> How Clerk.io personalises e-commerce experiences, which cookies it sets, GDPR consent requirements, EU hosting advantages, risk level and compliance steps. > > Canonical: https://www.flowconsent.com/en/services/personalization/clerk-io Personalization # Clerk.io Preferences · [Official website](https://clerk.io) Clerk.io is a Danish e-commerce personalisation platform from Clerk.io ApS, used by over 2 500 European retailers to deliver product recommendations, on site search, email personalisation and abandoned cart flows. The clerk.js SDK loads on product pages, captures behavioural data and serves personalised content. Hosted in AWS European regions, Clerk.io positions itself as a GDPR friendly alternative to US e-commerce personalisation providers. [Block Clerk.io until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=personalization) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Personalization](https://www.flowconsent.com/en/services/personalization) - Consent Preferences - Prior consent Required - Documented cookies 3 - Third-party domains 4 - Servers European Union (Clerk.io ApS, Denmark) with AWS Europe regions Overview ## What does Clerk.io do? ## **What Clerk.io is and how it works** Clerk.io is a Danish e-commerce personalisation platform from Clerk.io ApS, headquartered in Copenhagen. The product covers four main pillars: product recommendations (you may also like, frequently bought together, trending now), on site search with semantic understanding, email personalisation (product blocks injected into newsletters) and audience automation (cart recovery, post purchase flows). Retailers connect their product feed and order webhook, install the clerk.js SDK, and Clerk.io starts learning from visitor behaviour. ## **What data and cookies Clerk.io collects** Clerk.io writes first party cookies on the publisher domain (typically clerk-visitor, clerk-session and clerk-consent) and collects IP address, user agent, full URL of every page viewed, scroll behaviour, time on page, product views, cart additions and removals, search queries, completed purchases and (when the email feature is enabled) the hashed email address of subscribers to link offline and online behaviour. ## **GDPR and ePrivacy implications** Clerk.io writes non strictly necessary cookies and builds a behavioural profile per visitor, both falling under Article 5(3) ePrivacy and Article 6 GDPR. Prior consent is required for tracking cookies and for the marketing flows that follow. The Danish Data Protection Authority (Datatilsynet) and the EDPB consider behavioural personalisation to be in scope of consent, particularly when correlated with subscriber identity. EU hosting reduces transfer concerns but does not remove the consent requirement. ## **Consent and channel separation** Block clerk.js until the visitor opts in to the Marketing category in your consent management platform. Treat email personalisation as a separate consent (marketing emails) and only correlate cookies with email subscribers when consent allows. Treat cart abandonment flows as a third consent for marketing communications. Granular consents give visitors meaningful control and align with the Datatilsynet guidance on layered consent. ## **Data residency** Clerk.io is hosted on AWS European regions and run by Clerk.io ApS in Denmark. No systematic third country transfer by default. Limited sub-processors (CDN, error reporting) may operate in the US and should be reviewed in the Clerk.io sub-processor list. Integration with Klaviyo, Mailchimp, ActiveCampaign or other ESPs may forward data to those providers, often based in the US, requiring SCCs and documentation. ## **Practical compliance steps** Sign the Clerk.io DPA, gate clerk.js behind consent, use granular consents per channel, list Clerk.io in your cookie policy and record of processing activities, document any ESP integrations and their transfer mechanisms, set retention to align with the personalisation purpose, redact sensitive product categories from auto tracking, and inform email subscribers when behavioural data influences their newsletter content. Compliance ## Clerk.io and the GDPR Clerk.io is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) for personalisation cookies; legitimate interest (Art. 6(1)(f)) only for fully anonymised aggregated recommendations - Risk level medium - Applicable regulations GDPR, ePrivacy Directive (Cookie Law), Danish Data Protection Act ### Impact assessment (DPIA) Clerk.io processes visitor IP address, user agent, full URL of every page viewed, time on page, scroll depth, product views, cart additions, search queries, completed purchases (when integrated with the order webhook) and a persistent visitor identifier. Key DPIA considerations: (1) the recommendation engine builds a behavioural profile per visitor, which is profiling under GDPR; (2) email personalisation correlates the visitor cookie with the email subscriber identity, requiring an additional consent layer; (3) cart abandonment flows imply marketing communications and require their own consent; (4) all processing happens in the EU, which limits transfer concerns; (5) integration with Klaviyo, Mailchimp or similar may forward data to US providers, requiring SCCs and a Transfer Impact Assessment. ### Sample text for your banner > We use Clerk.io to provide personalised product recommendations and search. Clerk.io places cookies on your device, processes your browsing and purchase behaviour on EU based servers and uses this data to surface relevant products. You can withdraw your consent at any time via our cookie settings. Cookies and trackers ## What Clerk.io sets and contacts - Tracking method JavaScript SDK (clerk.js) and server side product feed integration - Server location European Union (Clerk.io ApS, Denmark) with AWS Europe regions ### Cookies set (3) | Name | Type | Duration | Purpose | | ------------- | ---------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------- | | clerk-visitor | Marketing | 1 year | Persistent visitor identifier used by Clerk.io to build a behavioural profile for product recommendations and search personalisation. | | clerk-session | Marketing | Session | Session identifier used to group page views and product interactions within a single browsing session. | | clerk-consent | Functional | 1 year | Stores the visitor consent state so Clerk.io respects the choices made via the publisher consent management platform. | ### Third-party domains contacted (4) - `clerk.io` - `api.clerk.io` - `cdn.clerk.io` - `js.clerk.io` Questions ## Frequently asked questions about Clerk.io Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Clerk.io set? Clerk.io writes first party cookies on the publisher domain, typically clerk-visitor (persistent visitor identifier), clerk-session (session identifier) and clerk-consent (consent state). The visitor identifier is used to build a behavioural profile for personalisation. ### Is consent required before Clerk.io loads? Yes. The clerk.js SDK writes non strictly necessary cookies and starts behavioural profiling immediately, which falls under Article 5(3) ePrivacy and Article 6 GDPR. Granular consents are recommended per channel (web personalisation, email, cart recovery). ### What is the legal basis for processing data through Clerk.io? Consent (Art. 6(1)(a) GDPR) for tracking cookies and behavioural personalisation. For fully anonymised, aggregated recommendations that do not profile the individual visitor, legitimate interest may apply with a documented balancing test, but this is rarely how Clerk.io is deployed in practice. ### Does Clerk.io transfer data to the United States? By default, no. Clerk.io is hosted in AWS European regions and operated by Clerk.io ApS in Denmark. Limited sub-processors (CDN, error reporting) may be in the US. Integrations with US based ESPs (Klaviyo, Mailchimp) introduce US transfers that should be documented. ### Do I need a DPIA for Clerk.io? A DPIA is recommended for any large scale e-commerce deployment because of the behavioural profiling and multi channel marketing combination. For small shops with basic recommendations only, a documented assessment is usually sufficient. ### How do I implement Clerk.io in a GDPR compliant way? Sign the Clerk.io DPA, gate clerk.js behind consent, use granular consents per channel, list Clerk.io in your cookie policy and record of processing activities, document any ESP integrations and their transfer mechanisms, set retention to align with the personalisation purpose and consider running a DPIA. ### What are alternatives to Clerk.io? EU based e-commerce personalisation alternatives include Nosto (Finland), Algolia (France, also offers recommendations), Constructor.io (with EU residency option), Bloomreach (Netherlands acquisition Exponea, with EU residency) and on the open source side, Recombee or self hosted Algolia derivatives. ### How should my cookie policy describe Clerk.io? List Clerk.io by name as a Marketing service, identify Clerk.io ApS as the processor, the cookies set (clerk-visitor, clerk-session, clerk-consent), the data collected (IP, behaviour, product views, search, hashed email), the EU only hosting, the retention period, any ESP integrations and a link to the Clerk.io privacy notice. Same category ## More services: Personalization [See the whole category](https://www.flowconsent.com/en/services/personalization) ### [Hansel](https://www.flowconsent.com/en/services/personalization/hansel) [Hansel is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Hansel supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Hansel ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/personalization/hansel) [Personalization](https://www.flowconsent.com/en/services/personalization/hansel) · ### [Epoq](https://www.flowconsent.com/en/services/personalization/epoq) [Epoq is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Epoq enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Epoq empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/personalization/epoq) [Preferences](https://www.flowconsent.com/en/services/personalization/epoq) · ### [Ownpage](https://www.flowconsent.com/en/services/personalization/ownpage) [Ownpage is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Ownpage enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Ownpage empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/personalization/ownpage) [Preferences](https://www.flowconsent.com/en/services/personalization/ownpage) · ### [Peerius](https://www.flowconsent.com/en/services/personalization/peerius) [Peerius is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Peerius enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Peerius empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/personalization/peerius) [Preferences](https://www.flowconsent.com/en/services/personalization/peerius) · ### [PersonaClick](https://www.flowconsent.com/en/services/personalization/personaclick) [PersonaClick is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. PersonaClick enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, PersonaClick empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/personalization/personaclick) [Preferences](https://www.flowconsent.com/en/services/personalization/personaclick) · ### [Convert](https://www.flowconsent.com/en/services/personalization/convert) [Convert is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Convert offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Convert empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/personalization/convert) [Analytics](https://www.flowconsent.com/en/services/personalization/convert) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)