Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Kameleoon is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Kameleoon supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Kameleoon enables informed decisions that improve experience and drive results.
Kameleoon, founded in 2012 in Paris and operated by Kameleoon SAS, is a leading European platform for A/B testing, multivariate testing, feature flagging and AI driven personalisation. It is widely deployed in retail, financial services and media across Europe as a privacy first alternative to Optimizely (US) and VWO (India). All visitor data stays in the European Union.
Kameleoon offers client side experiments (via the Kameleoon JavaScript SDK), server side experiments (via REST and Edge SDKs in Node.js, Python, Java, PHP, Go, Ruby), feature flags, segmentation, personalisation, A/B/n testing with frequentist or Bayesian statistics and a Predictive Targeting Engine that scores visitors in real time. It integrates with Google Analytics 4, Piwik PRO, Mixpanel, Amplitude, mParticle and Segment.
Kameleoon sets first party cookies including kameleoonVisitorCode (visitor identifier, 13 months), kameleoonExperimentVariationCode (variant assignment, 13 months) and an optional kameleoonReferrer cookie. The platform collects IP, user agent, page URL, referrer, custom segments and event data. Cookieless mode replaces the visitor cookie with browser localStorage.
Under the CNIL 2020 guidelines, A/B testing cookies are not strictly necessary and require prior consent under Art. 5(3) ePrivacy and Art. 82 of the French Data Protection Act, unless the test is purely a measurement of effectiveness on a small sample. Kameleoon is well integrated with the major CMPs (Didomi, OneTrust, Cookiebot, Sirdata) to gate cookie placement.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Kameleoon is hosted on OVHcloud data centres in Roubaix and Strasbourg (France) and on AWS Frankfurt (Germany). All visitor data, experiment configurations and analytics remain inside the European Union. Kameleoon does not transfer customer personal data to the United States. The company is a French SAS and subject to French and EU supervisory authorities.
Block the Kameleoon SDK behind the marketing or statistics consent category of your CMP. Use the cookieless option for visitors who refuse cookies but still want stable assignment. Limit the segments to non sensitive attributes. Sign the Kameleoon DPA. Document Kameleoon as an EU sub processor in your records of processing and reference the OVHcloud and AWS Frankfurt hosting.
Websites using Kameleoon must obtain user consent under GDPR regulations.
Third-party domains contacted
kameleoon.comkameleoon.eukameleoon.netdata.kameleoon.euCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| kameleoonVisitorCode | first_party | 13 months | Anonymous visitor identifier used by Kameleoon to attribute variations and behavioural segments to the same visitor across sessions. |
| kameleoonExperimentVariationCode | first_party | 13 months | Stores the experiment and the variation assigned to the visitor for each active A/B test. |
| kameleoonReferrer | first_party | 13 months | Optional cookie recording the referring URL that brought the visitor to the website for attribution. |
Kameleoon collects user analytics data — you legally need a consent banner. Try FlowConsent free.
Kameleoon sets first party cookies: kameleoonVisitorCode (anonymous visitor identifier, 13 months), kameleoonExperimentVariationCode (assigned variation, 13 months) and an optional kameleoonReferrer cookie. The cookieless option stores the same information in browser localStorage.
Yes. CNIL 2020 guidelines classify A/B testing cookies as non strictly necessary, requiring prior consent under Art. 5(3) ePrivacy and Art. 82 of the French Data Protection Act. Only a pure measurement test on a small sample without personalisation may qualify for the exemption.
Consent (Art. 6(1)(a) GDPR) for cookies and behavioural segmentation. Legitimate interest (Art. 6(1)(f)) may apply narrowly to product analytics without persistent storage. Special category data triggers explicit consent under Art. 9.
No. Kameleoon SAS hosts all customer data on OVHcloud (France) and AWS Frankfurt (Germany). No personal data of website visitors is transferred outside the European Union by Kameleoon itself.
A DPIA is generally not required for Kameleoon itself. It is recommended for personalisation flows based on sensitive attributes (health, finance, opinions) or when the Predictive Targeting Engine influences automated decision making.
Block the Kameleoon SDK behind the marketing or statistics CMP category. Use the cookieless option for visitors who refuse cookies but should still be assigned consistently. Sign the Kameleoon DPA. Limit segmentation to non sensitive attributes. Document Kameleoon as an EU sub processor.
EU based alternatives: AB Tasty (France), Convertize (France), Frizbit (Spain). US alternatives: Optimizely, VWO, Convert.com, Google Optimize (sunset), Statsig. Open source: GrowthBook (US with EU self hosting), Wasabi (Intuit).
Subscribe to the Kameleoon trust centre and changelog. When sub processors, hosting providers or cookies change, update your cookie table, privacy notice and records of processing, and bump the consent banner version.