Findify
Findify is a Swedish AI powered search and personalization platform for online stores, providing smart search, autocomplete, filtering, and product recommendations. To personalise results it tracks shopper behaviour such as searches, clicks, and purchases and assigns a visitor identifier through cookies. Because this behavioural profiling uses non essential cookies, it requires prior consent under the GDPR and the ePrivacy Directive, even though Findify is operated from the European Union.
What does Findify do?
What Findify is
Findify is an e commerce search and personalization platform operated by Findify AB in Sweden. Online retailers add its JavaScript to power search, autocomplete, smart collections, and product recommendations that adapt to each shopper. To do this, Findify loads in the visitor browser and observes how people search and browse, storing a visitor identifier in cookies.
What data and cookies Findify collects
Findify collects search queries, clicks, products viewed and purchased, cart actions, and technical data such as device, browser, and IP address. It assigns a persistent visitor identifier so it can build a behavioural profile and personalise results across a session and return visits. When you pass customer or order data for analytics, that is also processed.
GDPR and ePrivacy implications
The personalization that makes Findify useful relies on behavioural profiling with non essential cookies, so the ePrivacy Directive requires prior consent and the GDPR requires a lawful basis and transparency. Profiling that influences what each shopper sees should be explained clearly to users. Findify acts as your processor, so a data processing agreement is required.
When consent is required
Obtain prior, opt in consent before Findify sets its personalization cookies and starts profiling, and make consent specific and easy to withdraw. You can still offer non personalised search to visitors who decline, which keeps the core function available without tracking. Block the personalization scripts behind your consent banner.
Data transfers outside the EU
Findify AB is based in Sweden, within the European Union, so core processing can remain in the EU and many deployments avoid a third country transfer. You should still confirm where Findify hosts data and whether any subprocessors operate outside the EU, and apply Standard Contractual Clauses and a transfer impact assessment if they do. Document the data locations in your records of processing.
Practical compliance steps
To use Findify compliantly, gate its personalization cookies behind consent, offer non personalised search as a fallback, and sign a data processing agreement. Confirm the hosting region, minimise the customer data you share, and set retention limits for behavioural profiles. List Findify in your cookie policy and privacy notice and review its subprocessors periodically.
Findify and the GDPR
Findify is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) for personalization cookies and behavioural profiling; legitimate interest (Art. 6(1)(f) GDPR) for strictly necessary search
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive (Cookie Law)
Impact assessment (DPIA)
Findify builds behavioural profiles of shoppers to personalise search and recommendations, which is profiling under the GDPR and raises its risk profile. Key DPIA points: (1) persistent visitor identifiers and behavioural profiling that influence what each user sees; (2) collection of search, browsing, and purchase data that can reveal preferences and interests; (3) non essential cookies that require consent before profiling begins; (4) the hosting region and any subprocessors outside the EU, which would trigger transfer safeguards; (5) the need for a data processing agreement, retention limits, and a non personalised fallback. A DPIA is advisable for large catalogues or detailed personalisation.
Sample text for your banner
We use Findify to power search and personalised product recommendations. With your consent, Findify sets cookies and records your searches, clicks, and purchases to tailor results to you. Findify is operated from the European Union and acts as our processor. You can withdraw your consent at any time via our cookie settings, and search will still work without personalisation.
What Findify sets and contacts
- Tracking method
- JavaScript search and personalization layer that profiles shopper behaviour using cookies
- Server location
- Sweden and European Union (Findify AB); confirm hosting region and subprocessors per deployment
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _findify_session | Functional | Session | Maintains the search session and keeps search state consistent during a visit. |
| _findify_token | Personalization | 1 year | Stores a persistent visitor identifier used to personalise search results and recommendations. |
| _findify_view | Personalization | 1 year | Records recently viewed products to power personalised recommendations. |
Third-party domains contacted (3)
findify.ioapi.findify.iocdn.findify.io
Frequently asked questions about Findify
Can't find your question? Write to us, we answer fast.
What cookies does Findify set?
Findify sets a functional cookie to run a search session and analytics or personalization cookies that store a visitor identifier and record search and browsing behaviour. The personalization cookies are not strictly necessary and require consent. Basic, non personalised search can run with only functional cookies.
Do I need consent to use Findify?
Yes for the personalization features, because they set non essential cookies and profile behaviour. Obtain prior, opt in consent before profiling begins, and consider offering non personalised search to visitors who decline so the core function still works.
What is the legal basis for Findify?
Behavioural profiling and personalization rely on consent (Art. 6(1)(a)) together with the ePrivacy Directive. Strictly necessary search functionality can rely on legitimate interest, but the tracking that personalises results needs consent.
Does Findify transfer data to the US?
Not necessarily. Findify AB is based in Sweden, so core processing can stay in the EU. You should confirm the hosting region and whether any subprocessors are outside the EU, and apply Standard Contractual Clauses and a transfer impact assessment if they are.
Is a DPIA needed for Findify?
A DPIA is advisable because Findify profiles shopper behaviour to personalise results. Assess the persistent identifiers, the search and purchase data collected, the hosting location, and your retention periods before deciding.
How do I implement Findify compliantly?
Block the personalization scripts behind your consent banner, offer non personalised search as a fallback, sign a data processing agreement, and confirm the hosting region. Minimise shared customer data, set retention limits, and document Findify in your cookie policy and privacy notice.
Are there alternatives to Findify?
Yes. Self hosted search engines such as Typesense or Meilisearch, or EU hosted search services, can provide search with less behavioural profiling. They reduce cookies and tracking, though advanced personalisation may require more configuration.
How do I update my cookie policy for Findify?
Add a Findify entry listing its functional and personalization cookies, their purposes and durations, the fact that it profiles search behaviour, and where the data is hosted. Link to Findify''s privacy notice and review the entry when its cookies or subprocessors change.
Recombee
Recombee is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Recombee enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Recombee empowers marketing teams to achieve measurable growth.
Nelio Testing
Nelio Testing is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Nelio Testing offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Nelio Testing empowers organizations to optimize strategy and maximize return on investment.
Beyable
Beyable is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Beyable enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Beyable empowers marketing teams to achieve measurable growth.
Segmentify
Segmentify is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Segmentify supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Segmentify enables informed decisions that improve experience and drive results.
Split
Split is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Split supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Split enables informed decisions that improve experience and drive results.
Coveo
Coveo is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Coveo supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Coveo enables informed decisions that improve experience and drive results.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.