FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Advertising

Grivy

MarketingOfficial website

Grivy is an advertising and coupon distribution platform used by brands to run promotional campaigns and digital reward programs across publisher inventory.

Block Grivy until consentScan my site
Overview

What does Grivy do?

What Grivy is

Grivy is a digital advertising and coupon distribution platform that brands use to deploy promotional campaigns, reward programs and conditional offers on publisher and partner inventory. The platform serves coupons, tracks redemption events and measures effectiveness through cookies and a JavaScript SDK installed on the publisher pages.

What data Grivy collects

Grivy collects an anonymous visitor identifier through cookies, the IP address, the user agent, page URLs, coupon impressions, click events, redemption events and the brand to which the conversion is attributed. The data are used for campaign analytics, segmentation and reporting.

GDPR and ePrivacy implications

Cookies and identifiers stored on the device fall under Article 5(3) of the ePrivacy Directive and require prior consent. The cross site profiling involved in audience measurement and the absence of an adequacy decision for the data importer make consent the only realistic legal basis under Article 6(1)(a) GDPR.

Consent requirements

Block the Grivy SDK and its cookies until the visitor accepts marketing or advertising in your consent banner. Avoid bundling Grivy with strictly necessary categories. Honour withdrawal by stopping events and removing the cookies.

Data transfers

Grivy is operated from Indonesia, which does not benefit from a GDPR adequacy decision. Transfers from the EEA require Standard Contractual Clauses, supplementary measures (encryption, pseudonymisation) and a documented transfer impact assessment that addresses local surveillance laws.

Practical compliance steps

Sign a Data Processing Agreement and the SCCs, document Grivy in your record of processing activities, run a DPIA, gate the SDK behind your CMP, restrict events to those needed for measurement and offer a user level opt out that excludes the visitor from Grivy audiences.

Compliance

Grivy and the GDPR

Grivy is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Article 6(1)(a) GDPR (consent) and Article 5(3) ePrivacy Directive for cookie storage and reading
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive, PECR

Impact assessment (DPIA)

A DPIA is required because Grivy combines advertising profiling with reward and coupon redemption data, and transfers personal data to a country without an adequacy decision.

Sample text for your banner

I agree that Grivy reads and writes cookies on my device, links my browsing to its coupon and reward campaigns and transfers personal data to operators outside the European Economic Area.
Cookies and trackers

What Grivy sets and contacts

Tracking method
JavaScript advertising and coupon distribution platform that uses cookies and pixel tracking to manage promotional campaigns and reward programs
Server location
Asia Pacific (Indonesia)
Data transferred outside the EU
Grivy is operated from Indonesia, a country without a GDPR adequacy decision. Personal data are transferred outside the European Economic Area.

Cookies set (3)

NameTypeDurationPurpose
grivy_uidhttp_cookie1 yearAnonymous visitor identifier set by Grivy to deduplicate impressions and attribute coupon redemptions
grivy_attrhttp_cookie90 daysAttribution cookie that links a coupon click to the converting brand
grivy_evthttp_cookiesessionShort lived event cookie used to track impressions and clicks during a single session

Third-party domains contacted (4)

  • grivy.com
  • cdn.grivy.com
  • api.grivy.com
  • pixel.grivy.com
Questions

Frequently asked questions about Grivy

Can't find your question? Write to us, we answer fast.

Which cookies does Grivy set?

Grivy sets first or third party advertising cookies on the publisher domain and on grivy.com, including a visitor identifier, an attribution cookie for coupon redemption and short lived event cookies. They are personal data under the GDPR.

Is consent required to use Grivy?

Yes. Storing and reading advertising cookies and the cross site profiling that follows are subject to Article 5(3) of the ePrivacy Directive and require prior, freely given consent.

What legal basis applies?

Article 6(1)(a) GDPR (consent) is the only valid basis because the processing is profiling for advertising and the data are transferred to a country without an adequacy decision.

Are user data transferred outside the EEA?

Yes. Grivy is operated from Indonesia, which does not have an adequacy decision. Transfers require Standard Contractual Clauses, supplementary measures and a transfer impact assessment.

Do I need a DPIA for Grivy?

Yes. Cross site profiling, audience segmentation and transfers to a third country without adequacy meet the EDPB criteria for high risk processing.

How do I implement Grivy in a compliant way?

Block the SDK behind your CMP. Sign a Data Processing Agreement and SCCs. Document the integration in your record of processing activities. Allow users to exclude themselves from Grivy audiences.

Are there alternatives to Grivy?

First party coupon platforms hosted in the EU, server side reward management or contextual advertising offer lower compliance risk while keeping promotion programmes operational.

How should I update my cookie or privacy policy?

List Grivy as a processor with the categories of data (cookies, IP, browsing events, redemption events), purposes (coupon distribution, audience analytics), retention, the third country transfer mechanism and a direct opt out link.

Same category

More services: Advertising

See the whole category

Convertiser

Convertiser is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Convertiser supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Convertiser ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

Forsant

Forsant is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Forsant provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Forsant helps deliver the right message to the right audience at the right time.

Marketing

DanAds

DanAds is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. DanAds provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, DanAds helps deliver the right message to the right audience at the right time.

Marketing

RTB House

RTB House is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. RTB House offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, RTB House empowers organizations to optimize strategy and maximize return on investment.

Marketing

Signalayer

Signalayer is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Signalayer enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Signalayer empowers marketing teams to achieve measurable growth.

Marketing

Arsys Domain Parking

Arsys Domain Parking is a DNS management and domain services provider ensuring fast, reliable domain name resolution for websites and applications. It offers load balancing, geo-routing, failover protection, and DNSSEC security. Arsys Domain Parking provides a user-friendly interface for managing DNS records, domain registration, and SSL certificates. With a globally distributed network and low-latency resolution, Arsys Domain Parking keeps online services accessible and responsive worldwide.

Marketing

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site