Kakao
South Korean platform (Kakao Corp.) offering Maps and Login SDKs, sharing, and the Kakao Pixel for advertising conversion tracking. Data is processed in South Korea.
What does Kakao do?
What Kakao Is
Kakao Corp. is a South Korean technology company behind KakaoTalk and a family of developer tools, including the Kakao Maps JavaScript SDK, the Kakao Login SDK, Kakao share buttons, and the Kakao Pixel for advertising conversion tracking. Websites add these SDKs and pixels to integrate maps, social login, sharing and ad measurement.
Data and Cookies
When a Kakao SDK or the Kakao Pixel loads, the browser connects to Kakao domains such as dapi.kakao.com and analytics.kakao.com and may set cookies including _kawlt, _kahai, _karmt, TIARA and _T_ANO. These support login sessions, analytics and the advertising pixel, which reports conversion events back to Kakao for ad measurement and optimisation.
GDPR and ePrivacy
The Kakao Login session cookies can be strictly necessary for a login feature the user requested, but the Kakao Pixel and TIARA analytics are advertising and measurement technologies. Under the ePrivacy Directive these require prior consent, and the GDPR lawful basis is consent under Article 6(1)(a).
Consent and Implementation
Block the Kakao Pixel and analytics SDKs until the visitor consents, and load only the strictly necessary login or map features without consent where genuinely requested. Use a consent management platform so that the advertising pixel fires only after an affirmative opt in.
Data Transfers and Korea Adequacy
Kakao processes data in South Korea, a third country. Importantly, the European Commission adopted an adequacy decision for South Korea in December 2021 covering commercial operators under PIPA, so transfers to in scope Korean recipients rely on Article 45 adequacy and do not need Standard Contractual Clauses. You should still disclose the transfer to Korea in your privacy notice.
Practical Compliance Steps
List Kakao and its cookies in your cookie policy, gate the Pixel and analytics behind consent, document the Korea transfer and the adequacy decision in your records, and keep login session cookies separate as strictly necessary. Review which SDKs you actually need so you load the minimum.
Kakao and the GDPR
Kakao is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent under Article 6(1)(a) GDPR is required for the Kakao Pixel and analytics, which place advertising and measurement identifiers. Strictly necessary login session functions may rely on contract or legitimate interest, but conversion tracking is consent based.
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive (Cookie Law), Article 45 GDPR adequacy decision for South Korea (PIPA)
Impact assessment (DPIA)
The Kakao Pixel and TIARA analytics justify a DPIA because they track advertising conversions. Assess the identifiers set, the transfer to South Korea that is covered by Article 45 adequacy, and the separation of strictly necessary login session cookies.
Sample text for your banner
This site uses Kakao for maps, login, sharing and the Kakao advertising Pixel. The Pixel sets identifiers and sends events to Kakao in South Korea. Do you consent to loading the Kakao Pixel and analytics?
What Kakao sets and contacts
- Tracking method
- JavaScript SDKs and pixels loaded from Kakao domains: Kakao Maps SDK, Kakao Login SDK, Kakao share, and the Kakao Pixel for advertising conversion tracking. The Pixel and analytics set identifiers and report events back to Kakao.
- Server location
- South Korea (Kakao Corp.)
- Data transferred outside the EU
- Kakao Corp. processes data in South Korea, which is a third country outside the EEA. However, South Korea benefits from a European Commission adequacy decision adopted in December 2021 for commercial operators under the Personal Information Protection Act (PIPA), so transfers to in scope Korean recipients are covered by Article 45 GDPR adequacy and do not require Standard Contractual Clauses. The Kakao Pixel still requires consent like any advertising pixel.
Cookies set (5)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _kawlt | Third-party | Session to 12 hours | Kakao Login authentication token cookie used to maintain a signed in session for the Kakao account. |
| _kahai | Third-party | Persistent | Kakao Login helper cookie that supports the authentication and session handling of the Kakao account. |
| _karmt | Third-party | Persistent | Kakao Login refresh related cookie used to renew the authenticated session. |
| TIARA | Third-party | 2 years | Kakao TIARA analytics identifier used to measure usage and attribute activity across Kakao services. |
| _T_ANO | Third-party | Persistent | Kakao analytics and advertising cookie used together with the Kakao Pixel for conversion measurement and ad optimisation. |
Third-party domains contacted (5)
kakao.comdapi.kakao.comt1.kakaocdn.netdevelopers.kakao.comanalytics.kakao.com
Frequently asked questions about Kakao
Can't find your question? Write to us, we answer fast.
