Data strategy · Behavioral Commerce · 9 min read · LayerZ Editorial
Google blinked. The cookies are not gone. But the structural shift in how brands must earn customer data is irreversible, and most ecommerce teams are still playing the wrong game.
In July 2024, Google made one of the most dramatic U-turns in the history of digital advertising. After four years of warnings, three missed deadlines, and an industry-wide scramble to prepare for a cookieless world, Google announced it would not deprecate third-party cookies in Chrome after all. [1]
The reaction from many ecommerce teams was audible relief. The crisis was over. The billions spent rebuilding data infrastructure could slow down. Life could return to normal.
That reaction is exactly wrong.
"The cookie is not the issue. The issue is that you built your entire understanding of your customer on data they never agreed to share."
The structural problem no U-turn can fix
Here is the reality: while Chrome kept the cookie alive, Safari and Firefox have been blocking third-party cookies by default since Safari 13.1, that is March 2020. [2] Chrome's 67% market share means third-party tracking still technically works for the majority of users, but Apple's ATT framework has decimated app-level tracking for the 1.5 billion iPhone users globally. GDPR fines passed 7.1 billion euros cumulative by 2025. Consent rates for tracking are collapsing. And even in Chrome, users are increasingly being given explicit choice over whether to allow cross-site tracking. [3]
The "cookiepocalypse" was never really about Google Chrome. It was always about something more fundamental: the end of surveillance as a marketing strategy. And that shift is permanent, regardless of what Google's Privacy Sandbox team decides next.
Which brings us to the only durable answer: zero-party data.
Canonical definition: "Zero-party data is that which a customer intentionally and proactively shares with a brand. It can include preference center data, purchase intentions, personal context, and how the individual wants the brand to recognize them."
Forrester Research, coined by Fatemeh Khatibloo, VP Principal Analyst, 2020 [4]
The word "intentionally" is doing enormous work in that definition. It is not data you inferred from a scroll pattern. It is not data you reconstructed from a purchase history. It is not data you bought from a broker who bought it from someone else who tracked a user without their knowledge. It is data a customer chose to give you, because they believed the exchange was worth it.
That distinction is not just ethical. It is commercially material. Forrester's own analysts described zero-party data as "gold", not because it is abundant (it is not), but because its accuracy, intent-richness, and compliance posture are unmatched by any other data type. [5]
| Data type | Source | Accuracy | Privacy-safe | Intent signal | Post-cookie viability |
|---|---|---|---|---|---|
| Third-party data | Brokers / exchanges | Low | No | Inferred | Structurally declining |
| First-party data | Observed behaviour on your site | Medium | Conditional | Behavioural | Viable, but limited |
| Zero-party data | Customer explicitly shares it | High | Yes | Declared intent | Structurally durable |
The hardest challenge for most teams is accepting that first-party data is not zero-party data. This is a common conflation. Your analytics platform knows which pages a user visited, how long they hovered over a product, and which category they browsed three times. That is first-party: observed, inferred, reconstructed. It tells you what they did. Zero-party data tells you what they want.
| Preference centres Users declare their communication preferences, content interests, product categories, and contact frequency directly. |
Product quizzes Interactive flows that convert browsing ambiguity into declared intent. They convert 7 to 25% of participants into buyers. [6] |
| In-session micro-questions A single question at the moment of decision: "What is most important to you today, price, delivery speed, or quality?" Four words of answer, infinite personalisation value. |
Post-purchase surveys and feedback Direct declarations of satisfaction, motivation, and future intent, the richest signal for lifecycle marketing and churn prediction. |
Here is where we have to challenge the comfortable narrative. Most content about zero-party data presents it as an obvious, easy upgrade from third-party tracking. It is not.
The real challenge
While 97% of businesses agree that personalization is critical and 90% say they plan to capture zero-party data, Forrester's own research found that fewer than half actually know how to use such datasets successfully. [7] Collecting ZPD is tractable. Activating it in real time, in the session it was collected, is the unsolved problem for most teams.
