FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Analytics

Hyros

Analytics

Hyros is an AI driven ad tracking and multi touch attribution platform used by direct response advertisers, course sellers, agencies and e commerce brands to follow leads from first ad click through to sale, calls and email opens. It relies on JavaScript pixels, first party cookies, server side conversion APIs and browser fingerprinting. For EU advertisers, Hyros is a high risk tool: it tracks identifiable behaviour, sends data to the United States and requires explicit prior consent under GDPR and ePrivacy.

Block Hyros until consentScan my site
Overview

What does Hyros do?

What Hyros is and how it works

Hyros is an AI driven ad tracking and multi touch attribution platform aimed at direct response advertisers, info product sellers, agencies and e commerce brands. It deploys a JavaScript tracking pixel, first party cookies on the advertiser's domain, server side conversion APIs to Meta, Google and TikTok, browser fingerprinting and call and email tracking. The goal is to reconstruct the full path from first ad click to sale, including offline conversions and reactivation campaigns.

What data Hyros collects

Hyros collects IP address, user agent, device fingerprint signals, timestamps, URL and UTM parameters, click identifiers (fbclid, gclid, ttclid), email addresses, hashed emails, call metadata when call tracking is enabled, order values and product identifiers. Hyros stitches these signals to build a long lived customer profile across visits, ads, calls and purchases.

GDPR and ePrivacy implications

The Hyros tracker reads and writes information on the user's device and shares it with a third party for advertising purposes. Article 5(3) of the ePrivacy Directive requires prior consent for that storage and access. Fingerprinting is explicitly covered by EDPB guidance and CNIL recommendations as requiring consent on the same basis. The combination of identifiers also makes Hyros a controller or joint controller arrangement for which contractual documentation is required.

Consent requirements

Hyros must be loaded only after the user has given freely given, specific, informed and unambiguous consent. The consent banner must let the user refuse as easily as accept, must not use pre ticked boxes, and must not bundle Hyros with other purposes. The Hyros pixel and all server side conversion calls must be blocked until consent is recorded.

International data transfers

Hyros runs on US infrastructure. Tracking data of EU users is transferred to the United States, where it is subject to potential access by US authorities under FISA 702. Transfers must rely on Standard Contractual Clauses, on the EU US Data Privacy Framework where Hyros is certified, and on supplementary measures: encryption in transit and at rest, strict access controls and minimisation of identifiers stored on the Hyros side.

Practical compliance steps

Sign a GDPR DPA with Hyros including SCCs. Conduct a DPIA covering the fingerprinting and the cross channel correlation. Block Hyros via a Consent Management Platform until consent is given. Document Hyros in the records of processing activities and in the public cookie policy with vendor name, purposes, data categories, retention and third country transfer. Set a clear retention period and avoid storing hashed emails longer than needed.

Compliance

Hyros and the GDPR

Hyros is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Hyros installs cookies, fingerprints the browser and shares identifiers with a third party for advertising attribution. The legal basis is the user's freely given, specific, informed, unambiguous consent under article 6(1)(a) GDPR combined with article 5(3) ePrivacy. Legitimate interest cannot replace consent for marketing tracking.
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive, national cookie law (CNIL in France, BfDI guidance in Germany, AEPD in Spain), EU US DPF. CNIL has fined US ad attribution tools using fingerprinting without proper consent.

Impact assessment (DPIA)

A DPIA is strongly recommended because Hyros combines large scale tracking, multi channel correlation, fingerprinting and a US data transfer. Assess necessity, proportionality, the granularity of data collected, retention, the lawfulness of fingerprinting under EDPB guidance, and the effectiveness of supplementary measures such as encryption and SCCs.

Sample text for your banner

We use Hyros to measure how our advertising campaigns perform, including across emails, calls and pages. Hyros stores cookies and may use device fingerprinting, and your data is transferred to the United States under Standard Contractual Clauses. We will only activate Hyros if you click Accept.
Cookies and trackers

What Hyros sets and contacts

Tracking method
AI driven multi touch ad attribution and tracking. Hyros uses a JavaScript pixel, first party cookies, server side conversion APIs, email tracking, call tracking and fingerprinting to stitch user journeys across ads, landing pages, calls and sales for direct response advertisers.
Server location
United States. Hyros runs primarily on AWS infrastructure in US regions. No native EU region is offered.
Data transferred outside the EU
Hyros transfers personal data, including IP addresses, advertising identifiers, email hashes and call metadata of EU residents, to the United States. Transfers rely on Standard Contractual Clauses and on the EU US Data Privacy Framework where Hyros is certified. Additional safeguards are required after Schrems II.

