Bambuser
Bambuser is a Swedish live and shoppable video platform used by retailers and brands to broadcast interactive shopping shows, one to one video calls and shoppable on demand clips. Its embedded player loads third party JavaScript, sets bambuser_session and bm_uid cookies and forwards viewing, click and basket events to Bambuser servers, which makes it a third party tracker requiring prior consent under the GDPR and ePrivacy Directive.
What does Bambuser do?
What is Bambuser?
Bambuser is a Swedish live and shoppable video SaaS founded in 2007. It powers live shopping shows, one to one consultative video calls and shoppable on demand clips for retailers and luxury brands. The platform integrates with Shopify, Magento, Salesforce Commerce Cloud, SFCC and BigCommerce, and the player is embedded on the merchant site through a small JavaScript snippet.
Cookies and identifiers
The Bambuser player writes bambuser_session and bm_uid cookies on the embed.bambuser.com domain and stores a player state in local storage. View events, click events and add to cart events are forwarded to Bambuser servers, attached to the viewer identifier. When a one to one video call is launched, voice and video streams are processed in real time.
GDPR and ePrivacy implications
Loading the player drops third party cookies and JavaScript that are not strictly necessary, so prior consent is required under Article 5(3) ePrivacy. The behavioural processing for analytics and personalisation requires a GDPR legal basis, typically consent. One to one video calls additionally process voice and video, which are personal data and may include images of children or vulnerable users.
Consent management
Block embed.bambuser.com through your CMP until consent is granted. A click to play pattern (a poster image with a play button that loads the player on click) is a frequent compliance shortcut for live shows and on demand clips. For one to one video calls, capture explicit consent with a recorded checkbox before starting the call.
Data hosting and transfers
Bambuser AB is headquartered in Stockholm and runs production on AWS in EU regions (Ireland and Frankfurt) by default, with US regions available for global plans. US transfers, when present, rely on the EU U.S. Data Privacy Framework or Standard Contractual Clauses listed in the Bambuser DPA.
Implementing Bambuser compliantly
Sign the Bambuser DPA, gate the player on a CMP signal or a click to play, request EU only data residency where available, document Bambuser AB and its sub processors in your records of processing, set retention policies on viewing events and recordings, and disclose the integration in the privacy policy.
Bambuser and the GDPR
Bambuser is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Prior consent under Article 6(1)(a) GDPR and Article 5(3) ePrivacy: the live shopping player loads third party JavaScript, sets cookies (bambuser_session, bm_uid) and sends behavioural events linked to a viewer identifier.
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive, EU U.S. Data Privacy Framework
Impact assessment (DPIA)
A DPIA can be relevant when Bambuser is integrated with the merchant CRM, when one to one video calls capture audio and video of consumers, or when behavioural data is used for personalisation and audience targeting beyond the live show.
Sample text for your banner
We use Bambuser to broadcast live and shoppable video on this site. With your consent, the Bambuser player will load on your device, store viewing cookies and forward your interactions to Bambuser AB and its sub processors. You can refuse or withdraw your consent at any time from the cookie settings.
What Bambuser sets and contacts
- Tracking method
- JavaScript live shopping player (embed.bambuser.com) and SDK that streams live and shoppable video, captures viewing events, basket interactions and call to action clicks, and forwards them to Bambuser servers for analytics and CRM sync.
- Server location
- Bambuser AB infrastructure on AWS, with EU regions (Ireland, Frankfurt) and US regions depending on the customer plan.
- Data transferred outside the EU
- Viewing events and identifiers may be transferred to AWS US regions or to Bambuser US affiliates depending on the configuration, under Standard Contractual Clauses or the EU U.S. Data Privacy Framework.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| bambuser_session | third_party | session | Maintains the player session and viewer state during a live show or on demand video on embed.bambuser.com. |
| bm_uid | third_party | 1 year | Anonymous viewer identifier used by Bambuser to attribute viewing events, clicks and basket interactions to the right session. |
| __cf_bm | third_party | 30 minutes | Cloudflare bot management cookie set on Bambuser endpoints to mitigate automated traffic during live broadcasts. |
Third-party domains contacted (4)
embed.bambuser.comcdn.bambuser.comlcx-cdn.bambuser.comlive.bambuser.com
Frequently asked questions about Bambuser
Can't find your question? Write to us, we answer fast.
Which cookies does Bambuser set?
The Bambuser player writes bambuser_session and bm_uid third party cookies on embed.bambuser.com and stores a player state in local storage. Additional cookies may be set when integrating with the merchant analytics or CRM.
Does Bambuser require consent?
Yes. Loading the player drops third party cookies and JavaScript that are not strictly necessary, so prior consent is required under Article 5(3) ePrivacy. One to one video calls additionally need explicit consent for voice and video processing.
What is the legal basis?
Consent for cookies and behavioural processing. Contract performance for completing a purchase started during a live show. Consent for processing voice and video in one to one calls.
Are data transferred outside the EU?
Bambuser AB hosts on AWS, EU regions by default. Some plans, sub processors or fallback regions may involve US transfers, covered by the EU U.S. Data Privacy Framework or Standard Contractual Clauses in the DPA.
Do I need a DPIA for Bambuser?
A DPIA is recommended when one to one video calls are recorded, when behavioural data feeds personalisation across the merchant, or when the audience includes children or sensitive consumers.
How do I deploy Bambuser compliantly?
Sign the DPA, gate the player on a CMP or click to play, request EU only data residency, set retention on events and recordings, document Bambuser AB and its sub processors and disclose the integration in the privacy policy.
Are there alternatives to Bambuser?
EU friendly live shopping platforms include Caast.tv (France), Spockee (France), LiSA (Italy) or self hosted live streaming via OBS plus a custom shoppable overlay.
How do I update my cookie policy?
Add a section that names Bambuser, lists the cookies (bambuser_session, bm_uid) with purpose and duration, mentions the live shopping integration and discloses any US sub processor when applicable.
Viloud
Viloud is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Viloud enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Viloud empowers marketing teams to achieve measurable growth.
Vimeo
Vimeo is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. Vimeo integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, Vimeo enhances satisfaction by ensuring tailored browsing experiences for every visitor.
Transistor.fm
Transistor.fm is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Transistor.fm supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Transistor.fm ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
VideoAsk
VideoAsk is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. VideoAsk integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, VideoAsk enhances satisfaction by ensuring tailored browsing experiences for every visitor.
Voice Intuitive
Voice Intuitive is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Voice Intuitive supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Voice Intuitive ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Spotify Widgets
Spotify Widgets is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Spotify Widgets integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Spotify Widgets helps organizations maintain robust websites that meet user expectations and.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.