> Hashtag Labs GDPR guide. Cookies, consent, US transfers and best practices for publishers running header bidding on European sites. > > Canonical: https://www.flowconsent.com/en/services/advertising/hashtag-labs Advertising # Hashtag Labs Marketing · [Official website](https://hashtag-labs.com) Hashtag Labs is an ad operations and yield optimisation company that runs prebid header bidding wrappers and ad tech infrastructure for digital publishers. [Block Hashtag Labs until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=advertising) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Advertising](https://www.flowconsent.com/en/services/advertising) - Consent Marketing - Prior consent Required - Documented cookies 4 - Third-party domains 4 - Servers United States with global cloud distribution Overview ## What does Hashtag Labs do? ## **What is Hashtag Labs** Hashtag Labs is an ad operations consultancy and technology vendor that helps premium publishers operate header bidding wrappers, yield optimisation, and ad quality monitoring. The integration typically deploys a customised prebid.js wrapper, an ad refresh module, and analytics scripts that report performance to a dashboard. ## **Cookies and identifiers used** The Hashtag Labs wrapper sets a first party cookie for its own analytics (htl\_uid, twelve months) and orchestrates third party cookies from every SSP and DSP in the bidding chain (Index Exchange, Magnite, OpenX, Xandr, Google AdX, Criteo, and others). User identifiers, IP addresses, and contextual signals are exchanged during each auction. ## **Legal basis under the GDPR** The legal basis for header bidding is explicit consent under Art. 6(1)(a) of the GDPR combined with Art. 5(3) of the ePrivacy Directive. The Belgian DPA decision on IAB Europe (February 2022) confirms that legitimate interest cannot be used for behavioural advertising or for the TCF consent string. ## **International data transfers** Hashtag Labs is US based. Bid data, IP, and identifiers may flow to dozens of US bidders. Transfers rely on Standard Contractual Clauses and the EU, US Data Privacy Framework where applicable. The Schrems II decision still requires you to assess the level of protection on a case by case basis. ## **Consent management and TCF v2.2** The Hashtag Labs wrapper consumes the TC string produced by your CMP and passes it to every bidder. Verify that your CMP is a TCF v2.2 registered vendor, that the global vendor list is updated daily, and that no bidder fires before consent. Honour Global Privacy Control. ## **Practical compliance steps** Sign a DPA with Hashtag Labs that maps every SSP they enable as a sub processor. Block prebid until consent. Retain TC strings for at least the cookie duration. Review the bidder list quarterly and document the international transfer chain in your privacy notice. Compliance ## Hashtag Labs and the GDPR Hashtag Labs is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (GDPR Art. 6(1)(a) and ePrivacy Directive Art. 5(3)) - Risk level high - Applicable regulations GDPR, ePrivacy Directive, IAB TCF v2.2 ### Impact assessment (DPIA) A DPIA is recommended because Hashtag Labs orchestrates real time bidding with multiple DSPs, which triggers Art. 35(3)(b) of the GDPR for behavioural profiling at scale. ### Sample text for your banner > We use Hashtag Labs to optimise advertising on this site. With your consent, Hashtag Labs and our bidding partners may set cookies and share data to deliver and measure ads. Cookies and trackers ## What Hashtag Labs sets and contacts - Tracking method JavaScript ad tag and yield optimisation wrapper with first and third party cookies, prebid integration - Server location United States with global cloud distribution - Data transferred outside the EU Hashtag Labs operates from the United States. EU data transfers rely on Standard Contractual Clauses and the EU, US Data Privacy Framework where applicable. ### Cookies set (4) | Name | Type | Duration | Purpose | | --------- | ------------ | --------- | -------------------------------------------------- | | htl\_uid | first\_party | 12 months | Hashtag Labs analytics visitor identifier | | htl\_sess | first\_party | Session | Session identifier for analytics correlation | | htl\_tcf | first\_party | 13 months | Caches the TCF v2.2 consent string for fast lookup | | \_pbjs | first\_party | 30 days | Prebid wrapper state and bidder timeouts | ### Third-party domains contacted (4) - `hashtaglabs.com` - `cdn.hashtaglabs.com` - `analytics.hashtaglabs.com` - `securepubads.g.doubleclick.net` Questions ## Frequently asked questions about Hashtag Labs Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Hashtag Labs set? First party cookies htl\_uid (twelve months), htl\_sess (session), htl\_tcf (thirteen months), and \_pbjs (thirty days). The wrapper also enables many third party SSP and DSP cookies. ### Is consent required for Hashtag Labs? Yes. The wrapper enables behavioural advertising and requires explicit prior consent under Art. 5(3) ePrivacy and Art. 6(1)(a) GDPR. ### What is the legal basis? Explicit consent. Legitimate interest is not acceptable for behavioural advertising or for the TCF consent signal. ### Does Hashtag Labs transfer data to the US? Yes. The wrapper relays data to many US bidders. Use SCCs and the EU, US Data Privacy Framework and document the chain. ### Do I need a DPIA? Yes, due to large scale profiling and onward sharing across many vendors. ### How do I implement Hashtag Labs compliantly? Sign a DPA covering every SSP, block prebid until consent, pass TC string at each auction, audit bidders quarterly. ### Are there alternatives? Server side prebid with reduced data sharing, contextual advertising (Seedtag, Adnami), or direct programmatic deals. ### How do I update my cookie policy? List htl\_ cookies, the hashtaglabs.com domains, every bidder enabled in your wrapper, and link to their TCF entries. Same category ## More services: Advertising [See the whole category](https://www.flowconsent.com/en/services/advertising) ### [Refersion](https://www.flowconsent.com/en/services/advertising/refersion) [Refersion is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Refersion supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Refersion ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/advertising/refersion) [Marketing](https://www.flowconsent.com/en/services/advertising/refersion) · ### [Rontar](https://www.flowconsent.com/en/services/advertising/rontar) [Rontar is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Rontar provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Rontar helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/rontar) [Marketing](https://www.flowconsent.com/en/services/advertising/rontar) · ### [LiveIntent](https://www.flowconsent.com/en/services/advertising/liveintent) [LiveIntent is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. LiveIntent enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, LiveIntent empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/advertising/liveintent) [Marketing](https://www.flowconsent.com/en/services/advertising/liveintent) · ### [Zipleads](https://www.flowconsent.com/en/services/advertising/zipleads) [Zipleads is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Zipleads enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Zipleads empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/advertising/zipleads) [Marketing](https://www.flowconsent.com/en/services/advertising/zipleads) · ### [Bidmatic](https://www.flowconsent.com/en/services/advertising/bidmatic) [Bidmatic is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Bidmatic enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Bidmatic empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/advertising/bidmatic) [Marketing](https://www.flowconsent.com/en/services/advertising/bidmatic) · ### [Adara](https://www.flowconsent.com/en/services/advertising/adara) [Adara is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Adara provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Adara helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/advertising/adara) [Marketing](https://www.flowconsent.com/en/services/advertising/adara) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)