> Wyng GDPR guide: no-code quizzes and personalisation, zero-party data collection, US transfers under SCCs, cookies and consent for European brands.
>
> Canonical: https://www.flowconsent.com/en/services/marketing/wyng

Marketing

# Wyng

Marketing · [Official website](https://www.wyng.com)

Wyng is a no-code zero-party data and personalisation platform, formerly known as Offerpop, headquartered in New York. It lets brands build interactive experiences (quizzes, polls, contests, preference centres) that capture explicit visitor preferences, then activates that data in CRM, email and on-site personalisation. For European deployments, Wyng involves cross border transfers to AWS US and consent both for cookies and for the explicit data collected.

[Block Wyng until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Marketing](https://www.flowconsent.com/en/services/marketing)

- Consent

  Marketing

- Prior consent

  Required

- Documented cookies

  3

- Third-party domains

  5

- Servers

  United States (AWS US East); Wyng, Inc. (formerly Offerpop) headquartered in New York with global edge for widget delivery

Overview

## What does Wyng do?

## **What is Wyng**

Wyng is a no-code zero-party data and personalisation platform headquartered in New York and originally founded in 2008 as Offerpop. The platform lets brands build embedded interactive experiences (quizzes, polls, contests, sweepstakes, preference centres, product finders) that collect explicit preference and intent data from visitors. Wyng then activates that zero-party data through native integrations with CRM, ESP, CDP, ad platforms and on-site personalisation.

## **Data and cookies collected**

Wyng captures explicit answers to quizzes and polls (preferences, intent, demographics), email and name for contest entries, IP, browser, device and page URL. It sets first party cookies (wyng\_uid, wyng\_session) on the customer domain to link visitor activity. Visitor responses are stored with a Wyng visitor ID and pushed via webhooks or native connectors to CRM, ESP and CDP.

## **GDPR and ePrivacy implications**

Wyng is a data processor under Art. 28 GDPR for the customer activity it manages. Zero-party data is data the visitor explicitly provides, so consent is the natural basis. The widget cookies are non essential and trigger Art. 5(3) ePrivacy. When contests offer incentives, Art. 7(4) GDPR rules against bundling consent with participation must be respected. Quizzes that touch on sensitive interests (health, politics, religion, sexual orientation) collect Art. 9 GDPR special category data requiring explicit consent and stronger safeguards.

## **Consent requirements**

Cookie consent is required for the wyng\_uid identifier and the widget tracking. Participation in a quiz or contest is an explicit user action, but consent for using the resulting data for marketing must be obtained separately. Sensitive category questions require explicit consent under Art. 9(2)(a). Preference centres are themselves a way to capture and refresh consent.

## **Data transfers outside the EEA**

Wyng runs on AWS US infrastructure and has no EU data centre. EU visitor data is transferred under SCCs and the EU US Data Privacy Framework where applicable. Sub processors (AWS, SendGrid, Twilio, Stripe) have their own transfer chains.

## **Practical compliance steps**

Sign Wyng's DPA, complete a TIA for US transfers, load the widget only after cookie consent, separate participation from marketing consent in contests, avoid bundling, treat sensitive interest questions as Art. 9 GDPR and capture explicit consent, document Wyng and sub processors (AWS, SendGrid, Twilio, Stripe) and offer a preference centre to manage choices.

Compliance

## Wyng and the GDPR

Wyng is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Consent (Art. 6(1)(a) GDPR) for the explicit preference data collected by quizzes and forms (this is zero-party data and consent is the natural basis); Contract (Art. 6(1)(b) GDPR) for delivering personalised content the user explicitly asked for; Consent for tracking cookies

- Risk level

  medium

- Applicable regulations

  GDPR, ePrivacy Directive (Cookie Law), CCPA, EU US Data Privacy Framework

### Impact assessment (DPIA)

Wyng captures explicit zero-party data (preferences, intent, opinions) via interactive experiences and links it to visitor identifiers. Key DPIA considerations: (1) the embedded widget can set first party cookies (wyng\_uid) and requires consent under Art. 5(3) ePrivacy; (2) zero-party data is explicit but still personal data, with consent as the natural basis; (3) integrations push the captured data to CRM, ESP, ad platforms, each with their own consent requirements; (4) US transfers rely on SCCs and the EU US Data Privacy Framework; (5) contests with incentives must respect freely given consent and avoid linking consent to participation in a way that violates Art. 7 GDPR; (6) sensitive interests (health, politics, religion) collected through quizzes are special category data requiring Art. 9 GDPR safeguards.

### Sample text for your banner

> With your consent, we use Wyng to offer interactive quizzes, polls and preference centres on our site and to personalise content based on your choices. Wyng stores your preferences and a visitor identifier on US infrastructure under Standard Contractual Clauses. You can withdraw consent at any time from your preference centre.

Cookies and trackers

## What Wyng sets and contacts

- Tracking method

  No-code personalisation and zero-party data platform; embedded interactive experiences (quizzes, polls, contests, preference centres); JavaScript widget that captures explicit preferences and stores them with first-party cookies; CDP and CRM integrations

- Server location

  United States (AWS US East); Wyng, Inc. (formerly Offerpop) headquartered in New York with global edge for widget delivery

- Data transferred outside the EU

  Wyng, Inc. is incorporated in New York and processes data on AWS US East infrastructure. EU visitor and customer data is transferred to the US under Standard Contractual Clauses under Art. 46(2)(c) GDPR and the EU US Data Privacy Framework where applicable. Sub processors include AWS, SendGrid (email delivery), Twilio (SMS) and Stripe (billing).

