> How Syndeca shoppable content embeds handle cookies, integrated Google Analytics and US data transfers, and what you need for GDPR and ePrivacy consent. > > Canonical: https://www.flowconsent.com/en/services/ecommerce/syndeca E-commerce # Syndeca Analytics · [Official website](https://www.syndeca.com) Syndeca is a US based shoppable content platform that lets retailers embed digital catalogs, lookbooks, flyers and shoppable images and videos on their website through a simple embed code, with integrated Google Analytics that may set first and third party cookies. [Block Syndeca until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [E-commerce](https://www.flowconsent.com/en/services/ecommerce) - Consent Analytics - Prior consent Required - Documented cookies 5 - Third-party domains 4 - Servers United States Overview ## What does Syndeca do? Syndeca is a US based shoppable content platform that helps retailers turn catalogs, lookbooks, flyers and product imagery into interactive, shoppable experiences embedded directly on their own website. When you add the Syndeca embed code, the platform loads its widget and its integrated Google Analytics, which together observe how visitors browse and interact with the embedded content. This page explains, in plain terms, what data the embed processes, the cookies it can set, and what European operators need to consider under the GDPR and the ePrivacy Directive. ## **What Syndeca is** Syndeca provides a hosted platform for digital catalogs, shoppable lookbooks, weekly ads and circulars, shoppable images and shoppable video. Retailers create content in the platform and publish it to their site with an embed code, so the experience feels native while the content and assets are served from Syndeca infrastructure on a content delivery network. The platform is designed to render across desktop, tablet and mobile devices, and it includes integrated analytics so merchandising and marketing teams can measure how each catalog performs. ## **Data and cookies collected** The embed processes visitor interaction and engagement data, such as which catalog pages, products and hotspots are viewed and clicked, how long visitors stay and which links they follow. Through its integrated Google Analytics, Syndeca can set first and third party cookies, including the Google Analytics \_ga style identifiers used to distinguish visitors and sessions. These cookies, together with device and approximate location signals derived from the connection, allow the platform to attribute engagement and measure catalog performance over time. ## **GDPR and ePrivacy implications** Because Syndeca relies on cookies and analytics that are not strictly necessary to deliver the page, two legal regimes apply. The ePrivacy Directive requires informed, prior consent before such cookies are stored or read on a visitor device, and the GDPR governs the resulting processing of personal data, including the identifiers in those cookies. As the website operator you are typically the controller for this processing, so you remain responsible for transparency, lawful basis and honouring visitor choices, even though Syndeca acts as a processor and Google operates the analytics layer. ## **Consent requirements** The appropriate lawful basis for the analytics and marketing cookies set through the embedded catalog is consent under Article 6(1)(a) of the GDPR, given freely, specifically and on the basis of clear information. In practice this means the Syndeca embed and its Google Analytics should be blocked until the visitor actively accepts, and refusing should be as easy as accepting. A consent management platform that gates the embed script keeps you aligned with both the ePrivacy consent rule and the GDPR record keeping expectations. ## **Data transfers** Syndeca is hosted in the United States and serves its content from US based infrastructure, and the integrated Google Analytics also processes data on US systems. For visitors in the European Union and the wider European Economic Area, this means personal data is transferred to a third country. Such transfers should be covered by an appropriate mechanism, most commonly the EU US Data Privacy Framework where the recipient is certified, or Standard Contractual Clauses supported by a transfer impact assessment and supplementary safeguards. ## **Practical compliance steps** Start by mapping every cookie and data flow the embed creates, then load the Syndeca script only after consent through your consent management platform. Name Syndeca and its analytics in your cookie policy and privacy notice, describe the US transfer and the safeguard you rely on, and keep a processing agreement with the vendor. Set sensible retention limits, test that declining consent truly prevents the cookies, and review the setup whenever Syndeca or Google changes how the integrated analytics behaves. Compliance ## Syndeca and the GDPR Syndeca is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis consent (Art. 6(1)(a) GDPR) for analytics and marketing cookies set through the embedded catalog - Risk level medium - Applicable regulations GDPR, ePrivacy Directive ### Impact assessment (DPIA) Because the Syndeca embed loads integrated Google Analytics and can set first and third party cookies, it processes visitor interaction data and transfers personal data to the United States. A data protection impact assessment is recommended where engagement tracking is extensive or combined with other profiling, and you should document the lawful basis, retention periods and transfer safeguards. Confirm that consent is captured before any non essential cookie or analytics script fires. ### Sample text for your banner > We use Syndeca to display shoppable catalogs and analytics cookies that measure how you interact with this content; these may transfer data to the United States, and they load only with your consent. Cookies and trackers ## What Syndeca sets and contacts - Tracking method Embedded JavaScript widget with integrated analytics - Server location United States - Data transferred outside the EU Syndeca is hosted in the United States and serves embedded content through Amazon CloudFront, and its integrated Google Analytics processes data on US infrastructure. Personal data of EU and EEA visitors is therefore transferred to the United States, with transfers framed by the EU US Data Privacy Framework and, where applicable, Standard Contractual Clauses with supplementary safeguards. ### Cookies set (5) | Name | Type | Duration | Purpose | | ---------------------- | ---------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------- | | \_ga | Third party analytics | 2 years | Google Analytics cookie that distinguishes individual visitors so engagement with the embedded Syndeca catalog can be measured. | | \_gid | Third party analytics | 24 hours | Google Analytics cookie that distinguishes visitors over a short