Qubit
Qubit is an ecommerce personalization and experimentation platform, now part of Coveo. It tracks visitor behaviour to build profiles, run A/B tests and deliver tailored content and product experiences. Because it relies on behavioural profiling and non essential cookies, it requires consent under GDPR and the ePrivacy rules.
What does Qubit do?
What Qubit is
Qubit is an ecommerce personalization and experimentation platform, now part of Coveo. It helps online businesses tailor the customer experience by tracking how visitors behave, building visitor profiles, running A/B tests and segmentation, and serving personalized content and product experiences. Its core function is behavioural profiling and real time targeting rather than simple reporting.
Data and cookies collected
Qubit installs a JavaScript tag that sets cookies and persistent identifiers to recognise visitors across sessions. It captures page views, clicks, product interactions, search behaviour and which experiment variant a user was shown. This behavioural data is linked to a visitor profile, and because it is tied to persistent identifiers it constitutes personal data under the GDPR.
GDPR and ePrivacy implications
The cookies and identifiers used by Qubit are not strictly necessary, so Article 5(3) of the ePrivacy Directive requires consent before they are stored or read. The profiling and experimentation also need a lawful basis under the GDPR, and for personalization the appropriate basis is the consent of the individual under Article 6(1)(a). Visitors must be told clearly that their behaviour is used for personalization and testing.
Consent and data transfers
Consent must be freely given, specific, informed and unambiguous, and Qubit should only load after the visitor accepts personalization cookies. Qubit runs on global cloud infrastructure, so data may be transferred to the United States and other third countries. These transfers require safeguards such as Standard Contractual Clauses or the EU US Data Privacy Framework, supported by a transfer risk assessment.
Practical compliance steps
Block the Qubit tag until consent is captured through a consent management platform, list its cookies in your cookie policy, and offer a simple way to withdraw consent. Sign a data processing agreement, verify the processing locations and transfer safeguards, and assess whether a Data Protection Impact Assessment is required given the scale of profiling and experimentation. Keep consent records and audit the tag regularly.
Qubit and the GDPR
Qubit is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent under Article 6(1)(a) GDPR combined with Article 5(3) ePrivacy Directive for non essential cookies and for personalization and experimentation profiling.
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive (Cookie Law), national ePrivacy implementations
Impact assessment (DPIA)
Qubit carries out systematic behavioural profiling and experimentation across website visitors to personalize experiences. A Data Protection Impact Assessment is recommended where profiling is extensive or combined with other data. Assess the scale of tracking, the use of persistent identifiers, transfers to third countries and the effect of experimentation on individuals.
Sample text for your banner
We use Qubit to personalize your experience and run experiments based on your browsing behaviour. This involves cookies and profiling. Do you consent to personalization powered by Qubit?
What Qubit sets and contacts
- Tracking method
- JavaScript tag with cookies and client side plus server side data collection. Captures page views, clicks, product interactions and session behaviour to build visitor profiles, run A/B tests and deliver personalized experiences.
- Server location
- Global cloud infrastructure with processing in the United States and other regions. Qubit is now part of Coveo.
- Data transferred outside the EU
- Data is processed on global cloud infrastructure and may be transferred to the United States and other third countries. Transfers rely on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _qubitTracker | HTTP cookie | Persistent (up to 1 year) | Stores a persistent visitor identifier used to recognise returning visitors and build the personalization profile. |
| qb_segments | HTTP cookie | Persistent | Stores segmentation and experiment assignment so the user sees consistent personalized experiences and test variants. |
| _qubitSession | HTTP cookie | Session | Maintains session state for behavioural tracking during a single visit. |
Third-party domains contacted (3)
qubit.comstatic.goqubit.comsse.goqubit.com
Frequently asked questions about Qubit
Can't find your question? Write to us, we answer fast.
What cookies does Qubit set?
Qubit sets cookies and persistent identifiers through its JavaScript tag to recognise visitors across sessions. They record page views, clicks, product interactions and the experiment variant shown, feeding a visitor profile used for personalization and A/B testing.
Is consent required to use Qubit?
Yes. Qubit relies on non essential cookies and behavioural profiling, so under Article 5(3) ePrivacy and Article 6(1)(a) GDPR you must obtain prior, freely given and informed consent before the tag loads.
What is the legal basis for Qubit?
The appropriate basis is consent under Article 6(1)(a) GDPR, combined with consent for cookie storage under Article 5(3) ePrivacy. Legitimate interest is generally not adequate for this kind of personalization and experimentation.
Does Qubit transfer data to the United States?
Qubit runs on global cloud infrastructure and is part of Coveo, so data may be transferred to the United States and other third countries. Such transfers require Standard Contractual Clauses or the EU US Data Privacy Framework plus a transfer risk assessment.
Do I need a DPIA for Qubit?
A Data Protection Impact Assessment is recommended where profiling is extensive or combined with other datasets. Qubit performs systematic profiling and experimentation, so evaluate scale, identifiers and transfers to decide whether a DPIA is mandatory.
How do I implement Qubit compliantly?
Load Qubit only after consent through a consent management platform, document its cookies in your cookie policy, sign a data processing agreement, verify processing locations and transfer safeguards, and provide an easy way to withdraw consent.
What are the alternatives to Qubit?
Alternatives include other personalization and experimentation platforms, A/B testing tools and first party server side approaches with reduced tracking. Any tool that profiles visitors raises the same consent and transfer questions, so check data location and minimisation.
How should I update my cookie policy for Qubit?
List the Qubit cookies and identifiers, describe their personalization and experimentation purpose, state their duration, name Qubit or Coveo as a processor, and disclose transfers outside the EEA together with the safeguards used.
KobiMaster
KobiMaster is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. KobiMaster integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, KobiMaster helps organizations maintain robust websites that meet user expectations and technical requirements.
Barion
Barion is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Barion integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Barion helps organizations maintain robust websites that meet user expectations and technical requirements.
Tiendy
Tiendy is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Tiendy integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Tiendy helps organizations maintain robust websites that meet user expectations and technical requirements.
ROLLER
Roller is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Roller enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Roller empowers marketing teams to achieve measurable growth.
Medusa
Medusajs is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Medusajs integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Medusajs helps organizations maintain robust websites that meet user expectations and technical requirements.
Searchanise
Searchanise is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Searchanise offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Searchanise empowers organizations to optimize strategy and maximize return on investment.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.