Does LoyaltyLion require cookie consent?

Yes. LoyaltyLion sets persistent identification cookies linking the browser to a loyalty account across sessions. These cookies and the behavioral tracking of purchases, referrals, and engagement events are non-essential and require consent under GDPR and ePrivacy before the script loads.

How does ConsentStack handle LoyaltyLion?

ConsentStack blocks LoyaltyLion until both functional and marketing consent are granted. The persistent member identification cookies and behavioral event tracking cannot be separated from the loyalty widget, so the entire script is gated until the visitor accepts the applicable categories.

What tracker domains does LoyaltyLion use?

ConsentStack has catalogued tracker domains for LoyaltyLion including loyaltylion.com and cdn.loyaltylion.com. These are the network destinations LoyaltyLion's scripts contact, which a consent platform blocks until a visitor agrees.

LoyaltyLion - Rewards Tracking & Cookie Consent

Q: What data does LoyaltyLion collect?

LoyaltyLion tracks loyalty-qualifying events — purchases, account creation, social shares, and product reviews — alongside page views on product and checkout pages. Referral attribution and session engagement data is transmitted to LoyaltyLion's API to update point balances and trigger rewards.

Back to Vendor Library

Overview

LoyaltyLion is a loyalty and rewards platform built for e-commerce storefronts, particularly those running on Shopify and Magento. Its scripts integrate directly into the shopping experience to display earning opportunities, point balances, and redeemable rewards. The platform drives repeat purchase behavior by gamifying customer engagement with tiered loyalty programs and referral incentives.

What This Script Does

LoyaltyLion's JavaScript SDK loads from sdk.loyaltylion.net or similar CDN domains. On page load, it initializes a loyalty widget — typically a floating panel or embedded component — that shows the customer's current point balance, tier status, and available rewards.

The script sets cookies to identify loyalty program members across sessions. A persistent identification cookie (often lasting 1–2 years) links the browser to a loyalty account, enabling point balance display even before the customer logs in. Additional cookies may track referral attribution and session-level engagement events.

Data collected includes loyalty-qualifying actions (purchases, account creation, social shares, product reviews), page views on product and checkout pages, referral click origins, and customer identifiers. This data is transmitted to LoyaltyLion's API to update point balances and trigger reward eligibility.

The scripts also inject UI elements such as point-earning notifications, reward redemption modals, and tier progress indicators into the storefront DOM.

Consent & Compliance

LoyaltyLion scripts span functional and marketing categories. The functional component covers the loyalty widget itself — displaying point balances and enabling reward redemption is a feature the customer directly interacts with. The marketing component covers the behavioral tracking (referral attribution, engagement event collection) used to drive re-engagement campaigns and promotional communications.

Under GDPR and ePrivacy, the persistent identification cookies and behavioral tracking require consent prior to being set. The loyalty program inherently involves profiling customer purchase behavior, which constitutes processing personal data. Under CCPA/CPRA, the sharing of customer purchase and engagement data with LoyaltyLion as a third party may constitute a "sale" or "sharing" of personal information, requiring clear opt-out notices.

Should You Block This Without Consent?

Yes. The persistent identification cookies and cross-session behavioral tracking constitute non-essential processing. While the loyalty widget serves a user-facing function, it cannot operate without setting tracking cookies that require consent under ePrivacy rules. Block the script until the visitor has consented to both functional and marketing cookie categories.

Is LoyaltyLion GDPR compliant?

LoyaltyLion typically loads functional and marketing trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So LoyaltyLion can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads LoyaltyLion, not on LoyaltyLion itself.

Visit website