> How Algolia DocSearch processes queries, what tokens it stores, transfers outside the EU, and the consent banner configuration required under GDPR and ePrivacy. > > Canonical: https://www.flowconsent.com/en/services/other/algolia-docsearch Other # Algolia DocSearch Preferences · [Official website](https://docsearch.algolia.com) Free hosted search for open source documentation sites, powered by an Algolia crawler and an autocomplete JavaScript widget that records queries and click analytics. [Block Algolia DocSearch until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=other) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Other](https://www.flowconsent.com/en/services/other) - Consent Preferences - Prior consent Required - Documented cookies 4 - Third-party domains 5 - Servers France (Algolia SAS headquartered in Paris) with production search clusters distributed worldwide (Amazon Web Services and bare metal in Europe, North America, Asia Pacific). Open source projects using the free DocSearch program are usually allocated to EU clusters; commercial Algolia customers can pin to specific regions including Frankfurt, Paris, Dublin, or US East. Overview ## What does Algolia DocSearch do? ## **What Algolia DocSearch is** Algolia DocSearch is a free program offered by Algolia SAS, a French search infrastructure company, that helps open source projects add a fast, typo tolerant search box to their documentation. A periodic crawler indexes the public docs, and a small JavaScript widget (docsearch.js or the React component) renders an autocomplete dropdown that calls the Algolia Search API on every keystroke. ## **Data collected by the widget** Each search query is transmitted to Algolia with the user IP, user agent, referer, and timing information. When Algolia Insights or click analytics are enabled, the widget also stores an anonymous user token in localStorage (key aa-anonymous-user-id) and sends click and conversion events. Algolia uses this data to compute analytics and to feed result ranking through its Dynamic Re Ranking and Personalization features. ## **GDPR and ePrivacy implications** The mere act of typing a query and receiving results can rely on legitimate interests, but storing the anonymous identifier and sending behavioural events fall under Art. 5(3) of the ePrivacy Directive and require prior, freely given consent. IP addresses are personal data under GDPR, so a clear processing record and a documented retention period are required. ## **International data transfers** Although Algolia is French, its distributed search network spans multiple continents. Queries may be routed to the closest cluster, and corporate functions are partly handled by Algolia Inc. in the United States. Transfers rely on Standard Contractual Clauses and the EU US Data Privacy Framework. EU only routing can be requested on paid plans. ## **Practical compliance steps** Disable click analytics by default, gate the widget behind a consent prompt for analytics cookies, document Algolia in the privacy notice as a processor, sign the Algolia Data Processing Addendum, and configure your DocSearch crawler to avoid indexing pages that contain personal data such as user dashboards or paid customer portals. Compliance ## Algolia DocSearch and the GDPR Algolia DocSearch is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis The search box itself can run on legitimate interests (Art. 6(1)(f) GDPR) when used purely to deliver requested results, but the storage of the aa-anonymous-user-id token, click and conversion analytics, and the transmission of IP plus query content for analytics purposes require prior consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive) because they involve storage on the terminal and behavioural analysis. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive (Cookie Law), CCPA, French Data Protection Act ### Impact assessment (DPIA) A full DPIA is generally not mandatory for DocSearch when used to power a public documentation search, because no special category data is processed and volumes are limited. However, controllers should document a record of processing under Art. 30 GDPR, evaluate query log retention, and assess the impact of enabling click and conversion analytics, which can build behavioural profiles of identified users on authenticated documentation portals. ### Sample text for your banner > We use Algolia DocSearch to power the search box on this documentation site. With your consent, each query is sent to Algolia servers along with your IP address and an anonymous identifier so that we can improve result relevance and measure which articles are most useful. Cookies and trackers ## What Algolia DocSearch sets and contacts - Tracking method Client side JavaScript widget (docsearch.js or @docsearch/react) that loads on documentation sites, queries the Algolia Search API via XHR/fetch using a public search only API key, builds an autocomplete dropdown, and sends each keystroke to Algolia servers. The Algolia crawler periodically scrapes the documentation pages and pushes structured records into the Algolia index. The widget collects query strings, click and conversion events, user agent, IP address, and may set a local storage anonymous user token (aa-anonymous-user-id) when analytics or click analytics are enabled. - Server location France (Algolia SAS headquartered in Paris) with production search clusters distributed worldwide (Amazon Web Services and bare metal in Europe, North America, Asia Pacific). Open source projects using the free DocSearch program are usually allocated to EU clusters; commercial Algolia customers can pin to specific regions including Frankfurt, Paris, Dublin, or US East. - Cookieless mode available Yes - Data transferred outside the EU While Algolia is a French company, its search clusters span multiple