The structural difficulty is threefold.
The exchange problem. Customers do not share data out of generosity. They share it when the value exchange is obvious and immediate. A preference quiz that disappears into your CRM and produces no visible personalisation change in the next 30 seconds has broken the contract. The customer gave you something, you gave them nothing back. They will not do it again.
The velocity problem. Zero-party data has a shelf life measured in sessions, not months. A customer who tells you they are shopping for a gift has a completely different intent profile from the same customer returning to browse for themselves. If you can only activate declared preferences on their next visit, after a CRM sync, a segment refresh, a campaign build, you have already lost the moment.
The volume problem. Third-party data was abundant by design, tracking was passive and pervasive. ZPD is inherently sparse. You will never collect as much zero-party data as you collected third-party. The question is whether you can make each signal count more. The answer requires a completely different activation infrastructure.
| 79% of Americans are concerned about how companies use their data Pew Research Center [8] |
75% of consumers will not buy from organisations they do not trust with their data Cisco Consumer Privacy Study, 2024 [9] |
2.4x higher lifetime value for customers acquired through ZPD-powered campaigns Growth Engines client data [10] |
This is the intersection that most data strategy conversations miss entirely.
The standard playbook for zero-party data looks like this: run a quiz, send results to your CRM, build a segment, trigger an email campaign. That is a valid approach. It is also slow, lossy, and fundamentally misses what makes ZPD powerful in the first place, the declared intent exists in the moment the customer shares it.
A customer who tells you they are looking for a gift for their partner's birthday does not need an email three days later. They need a different experience on the current page, in the current session, triggered within milliseconds of that declaration.
"Behavioral Commerce is the activation layer that ZPD has always been missing. It is the difference between knowing what your customer wants and being able to respond before they leave."
As LayerZ has documented in its work on Behavioral Commerce vs CRO, the core failure of most optimisation approaches is a timing problem, not a design problem. [11] Intent fades in seconds. The hesitating visitor who lingered on your pricing page for 45 seconds is not the same visitor who returns three days later. Zero-party data collected in-session is the highest-quality signal available, but only if you can act on it inside the same session.
| How ZPD and Behavioral Commerce create a closed-loop personalisation engine | ||||
|---|---|---|---|---|
| 01 Behavioural signal detected Scroll depth, hover, hesitation, exit intent First-party |
02 ZPD collection triggered Micro-question, quiz, preference prompt Zero-party |
03 Declared intent captured "I am buying a gift", "I need this today" Zero-party |
04 Real-time action fired Journey branches. Personalised experience, same session Activation |
05 Checkpoint and enrichment ZPD persisted. Cross-session continuity preserved Retention |
LayerZ's Journey Builder is architected precisely around this loop. Its Event Triggers detect in-session behavioural signals. Its Condition nodes branch the journey based on declared preferences collected in the same session. Its Action nodes fire personalised experiences (overlays, banners, tooltips) without touching site code. And its Checkpoint nodes persist zero-party data across sessions, so a returning customer resumes from where they left off, with their declared intent already in context.
This resolves the velocity problem directly. The declared preference does not have to travel through a CRM, wait for a segment refresh, and return as a triggered email. It flows immediately into a branch condition and drives the experience in under 200ms. [12]
The critical distinction
LayerZ's real-time personalisation approach is built on zero-party data collection and same-session activation: collecting direct user input such as preference forms and surveys and using them immediately within the same session, eliminating the need for invasive tracking. [13] This is not a privacy feature bolted on. It is the architectural foundation.
There is a compliance argument for ZPD and there is a commercial argument. Most brands lead with compliance. That is the wrong instinct.
The GDPR is not the reason to build a zero-party data strategy. It is a floor, not a ceiling. The GDPR enforcement tracker counted 2,245 or more fines as of March 2025. Meta's 1.2 billion euro fine for unlawful EU-US data transfers remains the largest single GDPR penalty on record. [3] But compliance with privacy law merely keeps you out of court. It does not build the customer relationships that generate 2.4x lifetime value.
