Picreel
Picreel is a US conversion optimization and exit intent popup tool that detects when a visitor is about to leave and shows targeted offers, email capture forms, and A/B tested messages. It tracks mouse movement and behaviour, sets cookies to control how often popups appear, and collects the details visitors submit, along with IP address. Because it sets non essential cookies and is US operated, it requires prior consent under the GDPR and the ePrivacy Directive and transfers data to a third country; it also has a history that underlines the need to vet third party scripts.
What does Picreel do?
What Picreel is
Picreel is a conversion rate optimization tool operated from the United States that displays exit intent popups, overlays, and email capture forms based on visitor behaviour. It watches signals such as mouse movement and time on page to predict when someone is about to leave, then shows a targeted message. Adding Picreel loads a third party script that runs on your pages.
What data and cookies Picreel collects
Picreel processes behavioural signals such as mouse movement, scrolling, and time on page, the details visitors submit in popups (often email addresses and names), and technical data like IP address, device, and browser. It sets cookies to remember which popups a visitor has seen and to cap how often they appear. The submitted contact details are personal data you control.
GDPR and ePrivacy implications
The popup and behavioural scripts set non essential cookies and process behaviour, so the ePrivacy Directive requires prior consent and the GDPR requires a lawful basis and transparency. Because Picreel injects a third party script into your pages, you should also assess supply chain security: a compromised marketing script can be used to steal data, as past incidents in this category have shown. A data processing agreement is required.
When consent is required
Obtain prior, opt in consent before Picreel sets cookies and starts tracking behaviour, and block the script behind your consent banner. Email capture should use clear, separate consent for marketing, not a pre ticked box. Make consent specific and easy to withdraw.
Data transfers outside the EU
Picreel is operated from the United States and processes data there, so its use involves a third country transfer under Chapter V of the GDPR. Transfers rely on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, supported by a transfer impact assessment. Document the behavioural and contact data sent to the US.
Practical compliance steps
To use Picreel compliantly, gate it behind consent, sign a data processing agreement, and complete a transfer impact assessment. Use subresource integrity or other controls to reduce supply chain risk from the third party script, collect only the contact data you need, and set retention limits. List Picreel in your cookie policy and privacy notice and review it regularly.
Picreel and the GDPR
Picreel is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) for cookies, behavioural tracking, and email marketing capture
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive (Cookie Law), CCPA
Impact assessment (DPIA)
Picreel combines behavioural tracking with email capture through a third party script, and the category has a history of supply chain compromise, which raises its risk profile. Key DPIA points: (1) transfer of personal data to Picreel in the United States, requiring SCCs or the Data Privacy Framework and a transfer impact assessment; (2) behavioural tracking of mouse movement and engagement; (3) collection of email addresses and other contact data through popups; (4) supply chain risk from injecting a third party marketing script, which should be mitigated with integrity controls; (5) non essential cookies requiring consent. A DPIA is recommended given the combination of tracking, data capture, and script injection.
Sample text for your banner
We use Picreel to show relevant offers and to invite you to subscribe. With your consent, Picreel sets cookies and tracks behaviour such as mouse movement to decide when to display a message, and it processes any details you submit along with your IP address. This data is processed by Picreel in the United States under appropriate safeguards. You can withdraw your consent at any time via our cookie settings.
What Picreel sets and contacts
- Tracking method
- Third party JavaScript for exit intent popups and email capture, with behavioural tracking and cookies
- Server location
- United States (Picreel)
- Data transferred outside the EU
- Picreel is operated from the United States and processes data there. Transfers rely on Standard Contractual Clauses (Art. 46 GDPR) and, where applicable, the EU US Data Privacy Framework, and should be supported by a transfer impact assessment.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| picreel_shown | Functional | 30 days | Records which campaigns have already been shown to avoid repeating popups too often. |
| picreel_visitor | Analytics | 1 year | Visitor identifier used to track behaviour and measure popup conversions. |
| picreel_ab | Analytics | 6 months | Stores the A/B test variant assigned to the visitor for consistent display. |
Third-party domains contacted (3)
picreel.comcdn.picreel.comapi.picreel.com
Frequently asked questions about Picreel
Can't find your question? Write to us, we answer fast.
What cookies does Picreel set?
Picreel sets cookies that remember which popups a visitor has already seen and cap how often they appear, plus identifiers used to track behaviour and measure conversions. These are non essential and require consent. The submitted email or contact details are stored separately as form data.
Do I need consent to use Picreel?
Yes. Picreel sets non essential cookies and tracks behaviour, so obtain prior, opt in consent before its script runs. Email capture for marketing needs its own clear consent, not a pre ticked box.
What is the legal basis for Picreel?
The cookies and behavioural tracking rely on consent (Art. 6(1)(a)) and the ePrivacy Directive. Sending marketing to captured emails generally requires consent under ePrivacy marketing rules as well.
Does Picreel transfer data to the US?
Yes. Picreel is operated from the United States and processes data there, so its use is a third country transfer. It relies on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework, which you should document in a transfer impact assessment.
Is a DPIA needed for Picreel?
A DPIA is recommended because Picreel combines behavioural tracking, email capture, and a third party script. Assess the US transfer, the behavioural data, the contact data collected, and the supply chain risk of injecting a marketing script.
How do I implement Picreel compliantly?
Block Picreel behind your consent banner, sign a data processing agreement, complete a transfer impact assessment, and apply integrity controls to the third party script. Collect only necessary contact data, set retention limits, and document Picreel in your cookie policy and privacy notice.
Are there alternatives to Picreel?
Yes. EU based or self hosted popup and email capture tools reduce third country transfers and give more control over the script you load. A self hosted popup library or an EU hosted conversion tool can provide similar features with lower privacy and supply chain risk.
How do I update my cookie policy for Picreel?
Add a Picreel entry listing its cookies, their purposes and durations, the behavioural tracking it performs, and the fact that data is processed in the United States. Link to Picreel''s privacy notice and review the entry when its cookies or subprocessors change.
SaaSquatch
SaaSquatch is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. SaaSquatch integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, SaaSquatch helps organizations maintain robust websites that meet user expectations and technical requirements.
ReviewRail
ReviewRail is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ReviewRail supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ReviewRail ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
ThimPress Course Review
ThimPress Course Review is a customer review and reputation management platform that helps businesses collect, manage, and showcase authentic customer feedback. It automates review request workflows, aggregates ratings from multiple sources, and displays social proof. ThimPress Course Review supports rich snippet integration for enhanced search engine visibility, helping build trust, improve local SEO, and increase conversion rates through verified customer testimonials.
PushEngage
PushEngage is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. PushEngage provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, PushEngage helps deliver the right message to the right audience at the right time.
CustomerSure
CustomerSure is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. CustomerSure supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, CustomerSure enables informed decisions that improve experience and drive results.
Mimiran
Mimiran is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Mimiran enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Mimiran empowers marketing teams to achieve measurable growth.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.