Chat widget from Zendesk
Zendesk Chat (Zopim) and website tracking lawsuits
What Suitcast knows about Zendesk Chat (Zopim)
High risk
- Type
- Chat widget
- Vendor
- Zendesk
Requests the scanner matches to it
- static.zdassets.com
- ekr.zdassets.com
- v2.zopim.com
- widget-mediator.zopim.com
- .zopim.com
- .zdassets.com
The short answer
Zendesk Chat (Zopim) is a chat widget from Zendesk. Suitcast rates its risk under the California Invasion of Privacy Act, CIPA, as high, because complaints describe scripts like it recording visitors before they consent. The fix is to load it only after a visitor accepts, or to remove it when it is not used.
Why complaints name it
Complaints describe chat tools like this as recording visitor conversations and sharing them with a vendor without notice.
The act allows $5,000 per violation, which is why firms look for scripts that run the moment a page opens.
The fix
How to stop Zendesk Chat (Zopim) firing before consent
Ask your developer to load the Zendesk widget only after the visitor clicks accept, and add a notice in the chat greeting that conversations are recorded.
Remove the script if you moved support to another tool.
How the scan checks this
- Loads your pages like a first visit. A real browser, nothing clicked, nothing accepted.
- Checks every request before the banner is answered. A request to static.zdassets.com is matched to Zendesk Chat (Zopim) and recorded with the millisecond it fired.
- Clicks reject and watches again. When the banner has a reject button, the scan presses it; if Zendesk Chat (Zopim) keeps firing, the report says so.
Scanner rules and limits are on the methodology page.
Same type
Other chat widgets the scanner checks
Questions owners ask
- Is having Zendesk Chat (Zopim) on my site illegal?
- No. The complaints do not claim the script is illegal; they claim it recorded a visitor before the visitor consented, or kept recording after the visitor declined. Loading Zendesk Chat (Zopim) only after consent, or removing it when it is not used, is what removes the pattern the complaints describe.
- How do I know if Zendesk Chat (Zopim) fires before consent on my site?
- Run the free scan. It loads your pages without clicking anything and checks every request that leaves the browser against its tracker catalog, recording the millisecond each match fired. If Zendesk Chat (Zopim) appears, it fired before consent. When your banner has a reject button, the scan clicks it and reports whether the script kept firing.
- Where do the case counts on this page come from?
- From the complaint text of verified California Invasion of Privacy Act filings. When a complaint names this script, the case is linked to it. Complaints that are not yet available in the public record are not counted, so the number is a floor.
Keep going
- Every tracking script the scanner recognizesGrouped by type, with the risk and fix for each.
- Which scripts appear most in privacy lawsuitsWhat each records and how to gate it.
- I got a CIPA demand letter. What now?What the letter means and the first week.
- Website lawsuits in CaliforniaWhere most tracking suits are filed.
Does Zendesk Chat (Zopim) fire before consent on your site?
Suitcast identifies risk indicators. It is not legal advice and does not determine compliance.