The commercial argument is sharper: trust is a conversion variable.
When a customer explicitly shares data with you, they have made a decision. They have concluded that the value of the personalisation they will receive outweighs the discomfort of disclosure. That decision is a pre-qualification for deeper engagement. It predicts higher order value, lower churn, and stronger loyalty programme uptake, not because of any algorithm, but because of the human psychology of reciprocity.
The hardest question
Ask yourself honestly: if your customers knew exactly how you were currently collecting and using data about them, would they feel the exchange was fair? If the answer is uncertain, you do not have a privacy problem. You have a relationship problem, and no first-party data strategy will fix it.
Safari's Intelligent Tracking Prevention has blocked third-party cookies by default since March 2020. Apple's ATT framework requires explicit opt-in for app tracking. Users who opt out number in the hundreds of millions, and Apple has faced its own regulatory scrutiny for the ATT framework's competitive implications, with Italy, France and Germany all investigating in 2025. [14] The direction of travel is unambiguous. Every platform, every regulator, every informed consumer is moving toward explicit consent and value exchange as the basis for data collection.
The question is not whether to build a zero-party data strategy. The question is how far ahead you want to be when the brands still relying on inferred, surveilled data find they have nothing left to work with.
Most ZPD guides jump straight to tactics: run a quiz, add a preference centre, put a survey in your post-purchase flow. These are valid. But without an activation architecture, they produce data that sits in a database improving nothing.
Before asking a customer for anything, be explicit about what they get in return. Not in small print. In the experience itself. The offer has to be immediate and visible. Vague future benefit ("help us improve your experience") converts at a fraction of the rate of specific present benefit ("answer one question and see personalised recommendations now").
A preference centre buried in account settings collects data from your most engaged users. That is useful but not transformative. The highest-value zero-party data is collected at decision points, when a user is actively comparing products, showing hesitation on pricing, or browsing a category for the third time in a session. This is precisely where Behavioral Commerce and ZPD intersect: the behavioural signal tells you when to ask, the zero-party response tells you what to do.
As LayerZ's work on the technical wall makes clear, the bottleneck in most optimisation efforts is not the quality of insight but the speed of activation. [15] A declared preference that drives an email campaign three days later has burned 80% of its conversion power. The same signal, activating a personalised experience in the same session, is qualitatively different in commercial impact.
One of the most common ZPD mistakes is treating every session as a blank slate. A customer who told you on Monday they are shopping for a wedding gift should not be asked the same question on Thursday. Checkpoint-based session persistence, knowing where a user was in their journey and what they declared, is what transforms ZPD from a one-time signal into a durable relationship asset.
Practical checklist. Map your top 3 decision moments. For each: what behavioural signal precedes hesitation? What is the one question that, if answered, would most improve the experience? How quickly can you act on the answer? These three inputs define your ZPD activation architecture. Start there, not with the technology.
Google's U-turn gave the industry a reprieve. It did not give it a pass. The structural forces eroding third-party tracking (regulation, browser policy, consumer expectations, platform competition) are independent of Chrome's cookie jar and they are accelerating, not reversing.
Zero-party data is not a cookie replacement. It is a fundamentally different relationship with your customer, one built on explicit exchange rather than silent surveillance. Getting that relationship right requires rethinking both what you collect and how fast you activate it.
The brands that will win in this environment are not the ones with the most data. They are the ones who have built systems that can earn, capture, and act on declared intent in real time, turning the moment of disclosure into the moment of conversion, without an engineering sprint, a CRM sync, or a three-day campaign build cycle standing in the way.
That is what Behavioral Commerce, built on a zero-party data foundation, makes possible.
"Zero-party data without real-time activation is a filing cabinet. Behavioral Commerce is what makes it a conversation."
As LayerZ has shown in Beyond the Buzzword: Redefining Real-Time Personalization, same-session activation is what separates a personalisation promise from a personalisation result.
LayerZ Journey Builder closes the gap between declared intent and real-time action, no engineering sprint required.