> Learn how Queryly collects search queries and click data, which cookies it sets, and how to make it GDPR and ePrivacy compliant on your site. > > Canonical: https://www.flowconsent.com/en/services/other/queryly Other # Queryly Analytics · [Official website](https://queryly.com/) Hosted site search service whose JavaScript widget submits user queries to Queryly servers and tracks result click throughs. [Block Queryly until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=other) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Other](https://www.flowconsent.com/en/services/other) - Consent Analytics - Prior consent Required - Documented cookies 4 - Third-party domains 3 - Servers United States (AWS us-east-1) Overview ## What does Queryly do? ## **What is Queryly** Queryly is a hosted site search service used by publishers and large content websites. A JavaScript widget on the publisher site renders the search box and result page, while queries are processed by Queryly servers that maintain an index of the publisher content and provide ranking and suggestions. ## **Data collected and how it works** Queryly transmits the typed query, the page on which it was issued, IP address and user agent to its US infrastructure. It tracks which result was clicked to measure relevance, and may set first party cookies on the publisher domain to keep a session identifier and recent queries. ## **GDPR considerations** While the core search functionality can be argued as necessary for the service requested by the user, the click tracking and analytical cookies set by Queryly go beyond what is strictly necessary and therefore trigger Article 5(3) ePrivacy and GDPR Article 6(1)(a) consent. Transfers to the United States require appropriate safeguards. ## **Risks and mitigations** Risks include the disclosure of sensitive queries to a US provider, persistent identification across sessions and lack of transparency on retention. Mitigations include configuring short retention, blocking analytics cookies until consent, encouraging users not to include personal data in queries, and signing a data processing agreement with Queryly. ## **Implementation best practices** Load the Queryly widget through a consent management platform with analytics tracking blocked until consent. Configure the widget so that only the strictly necessary search functionality runs without consent if your CMP supports it. Document the processing and transfer in your records and privacy notice. Compliance ## Queryly and the GDPR Queryly is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (GDPR Art. 6(1)(a)) and ePrivacy Directive Art. 5(3) for cookie storage - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, TTDSG, LIL, LOPDGDD ### Impact assessment (DPIA) A DPIA is recommended when the search index covers sensitive content (health, political, religious) or large volumes of visitor data, given the US data transfers. Document data flows, retention, transfer safeguards and risks of disclosing sensitive queries. ### Sample text for your banner > We use Queryly to power the search on our website. This service stores cookies, collects your queries and transfers them to the United States. You can accept or refuse from our consent banner. Cookies and trackers ## What Queryly sets and contacts - Tracking method JavaScript widget that submits user search queries to Queryly servers and tracks result click throughs, with first party cookies for session and query history. - Server location United States (AWS us-east-1) - Data transferred outside the EU Search queries, IP address and result interaction data are transmitted to Queryly servers in the United States; EU transfers require Standard Contractual Clauses or DPF certification with supplementary measures. ### Cookies set (4) | Name | Type | Duration | Purpose | | ----------- | ---------- | -------- | -------------------------------------------------------------------------------------------------------- | | qly\_sid | functional | Session | Session identifier used by the Queryly widget to associate consecutive search interactions of a visitor. | | qly\_uid | analytics | 1 year | Persistent identifier that recognises a returning visitor for search personalisation and analytics. | | qly\_recent | functional | 30 days | Stores recent queries typed by the visitor for autocomplete suggestions in the Queryly search box. | | qly\_click | analytics | 30 days | Records which search results were clicked to measure relevance and improve ranking. | ### Third-party domains contacted (3) - `queryly.com` - `api.queryly.com` - `cdn.queryly.com` Questions ## Frequently asked questions about Queryly Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Queryly set? Queryly sets first party cookies on the publisher domain (typically with a qly\_ prefix) to store a session identifier and the user's recent queries for autocomplete and personalisation. These cookies are not strictly necessary for search to work and therefore require user consent. ### Is user consent required before loading Queryly? Yes for the analytics and tracking features. The base search functionality may be argued as necessary, but click tracking and analytical cookies fall under Article 5(3) of the ePrivacy Directive and require prior consent. Many regulators recommend treating Queryly as a non essential tool. ### What is the legal basis for processing personal data via Queryly? The legal basis is the user consent under Article 6(1)(a) of the GDPR for the analytical features, and possibly contract or legitimate interest for the core search. Article 5(3) of the ePrivacy Directive applies to all non essential cookies. ### Does Queryly transfer data outside the EU? Yes. Queryly is a US based provider hosting data in the United States, so transfers from the EU to the US occur. They require Standard Contractual Clauses or DPF certification, plus supplementary measures to address US surveillance laws. ### Is a DPIA required when using Queryly? A DPIA is recommended when the website is large or covers sensitive topics, because search queries can themselves reveal sensitive information. The DPIA should describe what queries are sent, who has access, retention periods and the international transfer mechanism. ### How do I correctly implement Queryly in a GDPR compliant way? Load the Queryly widget only after consent for non essential cookies, or configure it to run a minimal essential search mode without analytics. Sign a data processing agreement, document the transfer to the US and warn users not to include personal data in queries. ### Are there privacy friendly alternatives to Queryly? Alternatives include self hosted search engines such as Meilisearch, Typesense and Elasticsearch hosted in the EU, or commercial offerings with EU hosting like Algolia EU and Doofinder. These options give better control over data location and retention. ### How should I update my cookie policy to mention Queryly? Add an entry for Queryly under analytics or functional cookies (depending on configuration) with cookie names, durations and purposes. Mention that queries and IP addresses are sent to Queryly servers in the United States and describe the applicable transfer mechanism. Same category ## More services: Other [See the whole category](https://www.flowconsent.com/en/services/other) ### [Google Play Store](https://www.flowconsent.com/en/services/other/google-play-store) [Google Play Store offers a scalable e-commerce solution designed to help merchants sell products and services online. Its feature set includes customizable storefronts, multi-currency support, automated tax calculations, and advanced shipping options. Google Play Store integrates with leading payment gateways, marketing platforms, and fulfillment services. Built-in analytics and reporting tools help merchants track performance, optimize conversions, and make data-driven business decisions for sustainable growth.](https://www.flowconsent.com/en/services/other/google-play-store) [Other](https://www.flowconsent.com/en/services/other/google-play-store) · ### [Fullbay](https://www.flowconsent.com/en/services/other/fullbay) [Fullbay is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Fullbay enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Fullbay empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/other/fullbay) [Marketing](https://www.flowconsent.com/en/services/other/fullbay) · ### [Spicy Rocket](https://www.flowconsent.com/en/services/other/spicy-rocket) [Spicy Rocket is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Spicy Rocket offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Spicy Rocket empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/other/spicy-rocket) [Analytics](https://www.flowconsent.com/en/services/other/spicy-rocket) · ### [coUrbanize](https://www.flowconsent.com/en/services/other/courbanize) [coUrbanize is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. coUrbanize supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, coUrbanize enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/other/courbanize) [Analytics](https://www.flowconsent.com/en/services/other/courbanize) · ### [PCRecruiter](https://www.flowconsent.com/en/services/other/pcrecruiter) [PCRecruiter is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. PCRecruiter supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, PCRecruiter ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/other/pcrecruiter) [Preferences](https://www.flowconsent.com/en/services/other/pcrecruiter) · ### [Recite Me](https://www.flowconsent.com/en/services/other/recite-me) [Recite Me is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Recite Me integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Recite Me helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/other/recite-me) [Other](https://www.flowconsent.com/en/services/other/recite-me) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)