Overview
SAP Commerce Cloud (formerly SAP Hybris) is an enterprise e-commerce platform used by large retailers and B2B organizations to power their online storefronts. When detected, it typically means the entire website is built on SAP's commerce infrastructure rather than SAP being a third-party embed. The platform manages product catalogs, shopping carts, checkout flows, customer accounts, order management, and personalization — serving as the foundational technology stack for the online store.
What This Script Does
SAP Commerce Cloud operates as the storefront platform, with its scripts handling core e-commerce functionality.
- Platform scripts: The storefront's JavaScript framework (typically Angular-based Spartacus or a custom accelerator) loads from the site's own domain, managing product browsing, search, filtering, cart operations, and checkout flows
- Session management: Session cookies maintain the shopping cart contents, authentication state, and user preferences across page navigations. These are first-party cookies set on the storefront domain.
- Cookies set:
- Cart session cookies linking the visitor's browser to their server-side shopping cart
- Authentication cookies for logged-in customer accounts
- Language and currency preference cookies for internationalized storefronts
- CSRF protection tokens for secure form submissions
- Browser storage:
localStorageandsessionStoragemay be used for cart caching, recently viewed products, search history, and UI state - Data collected: Product views, search queries, cart additions/removals, and checkout form data (shipping address, payment details) — all standard e-commerce interactions processed by the platform to complete transactions
- Personalization: SAP Commerce Cloud's built-in personalization engine may track browsing behavior to display recommended products, targeted promotions, and personalized content. This component extends beyond strictly necessary e-commerce functionality.
Consent & Compliance
SAP Commerce Cloud falls under the essential consent category for core e-commerce functionality.
Under GDPR and ePrivacy, the platform's core functions (cart management, checkout, authentication) are strictly necessary for the e-commerce service explicitly requested by the user. Session cookies maintaining cart state and login sessions fall under the ePrivacy Directive's exemption. However, the personalization engine that tracks browsing behavior to recommend products may require separate consent as it goes beyond strictly necessary functionality. SAP provides GDPR compliance tools including consent management integration points, data subject request handling, and data processing agreements.
Under CCPA/CPRA, customer account data, order history, and browsing behavior collected by the platform constitute personal information. SAP Commerce Cloud's personalization features may require disclosure of profiling activities. Transaction data processing is necessary for the requested service.
Should You Block This Without Consent?
No. SAP Commerce Cloud is the storefront platform itself — blocking it would make the entire e-commerce site non-functional. Core e-commerce cookies (cart, authentication, CSRF) are strictly necessary. If the personalization engine is active and tracks browsing behavior for product recommendations, that component should be managed under analytics or functional consent separately from the essential platform.
Is SAP Commerce Cloud GDPR compliant?
SAP Commerce Cloud's trackers are classified as essential (strictly necessary), so they are generally exempt from prior consent under the GDPR. You should still list them in your cookie policy and privacy notice so visitors know they are there.
Consent Categories
Also Known As
Industries
Frequently Asked Questions
Other SAP Products
Related Vendors
Manage consent for SAP Commerce Cloud
ConsentStack automatically detects and manages SAP Commerce Cloud trackers so your site stays compliant with global privacy regulations.