Overview
SAP Commerce Cloud (formerly SAP Hybris) is an enterprise e-commerce platform used by large retailers and B2B organizations to power their online storefronts. When detected, it typically means the entire website is built on SAP's commerce infrastructure rather than SAP being a third-party embed. The platform manages product catalogs, shopping carts, checkout flows, customer accounts, order management, and personalization — serving as the foundational technology stack for the online store.
What This Script Does
SAP Commerce Cloud operates as the storefront platform, with its scripts handling core e-commerce functionality.
- Platform scripts: The storefront's JavaScript framework (typically Angular-based Spartacus or a custom accelerator) loads from the site's own domain, managing product browsing, search, filtering, cart operations, and checkout flows
- Session management: Session cookies maintain the shopping cart contents, authentication state, and user preferences across page navigations. These are first-party cookies set on the storefront domain.
- Cookies set:
- Cart session cookies linking the visitor's browser to their server-side shopping cart
- Authentication cookies for logged-in customer accounts
- Language and currency preference cookies for internationalized storefronts
- CSRF protection tokens for secure form submissions
- Browser storage:
localStorageandsessionStoragemay be used for cart caching, recently viewed products, search history, and UI state - Data collected: Product views, search queries, cart additions/removals, and checkout form data (shipping address, payment details) — all standard e-commerce interactions processed by the platform to complete transactions
- Personalization: SAP Commerce Cloud's built-in personalization engine may track browsing behavior to display recommended products, targeted promotions, and personalized content. This component extends beyond strictly necessary e-commerce functionality.
Consent & Compliance
SAP Commerce Cloud falls under the essential consent category for core e-commerce functionality.
Under GDPR and ePrivacy, the platform's core functions (cart management, checkout, authentication) are strictly necessary for the e-commerce service explicitly requested by the user. Session cookies maintaining cart state and login sessions fall under the ePrivacy Directive's exemption. However, the personalization engine that tracks browsing behavior to recommend products may require separate consent as it goes beyond strictly necessary functionality. SAP provides GDPR compliance tools including consent management integration points, data subject request handling, and data processing agreements.
Under CCPA/CPRA, customer account data, order history, and browsing behavior collected by the platform constitute personal information. SAP Commerce Cloud's personalization features may require disclosure of profiling activities. Transaction data processing is necessary for the requested service.
Should You Block This Without Consent?
No. SAP Commerce Cloud is the storefront platform itself — blocking it would make the entire e-commerce site non-functional. Core e-commerce cookies (cart, authentication, CSRF) are strictly necessary. If the personalization engine is active and tracks browsing behavior for product recommendations, that component should be managed under analytics or functional consent separately from the essential platform.
Consent Categories
Also Known As
Industries
Frequently Asked Questions
Does SAP Commerce Cloud require visitor consent under GDPR?
No for core e-commerce functions. Cart session, authentication, language preference, and CSRF cookies are strictly necessary under the ePrivacy Directive. The personalization engine tracking browsing behavior for product recommendations goes beyond strictly necessary and should be evaluated separately under analytics or functional consent.
What cookies does SAP Commerce Cloud set?
SAP Commerce Cloud sets first-party session cookies for cart state, authenticated sessions, language and currency preferences, and CSRF protection tokens. LocalStorage and sessionStorage are used for cart caching, recently viewed products, and UI state. Specific cookie names vary by deployment configuration and are set on the storefront domain.
How does ConsentStack handle SAP Commerce Cloud?
ConsentStack classifies SAP Commerce Cloud as essential for core storefront functions — cart, authentication, CSRF — and does not block these cookies. The personalization engine is identified separately and can be blocked pending analytics or functional consent. Detection is based on Hybris-specific script patterns and session cookie signatures.
Other SAP Products
Related Vendors
Manage consent for SAP Commerce Cloud
ConsentStack automatically detects and manages SAP Commerce Cloud trackers so your site stays compliant with global privacy regulations.