opt in consent for marketing email at the point of sign up or checkout, with an unticked box and a clear description of what the subscriber will receive. A narrow existing customer soft opt in may be available for similar products where national law allows, but cart recovery aimed at non customers and behavioural pixels still depend on consent, and every email must include a working unsubscribe link.
Jilt is a United States based service, so contact data, cart contents and behavioural events are transferred to and processed in the United States. This is a restricted transfer under the GDPR that needs a valid safeguard, typically reliance on the vendor being certified under the EU US Data Privacy Framework or signing Standard Contractual Clauses, backed by a transfer impact assessment that considers US government access.
Use a consent management platform to capture and log marketing consent, keep proof of opt in, and honour unsubscribe and erasure requests promptly. Sign the data processing agreement, confirm the transfer safeguard in place, disclose Jilt in your privacy and cookie notices, and set retention limits so inactive contacts and old behavioural data are deleted.
Websites using Jilt must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is strongly advisable. Jilt combines identifiable contact data with behavioural cart and email tracking to profile purchasing intent, sends marketing at scale and transfers personal data to the United States. Assess profiling, consent quality, retention and the adequacy of US transfer safeguards.
Sample consent text
I would like to receive marketing emails, including reminders about items left in my cart and special offers. I understand my browsing and email engagement may be tracked for this purpose and that I can unsubscribe at any time.
Third-party domains contacted
jilt.comtry.jilt.comtrack.jilt.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _jilt_cart | functional | 30 days | Links the current basket to a contact so abandoned cart recovery emails can reference the items left behind. |
| _jilt_visitor | marketing | 1 year | Identifies the returning visitor and associates browsing behaviour with a contact profile for targeting. |
| _jilt_session | functional | Session | Maintains session state between the storefront and the Jilt tracking service during a visit. |
| _jilt_track | marketing | 1 year | Records email and on site engagement events used to trigger automated recovery and marketing campaigns. |
Jilt uses cookies for user preferences — inform visitors with a consent banner.
Jilt typically sets cart and visitor cookies that associate a shopper's browsing and abandoned cart with a contact record, plus tracking that links email engagement to the same profile. These are not strictly necessary cookies, so they require consent. Email open and click pixels operate alongside them to record engagement.
Yes. Sending marketing email generally requires prior opt in consent, and the cart and visitor cookies plus email pixels are not strictly necessary, so they also require consent. A narrow existing customer soft opt in may apply to similar products where national law allows, but cart recovery and tracking should be consent based.
The primary lawful basis is consent for marketing email and for the tracking cookies and pixels under the ePrivacy Directive and the GDPR. At most a limited legitimate interest soft opt in may cover follow up to existing customers for similar products where permitted, but behavioural profiling and non customer outreach rely on consent.
Yes. Jilt is a US based service, so contact details, cart contents and behavioural events are processed in the United States. This restricted transfer needs a valid safeguard such as the vendor being EU US Data Privacy Framework certified or signing Standard Contractual Clauses, supported by a transfer impact assessment.
A DPIA is strongly advisable. Jilt combines identifiable contact data with behavioural cart and email tracking to profile purchasing intent, sends marketing at scale and transfers data to the United States, all factors that point toward a high risk assessment being appropriate.
Capture explicit marketing consent with an unticked box at sign up or checkout, log proof of consent in a consent management platform, and include a working unsubscribe link in every email. Sign the data processing agreement, confirm the US transfer safeguard, disclose Jilt in your notices and apply retention limits to inactive contacts.
EU based or self hostable email and cart recovery options include Sendinblue Brevo, Mailjet, Klaviyo with EU hosting where offered, or open source stores combined with self hosted Mautic. The right choice depends on your e commerce platform, hosting location preference and whether you want to avoid US transfers.
List the cart and visitor cookies and email tracking pixels with their purpose and duration, state that consent is the lawful basis, and explain that data is processed in the United States with the safeguard you rely on. Keep the policy aligned with your consent banner and update it whenever Jilt changes its cookies.