> Bazaarvoice Curation GDPR guide. Learn which cookies it sets, when consent is required, US data transfers, and how to deploy it on a European website. > > Canonical: https://www.flowconsent.com/en/services/social-media/bazaarvoice-curation Social media # Bazaarvoice Curation Marketing · [Official website](https://www.bazaarvoice.com/products/visual-and-social-content/) Bazaarvoice Curation collects, moderates, and displays social user generated content from Instagram, TikTok, and other networks on e-commerce sites with analytics and personalisation cookies. [Block Bazaarvoice Curation until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=social) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Social media](https://www.flowconsent.com/en/services/social-media) - Consent Marketing - Prior consent Required - Documented cookies 5 - Third-party domains 5 - Servers United States (primary) with EU edge nodes (AWS CloudFront) Overview ## What does Bazaarvoice Curation do? ## **What is Bazaarvoice Curation** Bazaarvoice Curation is a user generated content (UGC) tool that allows retailers and brands to discover, license, moderate, and publish social media content from Instagram, TikTok, X, and other networks directly on their product pages. The widget injects JavaScript on the retailer site, loads media from Bazaarvoice CDNs, and tracks engagement to attribute UGC to conversions. While the core display feature is functional, the personalisation and analytics modules add tracking cookies that bring the tool firmly into GDPR territory. ## **Cookies and data collected** Bazaarvoice sets first and third party cookies such as BVImplmain\_site (configuration and feature flags, twelve months), BVBRANDID (anonymous visitor ID, twelve months), and BVBRANDSID (session, browser session). It collects IP address, device fingerprint, viewing behaviour, and conversion data. Cookies that are strictly necessary for the widget to render content may load without consent, but personalisation, analytics, and attribution cookies require prior consent. ## **Legal basis under the GDPR** For the UGC display itself, you can rely on contract (Art. 6(1)(b)) for the strictly necessary part. For analytics, personalisation, and attribution cookies, the legal basis is the user's consent under Art. 6(1)(a) of the GDPR combined with Art. 5(3) of the ePrivacy Directive. Display of identifiable user content from social networks also requires you to verify that the original creator has agreed to the commercial use, often via the Bazaarvoice rights request workflow. ## **International data transfers** Bazaarvoice is headquartered in Austin, Texas, and data is processed primarily in the US, with EU edge nodes for CDN delivery. International transfers rely on Standard Contractual Clauses and the EU, US Data Privacy Framework where applicable. You must document this in your records of processing and inform users in your privacy notice. ## **Practical compliance steps** Configure the Bazaarvoice widget in privacy mode until consent is captured, only enabling personalisation and analytics after acceptance. Use the bvconsent JavaScript API to pass the user's consent state. Document third party domains in your cookie policy, list Bazaarvoice as a processor, and ensure your DPA reflects the EU, US Data Privacy Framework status. ## **Privacy friendly alternatives** European alternatives include Photoslurp (now part of Bazaarvoice), Tagbox, and Stackla (Nosto). Self hosting UGC galleries via static media imports avoids tracking entirely. Server side rendering of curated content removes the need for client side cookies, at the cost of real time personalisation. Compliance ## Bazaarvoice Curation and the GDPR Bazaarvoice Curation is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent for analytics and personalisation cookies (GDPR Art. 6(1)(a) and ePrivacy Art. 5(3)); contract for visible UGC display - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, EU, US Data Privacy Framework, DSA disclosure rules for influencer content ### Impact assessment (DPIA) A DPIA is recommended when the curation widget is paired with personalisation and analytics features. The risks include profiling visitors and combining first party shopping data with third party social signals. ### Sample text for your banner > We use Bazaarvoice Curation to display social content from Instagram, TikTok, and other networks. With your consent, the widget can set cookies to personalise the gallery and measure engagement. Cookies and trackers ## What Bazaarvoice Curation sets and contacts - Tracking method JavaScript widget that loads user generated content with first and third party cookies for personalisation and analytics - Server location United States (primary) with EU edge nodes (AWS CloudFront) - Data transferred outside the EU Bazaarvoice is a US company. Personal data may be transferred to the United States. Transfers rely on Standard Contractual Clauses and the EU, US Data Privacy Framework. ### Cookies set (5) | Name | Type | Duration | Purpose | | ---------------- | ------------ | --------- | ------------------------------------------------------------------------------------ | | BVImplmain\_site | third\_party | 12 months | Stores