Salesforce Interaction Studio

Overview

Salesforce Interaction Studio, now rebranded as Marketing Cloud Personalization, is a real-time behavioral tracking and personalization engine from Salesforce. It appears on websites that use Salesforce's marketing stack to deliver individualized content, product recommendations, and dynamic page experiences. The platform builds detailed visitor profiles by observing browsing patterns across sessions, making it one of the more invasive marketing technologies in the Salesforce ecosystem.

What This Script Does

Interaction Studio deploys a JavaScript beacon (typically loaded from the evergage.com or salesforce.com domain) that begins collecting behavioral data immediately on page load. The script monitors a wide range of visitor interactions:

• Page views and navigation paths — every page visited is logged with timestamps and referral context
• Click tracking — clicks on products, CTAs, navigation elements, and content sections are captured
• Scroll depth and time on page — engagement metrics are recorded to build content affinity scores
• Product and catalog interactions — for e-commerce sites, product views, cart additions, and purchase events feed into recommendation algorithms

The script sets cookies to maintain visitor identity across sessions. The _evga_ prefixed cookies (e.g., _evga_XXX) store a unique visitor identifier with expiry times typically set to 1-2 years. Session-level cookies track the current visit context. Data is transmitted to Salesforce's Interaction Studio endpoints (typically *.evergage.com) where it is processed into behavioral profiles.

These profiles drive real-time content personalization — the script can dynamically alter page elements, inject recommendation carousels, and modify CTAs based on the visitor's accumulated behavioral history. The system also supports A/B testing of personalized experiences, adding another layer of behavioral measurement.

Cross-device identity resolution may occur when visitors authenticate, linking anonymous browsing profiles to known CRM contacts in Salesforce.

Consent & Compliance

Interaction Studio falls squarely into the marketing and analytics consent categories. Its primary purpose is behavioral profiling for personalized marketing delivery, which under GDPR Article 6 requires explicit consent — legitimate interest is difficult to justify given the depth of profiling involved. The ePrivacy Directive mandates consent before setting the long-lived tracking cookies used for visitor identification, as these are not strictly necessary for the service requested by the user.

Under CCPA/CPRA, the behavioral data collected constitutes personal information, and the profiling activities likely qualify as "selling" or "sharing" of personal information when the resulting segments feed into cross-channel marketing or are shared with Salesforce's broader data ecosystem. Businesses must honor opt-out requests and provide clear disclosure of this data collection in their privacy notices.

The persistent cross-session tracking and behavioral profiling make this a high-risk processing activity under GDPR, potentially triggering the requirement for a Data Protection Impact Assessment (DPIA).

Should You Block This Without Consent?

Yes. Interaction Studio performs extensive behavioral profiling using persistent tracking cookies for marketing personalization purposes. None of its functionality is essential to delivering the core website experience. It must be blocked until the visitor provides explicit consent for marketing and analytics cookies.