Personalization

Datarize

Datarize is a South Korean AI personalization platform that tracks visitor behaviour with cookies and JavaScript tags to deliver product recommendations, segmentation and conversion attribution. Under GDPR and ePrivacy, prior consent is mandatory before any tracking is loaded.

Overview

What does Datarize do?

What is Datarize

Datarize is an AI driven personalization and conversion optimization platform headquartered in Seoul, South Korea. It analyses visitor behaviour in real time to deliver product recommendations, dynamic banners, search ranking and email triggers tailored to each user.

Cookies and data collected

The Datarize JavaScript tag drops first party cookies and writes identifiers to local storage to recognize visitors across sessions and devices. It collects clickstream events, product views, cart and purchase data, IP address, user agent, screen size and approximate location.

GDPR and ePrivacy implications

Datarize is a marketing and personalization tool that goes well beyond what is strictly necessary for site delivery. Both Article 5(3) of the ePrivacy Directive and Article 6(1)(a) GDPR require prior, informed and granular consent before the tag is loaded or any identifier is read or written.

International data transfers

Datarize is a Korean company, so personal data leaves the EEA. South Korea has a partial adequacy decision from the European Commission (December 2021) that covers commercial data, but transfers should still be documented in the records of processing and supported by a Transfer Impact Assessment, especially if US sub processors are involved.

Implementing consent correctly

Block the Datarize script and any associated calls until the visitor opts in to the personalization or marketing category in your CMP. On withdrawal, clear all Datarize cookies, revoke local storage identifiers and stop sending events. Document the consent timestamp and scope as proof of consent.

Practical compliance steps

Sign a data processing agreement and SCC where required, restrict the data fields sent to Datarize, set short retention periods, conduct a DPIA, list Datarize transparently in your privacy and cookie policies and audit the cookies actually written from a clean test browser.

Compliance

Datarize and the GDPR

Datarize is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive) is required because Datarize sets non essential cookies and creates behavioural profiles for personalization and marketing.
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive, CCPA/CPRA, PIPA (South Korea Personal Information Protection Act)

Impact assessment (DPIA)

A DPIA is strongly recommended because Datarize performs systematic monitoring of visitor behaviour, builds individual profiles and powers automated decisions for personalization. Document the data flows, retention periods, and the international transfer to South Korea.

Sample text for your banner

We use Datarize to personalize products and recommendations. This installs cookies and transfers data to Datarize (South Korea). You can refuse personalization cookies at any time.
Cookies and trackers

What Datarize sets and contacts

Tracking method
JavaScript tag for AI personalization, behavioural tracking and conversion attribution; collects clickstream, product views, cart events and uses cookies plus local storage to identify visitors across sessions
Server location
South Korea (Datarize headquarters in Seoul) with cloud regions for international clients
Data transferred outside the EU
Personal data is transferred to Datarize servers outside the EEA (notably South Korea). South Korea benefits from a partial EU adequacy decision (2022) for the private sector, but a Transfer Impact Assessment is still recommended. Standard Contractual Clauses (SCC) are typically required for any data routed via US sub processors.

Cookies set (4)

NameTypeDurationPurpose
_dz_uidfirst_party1 yearPersistent visitor identifier used to recognize the user across sessions for AI personalization.
_dz_sidfirst_partySessionSession identifier used to group events generated by the same visit.
_dz_segfirst_party6 monthsStores behavioural segments and personalization variants assigned to the visitor.
_dz_consentfirst_party6 monthsRecords the visitor consent state for Datarize so the script knows whether to send events.

Third-party domains contacted (3)

  • datarize.ai
  • static.datarize.ai
  • collect.datarize.ai
Questions

Frequently asked questions about Datarize

Can't find your question? Write to us, we answer fast.

What cookies does Datarize set?

Datarize sets first party cookies and writes identifiers in local storage to recognize visitors across sessions and devices. The exact names vary, but they typically store a visitor ID, session ID and behavioural attributes used for personalization.

Is consent required for Datarize?

Yes. Datarize is a personalization and marketing tracker that goes beyond strictly necessary. Prior, granular and revocable consent is mandatory under Article 5(3) of the ePrivacy Directive and Article 6(1)(a) GDPR before the script may load.

What is the legal basis for Datarize?

The only valid legal basis for Datarize is consent (Art. 6(1)(a) GDPR). Legitimate interest does not apply because the processing creates behavioural profiles for marketing optimization.

Are there transfers outside the EEA?

Yes, data is transferred to Datarize servers in South Korea. South Korea benefits from a partial adequacy decision since December 2021, but Standard Contractual Clauses and a Transfer Impact Assessment may still be required if US sub processors are involved.

Is a DPIA required?

A DPIA is strongly recommended because Datarize performs systematic monitoring of visitors, builds individual profiles and powers automated personalization decisions, all of which are listed as high risk by EU data protection authorities.

How do I implement Datarize compliantly?

Block the script by default, load it only after consent in the personalization or marketing category, sign a DPA and SCC where needed, document Datarize in your policies, set short retention, restrict the data fields sent and audit cookies regularly.

Are there alternatives to Datarize?

European personalization vendors include Kameleoon, AB Tasty, Webtrekk and Dynamic Yield (Mastercard). Self hosted approaches like Open CMP based recommendation engines or first party only segmentation reduce data transfers.

How do I update the cookie policy?

Add Datarize to the personalization or marketing category, list each first party cookie name (visitor ID, session ID), provider (Datarize Inc., South Korea), purpose, retention and a link to the Datarize privacy policy. Refresh after every Datarize integration update.

Overheat

Overheat is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Overheat supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Overheat enables informed decisions that improve experience and drive results.

Analytics

LaunchDarkly

LaunchDarkly is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. LaunchDarkly enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, LaunchDarkly empowers marketing teams to achieve measurable growth.

Analytics

Salesforce Interaction Studio

Salesforce Interaction Studio is a web hosting and cloud infrastructure provider delivering reliable, scalable hosting solutions for websites and applications of all sizes. It offers shared, VPS, and dedicated server options with SSD storage, global CDN, and automated backups. Salesforce Interaction Studio provides one-click deployment, managed databases, and 24/7 monitoring. With high uptime guarantees and developer-friendly tools, Salesforce Interaction Studio ensures optimal performance at scale.

Preferences

Stylitics

Stylitics is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Stylitics provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Stylitics helps deliver the right message to the right audience at the right time.

Marketing

Target2Sell

Target2Sell is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Target2Sell provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Target2Sell helps deliver the right message to the right audience at the right time.

Preferences

Obviyo

Obviyo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Obviyo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Obviyo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.