> Squarespace Commerce sets analytics cookies and is hosted in the US. How to run a Squarespace store under the GDPR with consent and a data processing agreement.
>
> Canonical: https://www.flowconsent.com/en/services/ecommerce/squarespace-commerce

E-commerce

# Squarespace Commerce

Unclassified · [Official website](https://www.squarespace.com/ecommerce-website)

Squarespace Commerce is the online store feature of the United States based Squarespace platform, setting functional and analytics cookies and processing shopper and order data.

[Block Squarespace Commerce until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [E-commerce](https://www.flowconsent.com/en/services/ecommerce)

- Consent

  Unclassified

- Prior consent

  Required

- Documented cookies

  3

- Third-party domains

  3

- Servers

  United States (Squarespace, Inc.)

Overview

## What does Squarespace Commerce do?

## **What it is**

Squarespace Commerce is the online store and checkout functionality of Squarespace, a fully hosted website and commerce platform based in the United States. It lets businesses sell products, subscriptions and services with built in templates, payments and analytics.

## **Cookies and data it collects**

A Squarespace store sets strictly necessary cookies for sessions, carts and security, and analytics cookies through Squarespace Analytics that measure visits and behaviour. It processes the visitor IP address, browsing and cart activity, and customer and order details at checkout. The analytics and any marketing cookies are non essential.

## **GDPR and ePrivacy implications**

Session, cart and security cookies are strictly necessary and exempt, while analytics and marketing cookies require consent under Article 5(3) of the ePrivacy Directive. You are the controller and Squarespace acts as your processor, so a data processing agreement is needed.

## **Consent requirements**

Use the Squarespace cookie banner or a connected consent tool in opt in mode so analytics and marketing cookies load only after acceptance. Strictly necessary cookies can load immediately, and refusal must be as easy as acceptance.

## **Data transfers**

Squarespace is based in the United States, so personal data is transferred there. Confirm that Squarespace relies on the EU US Data Privacy Framework or Standard Contractual Clauses and sign its data processing terms before serving European customers.

## **Practical compliance steps**

Turn on the Squarespace cookie banner in opt in mode, verify non essential cookies are blocked beforehand, sign the data processing agreement and document the cookies, the US transfer and the order data you collect. Disable analytics features you do not need.

Compliance

## Squarespace Commerce and the GDPR

Squarespace Commerce is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Consent under Article 6(1)(a) GDPR for analytics and marketing cookies; contract for the store and order processing

- Risk level

  medium

- Applicable regulations

  GDPR, ePrivacy Directive

### Impact assessment (DPIA)

A basic Squarespace store rarely needs a DPIA, but consider one for large scale customer profiling or extensive marketing. Assess the analytics cookies, the order data and the United States transfer.

### Sample text for your banner

> Our store runs on Squarespace and uses analytics cookies to measure visits. These load only if you accept. Cart and security cookies are strictly necessary.

Cookies and trackers

## What Squarespace Commerce sets and contacts

- Tracking method

  Hosted e commerce platform with functional and analytics cookies

- Server location

  United States (Squarespace, Inc.)

- Data transferred outside the EU

  Squarespace, Inc. is based in the United States, so store and visitor data are processed there. Transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses.

### Cookies set (3)

| Name    | Type               | Duration | Purpose                                                                                    |
| ------- | ------------------ | -------- | ------------------------------------------------------------------------------------------ |
| crumb   | Strictly necessary | Session  | Security token that prevents cross site request forgery on the Squarespace store.          |
| ss\_cid | Analytics          | 2 years  | Assigns a unique identifier used by Squarespace Analytics to recognise returning visitors. |
| ss\_cvr | Analytics          | 2 years  | Stores a visitor record used by Squarespace Analytics to measure behaviour over time.      |

### Third-party domains contacted (3)

- `squarespace.com`
- `squarespace-cdn.com`
- `sqsp.net`

Questions

## Frequently asked questions about Squarespace Commerce

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Does Squarespace Commerce set cookies?

Yes, it sets strictly necessary cookies for sessions, carts and security, and analytics cookies through Squarespace Analytics. The analytics and any marketing cookies are non essential.

### Do I need consent for a Squarespace store?

You need consent for the analytics and marketing cookies before they are set, but not for the strictly necessary cart, session and security cookies.

### What is the legal basis?

The store and order processing rely on contract, while analytics and marketing cookies require consent under Article 6(1)(a) and the ePrivacy rules.

### Does Squarespace transfer data to the United States?

Yes, Squarespace is based in the United States, so visitor and customer data is transferred there under the EU US Data Privacy Framework or Standard Contractual Clauses.

### Do I need a DPIA?

A basic store rarely needs one, but large scale profiling or extensive marketing may. Assess the analytics cookies, the order data and the US transfer.

### How do I run a Squarespace store compliantly?

Enable the Squarespace cookie banner in opt in mode, confirm non essential cookies are blocked first, sign the data processing agreement and document the cookies and transfers.

### Are there alternatives to Squarespace Commerce?

European e commerce platforms and self hosted stores keep data in the EU. The right choice depends on your catalogue, payments and design needs.

### How do I update my cookie policy for Squarespace?

List the strictly necessary, analytics and any marketing cookies your Squarespace store sets, with purpose and duration, state that non essential cookies load only after consent and disclose the US transfer.

Same category

## More services: E-commerce

[See the whole category](https://www.flowconsent.com/en/services/ecommerce)

### [Pixc](https://www.flowconsent.com/en/services/ecommerce/pixc)

[Pixc is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Pixc is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Pixc offers reliable solutions that scale with organizational needs and evolving web standards.](https://www.flowconsent.com/en/services/ecommerce/pixc)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/pixc)

·

### [Deutsche Post](https://www.flowconsent.com/en/services/ecommerce/deutsche-post)

[Deutsche Post is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Deutsche Post integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Deutsche Post helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/deutsche-post)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/deutsche-post)

·

### [APC](https://www.flowconsent.com/en/services/ecommerce/apc)

[APC is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. APC integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, APC helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/apc)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/apc)

·

### [Droplabs](https://www.flowconsent.com/en/services/ecommerce/droplabs)

[Droplabs is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Droplabs enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Droplabs empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/ecommerce/droplabs)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/droplabs)

·

### [FastSpring](https://www.flowconsent.com/en/services/ecommerce/fastspring)

[FastSpring is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. FastSpring supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, FastSpring ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/fastspring)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/fastspring)

·

### [PriceSpider](https://www.flowconsent.com/en/services/ecommerce/pricespider)

[PriceSpider is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. PriceSpider supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, PriceSpider enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/ecommerce/pricespider)

[Analytics](https://www.flowconsent.com/en/services/ecommerce/pricespider)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)