Attentive
Attentive is a US text message and email marketing platform built for ecommerce, with subscriber acquisition popups, journey automation, two way SMS conversations and AI generated copy.
What does Attentive do?
Attentive is a leading US text message and email marketing platform built for direct to consumer brands. It combines subscriber acquisition popups, multi step journeys, two way SMS conversations, AI generated copy, segment management and a conversion API for server side tracking. Many European retailers consider Attentive when they expand into the US market, even though SMS marketing rules in the EU are stricter than in the US.
What Attentive does
Attentive injects a JavaScript snippet that renders subscriber capture popups (mobile keypad with auto consent text, two tap signup on iOS, multi step modals on desktop). When the visitor opts in, their phone number, email and the metadata of the trigger are sent to Attentive. The platform then sends SMS and email campaigns via its sending infrastructure and tracks delivery, click, replies, and conversions.
Cookies and data collected
Attentive sets first party cookies on the merchant domain (atid, atvid, _attn_session) used to identify the visitor and bind events to a subscriber profile. It collects the IP, user agent, referrer, URL, the phone number and email if provided, and behavioural events such as add to cart and order placed via the Shopify or Magento integration. Conversion data flow back via Attentive's Conversion API.
GDPR and ePrivacy implications
SMS marketing requires prior, freely given, specific, informed and unambiguous consent under Article 13 ePrivacy and national rules such as French Article L34-5 CPCE and German UWG. The opt in flow must be evidenced (timestamp, IP, source page). The Attentive tag also writes non strictly necessary cookies, so Article 5(3) consent applies. Attentive acts as a processor for the marketing automation and as an independent controller for product improvement.
Data transfers to the United States
Attentive is hosted on AWS in the United States. Subscriber data, message content and behavioural events are transferred to the US. Transfers rely on the EU-US Data Privacy Framework (Attentive is certified) and on Standard Contractual Clauses for any subprocessor outside the DPF. Document the chain in your record of processing activities.
How to deploy it compliantly
Sign the DPA, configure double opt in for SMS in countries where it is the de facto standard (France, Germany, Austria, Spain), gate the Attentive tag behind consent, set a clear retention period for inactive subscribers, and make unsubscribe (STOP keyword) accessible in every message. Disclose Attentive in your privacy notice and in your SMS consent text.
Attentive and the GDPR
Attentive is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) for marketing messages and tracking, contract performance (Art. 6(1)(b)) for transactional messages
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive, French Code de la consommation L34-5 CPCE, German UWG, TCPA (US)
Impact assessment (DPIA)
A DPIA is recommended on EU consumer journeys. Attentive combines phone numbers, email, behavioural events, identifier resolution and AI generated message variants. Document the opt in flow (double opt in for SMS in France and Germany), the retention period, the US transfer mechanism, and the recipient categories.
Sample text for your banner
We use Attentive to send marketing SMS and emails and to power the subscribe popup on this site. Attentive sets cookies and transfers your phone, email and browsing data to its servers in the United States. We only enable it after you accept the marketing category in our cookie banner, and we obtain a separate opt in for SMS marketing.
What Attentive sets and contacts
- Tracking method
- JavaScript tag with first party cookies, identifier sync with email and phone, conversion API server side and SMS / email marketing automation
- Server location
- United States (AWS us-east-1) with optional EU residency for enterprise customers
- Data transferred outside the EU
- Attentive is a US company hosted on AWS in the United States. Subscriber phone numbers, email addresses, behavioural events and SMS conversation logs are transferred to the US. Transfers rely on the EU-US Data Privacy Framework (Attentive certified) and on Standard Contractual Clauses for non DPF transfers.
Cookies set (4)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| atid | http_cookie | 1 year | Persistent Attentive visitor identifier stored on the merchant domain, used to bind events to a subscriber profile. |
| atvid | http_cookie | 1 year | Visitor identifier used by Attentive for cross device matching after a successful opt in. |
| _attn_session | http_cookie | Session | Session identifier used to deduplicate page views and popup impressions within a single visit. |
| _attn_creative_state | http_cookie | 30 days | Stores which popups have been shown or dismissed so the visitor is not re prompted. |
Third-party domains contacted (4)
cdn.attn.tvevents.attn.tvattn.tvapp.attentivemobile.com
Frequently asked questions about Attentive
Can't find your question? Write to us, we answer fast.
What cookies does Attentive set?
Attentive sets first party cookies on the merchant domain to identify the visitor (atid, atvid, _attn_session) and to track popup state. Subprocessors loaded by the Attentive tag may set additional analytics cookies.
Does Attentive require GDPR consent?
Yes for both the tag and the marketing messages. The website cookies are not strictly necessary, so Article 5(3) ePrivacy requires consent. SMS and email marketing require a separate prior opt in under Article 13 ePrivacy and the corresponding national rules.
What is the legal basis for processing?
Consent under Article 6(1)(a) GDPR for marketing messages and tracking. Contract performance under Article 6(1)(b) for purely transactional messages tied to an order. Document the opt in evidence (timestamp, IP, source page).
Are data transferred outside the EU?
Yes. Attentive is hosted on AWS in the United States. Subscriber data, messages and behavioural events are transferred to the US. Transfers rely on the EU-US Data Privacy Framework and on SCCs for non DPF subprocessors.
Do I need a DPIA?
A DPIA is recommended at scale. Attentive combines marketing, behavioural profiling, AI generated content, and a US transfer. Several criteria of the EDPB DPIA guidelines apply: large scale, monitoring of behaviour, automated decision making for segmentation.
How do I implement Attentive compliantly?
Use double opt in for SMS in Germany, France, Austria and Spain. Configure clear unsubscribe (STOP keyword, one click email footer). Gate the JavaScript tag behind consent in your CMP. Document Attentive in your privacy notice. Sign the DPA and retain the subprocessor list.
Are there alternatives to Attentive?
Alternatives include Klaviyo, Sendinblue (Brevo, EU), ActiveCampaign, Iterable, Yotpo SMS, Postscript, Emarsys, and Mapp Cloud. Brevo and Emarsys can host data in the EU. Choose based on geography, SMS originator licensing, and CRM integration.
How do I update my cookie policy for Attentive?
Add an Attentive entry covering the atid, atvid and _attn_session cookies with their lifetime and purpose. Mention the US transfer mechanism, the role of Attentive as processor for marketing and as independent controller for product improvement, and link to the Attentive privacy notice.
RD Station
RD Station is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. RD Station enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, RD Station empowers marketing teams to achieve measurable growth.
Vyper
Vyper is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Vyper supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Vyper ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
SchemaPlus
SchemaPlus is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. SchemaPlus supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, SchemaPlus ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Wolfeo
Wolfeo is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Wolfeo provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Wolfeo helps deliver the right message to the right audience at the right time.
Wise Agent
Wise Agent is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Wise Agent enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Wise Agent empowers marketing teams to achieve measurable growth.
Reputon
Reputon is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Reputon integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Reputon helps organizations maintain robust websites that meet user expectations and technical requirements.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.