Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Dynad is a Brazilian programmatic advertising and ad server platform that loads JavaScript ad tags and uses cookies for behavioural targeting, retargeting and attribution.
Dynad is a Brazilian advertising technology platform that combines a full stack ad server, demand side platform, and creative management toolkit. It allows publishers to monetise inventory through programmatic auctions and lets advertisers run retargeting and display campaigns across web and mobile. Dynad relies on persistent identifiers, cookie synchronisation, and conversion pixels, which makes it a tracking technology subject to the GDPR and the ePrivacy Directive when deployed on European websites.
Dynad sets third party cookies on its dynad.com and dyntrk.com domains, including a pseudonymous user ID, frequency capping data, and synchronised IDs from DSP partners. Retention durations vary from session up to thirteen months. None of these cookies are strictly necessary, so consent must be obtained before they are stored or read.
Explicit consent under Article 6(1)(a) is the only valid basis. The CJUE Planet49 ruling and the Belgian DPA decision on IAB Europe confirm that retargeting and behavioural advertising cannot rely on legitimate interest. Consent must be specific, informed, granular, and revocable.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Dynad is headquartered in Brazil, which is currently not recognised as adequate by the European Commission (as of 2026 the adequacy assessment is ongoing under the LGPD). Transfers must therefore rely on Standard Contractual Clauses combined with a Transfer Impact Assessment. Dynad may also forward data to DSP partners in the US, which extends the transfer chain further.
If Dynad is part of your TCF v2.2 vendor list, pass the TC string before each bid request. Otherwise treat Dynad as a non TCF vendor and gate it behind explicit consent in your CMP. Always block the script until consent and honour Global Privacy Control headers.
Sign a DPA with Dynad that references the SCCs, conduct a TIA for the Brazil transfer, document every domain in your cookie policy, and retain consent proof for the duration of the cookies. Audit the integration each quarter to detect any new sync partner that joins the bid chain.
Websites using Dynad must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended because Dynad enables behavioural advertising and retargeting at scale, with onward sharing to DSPs and SSPs, which falls under Art. 35(3)(b) of the GDPR.
Sample consent text
We use Dynad to deliver and measure advertising on our website. With your consent, Dynad may set cookies and share data with advertising partners to display relevant ads.
Third-party domains contacted
dynad.comdyntrk.comcdn.dynad.comsync.dynad.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _dn_uid | third_party | 12 months | Pseudonymous user identifier for advertising targeting |
| _dn_freq | third_party | 30 days | Frequency capping for ads |
| _dn_sync | third_party | 12 months | Cookie sync identifier shared with DSP partners |
| _dn_conv | third_party | 30 days | Conversion attribution data |
| _dn_optout | third_party | 5 years | Opt out flag for advertising cookies |
Dynad places tracking cookies for advertising — comply with GDPR using FlowConsent.
Third party cookies on dynad.com and dyntrk.com, including a pseudonymous user ID (twelve months), frequency capping, sync IDs from DSPs, and conversion attribution. Durations range from session to thirteen months.
Yes. All Dynad cookies are non essential, so prior informed consent under Art. 5(3) ePrivacy and Art. 6(1)(a) GDPR is required before any script loads or cookie is read.
Explicit consent. Legitimate interest is not acceptable for behavioural advertising and retargeting, confirmed by EDPB and the IAB Europe ruling.
Yes. Dynad is based in Brazil and forwards data to DSP partners worldwide, including in the US. Use SCCs and run a Transfer Impact Assessment for the Brazil transfer.
A DPIA is recommended due to large scale profiling and onward sharing with multiple DSPs.
Block until consent, pair with a CMP, document the transfer chain, sign a DPA referencing SCCs, audit partners quarterly.
Contextual advertising (Seedtag, Adnami), direct deals, server side first party retargeting reduce the privacy footprint.
Add Dynad cookies, list dynad.com and dyntrk.com domains, indicate retention, and link to the Dynad privacy policy.