### Cookies set (3)

| Name          | Type       | Duration | Purpose                                                                                                               |
| ------------- | ---------- | -------- | --------------------------------------------------------------------------------------------------------------------- |
| wyng\_uid     | Marketing  | 1 year   | First party visitor identifier set by the Wyng widget. Links quiz, poll and contest responses to a recurring visitor. |
| wyng\_session | Functional | Session  | Session cookie used by Wyng to maintain state during a single interactive experience (quiz, poll, contest).           |
| wyng\_pref    | Functional | 1 year   | Stores visitor preferences (selected options, opt ins) captured via the Wyng preference centre.                       |

### Third-party domains contacted (5)

- `wyng.com`
- `wyng.io`
- `offerpop.com`
- `cdn.wyng.com`
- `api.wyng.com`

Questions

## Frequently asked questions about Wyng

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does Wyng set?

Wyng sets first party cookies on the customer domain via its embedded widget, including wyng\_uid (visitor identifier, 1 year) and wyng\_session (session). These are linked to any answers the visitor provides in quizzes, polls or contests.

### Do I need consent to use Wyng?

Yes for the wyng\_uid cookie and any tracking, and yes for the marketing use of the data collected. Participation in a quiz is the user's action, but separate marketing consent is needed before sending follow up emails or building audiences in ad platforms.

### What is the legal basis for processing data via Wyng?

Consent (Art. 6(1)(a) GDPR) for cookies, marketing use of zero party data and contests with prizes. Contract (Art. 6(1)(b) GDPR) for delivering personalised content the user explicitly requested. Special category data captured by quizzes (health, politics, religion) needs explicit consent under Art. 9(2)(a) GDPR.

### Where does Wyng process and store data?

Wyng runs on AWS US East infrastructure. EU visitor data is transferred to the US under Standard Contractual Clauses and the EU US Data Privacy Framework where applicable. Sub processors include AWS, SendGrid (email), Twilio (SMS) and Stripe (billing).

### Is a DPIA required for Wyng?

A DPIA is recommended when quizzes touch sensitive interests, when contests use significant incentives, when zero party data is combined with behavioural data or when integrations push the data into ad platforms. The DPIA should cover consent UX, US transfers and Art. 9 GDPR safeguards.

### How do I deploy Wyng compliantly?

Sign Wyng's DPA, complete a TIA, load the widget after cookie consent, separate participation and marketing consent in contests, treat sensitive questions as Art. 9 GDPR with explicit consent, document Wyng and sub processors (AWS, SendGrid, Twilio, Stripe), and offer a preference centre allowing visitors to review and update choices.

### What are GDPR friendly alternatives to Wyng?

EU based zero party data and interactive experience alternatives include Riddle (Germany), Easypromos (Spain), Inpulse.io (France), Survicate (Poland) and Typeform (Spain). For deep personalisation with EU controllers, Bloomreach (Netherlands) or Algolia Recommend (France) can complement zero party data.

### How should I update my privacy policy for Wyng?

Disclose Wyng as a sub processor, name the widget cookies and their duration, describe the zero party data collected (quiz answers, preferences), document the marketing uses (CRM, ESP, ad platforms), mention US transfers under SCCs and the EU US Data Privacy Framework, treat sensitive interests separately and link Wyng's privacy notice.

Same category

## More services: Marketing

[See the whole category](https://www.flowconsent.com/en/services/marketing)

### [Tripadviser.Widget](https://www.flowconsent.com/en/services/marketing/tripadviser-widget)

[Tripadviser.Widget is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Tripadviser.Widget supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Tripadviser.Widget ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/tripadviser-widget)

[Marketing](https://www.flowconsent.com/en/services/marketing/tripadviser-widget)

·

### [SiteJabber](https://www.flowconsent.com/en/services/marketing/sitejabber)

[SiteJabber is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. SiteJabber integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, SiteJabber helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/marketing/sitejabber)

[Preferences](https://www.flowconsent.com/en/services/marketing/sitejabber)

·

### [Storylane](https://www.flowconsent.com/en/services/marketing/storylane)

[Storylane is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Storylane enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Storylane empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/storylane)

[Marketing](https://www.flowconsent.com/en/services/marketing/storylane)

·

### [Marquiz](https://www.flowconsent.com/en/services/marketing/marquiz)

[Marquiz is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Marquiz supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Marquiz enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/marketing/marquiz)

[Analytics](https://www.flowconsent.com/en/services/marketing/marquiz)

·

### [Probance](https://www.flowconsent.com/en/services/marketing/probance)

[Probance is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Probance provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Probance helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/probance)

[Marketing](https://www.flowconsent.com/en/services/marketing/probance)

·

### [WebEngage](https://www.flowconsent.com/en/services/marketing/webengage)

[WebEngage is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. WebEngage provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, WebEngage helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/webengage)

[Marketing](https://www.flowconsent.com/en/services/marketing/webengage)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)