the Bazaarvoice implementation configuration and feature flags for the widget | | BVBRANDID | third\_party | 12 months | Anonymous visitor identifier used for personalisation and attribution | | BVBRANDSID | third\_party | Session | Session identifier for the current browsing session | | BV\_UA | third\_party | 12 months | User agent fingerprint for analytics and bot detection | | BVConsent | first\_party | 12 months | Stores the visitor consent state passed to Bazaarvoice | ### Third-party domains contacted (5) - `bazaarvoice.com` - `display.ugc.bazaarvoice.com` - `apps.bazaarvoice.com` - `cdn.bazaarvoice.com` - `network.bazaarvoice.com` Questions ## Frequently asked questions about Bazaarvoice Curation Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Bazaarvoice Curation set? It typically sets BVImplmain\_site (twelve months, configuration), BVBRANDID (twelve months, visitor ID), BVBRANDSID (session, current visit), and analytics cookies through its analytics module. Some integrations also write to localStorage. ### Is consent required for Bazaarvoice Curation? Cookies that are strictly necessary to render the widget can load without consent, but personalisation, analytics, and attribution cookies require prior consent under Art. 5(3) of the ePrivacy Directive. ### What is the legal basis for Bazaarvoice Curation? Contract for the basic UGC display you have agreed to with users, and consent (Art. 6(1)(a) GDPR) for personalisation and analytics. You also need a lawful basis to display identifiable user content (often consent obtained via the Bazaarvoice rights workflow). ### Does Bazaarvoice transfer data to the US? Yes. Bazaarvoice is based in Austin, Texas. EU personal data may be transferred to US servers under Standard Contractual Clauses and, where applicable, the EU, US Data Privacy Framework. ### Do I need a DPIA for Bazaarvoice Curation? A DPIA is recommended when analytics and personalisation are enabled, especially for large e-commerce sites combining shopping data and UGC engagement. ### How do I implement Bazaarvoice Curation compliantly? Use the bvconsent JavaScript API to gate non essential cookies, sign a DPA with Bazaarvoice, document third party domains in your cookie policy, and ensure the rights request workflow is in place for every UGC creator. ### Are there alternatives? Yes: Photoslurp, Tagbox, Stackla (Nosto), and self hosted static UGC galleries. Each has different trade offs between automation and privacy. ### How do I update my cookie policy for Bazaarvoice Curation? Add an entry for each Bazaarvoice cookie, list the bazaarvoice.com domains, indicate retention periods, and link to the Bazaarvoice privacy policy. Same category ## More services: Social media [See the whole category](https://www.flowconsent.com/en/services/social-media) ### [Mastodon](https://www.flowconsent.com/en/services/social-media/mastodon) [Mastodon is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Mastodon integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Mastodon helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/social-media/mastodon) [Social media](https://www.flowconsent.com/en/services/social-media/mastodon) · ### [Bettermode](https://www.flowconsent.com/en/services/social-media/bettermode) [Bettermode is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Bettermode provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Bettermode helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/social-media/bettermode) [Marketing](https://www.flowconsent.com/en/services/social-media/bettermode) · ### [Postano](https://www.flowconsent.com/en/services/social-media/postano) [Postano is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Postano provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Postano helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/social-media/postano) [Marketing](https://www.flowconsent.com/en/services/social-media/postano) · ### [Commento](https://www.flowconsent.com/en/services/social-media/commento) [Commento is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Commento integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Commento helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/social-media/commento) [Preferences](https://www.flowconsent.com/en/services/social-media/commento) · ### [OnePress Social Locker](https://www.flowconsent.com/en/services/social-media/onepress-social-locker) [OnePress Social Locker is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. OnePress Social Locker supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, OnePress Social Locker remains a leading web.](https://www.flowconsent.com/en/services/social-media/onepress-social-locker) [Marketing](https://www.flowconsent.com/en/services/social-media/onepress-social-locker) · ### [Post Dolphin](https://www.flowconsent.com/en/services/social-media/post-dolphin) [Post Dolphin is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Post Dolphin enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Post Dolphin empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/social-media/post-dolphin) [Marketing](https://www.flowconsent.com/en/services/social-media/post-dolphin) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)