Cookies set (3)

NameTypeDurationPurpose
hyros_idpersistent2 yearsFirst party Hyros visitor identifier used to stitch the user journey across pages, sessions, ads and conversions. Requires user consent.
hy_utmpersistent90 daysStores the first touch UTM parameters and click identifiers (fbclid, gclid, ttclid) seen on entry, used for attribution. Requires consent.
hy_sidsessionsessionShort lived session identifier used by Hyros to group page views into a single session for behaviour analysis. Requires consent.

Third-party domains contacted (4)

  • hyros.com
  • t.hyros.com
  • api.hyros.com
  • tracking.hyros.com
Questions

Frequently asked questions about Hyros

Can't find your question? Write to us, we answer fast.

What cookies and identifiers does Hyros set?

Hyros sets first party cookies on the advertiser's domain to store its own visitor identifier and to remember UTM and click parameters. It also writes localStorage entries, may use canvas and audio fingerprinting signals, and pushes server side conversions to Meta, Google and TikTok with hashed emails and IP addresses. Cookie names typically start with hy or h_ depending on the deployment.

Does Hyros require user consent?

Yes. Hyros writes information on the device and sends identifiers to a third party for advertising attribution. Article 5(3) ePrivacy requires prior consent. Fingerprinting requires consent on the same basis under EDPB guidance. The Hyros pixel and server side calls must be blocked until the user explicitly opts in.

What is the legal basis for using Hyros?

The lawful basis is the user's freely given, specific, informed and unambiguous consent under article 6(1)(a) GDPR combined with article 5(3) ePrivacy. Legitimate interest is not a valid basis for advertising tracking because it cannot override the prior consent requirement set by ePrivacy.

Does Hyros transfer data to the United States?

Yes. Hyros runs on US infrastructure and EU visitor data is transferred to the United States. Transfers must rely on Standard Contractual Clauses, the EU US Data Privacy Framework where Hyros is certified, and supplementary safeguards such as encryption and strict access controls.

Do we need a DPIA for Hyros?

A DPIA is strongly recommended because Hyros combines large scale tracking, multi channel correlation, fingerprinting and a transfer to a third country. The DPIA must document the necessity of fingerprinting, retention, access, and the effectiveness of SCCs and other supplementary measures.

How do we implement Hyros compliantly?

Sign a DPA with SCCs, block Hyros until consent is recorded, document Hyros in the records of processing and the cookie policy, run a DPIA, configure server side and client side conversions to fire only after consent, and minimise the personal identifiers (email hashes, phone hashes) shared with Hyros.

What alternatives to Hyros exist for EU advertisers?

EU friendly alternatives include Triple Whale with EU controls, Northbeam, Polar Analytics, Wicked Reports, server side GTM hosted in the EU, Piwik PRO, Matomo with custom attribution, and Plausible enriched with custom event tracking. Several support self hosting in the EEA, reducing transfer risk.

How do we update the cookie policy when using Hyros?

List Hyros in the cookie policy with vendor name, purposes (advertising attribution, conversion tracking), categories of data, cookie names, lifetime, third country transfer to the US and the legal basis (consent). Provide a direct link to opt out and to the Hyros privacy policy. Update whenever Hyros adds new sub processors or new tracking methods.

Same category

More services: Analytics

See the whole category

Strava

Strava is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Strava offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Strava empowers organizations to optimize strategy and maximize return on investment.

Analytics

Metrilo

Metrilo is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Metrilo supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Metrilo enables informed decisions that improve experience and drive results.

Analytics

BizSpring

BizSpring is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. BizSpring supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, BizSpring enables informed decisions that improve experience and drive results.

Analytics

Lexity

Lexity is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Lexity supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Lexity enables informed decisions that improve experience and drive results.

Analytics

Pyze

Pyze is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Pyze offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Pyze empowers organizations to optimize strategy and maximize return on investment.

Analytics

Meltwater

Meltwater is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Meltwater supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Meltwater enables informed decisions that improve experience and drive results.

Analytics

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site