FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Marketing

Gravitec

MarketingOfficial website

Gravitec is an EU based web push notification service that subscribes visitors to browser push notifications through service workers and push tokens and sends campaigns. It requires explicit browser push permission and consent for its analytics cookies, so it should not run until both are given. As an EU provider its transfers are limited, but operators should still document the legal basis and the subscription data it processes.

Block Gravitec until consentScan my site
Overview

What does Gravitec do?

What Gravitec is

Gravitec is an EU based web push notification service, operated from Estonia, that lets websites subscribe visitors to browser push notifications and send them campaigns. It works through its own domains, including gravitec.net, app.gravitec.net and cdn.gravitec.net, and uses the browser push mechanism rather than email. For the operator it is a marketing third party that processes subscription data and can use analytics cookies to measure campaign performance.

How it works

Gravitec registers a service worker in the visitor browser and, once the visitor grants push permission, obtains a push token from the browser push service. That token is used to deliver notifications even when the visitor is not on the site. Alongside this, Gravitec can set analytics cookies to track opt ins, deliveries, and clicks so that campaign performance can be measured.

What data and cookies it collects

Gravitec typically processes push subscription tokens, subscriber identifiers, and engagement data such as deliveries and clicks, and it can set analytics cookies for measurement. The push token and related signals can constitute personal data because they identify a specific browser or device. Operators should review the exact cookies and the subscriber data in their own setup, since the precise fields can vary by configuration.

GDPR and ePrivacy implications

Web push and analytics cookies both bring Gravitec within the GDPR and the ePrivacy Directive. Sending push notifications is a form of electronic marketing that requires the visitor to opt in, and the analytics cookies are not strictly necessary, so they require consent. The push subscription itself relies on explicit browser permission, which should be requested in a clear, non deceptive way and recorded as part of the consent trail.

Consent requirements and data transfers

Consent should cover both the push subscription and the analytics cookies, and the service should not run until the visitor has accepted. Gravitec is EU based and processes primarily within the EU, so third country transfers are limited, although push delivery depends on browser push services that can use global infrastructure. Where any such routing involves a transfer, operators should confirm that appropriate safeguards are in place and disclose the processing in their notices.

Practical compliance steps

To deploy Gravitec compliantly, request push permission clearly and gate the analytics cookies behind a consent category, then block both until consent is given. Provide an easy way to unsubscribe and to withdraw consent, and make sure withdrawal stops notifications and clears the analytics cookies. List Gravitec and its domains in your cookie policy, document the legal basis, and keep subscriber data to the minimum needed with sensible retention.

Compliance

Gravitec and the GDPR

Gravitec is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR) for push subscriptions and for analytics cookies; explicit browser push permission is also required.
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive (Cookie Law)

Impact assessment (DPIA)

A full DPIA is usually not mandatory for standard web push, but a documented risk assessment is recommended where push tokens, subscriber lists, and analytics cookies are combined. Assess the volume of subscribers, the data linked to push tokens, and any analytics profiling, and record mitigations such as double opt in, clear permission prompts, and easy unsubscribe.

Sample text for your banner

We use Gravitec to send browser push notifications and to measure how they perform. This requires your explicit push permission and may set analytics cookies. With your consent, Gravitec push notifications and these cookies will be activated.
Cookies and trackers

What Gravitec sets and contacts

Tracking method
Web push via service workers and push tokens, plus analytics cookies
Server location
European Union (Estonia)

Cookies set (9)

