> How Hello Bar popups and notification bars handle visitor data, which cookies they set, why consent is required and how to stay GDPR compliant. > > Canonical: https://www.flowconsent.com/en/services/marketing/hello-bar Marketing # Hello Bar Marketing · [Official website](https://hellobar.com) Hello Bar is a website popup, notification bar and lead capture tool. It displays bars, modals and slide ins to announce offers, grow email lists and drive clicks. To decide when and how often to show these messages and to measure conversions, Hello Bar sets cookies and runs scripts that track visitor behaviour, so it is not strictly necessary for the website to function. [Block Hello Bar until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Marketing - Prior consent Required - Documented cookies 3 - Third-party domains 3 - Servers United States Overview ## What does Hello Bar do? ## **What Hello Bar is** Hello Bar is a website conversion tool that displays notification bars, popups, modals and slide ins. Site owners use it to announce promotions, grow email lists, drive clicks to key pages and capture leads. To decide when and how often to show a message and to measure whether visitors act on it, Hello Bar loads a script that sets cookies and tracks visitor behaviour on the pages where it runs. ## **Data and cookies collected** Hello Bar sets cookies and uses local storage to remember which bars a visitor has already seen, to cap how often they appear, to record dismissals and clicks and to attribute conversions. It also processes IP addresses and device or browser information. When a visitor submits a form, Hello Bar collects the email address and any other data entered. Combined with online identifiers, this is personal data under the GDPR. ## **GDPR and ePrivacy implications** The cookies Hello Bar sets to control display frequency, track behaviour and measure conversions are not strictly necessary to deliver the website, so under the ePrivacy Directive and national rules such as PECR they require prior consent before they are stored or read. The website owner is the data controller and Hello Bar acts as a processor for the data it handles on the owner's behalf. ## **Consent and data transfers** You must obtain freely given, specific and informed consent through a consent banner before the Hello Bar script and its cookies load, and visitors must be able to refuse and to withdraw consent easily. Hello Bar is a US based vendor, so personal data of EU visitors is transferred to the United States. These transfers should rely on the EU US Data Privacy Framework where Hello Bar is certified, or on Standard Contractual Clauses backed by a transfer impact assessment. ## **Practical compliance steps** Sign a data processing agreement with Hello Bar, block its script until consent is given through your consent management platform, and tie any email sign ups to a clear privacy notice. List the Hello Bar cookies in your cookie policy with their purpose and duration, document the lawful basis and the international transfer safeguards, set retention periods, and give visitors an easy way to withdraw consent and to exercise their data subject rights. Compliance ## Hello Bar and the GDPR Hello Bar is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Article 6(1)(a) GDPR) for non essential popup, lead capture and analytics cookies; ePrivacy consent for storing and reading information on the device. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, PECR, US state privacy laws ### Impact assessment (DPIA) A full DPIA is not usually mandatory for standard notification bars and lead capture, but a documented assessment is recommended. Consider the scale of visitor tracking, the capture of email addresses, the use of behavioural data to target messages and the transfer of personal data to the United States. Document the lawful basis, retention periods and transfer safeguards. ### Sample text for your banner > We use Hello Bar to show notification bars and popups and to capture sign ups. Hello Bar sets cookies to control how often you see these messages and to measure their performance. These cookies run only after you accept marketing cookies, and you can withdraw your consent at any time. Cookies and trackers ## What Hello Bar sets and contacts - Tracking method First and third party cookies plus JavaScript for popup and notification bar display, frequency capping, visitor behaviour tracking and conversion measurement - Server location United States - Data transferred outside the EU Hello Bar is a US based vendor. Personal data such as IP addresses and identifiers of EU visitors is transferred to the United States, relying on the EU US Data Privacy Framework where certified and on Standard Contractual Clauses. ### Cookies set (3) | Name | Type | Duration | Purpose | | ------------- | ------------- | -------- | ---------------------------------------------------------------------------------------------- | | hellobar | Functionality | 1 year | Stores which Hello Bar messages a visitor has seen and dismissed to control display frequency. | | hb\_insights | Marketing | 1 year | Tracks visitor interactions and clicks on bars to measure conversions and performance. | | \_hb\_session | Functionality | Session | Maintains session state for the Hello Bar widget during the visit. | ### Third-party domains contacted (3) - `hellobar.com` - `my.hellobar.com` - `hb-stack.s3.amazonaws.com` Questions ## Frequently asked questions about Hello Bar Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Hello Bar set? Hello Bar sets first and third party cookies and uses local storage to remember which bars a visitor has seen, to cap how often they appear, to record dismissals and clicks and to attribute conversions. These are functionality and marketing cookies rather than strictly necessary ones. ### Do I need consent to use Hello Bar? Yes. The cookies Hello Bar uses for display control, behaviour tracking and conversion measurement are not strictly necessary, so you need prior consent before its script and cookies load on a visitor's device. ### What is the legal basis for Hello Bar? The legal basis is consent under Article 6(1)(a) of the GDPR, combined with ePrivacy consent for storing and reading information on the device. Legitimate interest is not appropriate for these non essential cookies. ### Does Hello Bar transfer data to the United States? Yes. Hello Bar is a US based vendor, so personal data such as IP addresses and identifiers of EU visitors is transferred to the United States. These transfers should rely on the EU US Data Privacy Framework where Hello Bar is certified, or on Standard Contractual Clauses with a transfer impact assessment. ### Do I need a DPIA for Hello Bar? A full DPIA is not usually mandatory for standard notification bars and lead capture. A documented assessment is recommended, particularly where behavioural data is used to target messages, email addresses are collected and data is transferred outside the EU. ### How do I implement Hello Bar compliantly? Sign a data processing agreement, block the Hello Bar script until the visitor consents through your consent management platform, attach a clear privacy notice to email sign ups, list the cookies in your cookie policy and give visitors an easy way to withdraw consent. ### What are the alternatives to Hello Bar? Alternatives include other popup and notification bar tools such as OptiMonk, Sumo, Privy, Sleeknote or OptinMonster. Any alternative that sets non essential cookies or captures leads raises the same consent and transfer questions, so assess each on its data practices. ### How should I update my cookie policy for Hello Bar? List each Hello Bar cookie with its name, purpose and duration, classify them as functionality or marketing cookies, name Hello Bar as the processor, mention the transfer of data to the United States and the safeguards used, and explain how visitors can manage or withdraw consent. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [WP SEO AI](https://www.flowconsent.com/en/services/marketing/wp-seo-ai) [WP SEO AI is an advanced SEO tool suite designed to help websites improve their search engine rankings and organic traffic. It provides comprehensive keyword research, site auditing, backlink analysis, and rank tracking. WP SEO AI offers actionable insights and recommendations to optimize on-page content, technical SEO, and link building strategies. With competitive analysis and real-time monitoring, WP SEO AI empowers marketers to make data-driven decisions that boost search visibility.](https://www.flowconsent.com/en/services/marketing/wp-seo-ai) [Marketing](https://www.flowconsent.com/en/services/marketing/wp-seo-ai) · ### [LeadSimple](https://www.flowconsent.com/en/services/marketing/leadsimple) [LeadSimple is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. LeadSimple enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, LeadSimple empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/leadsimple) [Marketing](https://www.flowconsent.com/en/services/marketing/leadsimple) · ### [Kit](https://www.flowconsent.com/en/services/marketing/kit) [Kit is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Kit provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Kit helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/kit) [Marketing](https://www.flowconsent.com/en/services/marketing/kit) · ### [Jotform](https://www.flowconsent.com/en/services/marketing/jotform) [Jotform is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Jotform supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Jotform ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/jotform) [Marketing](https://www.flowconsent.com/en/services/marketing/jotform) · ### [Satori](https://www.flowconsent.com/en/services/marketing/satori) [Satori is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Satori enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Satori empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/satori) [Marketing](https://www.flowconsent.com/en/services/marketing/satori) · ### [Formidable Form](https://www.flowconsent.com/en/services/marketing/formidable-form) [Formidable Form is a form building and data collection platform that helps businesses create professional online forms, surveys, and questionnaires without coding. It offers a drag-and-drop builder, conditional logic, file uploads, and payment collection. Formidable Form integrates with CRM, email marketing, and productivity tools to automate workflows triggered by submissions. With responsive designs and spam protection, Formidable Form helps capture leads and collect data securely.](https://www.flowconsent.com/en/services/marketing/formidable-form) [Analytics](https://www.flowconsent.com/en/services/marketing/formidable-form) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)