regions and queries are typically routed via the closest distributed search network (DSN) node. For DocSearch on open source projects the default region is EU, but Algolia Inc. (the US subsidiary) may process billing, support, and aggregated analytics data in the United States. Algolia relies on Standard Contractual Clauses and the EU US Data Privacy Framework for any transatlantic flows. Customers can contractually request EU only routing on paid plans. ### Cookies set (4) | Name | Type | Duration | Purpose | | --------------------------- | ------------ | ------------------------ | ------------------------------------------------------------------------------------------------------- | | aa-anonymous-user-id | localStorage | Persistent until cleared | Anonymous identifier stored by Algolia Insights to attribute click and conversion events to a session. | | \_ALGOLIA | localStorage | Persistent | Caches Algolia client configuration and recent query suggestions for the autocomplete component. | | docsearch-recent-searches | localStorage | Persistent | Stores the most recent queries typed by the user so they appear in the suggestions panel on next visit. | | docsearch-favorite-searches | localStorage | Persistent | Stores queries the user has marked as favourite directly from the DocSearch modal. | ### Third-party domains contacted (5) - `*.algolia.net` - `*.algolianet.com` - `insights.algolia.io` - `crawler.algolia.com` - `cdn.jsdelivr.net` Questions ## Frequently asked questions about Algolia DocSearch Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Does Algolia DocSearch set cookies? DocSearch does not rely on HTTP cookies. It uses localStorage to persist an anonymous identifier (aa-anonymous-user-id) when Algolia Insights or click analytics are enabled, which is functionally equivalent to a cookie under the ePrivacy Directive. ### Is user consent required? Yes for the analytics features. The pure search call can run on legitimate interests, but storing the anonymous identifier and sending click and conversion events require prior consent under Art. 5(3) ePrivacy. ### What is the legal basis? Legitimate interests (Art. 6(1)(f) GDPR) covers the search call itself when needed to provide results requested by the user. Any analytics layer, including the aa-anonymous-user-id, must rely on consent (Art. 6(1)(a) GDPR). ### Are there data transfers to the US? Possibly. Algolia is French but its global search network routes queries to the nearest cluster, and Algolia Inc. in the US handles support and billing functions. Standard Contractual Clauses and the EU US Data Privacy Framework apply. ### Do we need a DPIA? A full DPIA is normally not required for public documentation search. Maintain an Art. 30 record of processing, document log retention, and reassess if click analytics are enabled on authenticated portals. ### How do we implement DocSearch compliantly? Load docsearch.js only after consent for analytics cookies, disable Insights by default, sign the Algolia DPA, list Algolia as a processor in the privacy notice, and exclude private content from the crawler. ### Are there alternatives? Self hosted options include Typesense, Meilisearch, and Elasticsearch with custom UI. Lunr.js or Pagefind offer fully client side search without sending queries to a third party. ### How should we update the cookie policy? Add an entry naming Algolia DocSearch, mention the aa-anonymous-user-id localStorage key, describe purposes (search, analytics, dynamic ranking), retention, and link to Algolia's privacy policy and DPA. Same category ## More services: Other [See the whole category](https://www.flowconsent.com/en/services/other) ### [SOPlanning](https://www.flowconsent.com/en/services/other/soplanning) [SOPlanning is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. SOPlanning supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, SOPlanning ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/other/soplanning) [Preferences](https://www.flowconsent.com/en/services/other/soplanning) · ### [maptalks](https://www.flowconsent.com/en/services/other/maptalks) [Maptalks is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Maptalks supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Maptalks ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/other/maptalks) [Preferences](https://www.flowconsent.com/en/services/other/maptalks) · ### [JazzHR](https://www.flowconsent.com/en/services/other/jazzhr) [JazzHR is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. JazzHR supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, JazzHR ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/other/jazzhr) [Preferences](https://www.flowconsent.com/en/services/other/jazzhr) · ### [GTranslate](https://www.flowconsent.com/en/services/other/gtranslate) [GTranslate is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. GTranslate offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, GTranslate empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/other/gtranslate) [Analytics](https://www.flowconsent.com/en/services/other/gtranslate) · ### [OpTuNE](https://www.flowconsent.com/en/services/other/optune) [OpTuNE is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. OpTuNE enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, OpTuNE empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/other/optune) [Preferences](https://www.flowconsent.com/en/services/other/optune) · ### [Sherlock](https://www.flowconsent.com/en/services/other/sherlock) [Sherlock is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Sherlock provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Sherlock helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/other/sherlock) [Marketing](https://www.flowconsent.com/en/services/other/sherlock) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)