Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
DTScout is a US ad data and audience platform that uses cookies, pixels and DSP integrations to power programmatic targeting on third party inventory.
DTScout is a programmatic advertising data and audience platform. Publishers and brands embed its pixel to enrich first party visits with cross site signals, and advertisers buy access to DTScout audiences through demand side platforms (DSPs) for retargeting and prospecting campaigns.
DTScout drops first or third party cookies, captures the IP address, user agent, page URL, referrer, hashed identifiers shared by partners, and event signals describing the visitor interests. The platform exchanges identifiers with downstream DSPs through cookie syncing and server side audience APIs.
Cookie storage triggers Article 5(3) of the ePrivacy Directive and requires prior, freely given, informed consent. Audience syncing turns the operation into joint processing for advertising and falls under Article 6(1)(a) GDPR. The advertiser remains controller of the consent collection and must be able to demonstrate it.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Block the DTScout pixel until the marketing or advertising category has been accepted in the consent banner. Pass a TCF v2.2 TC string when relying on the IAB framework. Honour withdrawal by stopping all event ingestion and clearing first party cookies on the publisher domain.
DTScout is operated from the United States with onward sharing to a network of advertising partners. Transfers from the EEA require certification under the EU US Data Privacy Framework or Standard Contractual Clauses with a transfer impact assessment that addresses the FISA 702 risk surface for US ad data brokers.
Sign a Data Processing Agreement, list DTScout and its onward partners in your record of processing activities, gate the pixel through your CMP, restrict the events to those required for measurement and offer an opt out that removes the user from DTScout audiences.
Websites using DTScout must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is required because DTScout combines cross site tracking, audience syncing with downstream DSPs and US transfers, all factors that meet the EDPB criteria for high risk processing.
Sample consent text
I agree that DTScout reads and writes cookies on my device, syncs my browsing identifiers with advertising partners and uses these data for cross site advertising, including transfers to the United States.
Third-party domains contacted
dtscout.comp.dtscout.comsync.dtscout.comcdn.dtscout.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| dtsid | http_cookie | 1 year | Persistent visitor identifier used by DTScout to recognise the user across publisher sites and build audience segments |
| dt_sync | http_cookie | 30 days | Cookie sync identifier exchanged with downstream demand side platforms during cookie matching |
| dt_evt | http_cookie | session | Short lived cookie used to deduplicate event signals during a single browsing session |
DTScout places tracking cookies for advertising — comply with GDPR using FlowConsent.
DTScout sets first or third party advertising cookies on the publisher domain and on dtscout.com, including a persistent visitor identifier (dtsid), a sync cookie used during cookie matching with DSPs and short lived event cookies. They are personal data under the GDPR.
Yes. Storage and reading of advertising cookies, plus the cross site profiling that follows, fall under Article 5(3) of the ePrivacy Directive and require prior, freely given consent.
Article 6(1)(a) GDPR (consent) is the only valid basis. Cross site profiling for advertising and audience syncing exclude legitimate interest under EDPB guidance on tracking.
Yes. DTScout is operated from the United States and shares data with downstream partners that may also be in the US. Use the EU US Data Privacy Framework or Standard Contractual Clauses with a transfer impact assessment.
Yes. Cross site tracking, audience syncing, and US transfers combined trigger Article 35 GDPR. A documented DPIA is required.
Block the pixel until consent is granted. Pass a TCF v2.2 TC string. Honour withdrawal by stopping events. Sign a DPA, list downstream partners and allow user level opt out.
First party measurement, contextual advertising platforms hosted in the EU and walled garden tools (Google, Meta) offer different risk profiles. None of them avoid consent for advertising cookies, but they reduce the third country surface.
List DTScout as a processor, name the categories (cookies, IP, browsing events, hashed identifiers), the purposes (audience building, retargeting, frequency capping), the retention, the US transfer mechanism and a direct opt out link.