Does Oracle Marketing Cloud tracking require opt-in consent?

Yes. The Eloqua tracking script sets the ELOQUA cookie (2-year expiry) for lead scoring and merges anonymous browsing history with known contact profiles. This constitutes personal data processing for direct marketing under GDPR and ePrivacy, requiring explicit opt-in consent before the script loads.

What cookies does Oracle Marketing Cloud set?

It sets ELOQUA (2-year first-party cookie linking visits to Eloqua contact records) and ELQSTATUS (records opt-in or opt-out state). Both are set on the marketer's own domain, giving ELOQUA first-party status while enabling cross-site contact graph linking via Eloqua's shared infrastructure.

How does ConsentStack block Oracle Marketing Cloud?

ConsentStack treats Oracle Marketing Cloud as a marketing vendor and prevents the Eloqua script from loading until the visitor grants consent. After consent is obtained, the script initializes and lead scoring begins. Consent withdrawal suppresses the script and stops further behavioral data collection.

Oracle Marketing Cloud - Automation Privacy Guide

Back to Vendor Library

Overview

Oracle Marketing Cloud encompasses Oracle's suite of enterprise marketing automation tools, including Oracle Eloqua for B2B marketing automation and Oracle Responsys for B2C cross-channel marketing. When detected on a website, Oracle Marketing Cloud's tracking scripts are capturing visitor behavior to feed lead scoring, campaign attribution, and automated marketing workflows. The platform serves large enterprises managing complex, multi-touch marketing programs across email, web, social, and advertising channels.

What This Script Does

Oracle Marketing Cloud deploys web tracking scripts, primarily through Oracle Eloqua's tracking beacon, on company websites.

Scripts loaded: Eloqua's tracking script loads from t.eloqua.com or the organization's Eloqua instance, initializing visitor tracking on the page
Behavioral tracking: The script records page views, time on page, content downloads, form submissions, and navigation patterns. These events feed Eloqua's lead scoring models, increasing a prospect's score as they engage with more content.
Cookies set:
- ELOQUA — First-party cookie (2-year expiry). Persistent visitor identifier linking browsing sessions to Eloqua contact records.
- ELQSTATUS — First-party cookie. Records the visitor's opt-in/opt-out status for tracking.
Contact matching: When a visitor submits a form or clicks a tracked link in an Eloqua marketing email, the anonymous visitor cookie is matched to a known contact record, merging all prior browsing history with the identified lead profile.
Form integration: Eloqua forms embedded on the website submit data directly to Oracle's servers, creating or updating contact records and triggering automated nurture campaigns.
Data collected: Page URLs, visit timestamps, content engagement metrics, form field submissions (name, email, company, job title), and referrer data.

Consent & Compliance

Oracle Marketing Cloud falls under the marketing consent category.

Under GDPR and ePrivacy, the Oracle Marketing Cloud tracking script requires explicit opt-in consent. The ELOQUA cookie is a persistent 2-year identifier used for marketing automation and lead scoring, constituting non-essential cookie storage under the ePrivacy Directive. The contact matching that merges anonymous browsing with identified profiles creates rich personal data processing for direct marketing under GDPR. Eloqua provides built-in consent management fields and the ELQSTATUS cookie for tracking opt-in state.

Under CCPA/CPRA, the behavioral tracking, lead scoring, and contact profiling constitute processing of personal information for advertising and marketing purposes. If contact data is shared with advertising platforms for retargeting, this constitutes "sharing" for cross-context behavioral advertising.

Should You Block This Without Consent?

Yes. Oracle Marketing Cloud tracking sets persistent identification cookies, records browsing behavior for lead scoring, and links anonymous visits to identified marketing contacts. Block the Eloqua tracking script and marketing forms until the user grants marketing consent.

Is Oracle Marketing Cloud GDPR compliant?

Oracle Marketing Cloud typically loads marketing trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Oracle Marketing Cloud can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Oracle Marketing Cloud, not on Oracle Marketing Cloud itself.

Visit website