FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Marketing

Pushnami

MarketingOfficial website

Pushnami is a US based web push notification SaaS. Its JavaScript SDK registers visitors via a service worker, sets first-party tracking cookies and transmits event data to Pushnami servers.

Block Pushnami until consentScan my site
Overview

What does Pushnami do?

What is Pushnami?

Pushnami is a US based marketing platform specialised in web and mobile push notifications and email. Its JavaScript SDK installs a service worker on the visitor's browser, requests permission to send push notifications and links each subscription to a Pushnami subscriber profile.

Cookies and tracking technologies

Pushnami sets first-party cookies to identify subscribers and correlate event data, plus a service worker that runs in the background to receive push messages. The SDK sends subscription tokens, IP addresses, device fingerprints and click events to Pushnami servers.

Data flows and server locations

Subscription data, IP addresses and events are stored on Pushnami infrastructure hosted on AWS in the United States. Push messages are delivered through Google FCM, Apple APNs and Mozilla autopush, each governed by its own privacy policy.

Legal basis and consent

Two layers of consent apply. The first is the cookie and tracking consent under the ePrivacy Directive before the SDK is loaded. The second is the explicit browser permission required to send push notifications under Article 6(1)(a) GDPR.

Compliance recommendations

Block the Pushnami SDK before CMP consent, only prompt for push permission after the user shows clear interest, sign a DPA with Pushnami, document Standard Contractual Clauses, and provide an easy unsubscribe path that revokes both the cookie and the browser permission.

Compliance

Pushnami and the GDPR

Pushnami is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR) is required because the SDK sets tracking cookies, requests permission to send push notifications and transfers personal data to a third country
Risk level
high
Applicable regulations
GDPR, ePrivacy Directive, CCPA, UK GDPR

Impact assessment (DPIA)

A DPIA is recommended because Pushnami combines persistent identification of subscribers, behavioural tracking through push events and transfer of personal data to the United States. Document the lawful basis, retention and revocation procedures.

Sample text for your banner

We would like to send you push notifications using Pushnami, a US provider that will store your subscription token, IP address and interaction events. Do you consent to receive notifications and to this data transfer?
Cookies and trackers

What Pushnami sets and contacts

Tracking method
JavaScript SDK that registers a service worker for web push notifications, sets first-party tracking cookies and sends subscription, event and device data to Pushnami servers
Server location
United States (primary), with AWS multi-region delivery infrastructure
Data transferred outside the EU
Subscriber tokens, IP addresses, device fingerprints and event data are transferred to Pushnami servers in the United States. Transfers rely on Standard Contractual Clauses and on the EU US Data Privacy Framework where applicable.

Cookies set (5)

NameTypeDurationPurpose
pnm_subscriber_idmarketing1 yearPersistent identifier that links the visitor to a Pushnami subscriber profile for targeting and event attribution
pnm_sessionmarketingSessionSession identifier used to correlate page views, prompt impressions and subscription events within a single visit
pnm_prompt_statefunctional30 daysStores whether the visitor has already been shown the push opt in prompt to avoid prompting again too soon
pnm_uidmarketing1 yearPushnami cross site identifier used for audience segmentation and analytics across publishers
pnm_consentnecessary6 monthsStores the user choice on the Pushnami opt in prompt so the SDK respects the decision on later visits

Third-party domains contacted (6)

  • pushnami.com
  • api.pushnami.com
  • cdn.pushnami.com
  • webpush.pushnami.com
  • fcm.googleapis.com
  • updates.push.services.mozilla.com
Questions

Frequently asked questions about Pushnami

Can't find your question? Write to us, we answer fast.

What cookies does Pushnami set?

Pushnami sets first-party cookies that contain a subscriber identifier, a session identifier and attribution information. The SDK also installs a service worker that runs in the background, plus IndexedDB and localStorage entries used to manage the push subscription state.

Is user consent required before loading Pushnami?

Yes. Prior consent is required under the ePrivacy Directive before placing the Pushnami cookies and SDK, and the browser push permission is a separate explicit opt-in. Loading the SDK without consent has been sanctioned by several EU regulators.

What is the legal basis for processing personal data via Pushnami?

Consent under Article 6(1)(a) GDPR is the appropriate basis because Pushnami stores a persistent identifier and sends marketing communications. Legitimate interest is not a valid basis for the cookies or for sending push notifications.

Does Pushnami transfer data outside the EU?

Yes. Subscription tokens, IP addresses and click events are stored in the United States on AWS. Pushnami relies on Standard Contractual Clauses and, where applicable, on the EU US Data Privacy Framework to legitimise the transfer.

Is a DPIA required when using Pushnami?

A DPIA is recommended because Pushnami combines persistent identification of subscribers, behavioural tracking through push interactions and transfer to the United States. Many EU authorities consider these criteria sufficient to require an assessment.

How do I correctly implement Pushnami in a GDPR-compliant way?

Block the SDK until the user gives CMP consent, trigger the browser push prompt only after a clear interaction, sign the Pushnami DPA, document SCCs, retain subscriber data only as long as needed and provide a simple unsubscribe path.

Are there privacy-friendly alternatives to Pushnami?

Self-hosted web push solutions such as web-push-php, Gauntface web push or Wonderpush (France) and Notifia (EU) provide push functionality with EU data residency. Native browser push without a third party SaaS is also a strong privacy first option.

How should I update my cookie policy to mention Pushnami?

List the Pushnami cookies and the service worker, explain that subscription data and click events are processed in the United States, name the SCCs as transfer safeguard and provide instructions for revoking push permission in the browser.

Same category

More services: Marketing

See the whole category

Eloqua

Eloqua is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Eloqua enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Eloqua empowers marketing teams to achieve measurable growth.

Marketing

Moosend

Moosend is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Moosend provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Moosend helps deliver the right message to the right audience at the right time.

Marketing

SendHeap

SendHeap is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. SendHeap provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, SendHeap helps deliver the right message to the right audience at the right time.

Marketing

Outplay

Outplay is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Outplay integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Outplay makes advanced AI accessible to all teams.

Marketing

Demandforce

Demandforce is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Demandforce provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Demandforce helps deliver the right message to the right audience at the right time.

Marketing

Bloom Labs

Bloom Labs is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Bloom Labs supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Bloom Labs ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site