Which cookies does Kakao set?
Kakao SDKs and the Pixel can set cookies such as _kawlt, _kahai and _karmt for login sessions, and TIARA and _T_ANO for analytics and advertising. The Pixel reports conversion events to Kakao.
Do I need consent for the Kakao Pixel?
Yes. The Kakao Pixel and TIARA analytics are advertising and measurement technologies, so they require prior consent under the ePrivacy Directive before they load.
What is the legal basis for Kakao?
The Pixel and analytics rely on consent under Article 6(1)(a) GDPR. Strictly necessary login session cookies for a feature the user requested can rely on contract or legitimate interest.
Does Kakao transfer data to South Korea, and is that allowed?
Yes, Kakao processes data in South Korea. This is permitted because the European Commission adopted an adequacy decision for South Korea in December 2021 for commercial operators under PIPA, so transfers rely on Article 45 adequacy and need no Standard Contractual Clauses.
Is a DPIA needed for Kakao?
A DPIA is recommended where you use the Kakao Pixel or analytics, because they track advertising conversions and set identifiers. Assess the data collected, the consent flow and the transfer to Korea, even though it is adequacy covered.
How do I implement Kakao compliantly?
Gate the Kakao Pixel and analytics SDKs behind a consent banner, load only the login or map features the user actually requests, list Kakao in your cookie policy, and record the Korea transfer and adequacy decision in your processing records.
What are the alternatives to the Kakao Pixel?
If you only need maps or login, you can load those SDKs without the advertising Pixel. For conversion measurement you could use a consent gated, server side or privacy focused analytics approach instead of the client side ad pixel.
How do I update my cookie policy for Kakao?
Add an entry naming Kakao Corp., the cookies the SDKs and Pixel set, their login, analytics and advertising purposes, and the transfer to South Korea covered by the Article 45 adequacy decision, with a link to Kakao's privacy policy.
FeedSpring
FeedSpring is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. FeedSpring integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, FeedSpring helps organizations maintain robust websites that meet user expectations and technical requirements.
Giscus
Giscus is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Giscus integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Giscus helps organizations maintain robust websites that meet user expectations and technical requirements.
%22%3E%0A%3Cpath%20d%3D%22M9.32404%2018.9585C10.2616%2014.5137%2011.1769%2010.1925%2012.0814%205.86933C12.2339%205.23422%2012.338%204.58848%2012.3929%203.93762C12.4513%203.02779%2012.1705%202.12857%2011.6047%201.41366C11.0389%200.698752%2010.2283%200.218843%209.32938%200.0666565C8.41063%20-0.111376%207.45865%200.0764855%206.67639%200.590159C5.89412%201.10383%205.3434%201.9027%205.14162%202.81653C3.76882%209.12266%202.41954%2015.4352%201.1534%2021.7637C0.645671%2024.3003%202.4142%2026.1947%205.21206%2026.2736C11.0115%2026.4379%2016.8109%2026.5936%2022.6115%2026.6736C23.7484%2026.7253%2024.8832%2026.5329%2025.9395%2026.1094C26.619%2025.7346%2027.1527%2025.1424%2027.4551%2024.4278C27.7575%2023.7132%2027.8109%2022.9177%2027.6067%2022.1691C27.413%2021.357%2026.9494%2020.6347%2026.2917%2020.1204C25.634%2019.6062%2024.8212%2019.3303%2023.9864%2019.3381C20.2232%2019.2219%2016.4589%2019.1515%2012.6947%2019.0576C11.5917%2019.0309%2010.4878%2018.9926%209.32404%2018.9585Z%22%20fill%3D%22%2300E9FF%22%2F%3E%0A%3C%2Fg%3E%0A%3C%2Fsvg%3E)
Tagembed
Tagembed is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Tagembed provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Tagembed helps deliver the right message to the right audience at the right time.
Cevoid
Cevoid is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Cevoid provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Cevoid helps deliver the right message to the right audience at the right time.
Topic'it
Topic'it is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Topic'it integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Topic'it helps organizations maintain robust websites that meet user expectations and technical requirements.
Vicomi
Vicomi is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Vicomi supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Vicomi enables informed decisions that improve experience and drive results.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.