> OptinMonster shows targeted popups and lead capture campaigns: how its display rules track visitors, the cookies it stores and the consent it requires. > > Canonical: https://www.flowconsent.com/en/services/marketing/optinmonster Marketing # OptinMonster Marketing · [Official website](https://optinmonster.com) OptinMonster is a conversion optimization service from Awesome Motive that shows targeted popups, slide-ins, countdown timers and gamified wheels to capture leads. Campaigns can be triggered by exit intent, scroll depth, referral source or past visits. To apply these rules, its script stores visitor data in cookies or local storage, so consent is generally needed. [Block OptinMonster until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Marketing - Prior consent Required - Documented cookies 5 - Third-party domains 4 - Servers Operated by OptinMonster (Awesome Motive group) in West Palm Beach, Florida, United States. Campaign configuration, leads and analytics are stored on AWS infrastructure in the United States. No European data residency option is available today. Overview ## What does OptinMonster do? OptinMonster, developed by Awesome Motive in Florida, is one of the most popular conversion optimisation and lead generation tools on the market. Used by over a million WordPress and non WordPress websites, it specialises in popups, exit intent overlays and inline opt in forms designed to maximise newsletter sign ups, free trial conversions and abandoned cart recovery. ## **What OptinMonster does** OptinMonster loads a JavaScript snippet that fetches a campaign JSON from the API and renders the configured popup, slide in, fly in, floating bar, fullscreen overlay or inline form. The targeting engine supports exit intent, scroll depth, time on page, click triggers, page URL, referrer, IP geolocation, cookie based new vs returning visitor and Adblock detection. ## **Data and cookies set** OptinMonster sets first party cookies on the embedding website: om\* (campaign state), omSeen, omClosed, omShown, omWPCookieID and a campaign specific cookie used to enforce display frequency. It collects the visitor IP, geolocation, user agent, referrer, the lead data submitted (email, name) and analytics events. All data is sent to a.omappapi.com in the United States. ## **GDPR and ePrivacy implications** The om\* cookies are not strictly necessary and therefore require prior consent under Art. 5(3) ePrivacy. IP geolocation is the processing of personal data under Art. 4(1) GDPR and must rely on consent or a documented legitimate interest. The captured lead emails require Art. 6(1)(a) consent for any marketing follow up. The OptinMonster terms position the customer as data controller. ## **Data transfers to the United States** All campaign configuration, visitor events and captured leads are stored on AWS US east infrastructure. Awesome Motive is self certified under the EU US Data Privacy Framework. Without the DPF, transfers must rely on Standard Contractual Clauses combined with supplementary measures and a documented Transfer Impact Assessment. ## **Practical compliance steps** Block the OptinMonster script behind a marketing CMP category. Disable IP geolocation targeting if not strictly necessary. Use a clear opt in checkbox on every email capture form and document the proof of consent. Sign the Awesome Motive DPA. Document OptinMonster as a US sub processor and the EU US DPF transfer mechanism in your records of processing. Compliance ## OptinMonster and the GDPR OptinMonster is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive) for the OptinMonster targeting cookies (om\*), the embedded campaigns and the captured lead data. Performance of a contract may apply once the subscriber has subscribed to a newsletter or a paid offer. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, TDDDG, LSSI CE, CCPA/CPRA, EU US Data Privacy Framework Cookies and trackers ## What OptinMonster sets and contacts - Tracking method JavaScript snippet that loads the OptinMonster API from a.omappapi.com to display popups, fly ins, slide ins, floating bars, full screen overlays and inline opt in forms. Targeting rules use cookies, page URL, referrer, exit intent, scroll depth and the visitor IP for geolocation. - Server location Operated by OptinMonster (Awesome Motive group) in West Palm Beach, Florida, United States. Campaign configuration, leads and analytics are stored on AWS infrastructure in the United States. No European data residency option is available today. - Data transferred outside the EU All visitor leads, IP addresses, targeting events and analytics are stored on AWS servers in the United States. Transfers from the EU rely on the EU US Data Privacy Framework (Awesome Motive is self certified) or on Standard Contractual Clauses with supplementary measures. ### Cookies set (5) | Name | Type | Duration | Purpose | | ---------------------- | ------------ | -------- | -------------------------------------------------------------------------------------------------------- | | om-\ | first\_party | 1 year | Controls the display frequency of a specific OptinMonster campaign for the visitor. | | omSeenCampaign-\ | first\_party | 6 months | Records that the visitor has seen the given OptinMonster campaign. | | omClosedCampaign-\ | first\_party | 6 months | Records that the visitor has closed the given OptinMonster campaign. | | omShownCampaign-\ | first\_party | 6 months | Counter used by OptinMonster to enforce the maximum number of impressions per campaign. | | omWPCookieID | first\_party | 6 months | WordPress specific identifier used by OptinMonster to link a visitor to a WordPress user when logged in. | ### Third-party domains contacted (4) - `optinmonster.com` - `a.omappapi.com` - `app.optinmonster.com` - `awesomemotive.com` Questions ## Frequently asked questions about OptinMonster Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does OptinMonster set? OptinMonster sets first party cookies on the embedding website: om-\ (campaign frequency, up to one year), omSeenCampaign-\, omClosedCampaign-\, omShownCampaign-\ and omWPCookieID. All require prior consent under Art. 5(3) ePrivacy. ### Is consent required to use OptinMonster? Yes. The om\* cookies are not strictly necessary, IP geolocation is personal data, and the captured lead emails are processed for marketing. Prior explicit consent is required under Art. 5(3) ePrivacy and Art. 6(1)(a) GDPR. ### What is the legal basis for processing? Consent (Art. 6(1)(a) GDPR) for cookies, IP geolocation and marketing follow up. Contract (Art. 6(1)(b)) may apply once the subscriber explicitly opts in to a newsletter or paid offer. ### Is data transferred to the United States? Yes. All campaign data, visitor events and leads are stored on AWS US east infrastructure. Awesome Motive is self certified under the EU US Data Privacy Framework. Document the transfer mechanism and a Transfer Impact Assessment in your records of processing. ### Do I need a DPIA for OptinMonster? A DPIA is recommended when OptinMonster is combined with behavioural triggers, used at scale or for sensitive offers (health, financial). Document targeting rules, IP geolocation, US transfer, embedded cookies and retention of leads. ### How do I implement OptinMonster correctly? Block the script behind the marketing CMP category. Disable IP geolocation if not necessary. Use a clear opt in checkbox with a privacy notice on every form. Sign the Awesome Motive DPA. Set a reasonable retention period for leads. Document OptinMonster as a US sub processor. ### Which alternatives to OptinMonster should I consider? EU based: Sleeknote (Denmark), Sales Layer (Spain), Brevo Push (France). US alternatives: ConvertBox, Sumo, Hello Bar, Poptin. Open source: WP Subscribe, Holler Box. Self hosted means data stays in your EU stack. ### How do I update the cookie policy when OptinMonster changes? Subscribe to the Awesome Motive trust centre. When sub processors, certifications or campaign data flows change, update your cookie table, privacy notice and records of processing, and bump the consent banner version. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [Yoast SEO Premium](https://www.flowconsent.com/en/services/marketing/yoast-seo-premium) [Yoast SEO Premium is an advanced SEO tool suite designed to help websites improve their search engine rankings and organic traffic. It provides comprehensive keyword research, site auditing, backlink analysis, and rank tracking. Yoast SEO Premium offers actionable insights and recommendations to optimize on-page content, technical SEO, and link building strategies. With competitive analysis and real-time monitoring, Yoast SEO Premium empowers marketers to make data-driven decisions that boost search visibility.](https://www.flowconsent.com/en/services/marketing/yoast-seo-premium) [Marketing](https://www.flowconsent.com/en/services/marketing/yoast-seo-premium) · ### [Sinch](https://www.flowconsent.com/en/services/marketing/sinch) [Sinch is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Sinch provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Sinch helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/sinch) [Marketing](https://www.flowconsent.com/en/services/marketing/sinch) · ### [Review Doku](https://www.flowconsent.com/en/services/marketing/reviewdoku) [Reviewdoku is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Reviewdoku integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Reviewdoku helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/marketing/reviewdoku) [Preferences](https://www.flowconsent.com/en/services/marketing/reviewdoku) · ### [Textmagic](https://www.flowconsent.com/en/services/marketing/textmagic) [Textmagic is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Textmagic provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Textmagic helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/textmagic) [Marketing](https://www.flowconsent.com/en/services/marketing/textmagic) · ### [Formrun](https://www.flowconsent.com/en/services/marketing/formrun) [Formrun is a form building and data collection platform that helps businesses create professional online forms, surveys, and questionnaires without coding. It offers a drag-and-drop builder, conditional logic, file uploads, and payment collection. Formrun integrates with CRM, email marketing, and productivity tools to automate workflows triggered by submissions. With responsive designs and spam protection, Formrun helps capture leads and collect data securely.](https://www.flowconsent.com/en/services/marketing/formrun) [Marketing](https://www.flowconsent.com/en/services/marketing/formrun) · ### [Klaviyo](https://www.flowconsent.com/en/services/marketing/klaviyo) [Klaviyo is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Klaviyo provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Klaviyo helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/klaviyo) [Marketing](https://www.flowconsent.com/en/services/marketing/klaviyo) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)