period to measure daily interaction with the embedded content. | | \_ga\_\ | Third party analytics | 2 years | Google Analytics 4 cookie that persists session state and counts visits for the property used by the Syndeca embed. | | \_gat | Third party analytics | 1 minute | Google Analytics cookie used to throttle the request rate and limit data collection on high traffic catalogs. | | syndeca\_session | First party functional | Session | First party cookie set by the Syndeca widget to maintain the state of the shoppable catalog during a visit. | ### Third-party domains contacted (4) - `syndeca.com` - `www.syndeca.com` - `www.google-analytics.com` - `www.googletagmanager.com` Questions ## Frequently asked questions about Syndeca Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Syndeca set on my website? Through its integrated Google Analytics, Syndeca can set first and third party cookies, including the Google Analytics \_ga style identifiers that distinguish visitors and sessions, plus cookies used to measure engagement with the embedded catalog. Because these are not strictly necessary to display the content, they should load only after the visitor has given consent. ### Is consent required before loading the Syndeca embed? Yes. The embed relies on analytics and marketing cookies that are not essential to deliver the page, so under the ePrivacy Directive you must obtain informed, prior consent before the script runs and before any such cookie is stored or read. The embed should stay blocked until the visitor actively accepts. ### What is the legal basis for Syndeca cookies under the GDPR? The appropriate basis is consent under Article 6(1)(a) of the GDPR for the analytics and marketing cookies set through the embedded catalog. Consent must be freely given, specific, informed and as easy to withdraw as to give, and you should keep records that demonstrate it. ### Does Syndeca transfer data to the United States? Yes. Syndeca is hosted in the United States and serves content from US infrastructure, and its integrated Google Analytics also processes data on US systems, so personal data of EU and EEA visitors is transferred to a third country. You should rely on a valid transfer mechanism, typically the EU US Data Privacy Framework where the recipient is certified, or Standard Contractual Clauses with supplementary safeguards. ### Do I need a DPIA for using Syndeca? A data protection impact assessment is recommended where engagement tracking through the embed is extensive or combined with other profiling, since it processes interaction data and transfers it internationally. Even where a full DPIA is not mandatory, documenting the lawful basis, retention periods and transfer safeguards is good practice. ### How do I implement Syndeca compliantly? Map every cookie and data flow the embed creates, then load the Syndeca script only after consent through a consent management platform. Name Syndeca and its analytics in your cookie policy and privacy notice, describe the US transfer and the safeguard you rely on, keep a processing agreement in place and test that declining consent truly prevents the cookies. ### Are there cookieless or EU based alternatives to Syndeca? Syndeca itself does not offer a cookieless mode, since its integrated Google Analytics depends on cookies. If you need to minimise cookies or keep processing within the EU, you can evaluate shoppable content or catalog tools that support EU hosting and privacy friendly, consent independent analytics, and compare their transfer and tracking behaviour against your requirements. ### How should I update my cookie policy for Syndeca? List the Syndeca and Google Analytics cookies with their names, purpose and duration, explain that they require consent, and state that data may be transferred to the United States under the relevant safeguard. Keep the policy aligned with what your consent banner actually controls and review it whenever the embed or its analytics changes. Same category ## More services: E-commerce [See the whole category](https://www.flowconsent.com/en/services/ecommerce) ### [TRIBOX](https://www.flowconsent.com/en/services/ecommerce/tribox-ecommerce) [Tribox Ecommerce offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Tribox Ecommerce integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.](https://www.flowconsent.com/en/services/ecommerce/tribox-ecommerce) [Preferences](https://www.flowconsent.com/en/services/ecommerce/tribox-ecommerce) · ### [CareCart Sales Pop Up](https://www.flowconsent.com/en/services/ecommerce/carecart-sales-pop-up) [CareCart Sales Pop Up is a conversion optimization tool that helps websites create engaging popups, overlays, and on-site messages to capture leads and boost conversions. It features an intuitive visual builder, advanced targeting rules, and A/B testing. CareCart Sales Pop Up supports exit-intent detection, scroll triggers, and time-based displays, ensuring messages appear at the optimal moment. With CRM and email marketing integrations, CareCart Sales Pop Up helps businesses grow subscriber lists and.](https://www.flowconsent.com/en/services/ecommerce/carecart-sales-pop-up) [Preferences](https://www.flowconsent.com/en/services/ecommerce/carecart-sales-pop-up) · ### [Cloudfy](https://www.flowconsent.com/en/services/ecommerce/cloudfy) [Cloudfy is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Cloudfy supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Cloudfy ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/cloudfy) [Preferences](https://www.flowconsent.com/en/services/ecommerce/cloudfy) · ### [Shopware](https://www.flowconsent.com/en/services/ecommerce/shopware) [Shopware is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Shopware supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Shopware ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/shopware) [Preferences](https://www.flowconsent.com/en/services/ecommerce/shopware) · ### [A2Z Events](https://www.flowconsent.com/en/services/ecommerce/a2z-events) [A2Z Events is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. A2Z Events supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, A2Z Events ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/a2z-events) [Preferences](https://www.flowconsent.com/en/services/ecommerce/a2z-events) · ### [MageWorx Search Autocomplete](https://www.flowconsent.com/en/services/ecommerce/mageworx-search-autocomplete) [MageWorx Search Autocomplete is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. MageWorx Search Autocomplete offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, MageWorx Search Autocomplete empowers organizations to optimize strategy and maximize.](https://www.flowconsent.com/en/services/ecommerce/mageworx-search-autocomplete) [E-commerce](https://www.flowconsent.com/en/services/ecommerce/mageworx-search-autocomplete) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)