Overview
Salecycle is a UK-based behavioural retargeting and cart-abandonment recovery platform. It loads an iframe receiver on the customer website, tracks visitor interactions and session state, and fires impression beacons to salecycle.com subdomains to trigger retargeting emails, on-site messaging, and personalised remarketing. Classified as an advertising and identity-linking vendor under the ePrivacy Directive; requires explicit advertising consent.
Detection capabilities
- Signature count
- 3
- Detection methods
- network
- Property types
- hostnamepathname
Performance impact
Performance Impact
- Requests per page
- 2
Common mistakes
- 1Firing the Salecycle iframe receiver before advertising consent is obtained, allowing cross-site identity linking via the sc_frame_id parameter to begin as soon as the page loads
- 2Not gating the impression beacon (i.salecycle.com/impression) behind the advertising consent bucket - the beacon carries a unique msgId that links visitor sessions to Salecycle's retargeting database and downstream email dispatch workflows
- 3Assuming Salecycle is functional because it "recovers abandoned baskets", missing that it is a third-party advertising retargeting service requiring explicit consent under the ePrivacy Directive
- 4Not declaring Salecycle in the privacy notice because the vendor name does not appear in the cookie inventory - the s.salecycle.com iframe persists state via postMessage rather than cookies on the parent domain, and is easy to miss in a naive cookie audit
Compliance considerations
Salecycle loads s.salecycle.com and i.salecycle.com from the customer site. The receiver.html iframe maintains a cross-site identifier (sc_frame_id query parameter) that links visitors across properties that share a Salecycle account. The /impression endpoint records visitor state changes and feeds the retargeting workflow, including behavioural email dispatch. All of this constitutes third-party advertising tracking and requires prior consent under ePrivacy Art 5(3) and GDPR Art 6(1)(a). Salecycle must be categorised under the advertising consent bucket in the CMP, listed explicitly in the privacy notice, and included in DPIA when deployed on regulated-sector properties (insurance, energy, financial services, telecoms).
Detection gap: prior to 2026-04-15 Salecycle was not in the Obscurity tag registry and was not flagged by the ConsentMark public scanner. The gap was discovered via the virginmedia.ie priority scan on 2026-04-15T12-28-10, where Salecycle fired in all three consent phases (pre-consent, accept, reject) on a named Irish regulated controller - a theatrical-banner pattern. Added in sprint company_tools-ex7lt / feature company_tools-ex7lt.4.
Related services
Scan your site for Salecycle
Run a free ConsentMark scan to see how Salecycle is loading on your site, whether it respects consent, and where governance gaps exist across your wider tag estate.
Start a free scan