NameTypeDurationPurpose
gravitecSubscriptionIdFunctionalPersistentStores the unique push subscription identifier that links the browser to the Gravitec account
gravitec_subscriberpersistent1 yearLinks the browser to its push subscription so notifications can be delivered and managed.
gravitec_permissionpersistent1 yearRecords the push permission state so the prompt is not shown again unnecessarily.
_grsmFunctional6 monthsRemembers the subscription state and whether the permission prompt has already been shown
gravitec_analyticspersistent6 monthsMeasures opt ins, deliveries, and clicks to evaluate campaign performance.
_gaAnalytics2 yearsGoogle Analytics cookie used on the Gravitec dashboard to distinguish unique visitors
gravitec_sessionsessionSessionMaintains state during a single visit while the subscription flow runs.
_gidAnalytics24 hoursGoogle Analytics cookie that distinguishes visitors over a short period
grtc_segmentFunctional1 yearStores segmentation attributes used to target push campaigns to the subscriber

Third-party domains contacted (9)

  • gravitec.net
  • gravitec.net
  • app.gravitec.net
  • eu.gravitec.net
  • cdn.gravitec.net
  • fcm.googleapis.com
  • updates.push.services.mozilla.com
  • web.push.apple.com
  • wns2-by3p.notify.windows.com
Questions

Frequently asked questions about Gravitec

Can't find your question? Write to us, we answer fast.

What cookies does Gravitec set?

Gravitec typically sets cookies that link the browser to its push subscription, record the push permission state, and support analytics for deliveries and clicks. The analytics cookies are non essential and require consent, while the subscription cookies relate to the push opt in. Confirm the exact cookies in your own deployment, since they can vary by configuration.

Is consent required to use Gravitec?

Yes, consent is required for both the push subscription and the analytics cookies. The push notifications need an explicit opt in and the browser push permission, and the analytics cookies are not strictly necessary. Gravitec should not run until the visitor has accepted.

What is the legal basis for processing?

The legal basis is consent under Article 6(1)(a) GDPR for the push subscription and for the analytics cookies. Sending push messages is electronic marketing that relies on opt in consent. Record both the push permission and the cookie consent in your consent trail.

Does Gravitec transfer data to the US?

Gravitec is EU based and processes primarily within the EU, so third country transfers are limited. However, push delivery relies on browser push services that can route through global infrastructure. Where any such routing involves a transfer, confirm that appropriate safeguards are in place.

Do I need a DPIA for Gravitec?

A full DPIA is usually not mandatory for standard web push, but a documented risk assessment is recommended. Pay attention where push tokens, subscriber lists, and analytics cookies are combined at scale. Record mitigations such as double opt in, clear prompts, and easy unsubscribe.

How do I implement Gravitec compliantly?

Request push permission clearly and gate the analytics cookies behind a consent category, blocking both until consent is given. Provide easy unsubscribe and consent withdrawal that stops notifications and clears the analytics cookies. List Gravitec and its domains in your cookie policy and document the legal basis.

Are there alternatives to Gravitec?

Other web push providers exist, including EU hosted options, and email or in app messaging can serve similar goals with different consent needs. Whichever you choose, web push still requires an explicit opt in and, for analytics, cookie consent. Evaluate alternatives on data location, opt in design, and contractual terms.

How do I update my cookie policy for Gravitec?

Add Gravitec as a named third party, describe its subscription and analytics cookies, and explain that it sends browser push notifications after an explicit opt in. Reference its domains such as gravitec.net and app.gravitec.net and link to its policy. Review the entry whenever the cookies or processing change.

Same category

More services: Marketing

See the whole category

Constant Contact

Constant Contact is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Constant Contact provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Constant Contact helps deliver the right message to the right audience at the right time.

Marketing

Leadsquared

Leadsquared is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Leadsquared provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Leadsquared helps deliver the right message to the right audience at the right time.

Marketing

Zenvia

Zenvia is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Zenvia supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Zenvia ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

Auxilia

Auxilia is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Auxilia supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Auxilia ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

BrandBuilderAI

BrandBuilderAI is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. BrandBuilderAI provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, BrandBuilderAI helps deliver the right message to the right audience at the right time.

Marketing

Doppler for WooCommerce

Doppler for WooCommerce is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Doppler for WooCommerce supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Doppler for WooCommerce remains a leading web.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site