Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Brafton is a content marketing agency and software platform that publishes articles and tracks reader engagement on client websites via JavaScript widgets and first party cookies.
Brafton is a global content marketing agency and software vendor that delivers articles, videos, and infographics on behalf of brands. The Brafton tracker is a JavaScript widget installed on client websites that measures scroll depth, time on page, social shares, and conversions to score content performance. The tracker writes a first party cookie and may forward signals to a connected CRM or marketing automation platform.
Brafton sets first party cookies bfn_uid (twelve months) and bfn_sess (session) to identify readers across visits. It collects URL, scroll depth, dwell time, and conversion events, and may link them to known contacts via UTM parameters or HubSpot, Marketo, or Salesforce integrations.
For analytics and lead scoring cookies, the legal basis is consent under Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy. The content delivery itself does not require additional consent because the visitor is requesting the content. CRM enrichment via Brafton requires a careful balancing test or consent depending on the data sources.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Brafton is headquartered in Boston, United States. Personal data may be transferred to the US under Standard Contractual Clauses and the EU, US Data Privacy Framework where applicable.
Sign a DPA with Brafton, gate the tracker behind a CMP, document the CRM connection in your privacy notice, configure retention to no more than thirteen months, and avoid attaching scoring data to non consented users.
Privacy first analytics such as Plausible or Fathom can measure content performance without persistent identifiers. European agencies (Eskimoz, Wedia) provide similar content marketing services with EU residency.
Websites using Brafton must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended when Brafton tracking is combined with CRM enrichment for lead scoring or with marketing automation triggers, which can amount to systematic profiling.
Sample consent text
We use Brafton to measure how readers engage with our content. With your consent, Brafton may set cookies and link engagement data to your account.
Third-party domains contacted
brafton.comtracker.brafton.comassets.brafton.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| bfn_uid | first_party | 12 months | Pseudonymous reader identifier for content engagement |
| bfn_sess | first_party | Session | Session identifier for the current reading session |
| bfn_utm | first_party | 30 days | Captures UTM parameters for content attribution |
Brafton places tracking cookies for advertising — comply with GDPR using FlowConsent.
First party cookies bfn_uid (twelve months), bfn_sess (session), bfn_utm (thirty days).
Yes for analytics and lead scoring cookies. Content delivery itself does not require additional consent.
Consent for analytics and lead scoring. Contract for B2B service delivery.
Yes. Brafton is US based. Use SCCs and EU, US Data Privacy Framework.
Recommended when Brafton is combined with CRM enrichment or marketing automation for lead scoring.
Sign DPA, gate tracker behind CMP, document CRM connection, cap retention, do not attach scores to non consented users.
Plausible, Fathom, European content agencies like Eskimoz or Wedia.
List bfn_ cookies, brafton.com domains, retention and link to Brafton privacy policy.