> Kameleoon runs A/B tests and personalization on websites and apps: what its script does, the visitor identifiers it stores and the GDPR consent needed. > > Canonical: https://www.flowconsent.com/en/services/personalization/kameleoon Personalization # Kameleoon Analytics Kameleoon is a French experimentation and personalization platform used to run A/B tests, feature flags and personalized content on websites and apps. Its script assigns each visitor to a test variant and measures the results. It stores a visitor identifier in cookies or local storage to keep that assignment consistent, so consent is generally required before tracking. [Block Kameleoon until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=personalization) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Personalization](https://www.flowconsent.com/en/services/personalization) - Consent Analytics - Prior consent Required - Documented cookies 3 - Third-party domains 4 - Servers Kameleoon SAS, headquartered in Paris, France. Hosting on OVHcloud data centres in Roubaix and Strasbourg (France) and on AWS in Frankfurt (Germany). All visitor data stays inside the European Union by default. Optional Predictive Targeting Engine uses Kameleoon servers in France. Overview ## What does Kameleoon do? Kameleoon, founded in 2012 in Paris and operated by Kameleoon SAS, is a leading European platform for A/B testing, multivariate testing, feature flagging and AI driven personalisation. It is widely deployed in retail, financial services and media across Europe as a privacy first alternative to Optimizely (US) and VWO (India). All visitor data stays in the European Union. ## **What Kameleoon does** Kameleoon offers client side experiments (via the Kameleoon JavaScript SDK), server side experiments (via REST and Edge SDKs in Node.js, Python, Java, PHP, Go, Ruby), feature flags, segmentation, personalisation, A/B/n testing with frequentist or Bayesian statistics and a Predictive Targeting Engine that scores visitors in real time. It integrates with Google Analytics 4, Piwik PRO, Mixpanel, Amplitude, mParticle and Segment. ## **Data and cookies set** Kameleoon sets first party cookies including kameleoonVisitorCode (visitor identifier, 13 months), kameleoonExperimentVariationCode (variant assignment, 13 months) and an optional kameleoonReferrer cookie. The platform collects IP, user agent, page URL, referrer, custom segments and event data. Cookieless mode replaces the visitor cookie with browser localStorage. ## **GDPR and ePrivacy implications** Under the CNIL 2020 guidelines, A/B testing cookies are not strictly necessary and require prior consent under Art. 5(3) ePrivacy and Art. 82 of the French Data Protection Act, unless the test is purely a measurement of effectiveness on a small sample. Kameleoon is well integrated with the major CMPs (Didomi, OneTrust, Cookiebot, Sirdata) to gate cookie placement. ## **Data transfers and hosting** Kameleoon is hosted on OVHcloud data centres in Roubaix and Strasbourg (France) and on AWS Frankfurt (Germany). All visitor data, experiment configurations and analytics remain inside the European Union. Kameleoon does not transfer customer personal data to the United States. The company is a French SAS and subject to French and EU supervisory authorities. ## **Practical compliance steps** Block the Kameleoon SDK behind the marketing or statistics consent category of your CMP. Use the cookieless option for visitors who refuse cookies but still want stable assignment. Limit the segments to non sensitive attributes. Sign the Kameleoon DPA. Document Kameleoon as an EU sub processor in your records of processing and reference the OVHcloud and AWS Frankfurt hosting. Compliance ## Kameleoon and the GDPR Kameleoon is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive) for the Kameleoon cookies (kameleoonVisitorCode, kameleoonExperimentVariationCode), behavioural segmentation and personalised content delivery. The CNIL has confirmed in its 2020 guidelines that A/B testing cookies require prior consent unless purely measurement based. - Risk level low - Applicable regulations GDPR, ePrivacy Directive, TDDDG, LSSI CE, French Data Protection Act, CNIL cookie guidelines 2020 Cookies and trackers ## What Kameleoon sets and contacts - Tracking method JavaScript snippet loaded synchronously or asynchronously to perform server side, client side and hybrid A/B testing and personalisation. Variants are delivered through a CDN, visitor assignment is stored locally in cookies and synchronised with Kameleoon servers for analytics and segmentation. - Server location Kameleoon SAS, headquartered in Paris, France. Hosting on OVHcloud data centres in Roubaix and Strasbourg (France) and on AWS in Frankfurt (Germany). All visitor data stays inside the European Union by default. Optional Predictive Targeting Engine uses Kameleoon servers in France. - Cookieless mode available Yes ### Cookies set (3) | Name | Type | Duration | Purpose | | -------------------------------- | ------------ | --------- | ------------------------------------------------------------------------------------------------------------------------------------ | | kameleoonVisitorCode | first\_party | 13 months | Anonymous visitor identifier used by Kameleoon to attribute variations and behavioural segments to the same visitor across