> How Gravitec sends web push notifications, which browser permission and cookies it relies on and why both push opt-in and GDPR consent are required. > > Canonical: https://www.flowconsent.com/en/services/marketing/gravitec Marketing # Gravitec Marketing · [Official website](https://gravitec.net) Gravitec is an EU based web push notification service that subscribes visitors to browser push notifications through service workers and push tokens and sends campaigns. It requires explicit browser push permission and consent for its analytics cookies, so it should not run until both are given. As an EU provider its transfers are limited, but operators should still document the legal basis and the subscription data it processes. [Block Gravitec until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Marketing - Prior consent Required - Documented cookies 9 - Third-party domains 9 - Servers European Union (Estonia) Overview ## What does Gravitec do? ## **What Gravitec is** Gravitec is an EU based web push notification service, operated from Estonia, that lets websites subscribe visitors to browser push notifications and send them campaigns. It works through its own domains, including gravitec.net, app.gravitec.net and cdn.gravitec.net, and uses the browser push mechanism rather than email. For the operator it is a marketing third party that processes subscription data and can use analytics cookies to measure campaign performance. ## **How it works** Gravitec registers a service worker in the visitor browser and, once the visitor grants push permission, obtains a push token from the browser push service. That token is used to deliver notifications even when the visitor is not on the site. Alongside this, Gravitec can set analytics cookies to track opt ins, deliveries, and clicks so that campaign performance can be measured. ## **What data and cookies it collects** Gravitec typically processes push subscription tokens, subscriber identifiers, and engagement data such as deliveries and clicks, and it can set analytics cookies for measurement. The push token and related signals can constitute personal data because they identify a specific browser or device. Operators should review the exact cookies and the subscriber data in their own setup, since the precise fields can vary by configuration. ## **GDPR and ePrivacy implications** Web push and analytics cookies both bring Gravitec within the GDPR and the ePrivacy Directive. Sending push notifications is a form of electronic marketing that requires the visitor to opt in, and the analytics cookies are not strictly necessary, so they require consent. The push subscription itself relies on explicit browser permission, which should be requested in a clear, non deceptive way and recorded as part of the consent trail. ## **Consent requirements and data transfers** Consent should cover both the push subscription and the analytics cookies, and the service should not run until the visitor has accepted. Gravitec is EU based and processes primarily within the EU, so third country transfers are limited, although push delivery depends on browser push services that can use global infrastructure. Where any such routing involves a transfer, operators should confirm that appropriate safeguards are in place and disclose the processing in their notices. ## **Practical compliance steps** To deploy Gravitec compliantly, request push permission clearly and gate the analytics cookies behind a consent category, then block both until consent is given. Provide an easy way to unsubscribe and to withdraw consent, and make sure withdrawal stops notifications and clears the analytics cookies. List Gravitec and its domains in your cookie policy, document the legal basis, and keep subscriber data to the minimum needed with sensible retention. Compliance ## Gravitec and the GDPR Gravitec is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) for push subscriptions and for analytics cookies; explicit browser push permission is also required. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive (Cookie Law) ### Impact assessment (DPIA) A full DPIA is usually not mandatory for standard web push, but a documented risk assessment is recommended where push tokens, subscriber lists, and analytics cookies are combined. Assess the volume of subscribers, the data linked to push tokens, and any analytics profiling, and record mitigations such as double opt in, clear permission prompts, and easy unsubscribe. ### Sample text for your banner > We use Gravitec to send browser push notifications and to measure how they perform. This requires your explicit push permission and may set analytics cookies. With your consent, Gravitec push notifications and these cookies will be activated. Cookies and trackers ## What Gravitec sets and contacts - Tracking method Web push via service workers and push tokens, plus analytics cookies - Server location European Union (Estonia) ### Cookies set (9) | Name | Type | Duration | Purpose | | ---------------------- | ---------- | ---------- | --------------------------------------------------------------------------------------------- | | gravitecSubscriptionId | Functional | Persistent | Stores the unique push subscription identifier that links the browser to the Gravitec account | | gravitec\_subscriber | persistent | 1 year | Links the browser to its push subscription so notifications can be delivered and managed. | | gravitec\_permission | persistent | 1 year | Records the push permission state so the prompt is not shown again unnecessarily. | | \_grsm | Functional | 6 months | Remembers the subscription state and whether the permission prompt has already been shown | | gravitec\_analytics | persistent | 6 months | Measures opt ins, deliveries, and clicks to evaluate campaign performance. | | \_ga | Analytics | 2 years | Google Analytics cookie used on the Gravitec dashboard to distinguish