What cookies and data does Justuno collect?

Justuno sets jto_[account] (a persistent visitor ID cookie, 30–365 days), jto_session, and jto_cvr (conversion suppressor, 30 days). It captures email addresses and phone numbers from pop-up forms and can fire Facebook Pixel or Google Ads conversion tags when a promotion converts.

How does ConsentStack handle Justuno on e-commerce sites?

ConsentStack places Justuno in the marketing category and blocks script initialization until the visitor grants marketing consent. Once consent is given, ConsentStack releases the Justuno tag so promotion targeting, email and SMS capture, and advertising pixel firing can proceed within the consented session.

What tracker domains does Justuno use?

ConsentStack has catalogued tracker domains for Justuno including justuno.com. These are the network destinations Justuno's scripts contact, which a consent platform blocks until a visitor agrees.

Justuno - Popup Tracking & Cookie Consent

Q: Must Justuno be blocked before a visitor gives consent?

Yes. Justuno begins behavioral monitoring — scroll depth, exit intent, time on page — and sets persistent identification cookies immediately on page load, before any visitor interaction. Under GDPR and ePrivacy, these marketing activities require prior explicit consent before the script initializes.

Back to Vendor Library

Overview

Justuno is a conversion optimization platform for e-commerce and lead generation websites, specializing in behavioral popups, slide-in banners, full-screen overlays, exit-intent offers, and gamified promotions such as spin-to-win prize wheels. It targets e-commerce brands that want to capture email addresses and phone numbers for SMS opt-ins, and reduce cart abandonment through incentivized offers. Justuno integrates with Shopify, BigCommerce, WooCommerce, and major ESP/SMS platforms including Klaviyo, Attentive, and Mailchimp to push captured contacts directly into marketing automation flows.

What This Script Does

Script loading: Justuno loads cdn.justuno.com/[account-id]/justuno.js via a <script> tag in the site's <head> or via tag manager. The script bootstraps the promotion engine immediately on page load and begins behavioral signal collection.

Behavioral monitoring for promotion targeting: The script passively monitors visitor behavior from the moment it loads:

Scroll depth — tracks what percentage of page height the visitor has scrolled
Exit intent — detects rapid upward mouse movement toward the browser chrome on desktop, interpreted as pre-navigation intent
Time on page — measures elapsed time to trigger time-delayed offers
Cart value — reads cart data via the Shopify storefront API to trigger cart-value-specific offers
Traffic source — captures UTM parameters and referrer data to display source-specific promotions

Cookies set:

jto_[account] — First-party persistent cookie, 30–365 days (configurable), stores an anonymized visitor identifier and promotion interaction history (offers shown, dismissed, or converted)
jto_session — First-party session cookie, tracks the current session for frequency capping to prevent showing the same promotion multiple times per session
jto_cvr — First-party persistent cookie, 30 days, records conversion events to suppress promotions for recent converters
LocalStorage entries may supplement cookies to cache promotion configuration and reduce initialization latency

Data captured through promotion forms:

Email addresses submitted through email capture overlays
Phone numbers submitted through SMS opt-in forms
Form submissions are transmitted to app.justuno.com and simultaneously pushed to configured ESP/SMS integrations via direct API calls

Third-party pixel firing:

On promotion conversion events, Justuno can fire configured third-party tracking pixels (Facebook Pixel, Google Ads conversion tags) to report lead captures as conversion events in advertising platforms

Justuno Commerce AI:

When the recommendation engine is active, Justuno reads browsing behavior (product views, category views, purchase history) to personalize product suggestions displayed within promotions, extending the analytics profiling dimension

Consent & Compliance

Justuno is categorized as marketing and analytics.

GDPR/ePrivacy: The persistent visitor identification cookie (jto_[account]) and behavioral monitoring begin before any user interaction, requiring explicit prior consent under Article 5(3) ePrivacy. Email and SMS capture functions are marketing activities requiring consent under GDPR. Third-party advertising pixel firing on conversion events also requires marketing consent.
CCPA/CPRA: Email addresses and phone numbers collected constitute personal information. If this data is shared with ESP/SMS platforms or advertising networks, it may constitute "sharing" for cross-context behavioral advertising under CPRA, triggering opt-out obligations.
SMS compliance (US): SMS opt-ins collected through Justuno forms must comply with TCPA requirements, including documented consent language and opt-out mechanisms — a separate compliance layer from CCPA/CPRA.

Should You Block This Without Consent?

Yes. Justuno begins behavioral monitoring and sets persistent tracking cookies immediately on page load, before any visitor interaction. The promotion engine, email/SMS capture, and advertising pixel firing are all marketing activities requiring prior consent under GDPR/ePrivacy. The script must not initialize until marketing consent is explicitly granted.

Is Justuno GDPR compliant?

Justuno typically loads marketing and analytics trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Justuno can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Justuno, not on Justuno itself.

Visit website