FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Marketing

Heyflow

AnalyticsOfficial website

Heyflow is a no code builder for interactive funnels and lead forms that embeds flows on your site and can set analytics cookies and load third party trackers.

Block Heyflow until consentScan my site
Overview

What does Heyflow do?

What Heyflow is

Heyflow is a no code platform from Germany for building interactive funnels, quizzes and lead forms that you embed on your website. Visitors move through multi step flows that capture contact details, preferences and qualification answers. Because the flow is embedded and often connected to marketing tools, it sits at the point where personal data is collected and may load additional scripts.

What data and cookies it processes

A Heyflow form collects whatever you ask for, such as name, email, phone number and free text answers, along with technical metadata like IP address and device information. The embedded flow can set functional cookies to remember progress and, depending on your setup, analytics or marketing cookies and third party trackers. Many implementations also forward responses to a CRM, an email tool or an advertising pixel.

GDPR and ePrivacy implications

Collecting form data makes you a controller under the GDPR, so you need a lawful basis, clear information and a way to honour data subject rights. The ePrivacy Directive and the German TDDDG require prior consent before any non essential cookie or tracker is set through the flow. You must keep the data you request proportionate to the stated purpose and avoid pre selecting marketing options.

Consent requirements

Delivering the functional form can rely on legitimate interest or on the contractual context of the enquiry, but any analytics, advertising or personalisation tag loaded by the flow needs freely given, specific, informed and unambiguous consent first. Route those scripts through your consent management platform so they fire only after the visitor opts in. Where you reuse contact details for marketing, capture a separate, clearly worded consent.

Data transfers and hosting

Heyflow hosts its core service in Germany, which keeps the baseline processing inside the European Union and reduces transfer risk. The exposure usually comes from connected tools such as United States analytics or advertising platforms that receive the lead data. For each integration confirm the recipient location, rely on Standard Contractual Clauses or the EU US Data Privacy Framework and record the safeguard in your documentation.

Practical compliance steps

Sign a data processing agreement with Heyflow and map every integration that receives form data. Gate all non essential cookies and trackers behind your consent banner and test that they stay blocked before opt in. Minimise the fields you request, set retention limits, add a clear privacy notice and consent checkbox to the flow, and keep an internal record of the legal basis for each purpose.

Compliance

Heyflow and the GDPR

Heyflow is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent under Article 6(1)(a) GDPR for non essential analytics and marketing cookies and trackers, together with consent or legitimate interest under Article 6(1)(f) for the lead and form processing depending on configuration. Strictly necessary flow delivery may rely on legitimate interest.
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, German TDDDG

Impact assessment (DPIA)

A full data protection impact assessment is not usually mandatory for a standard contact funnel, but it becomes advisable when flows collect special category data, score or profile leads, or feed advertising platforms. Assess the volume and sensitivity of the form fields, the consent mechanism for non essential cookies, the third party integrations that receive lead data and any resulting transfers to third countries. Document the legal basis for each field, data minimisation choices and retention periods, and review the configuration whenever new integrations or tracking tags are added.

Sample text for your banner

This page uses an interactive Heyflow form. We set non essential analytics and marketing cookies and share your form responses with connected tools only after you agree. You can accept, reject or set preferences, and you may withdraw consent at any time.
Cookies and trackers

What Heyflow sets and contacts

Tracking method
Embedded flow and form scripts with optional analytics cookies and third party tracker integrations
Server location
European Union (Germany)
Data transferred outside the EU
Core hosting sits in Germany within the European Union, which lowers baseline transfer exposure. However flows frequently integrate analytics, advertising and CRM tools that can transmit form and lead data to providers in the United States or other third countries. Any such transfer relies on Standard Contractual Clauses and the EU US Data Privacy Framework where the recipient is certified.

Cookies set (3)

NameTypeDurationPurpose
hf_sessionFunctionalSessionMaintains the visitor progress and state within a multi step Heyflow flow so answers are not lost between steps.
_hf_visitorAnalytics12 monthsRecognises returning visitors and measures flow performance and completion rates. Set only after consent.
_hf_mktMarketing12 monthsSupports advertising and remarketing where the flow integrates an advertising pixel. Set only after consent.

Third-party domains contacted (3)

  • heyflow.com
  • heyflow.app
  • cdn.heyflow.com
Questions

Frequently asked questions about Heyflow

Can't find your question? Write to us, we answer fast.

What cookies does Heyflow set?

An embedded Heyflow flow sets a functional cookie to remember progress between steps, which is strictly necessary. Depending on your setup it can also place analytics cookies that measure completion rates and marketing cookies that support advertising pixels. The non essential cookies should only load after the visitor gives consent.

Do I need consent to use Heyflow?

You can deliver the functional form without prior consent, but you need consent before any analytics or marketing cookie or tracker fires through the flow. You also need a clear lawful basis for processing the form responses. Reusing contact details for marketing requires a separate, explicit consent.

What is the legal basis for processing Heyflow data?

Non essential cookies and trackers rely on consent under Article 6(1)(a) GDPR. The underlying form processing can rest on consent, on the contractual context of an enquiry, or on legitimate interest under Article 6(1)(f), depending on the purpose. Document the chosen basis for each field and purpose.

Does Heyflow transfer data to the United States?

Heyflow hosts its core service in Germany, so the baseline processing stays in the European Union. Transfers usually arise from connected tools such as United States analytics or advertising platforms that receive the lead data. Cover those transfers with Standard Contractual Clauses or the EU US Data Privacy Framework.

Do I need a DPIA for Heyflow?

A simple contact funnel rarely requires a data protection impact assessment, but one becomes advisable when flows collect sensitive data, profile or score leads, or feed advertising platforms. Assess the field sensitivity, the consent mechanism and the third country transfers, then document your conclusion.

How do I implement Heyflow compliantly?

Sign a data processing agreement, map every integration that receives form data and route all non essential scripts through your consent banner. Minimise the fields you request, set retention limits and add a clear privacy notice and consent checkbox to the flow. Test that trackers stay blocked before opt in.

What are the alternatives to Heyflow?

Alternatives include other funnel and form builders such as Typeform, Tally, Jotform and native CMS forms. When comparing options, weigh the hosting region, the default cookie behaviour, the consent handling and the data processing terms rather than features alone.

How do I update my cookie policy for Heyflow?

List the functional, analytics and marketing cookies the flow can set, with their purpose and duration, and name any third party tools that receive the data. Explain the legal basis and how visitors can withdraw consent, and review the entry whenever you add or change an integration.

Same category

More services: Marketing

See the whole category

Actito

Actito is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Actito provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Actito helps deliver the right message to the right audience at the right time.

Marketing

Mimiran

Mimiran is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Mimiran enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Mimiran empowers marketing teams to achieve measurable growth.

Marketing

Reviewgrower

Reviewgrower is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Reviewgrower supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Reviewgrower ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Profit Lifter

Profit Lifter is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Profit Lifter provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Profit Lifter helps deliver the right message to the right audience at the right time.

Marketing

MailChimp for WooCommerce

MailChimp for WooCommerce is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. MailChimp for WooCommerce supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, MailChimp for WooCommerce enables informed decisions that.

Marketing

Review Doku

Reviewdoku is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Reviewdoku integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Reviewdoku helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site