Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Broadstreet is a local advertising ad server that serves and measures ads using advertising and measurement cookies, so it requires prior consent.
Broadstreet is an advertising ad server used mainly by local publishers and media companies in the United States. It lets a site host, schedule and rotate display campaigns and then report on how those ads perform. To deliver creatives and measure results it uses ad server tags, cookies and tracking pixels.
Broadstreet sets advertising and measurement cookies to deliver creatives, apply frequency capping and count impressions and clicks. The data processed can include the IP address, device and browser details, the referring page and interaction events. While its focus is delivery and measurement rather than cross site profiling, the identifiers it stores are still personal data.
Advertising and measurement cookies are not strictly necessary, so Article 5(3) of the ePrivacy Directive requires prior consent before they are stored or read. The subsequent processing of impression and click data needs a lawful basis under the GDPR, which for advertising delivery and measurement is consent. Transparency about purposes and recipients is essential.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
You must collect freely given, specific, informed and unambiguous consent before any Broadstreet tag runs. Block the ad server script until the visitor opts in, and make refusing as easy as accepting. Keep a documented record of each consent decision so you can prove compliance to a regulator.
Broadstreet runs on infrastructure in the United States, so personal data leaves the European Economic Area when its tags load. Such transfers require an appropriate safeguard such as Standard Contractual Clauses, supported by a transfer impact assessment and supplementary measures where appropriate. Review the data processing terms and confirm the hosting and subprocessor arrangements.
Load Broadstreet only after consent through a consent management platform that blocks the tags by default. Document the advertising and measurement cookies in your cookie policy, sign the data processing agreement and record the United States transfer safeguards. Set a reasonable consent lifetime, provide an easy withdrawal route and review the configuration periodically.
Websites using Broadstreet must obtain user consent under GDPR regulations.
DPIA considerations
Assess whether a data protection impact assessment is needed because Broadstreet sets advertising and measurement cookies and processes data on United States infrastructure. Consider the volume of impressions and clicks recorded, the identifiers stored, the retention period and the transfer of data outside the European Economic Area. Document the lawful basis, the consent mechanism and the safeguards applied to the transfer, and confirm whether measurement could be limited to aggregated, non profiling data.
Sample consent text
We use Broadstreet to serve and measure advertising. With your consent, Broadstreet sets advertising and measurement cookies and may process identifiers to count impressions and clicks, including transfers to the United States. You can accept or reject these cookies and change your choice at any time in our cookie settings.
Third-party domains contacted
broadstreetads.comcdn.broadstreetads.comad.broadstreetads.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| bsa | Advertising | 1 year | Stores an advertising identifier used to deliver campaigns and apply frequency capping in the Broadstreet ad server. |
| bs_visit | Measurement | 30 days | Records impressions and clicks so campaign performance can be measured and reported. |
Broadstreet places tracking cookies for advertising — comply with GDPR using FlowConsent.
Broadstreet sets advertising and measurement cookies that store an ad identifier and record impressions and clicks. They are used to deliver campaigns, apply frequency capping and report on how the ads perform.
Yes. Advertising and measurement cookies are not strictly necessary, so prior consent is required under the ePrivacy Directive and the GDPR. The Broadstreet ad server tags must stay blocked until the visitor opts in.
The legal basis is consent under Article 6(1)(a) of the GDPR, combined with prior consent under Article 5(3) of the ePrivacy Directive for storing and reading the advertising and measurement cookies.
Yes. Broadstreet runs on United States infrastructure, so personal data leaves the European Economic Area when its tags load. The transfer should rely on Standard Contractual Clauses supported by a transfer impact assessment.
Assess whether a data protection impact assessment is needed because Broadstreet sets advertising and measurement cookies and transfers data to the United States. Consider the scale of impression and click data, the identifiers stored and the retention period.
Load Broadstreet only through a consent management platform that blocks the tags before opt in. Document the cookies in your cookie policy, sign the data processing agreement, set a reasonable consent lifetime and offer an easy way to withdraw consent.
You can consider self hosted ad serving within the European Union, contextual placements sold without tracking cookies, or aggregated measurement that avoids personal identifiers. These options reduce consent friction and limit international transfers.
List each Broadstreet cookie with its name, purpose and duration, name Broadstreet as a third party recipient and mention the United States transfer. Keep the entry aligned with your consent banner and review it whenever the integration changes.