Rock Content
Rock Content is a content marketing platform and creative agency network headquartered in Brazil with US operations. It supplies on demand content production, SEO planning, content analytics, interactive content experiences (Ion) and a marketplace of freelance writers. Rock Content installs tracking pixels on customer websites for content performance analytics and lead capture, and transfers data to Brazil and the United States, which requires consent and a documented transfer chain for European deployments.
What does Rock Content do?
What is Rock Content
Rock Content is a content marketing company founded in Brazil and now active in Latin America, the United States and Europe. It provides on demand content production through a marketplace of freelance writers, SEO planning, performance analytics, interactive content via the Ion product (acquired in 2019), and a creator network used by enterprises to scale content marketing.
What data does Rock Content collect
Rock Content collects content engagement signals (article reads, scroll depth, time on page), lead capture form submissions, Ion interactive content responses (quizzes, calculators, assessments), IP addresses, user agents, UTM parameters and behavioural data fed back to CRM and marketing automation tools.
GDPR and ePrivacy implications
Rock Content is a third party processor. Its tracking cookies are not strictly necessary and require prior consent under Art. 5(3) ePrivacy. Behavioural profiling, lead scoring and content recommendations driven by personal data must be based on consent under Art. 6(1)(a) GDPR. Interactive content collecting sensitive information requires explicit consent and may trigger Art. 9 GDPR safeguards.
Consent requirements
Block Rock Content trackers and Ion interactive content scripts in your Consent Management Platform. Only fire the scripts after consent for analytics and marketing has been granted. Provide a clear privacy notice on every interactive experience and limit data collected to what is strictly relevant to the content.
Data transfers outside the EU
Rock Content processes data in Brazil and on AWS regions in the US and São Paulo. Operators must sign Standard Contractual Clauses, document a Transfer Impact Assessment evaluating Brazilian and US legal regimes, and consider supplementary measures such as IP truncation and pseudonymisation of lead identifiers.
Practical compliance steps
Sign the Rock Content DPA and SCCs, document Rock Content in your Article 30 register, integrate a CMP that gates trackers and Ion content, restrict freelance access to only the data they need, define retention rules for content leads and interactive responses, and update your privacy notice to disclose the Brazil and US transfers.
Rock Content and the GDPR
Rock Content is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) is required for tracking cookies, content analytics and behavioural follow up. Performance of a contract (Art. 6(1)(b)) applies to lead nurturing once a customer relationship is established.
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive, TDDDG, LSSI CE, Brazilian LGPD, Schrems II, Standard Contractual Clauses, EU US Data Privacy Framework
Impact assessment (DPIA)
A DPIA is recommended when Rock Content is used at scale for behavioural content scoring, when first party CRM data is uploaded for audience matching, or when interactive content collects sensitive information through quizzes and assessments.
Sample text for your banner
We use Rock Content, a Brazilian content marketing platform, to measure your engagement with our articles, ebooks and interactive content, build content audiences and orchestrate marketing follow up. This involves transferring your personal data outside the European Union.
What Rock Content sets and contacts
- Tracking method
- Client side JavaScript snippet on customer marketing sites, third party tracking cookies for content analytics, lead capture forms, integrations with HubSpot, Marketo, RD Station, Pardot, and a backend that consolidates content performance data and audience signals.
- Server location
- Brazil and United States. Rock Content S.A. is headquartered in Belo Horizonte, Brazil, with US offices in Boston. Cloud infrastructure on AWS regions including sa-east-1 (São Paulo) and us-east-1 (Virginia).
- Data transferred outside the EU
- Personal data is transferred to Brazil and to the United States via AWS. Brazil does not yet benefit from an EU adequacy decision. Transfers rely on Standard Contractual Clauses and require a Transfer Impact Assessment, supplemented by the EU US Data Privacy Framework for the US leg.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| rc_uid | Marketing | 1 year | Unique Rock Content visitor identifier used to link content engagement to leads. |
| rc_session | Analytics | Session | Tracks the current content session: pages viewed, scroll depth, time spent. |
| rc_ion | Marketing | 6 months | Stores the interactive content state and quiz responses for personalised follow up. |
Third-party domains contacted (3)
rockcontent.comion.rockcontent.comcdn.rockcontent.com
Frequently asked questions about Rock Content
Can't find your question? Write to us, we answer fast.
Which cookies does Rock Content set?
Rock Content sets a marketing visitor identifier used for lead attribution, an analytics session cookie for content engagement metrics, and a cookie used by Ion interactive experiences to persist quiz and assessment responses. The marketing and analytics cookies require prior consent.
Is consent required to deploy Rock Content on a European website?
Yes. Rock Content tracking cookies are not strictly necessary, so Art. 5(3) of the ePrivacy Directive requires consent. Behavioural profiling and lead scoring rely on consent under Art. 6(1)(a) GDPR.
What is the legal basis for processing data through Rock Content?
Consent (Art. 6(1)(a) GDPR) for tracking and behavioural analytics. Performance of a contract (Art. 6(1)(b)) for lead nurturing once a customer relationship exists. Legitimate interest (Art. 6(1)(f)) for security and audit, with a documented balancing test.
Does Rock Content transfer data outside the European Union?
Yes. Rock Content is based in Brazil with operations in the United States. Transfers require Standard Contractual Clauses and a Transfer Impact Assessment evaluating both regimes.
Is a DPIA required when integrating Rock Content?
A DPIA is recommended when Rock Content is used at scale, when interactive content collects sensitive responses, or when behavioural scoring drives automated marketing decisions. It can be mandatory under Art. 35 GDPR.
How do I implement Rock Content in a GDPR compliant way?
Sign the Rock Content DPA and SCCs, gate trackers behind a CMP, document the Brazil and US transfers, limit interactive content data collection, configure retention rules and update the privacy notice.
Are there European alternatives to Rock Content?
Yes. Storyly (Turkey with EU hosting), Contentful (Germany), Sanity (Norway, headless content) and dedicated European content marketing agencies offer comparable services with EU data residency.
How do I update my cookie policy after enabling Rock Content?
List Rock Content cookies (rc_uid, rc_session, rc_ion) with name, purpose, duration and provider. Disclose Rock Content S.A. as a sub processor in Brazil with US operations and the transfer chain. Re trigger the consent banner.
ReferralCandy
ReferralCandy is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ReferralCandy supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ReferralCandy ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Zentap
Zentap is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Zentap supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Zentap enables informed decisions that improve experience and drive results.
Gallabox
Gallabox is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Gallabox enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Gallabox empowers marketing teams to achieve measurable growth.
SmartEmailing
SmartEmailing is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. SmartEmailing enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, SmartEmailing empowers marketing teams to achieve measurable growth.
Spoki
Spoki is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Spoki provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Spoki helps deliver the right message to the right audience at the right time.
MessageMedia
MessageMedia is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. MessageMedia supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, MessageMedia ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.