unique visitors | | gravitec\_session | session | Session | Maintains state during a single visit while the subscription flow runs. | | \_gid | Analytics | 24 hours | Google Analytics cookie that distinguishes visitors over a short period | | grtc\_segment | Functional | 1 year | Stores segmentation attributes used to target push campaigns to the subscriber | ### Third-party domains contacted (9) - `gravitec.net` - `gravitec.net` - `app.gravitec.net` - `eu.gravitec.net` - `cdn.gravitec.net` - `fcm.googleapis.com` - `updates.push.services.mozilla.com` - `web.push.apple.com` - `wns2-by3p.notify.windows.com` Questions ## Frequently asked questions about Gravitec Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Gravitec set? Gravitec typically sets cookies that link the browser to its push subscription, record the push permission state, and support analytics for deliveries and clicks. The analytics cookies are non essential and require consent, while the subscription cookies relate to the push opt in. Confirm the exact cookies in your own deployment, since they can vary by configuration. ### Is consent required to use Gravitec? Yes, consent is required for both the push subscription and the analytics cookies. The push notifications need an explicit opt in and the browser push permission, and the analytics cookies are not strictly necessary. Gravitec should not run until the visitor has accepted. ### What is the legal basis for processing? The legal basis is consent under Article 6(1)(a) GDPR for the push subscription and for the analytics cookies. Sending push messages is electronic marketing that relies on opt in consent. Record both the push permission and the cookie consent in your consent trail. ### Does Gravitec transfer data to the US? Gravitec is EU based and processes primarily within the EU, so third country transfers are limited. However, push delivery relies on browser push services that can route through global infrastructure. Where any such routing involves a transfer, confirm that appropriate safeguards are in place. ### Do I need a DPIA for Gravitec? A full DPIA is usually not mandatory for standard web push, but a documented risk assessment is recommended. Pay attention where push tokens, subscriber lists, and analytics cookies are combined at scale. Record mitigations such as double opt in, clear prompts, and easy unsubscribe. ### How do I implement Gravitec compliantly? Request push permission clearly and gate the analytics cookies behind a consent category, blocking both until consent is given. Provide easy unsubscribe and consent withdrawal that stops notifications and clears the analytics cookies. List Gravitec and its domains in your cookie policy and document the legal basis. ### Are there alternatives to Gravitec? Other web push providers exist, including EU hosted options, and email or in app messaging can serve similar goals with different consent needs. Whichever you choose, web push still requires an explicit opt in and, for analytics, cookie consent. Evaluate alternatives on data location, opt in design, and contractual terms. ### How do I update my cookie policy for Gravitec? Add Gravitec as a named third party, describe its subscription and analytics cookies, and explain that it sends browser push notifications after an explicit opt in. Reference its domains such as gravitec.net and app.gravitec.net and link to its policy. Review the entry whenever the cookies or processing change. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [Constant Contact](https://www.flowconsent.com/en/services/marketing/constant-contact) [Constant Contact is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Constant Contact provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Constant Contact helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/constant-contact) [Marketing](https://www.flowconsent.com/en/services/marketing/constant-contact) · ### [Leadsquared](https://www.flowconsent.com/en/services/marketing/leadsquared) [Leadsquared is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Leadsquared provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Leadsquared helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/leadsquared) [Marketing](https://www.flowconsent.com/en/services/marketing/leadsquared) · ### [Zenvia](https://www.flowconsent.com/en/services/marketing/zenvia) [Zenvia is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Zenvia supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Zenvia ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/zenvia) [Marketing](https://www.flowconsent.com/en/services/marketing/zenvia) · ### [Auxilia](https://www.flowconsent.com/en/services/marketing/auxilia) [Auxilia is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Auxilia supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Auxilia ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/auxilia) [Preferences](https://www.flowconsent.com/en/services/marketing/auxilia) · ### [BrandBuilderAI](https://www.flowconsent.com/en/services/marketing/brandbuilderai) [BrandBuilderAI is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. BrandBuilderAI provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, BrandBuilderAI helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/brandbuilderai) [Marketing](https://www.flowconsent.com/en/services/marketing/brandbuilderai) · ### [Doppler for WooCommerce](https://www.flowconsent.com/en/services/marketing/doppler-for-woocommerce) [Doppler for WooCommerce is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Doppler for WooCommerce supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Doppler for WooCommerce remains a leading web.](https://www.flowconsent.com/en/services/marketing/doppler-for-woocommerce) [Preferences](https://www.flowconsent.com/en/services/marketing/doppler-for-woocommerce) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)