FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Marketing

Gist

AnalyticsOfficial website

Gist is an all in one US marketing and support suite with live chat, email marketing, forms, event tracking and cross session behavioral visitor tracking.

Block Gist until consentScan my site
Overview

What does Gist do?

What Gist is

Gist, available at getgist.com, is an all in one marketing and support suite from a United States vendor. It combines live chat, email marketing, popups and forms, event tracking and behavioral visitor tracking that identifies and profiles visitors across sessions.

Data and cookies, and how it works

Gist loads a JavaScript widget and sets cookies such as gist_id and other gist prefixed cookies. It assigns each visitor a unique identifier, records page views and events, captures contact and form data, and builds a behavioral profile that persists across visits to power marketing automation.

GDPR and ePrivacy obligations

Because Gist sets non essential identifiers and tracks behaviour across sessions, Article 5(3) of the ePrivacy Directive requires prior consent before these cookies are set. The profiles and contact records are personal data under the GDPR and UK GDPR.

Consent and lawful basis

The lawful basis is consent under Article 6(1)(a) GDPR. Gist tracking and marketing identifiers must not load until the visitor gives explicit consent, and visitors must be able to withdraw consent as easily as they gave it.

Data transfers to the United States

Gist processes data in the United States, so for EEA and UK visitors this is a transfer to a third country. Gist relies on Standard Contractual Clauses together with supplementary measures. Document the transfer and assess the additional risk created by the profiling.

Practical compliance steps

Block all Gist cookies until consent, sign the data processing agreement, review the SCCs and supplementary measures, list the gist cookies in your cookie policy, honour deletion and opt out requests, and set retention limits for profiles and contact data.

Compliance

Gist and the GDPR

Gist is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent under Article 6(1)(a) GDPR and Article 5(3) ePrivacy Directive. Gist combines behavioral tracking, marketing automation and cross session profiling, which require prior consent before any identifier is set.
Risk level
high
Applicable regulations
GDPR, UK GDPR, ePrivacy Directive, Schrems II and SCCs for transfers to the United States.

Impact assessment (DPIA)

A DPIA is strongly recommended because Gist combines behavioral tracking, marketing automation and cross session profiling, and processes data in the United States. Assess the profiling, the identifiers such as gist_id, the volume of contact data, the US transfer under Standard Contractual Clauses and retention across sessions.

Sample text for your banner

We use Gist for chat, marketing and visitor analytics. Gist sets cookies that identify you and track your activity across sessions. These run only with your consent, which you can withdraw at any time.
Cookies and trackers

What Gist sets and contacts

Tracking method
JavaScript widget plus first and third party cookies that power live chat, email marketing, popups and forms, event tracking and behavioral visitor tracking that identifies and profiles visitors across sessions.
Server location
United States. Gist (getgist.com) is a US based vendor with hosting in the United States.
Data transferred outside the EU
Visitor, contact and behavioral data is processed in the United States. For EEA and UK visitors this is a transfer to a third country, so Gist relies on Standard Contractual Clauses and supplementary measures.

Cookies set (4)

NameTypeDurationPurpose
gist_idThird-partyPersistentAssigns a unique visitor identifier used to track and profile the visitor across sessions.
gist_sessionThird-partySessionMaintains the Gist chat and tracking session within a single visit.
gist_visitThird-partyPersistentRecords visit and behavioral data used for event tracking and marketing automation.
gist_contactThird-partyPersistentLinks captured contact details to the visitor profile for marketing follow up.

Third-party domains contacted (5)

  • getgist.com
  • widget.getgist.com
  • app.getgist.com
  • cdn.getgist.com
  • track.getgist.com
Questions

Frequently asked questions about Gist

Can't find your question? Write to us, we answer fast.

What cookies does Gist set?

Gist sets cookies such as gist_id and other gist prefixed cookies. They assign a unique visitor identifier and track page views, events and behaviour across sessions for marketing and analytics.

Is consent required for Gist?

Yes. Gist sets non essential identifiers and tracks behaviour across sessions, so prior consent is required under the ePrivacy Directive and Article 6(1)(a) GDPR before any Gist cookie is set.

What is the legal basis for Gist?

The legal basis is consent under Article 6(1)(a) GDPR, because Gist combines behavioral tracking, profiling and marketing automation that go well beyond what is strictly necessary.

Does Gist transfer data to the United States?

Yes. Gist is US based and processes data in the United States, so for EEA and UK visitors this is a transfer to a third country. Gist relies on Standard Contractual Clauses and supplementary measures.

Is a DPIA needed for Gist?

Yes. A DPIA is strongly recommended because Gist performs cross session profiling and behavioral tracking combined with marketing automation and a US transfer, which is high risk processing.

How do I implement Gist compliantly?

Block all Gist cookies until consent, sign the data processing agreement, review the SCCs and supplementary measures, honour deletion and opt out requests and set retention limits for profiles and contact data.

What are alternatives to Gist?

EU based options such as Landbot keep most processing within the EU and have a lighter tracking footprint. Other suites include HubSpot, Brevo and Intercom. Compare hosting region, profiling and consent controls.

How do I update my cookie policy for Gist?

List the gist cookies including gist_id with their purposes and durations, state that they support chat, marketing and behavioral tracking, name Gist as the provider and disclose the transfer to the United States.

Same category

More services: Marketing

See the whole category

Pushouse

Pushouse is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Pushouse provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Pushouse helps deliver the right message to the right audience at the right time.

Marketing

Formidable Form

Formidable Form is a form building and data collection platform that helps businesses create professional online forms, surveys, and questionnaires without coding. It offers a drag-and-drop builder, conditional logic, file uploads, and payment collection. Formidable Form integrates with CRM, email marketing, and productivity tools to automate workflows triggered by submissions. With responsive designs and spam protection, Formidable Form helps capture leads and collect data securely.

Analytics

Autoketing

Autoketing is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Autoketing enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Autoketing empowers marketing teams to achieve measurable growth.

Marketing

Doctor.com

Doctor.com is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Doctor.com enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Doctor.com empowers marketing teams to achieve measurable growth.

Marketing

LaunchNotes

LaunchNotes is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. LaunchNotes enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, LaunchNotes empowers marketing teams to achieve measurable growth.

Marketing

SendGrid

SendGrid is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. SendGrid provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, SendGrid helps deliver the right message to the right audience at the right time.

Marketing

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site