sessions. | | kameleoonExperimentVariationCode | first\_party | 13 months | Stores the experiment and the variation assigned to the visitor for each active A/B test. | | kameleoonReferrer | first\_party | 13 months | Optional cookie recording the referring URL that brought the visitor to the website for attribution. | ### Third-party domains contacted (4) - `kameleoon.com` - `kameleoon.eu` - `kameleoon.net` - `data.kameleoon.eu` Questions ## Frequently asked questions about Kameleoon Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does Kameleoon set? Kameleoon sets first party cookies: kameleoonVisitorCode (anonymous visitor identifier, 13 months), kameleoonExperimentVariationCode (assigned variation, 13 months) and an optional kameleoonReferrer cookie. The cookieless option stores the same information in browser localStorage. ### Is consent required to use Kameleoon? Yes. CNIL 2020 guidelines classify A/B testing cookies as non strictly necessary, requiring prior consent under Art. 5(3) ePrivacy and Art. 82 of the French Data Protection Act. Only a pure measurement test on a small sample without personalisation may qualify for the exemption. ### What is the legal basis for processing? Consent (Art. 6(1)(a) GDPR) for cookies and behavioural segmentation. Legitimate interest (Art. 6(1)(f)) may apply narrowly to product analytics without persistent storage. Special category data triggers explicit consent under Art. 9. ### Is data transferred to the United States? No. Kameleoon SAS hosts all customer data on OVHcloud (France) and AWS Frankfurt (Germany). No personal data of website visitors is transferred outside the European Union by Kameleoon itself. ### Do I need a DPIA for Kameleoon? A DPIA is generally not required for Kameleoon itself. It is recommended for personalisation flows based on sensitive attributes (health, finance, opinions) or when the Predictive Targeting Engine influences automated decision making. ### How do I implement Kameleoon correctly? Block the Kameleoon SDK behind the marketing or statistics CMP category. Use the cookieless option for visitors who refuse cookies but should still be assigned consistently. Sign the Kameleoon DPA. Limit segmentation to non sensitive attributes. Document Kameleoon as an EU sub processor. ### Which alternatives to Kameleoon should I consider? EU based alternatives: AB Tasty (France), Convertize (France), Frizbit (Spain). US alternatives: Optimizely, VWO, Convert.com, Google Optimize (sunset), Statsig. Open source: GrowthBook (US with EU self hosting), Wasabi (Intuit). ### How do I update the cookie policy when Kameleoon changes? Subscribe to the Kameleoon trust centre and changelog. When sub processors, hosting providers or cookies change, update your cookie table, privacy notice and records of processing, and bump the consent banner version. Same category ## More services: Personalization [See the whole category](https://www.flowconsent.com/en/services/personalization) ### [Omniconvert](https://www.flowconsent.com/en/services/personalization/omniconvert) [Omniconvert is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Omniconvert supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Omniconvert enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/personalization/omniconvert) [Analytics](https://www.flowconsent.com/en/services/personalization/omniconvert) · ### [Perzonalization](https://www.flowconsent.com/en/services/personalization/perzonalization) [Perzonalization is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Perzonalization enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Perzonalization empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/personalization/perzonalization) [Preferences](https://www.flowconsent.com/en/services/personalization/perzonalization) · ### [iGoDigital](https://www.flowconsent.com/en/services/personalization/igodigital) [iGoDigital is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. iGoDigital enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, iGoDigital empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/personalization/igodigital) [Marketing](https://www.flowconsent.com/en/services/personalization/igodigital) · ### [Breinify](https://www.flowconsent.com/en/services/personalization/breinify) [Breinify is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Breinify integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Breinify makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/personalization/breinify) [Preferences](https://www.flowconsent.com/en/services/personalization/breinify) · ### [Ownpage](https://www.flowconsent.com/en/services/personalization/ownpage) [Ownpage is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Ownpage enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Ownpage empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/personalization/ownpage) [Preferences](https://www.flowconsent.com/en/services/personalization/ownpage) · ### [Blendee](https://www.flowconsent.com/en/services/personalization/blendee) [Blendee is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Blendee provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Blendee helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/personalization/blendee) [Marketing](https://www.flowconsent.com/en/services/personalization/blendee) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)