Marketing

Olapic

Olapic is a United States visual user generated content and shoppable content platform, owned by Social Native. It collects user submitted images, engagement signals, and analytics to power galleries on brand websites. Because it sets cookies and analytics identifiers, it requires consent and careful documentation under GDPR and ePrivacy.

Overview

What does Olapic do?

What Olapic is

Olapic is a visual user generated content and shoppable content platform owned by Social Native. Brands use it to gather customer photos and videos and display them in galleries that can link directly to products. It runs on brand websites through an embedded widget that loads content and measures how visitors interact with it.

Data and cookies involved

Olapic collects user submitted images and the engagement they generate, along with analytics about how galleries are viewed and clicked. To do this it sets a visitor or session cookie, an analytics cookie, and an engagement tracking cookie. It also processes the content and rights information of the people who submit media.

GDPR and ePrivacy considerations

Because Olapic stores cookies and analytics identifiers in the browser, the ePrivacy rule on terminal storage applies and these cookies require prior consent. Under the GDPR, the brand is usually the controller and Olapic acts as a processor for the gallery functionality. User generated images can also contain personal data of the people shown, so rights and permissions matter.

Consent and configuration

A consent banner should block the Olapic analytics and engagement cookies until the visitor opts in, while strictly necessary functionality can be kept minimal. When collecting user generated content, obtain clear permission to reuse images and respect the rights of any identifiable people. Honour later withdrawal of consent for both cookies and content reuse.

International data transfers

Olapic processes data in the United States, so transfers from the EEA rely on Standard Contractual Clauses with supplementary measures where needed. Brands should confirm the transfer mechanism in their data processing agreement and record it in their documentation. Images that show identifiable people are personal data and fall within the same transfer safeguards.

Practical compliance steps

Sign a data processing agreement, confirm United States hosting and the transfer mechanism, and deploy a consent banner that gates the Olapic cookies. Document each cookie with its purpose and duration in your cookie policy. Keep clear records of content permissions and provide a way for people to request removal of their images.

Compliance

Olapic and the GDPR

Olapic is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (GDPR Art. 6(1)(a) and ePrivacy Art. 5(3))
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive

Impact assessment (DPIA)

A data protection impact assessment is worth considering because Olapic processes user generated images that can identify people and tracks engagement through analytics cookies. Key points to assess are (1) the categories of data collected, including submitted images, engagement signals, and analytics identifiers; (2) the rights and permissions obtained from people who submit or appear in content; (3) the lawful basis, which is consent for the cookies and for reuse of user content; (4) the transfer of data to the United States and the adequacy of Standard Contractual Clauses with supplementary measures; and (5) retention, access controls, and a clear process for removing images on request.

Sample text for your banner

We use cookies to show community photos and measure how you interact with our galleries. They load only if you accept. You can change your choice at any time.
Cookies and trackers

What Olapic sets and contacts

Tracking method
Cookies and analytics identifiers for content engagement
Server location
United States
Data transferred outside the EU
Data is processed in the United States under Standard Contractual Clauses.

Cookies set (3)

NameTypeDurationPurpose
olapic_visitorFunctionalSessionIdentifies the visitor session so galleries load and behave consistently during a visit.
olapic_analyticsAnalytics1 yearMeasures how galleries are viewed to help improve content presentation and performance.
olapic_engagementAnalytics1 yearTracks clicks and interactions with user generated content to report engagement.

Third-party domains contacted (3)

  • olapic.com
  • photorank.me
  • content.photorank.me
Questions

Frequently asked questions about Olapic

Can't find your question? Write to us, we answer fast.

What cookies does Olapic set?

Olapic typically sets a visitor or session cookie, an analytics cookie, and an engagement tracking cookie on the pages where its galleries appear. These measure how visitors view and interact with user generated content. The analytics and engagement cookies are the ones that require consent.

Is consent required for Olapic?

Yes, consent is required before the Olapic analytics and engagement cookies load, since they are not strictly necessary. When you also collect and reuse user generated images, you need permission for that reuse separately. Both the cookies and the content reuse should be gated by clear opt in.

What is the legal basis for Olapic?

The legal basis is consent under GDPR Art. 6(1)(a) and ePrivacy Art. 5(3) for the cookies, and consent or a clear permission for reusing user submitted images. The brand is normally the controller and Olapic acts as a processor for the gallery service. Image rights from the people shown should be secured at the point of collection.

Does Olapic transfer data to the United States?

Yes, Olapic processes data in the United States, so transfers from the EEA rely on Standard Contractual Clauses with supplementary measures where appropriate. This includes both analytics data and user generated images that show identifiable people. Confirm the transfer mechanism in your data processing agreement and record it.

Is a DPIA needed for Olapic?

A DPIA is worth considering because Olapic processes user generated images that can identify people and tracks engagement with analytics cookies. The assessment should cover image rights, lawful basis, retention, and the transfer of data to the United States. It should also confirm a clear process for removing images on request.

How do we implement Olapic compliantly?

Sign a data processing agreement, confirm United States hosting and the transfer mechanism, and gate the Olapic cookies behind a consent banner. Secure clear permissions when collecting user content and respect the rights of identifiable people. Document each cookie in your policy and provide an easy route to request image removal.

Are there alternatives to Olapic?

Alternatives include other visual user generated content platforms such as Bazaarvoice, Yotpo, and Stackla. Some offer EU based hosting that can simplify data transfer questions. Whichever you pick, the same duties around cookie consent, image rights, and transfers apply.

How should we update our cookie policy?

List each Olapic cookie with its name, type, duration, and purpose, separating any strictly necessary cookie from analytics and engagement ones. State that analytics and engagement cookies load only after consent and that withdrawal is possible. Mention that user generated images may show identifiable people and explain how removal can be requested.

Aacio

Aacio is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Aacio integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Aacio helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Guest Suite

Guest Suite is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Guest Suite offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Guest Suite empowers organizations to optimize strategy and maximize return on investment.

Analytics

Hello Bar

Hello Bar is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Hello Bar integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Hello Bar helps organizations maintain robust websites that meet user expectations and technical requirements.

Marketing

WP SEO AI

WP SEO AI is an advanced SEO tool suite designed to help websites improve their search engine rankings and organic traffic. It provides comprehensive keyword research, site auditing, backlink analysis, and rank tracking. WP SEO AI offers actionable insights and recommendations to optimize on-page content, technical SEO, and link building strategies. With competitive analysis and real-time monitoring, WP SEO AI empowers marketers to make data-driven decisions that boost search visibility.

Marketing

CASAFARI

Casafari is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Casafari provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Casafari helps deliver the right message to the right audience at the right time.

Marketing

Respondi

Respondi is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Respondi supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Respondi ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.