> How Pushnami web push works, what cookies and data it sends to the US, and how to comply with GDPR and ePrivacy when prompting subscriptions. > > Canonical: https://www.flowconsent.com/en/services/marketing/pushnami Marketing # Pushnami Marketing · [Official website](https://pushnami.com) Pushnami is a US based web push notification SaaS. Its JavaScript SDK registers visitors via a service worker, sets first-party tracking cookies and transmits event data to Pushnami servers. [Block Pushnami until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Marketing - Prior consent Required - Documented cookies 5 - Third-party domains 6 - Servers United States (primary), with AWS multi-region delivery infrastructure Overview ## What does Pushnami do? ## **What is Pushnami?** Pushnami is a US based marketing platform specialised in web and mobile push notifications and email. Its JavaScript SDK installs a service worker on the visitor's browser, requests permission to send push notifications and links each subscription to a Pushnami subscriber profile. ## **Cookies and tracking technologies** Pushnami sets first-party cookies to identify subscribers and correlate event data, plus a service worker that runs in the background to receive push messages. The SDK sends subscription tokens, IP addresses, device fingerprints and click events to Pushnami servers. ## **Data flows and server locations** Subscription data, IP addresses and events are stored on Pushnami infrastructure hosted on AWS in the United States. Push messages are delivered through Google FCM, Apple APNs and Mozilla autopush, each governed by its own privacy policy. ## **Legal basis and consent** Two layers of consent apply. The first is the cookie and tracking consent under the ePrivacy Directive before the SDK is loaded. The second is the explicit browser permission required to send push notifications under Article 6(1)(a) GDPR. ## **Compliance recommendations** Block the Pushnami SDK before CMP consent, only prompt for push permission after the user shows clear interest, sign a DPA with Pushnami, document Standard Contractual Clauses, and provide an easy unsubscribe path that revokes both the cookie and the browser permission. Compliance ## Pushnami and the GDPR Pushnami is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) is required because the SDK sets tracking cookies, requests permission to send push notifications and transfers personal data to a third country - Risk level high - Applicable regulations GDPR, ePrivacy Directive, CCPA, UK GDPR ### Impact assessment (DPIA) A DPIA is recommended because Pushnami combines persistent identification of subscribers, behavioural tracking through push events and transfer of personal data to the United States. Document the lawful basis, retention and revocation procedures. ### Sample text for your banner > We would like to send you push notifications using Pushnami, a US provider that will store your subscription token, IP address and interaction events. Do you consent to receive notifications and to this data transfer? Cookies and trackers ## What Pushnami sets and contacts - Tracking method JavaScript SDK that registers a service worker for web push notifications, sets first-party tracking cookies and sends subscription, event and device data to Pushnami servers - Server location United States (primary), with AWS multi-region delivery infrastructure - Data transferred outside the EU Subscriber tokens, IP addresses, device fingerprints and event data are transferred to Pushnami servers in the United States. Transfers rely on Standard Contractual Clauses and on the EU US Data Privacy Framework where applicable. ### Cookies set (5) | Name | Type | Duration | Purpose | | ------------------- | ---------- | -------- | ----------------------------------------------------------------------------------------------------------------- | | pnm\_subscriber\_id | marketing | 1 year | Persistent identifier that links the visitor to a Pushnami subscriber profile for targeting and event attribution | | pnm\_session | marketing | Session | Session identifier used to correlate page views, prompt impressions and subscription events within a single visit | | pnm\_prompt\_state | functional | 30 days | Stores whether the visitor has already been shown the push opt in prompt to avoid prompting again too soon | | pnm\_uid | marketing | 1 year | Pushnami cross site identifier used for audience segmentation and analytics across publishers | | pnm\_consent | necessary | 6 months | Stores the user choice on the Pushnami opt in prompt so the SDK respects the decision on later visits | ### Third-party domains contacted (6) - `pushnami.com` - `api.pushnami.com` - `cdn.pushnami.com` - `webpush.pushnami.com` - `fcm.googleapis.com` - `updates.push.services.mozilla.com` Questions ## Frequently asked questions about Pushnami Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Pushnami set? Pushnami sets first-party cookies that contain a subscriber identifier, a session identifier and attribution information. The SDK also installs a service worker that runs in the background, plus IndexedDB and localStorage entries used to manage the push subscription state. ### Is user consent required before loading Pushnami? Yes. Prior consent is required under the ePrivacy Directive before placing the Pushnami cookies and SDK, and the browser push permission is a separate explicit opt-in. Loading the SDK without consent has been sanctioned by several EU regulators. ### What is the legal basis for processing personal data via Pushnami? Consent under Article 6(1)(a) GDPR is the appropriate basis because Pushnami stores a persistent identifier and sends marketing communications. Legitimate interest is not a valid basis for the cookies or for sending push notifications. ### Does Pushnami transfer data outside the EU? Yes. Subscription tokens, IP addresses and click events are stored in the United States on AWS. Pushnami relies on Standard Contractual Clauses and, where applicable, on the EU US Data Privacy Framework to legitimise the transfer. ### Is a DPIA required when using Pushnami? A DPIA is recommended because Pushnami combines persistent identification of subscribers, behavioural tracking through push interactions and transfer to the United States. Many EU authorities consider these criteria sufficient to require an assessment. ### How do I correctly implement Pushnami in a GDPR-compliant way? Block the SDK until the user gives CMP consent, trigger the browser push prompt only after a clear interaction, sign the Pushnami DPA, document SCCs, retain subscriber data only as long as needed and provide a simple unsubscribe path. ### Are there privacy-friendly alternatives to Pushnami? Self-hosted web push solutions such as web-push-php, Gauntface web push or Wonderpush (France) and Notifia (EU) provide push functionality with EU data residency. Native browser push without a third party SaaS is also a strong privacy first option. ### How should I update my cookie policy to mention Pushnami? List the Pushnami cookies and the service worker, explain that subscription data and click events are processed in the United States, name the SCCs as transfer safeguard and provide instructions for revoking push permission in the browser. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [Eloqua](https://www.flowconsent.com/en/services/marketing/eloqua) [Eloqua is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Eloqua enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Eloqua empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/eloqua) [Marketing](https://www.flowconsent.com/en/services/marketing/eloqua) · ### [Moosend](https://www.flowconsent.com/en/services/marketing/moosend) [Moosend is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Moosend provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Moosend helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/moosend) [Marketing](https://www.flowconsent.com/en/services/marketing/moosend) · ### [SendHeap](https://www.flowconsent.com/en/services/marketing/sendheap) [SendHeap is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. SendHeap provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, SendHeap helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/sendheap) [Marketing](https://www.flowconsent.com/en/services/marketing/sendheap) · ### [Outplay](https://www.flowconsent.com/en/services/marketing/outplay) [Outplay is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Outplay integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Outplay makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/marketing/outplay) [Marketing](https://www.flowconsent.com/en/services/marketing/outplay) · ### [Demandforce](https://www.flowconsent.com/en/services/marketing/demandforce) [Demandforce is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Demandforce provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Demandforce helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/demandforce) [Marketing](https://www.flowconsent.com/en/services/marketing/demandforce) · ### [Bloom Labs](https://www.flowconsent.com/en/services/marketing/bloom-labs) [Bloom Labs is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Bloom Labs supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Bloom Labs ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/bloom-labs) [Marketing](https://www.flowconsent.com/en/services/marketing/bloom-labs) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)