FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Marketing

Pushub

MarketingOfficial website

Pushub is a European web push notification platform that lets publishers and ecommerce sites re engage visitors through browser push messages.

Block Pushub until consentScan my site
Overview

What does Pushub do?

What Pushub is

Pushub is a web push notification platform aimed at media publishers, ecommerce sites and editorial brands. It runs on top of the Web Push standard, registers a service worker on the visitor browser and creates a subscription endpoint hosted by the browser vendor (Mozilla, Google, Apple). The publisher can then trigger desktop or mobile alerts that reach the user even after they leave the site.

What data Pushub processes

Pushub stores the push subscription endpoint, the public encryption keys produced by the browser, the user agent, the IP address at delivery time, segmentation tags, browser and OS metadata and the click and dismiss events on each notification. The endpoint, although issued by the browser, behaves as a persistent device level identifier and qualifies as personal data under the GDPR.

GDPR and ePrivacy implications

Two layers of consent apply. The browser native permission prompt is the technical gate that allows the subscription. On top of that, the storage of the endpoint and the subsequent processing trigger Article 5(3) of the ePrivacy Directive and require informed consent under GDPR Article 6(1)(a). Soft prompts that pre qualify users before the native dialog must not pre check any opt in.

Consent and opt in flow

Trigger the Pushub script and the soft prompt only after the visitor has accepted marketing on the cookie banner. Make withdrawal as easy as opt in by exposing an in app preference page or a one click unsubscribe link. Honour the unsubscribe within a short period and document the timestamp.

Data transfers

Pushub itself runs in the European Union, but each push message is delivered through the browser vendor push service: Apple Push Notification service, Firebase Cloud Messaging or Mozilla autopush. These backends may transit through the United States, so the publisher must list these sub processors and rely on Standard Contractual Clauses or the EU US Data Privacy Framework for the transfer.

Practical compliance steps

Sign a Data Processing Agreement with Pushub. List Pushub and the browser vendor push services in your privacy policy. Run a DPIA covering retention of subscriptions, segmentation profiles and cross border delivery. Cap inactivity windows and prune endpoints that have been silent for more than six to twelve months.

Compliance

Pushub and the GDPR

Pushub is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Article 6(1)(a) GDPR (consent) and Article 5(3) ePrivacy Directive for storage of subscription endpoints on the device
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, PECR

Impact assessment (DPIA)

A DPIA is recommended because web push tracks subscribers across sessions, captures IP at delivery time and creates a persistent device level identifier through the subscription endpoint.

Sample text for your banner

I agree to receive web push notifications from this site. The browser will create a subscription identifier that allows the site to send push messages until I revoke permission.
Cookies and trackers

What Pushub sets and contacts

Tracking method
Web push notifications using a service worker, browser Push API subscription endpoints and VAPID encryption keys
Server location
European Union

Cookies set (3)

NameTypeDurationPurpose
pushub_subscriptionindexeddbpersistentHolds the Web Push subscription endpoint, public key and auth secret needed to deliver push notifications
pushub_segmentslocalstorage1 yearStores the segmentation tags assigned to the subscriber for personalisation purposes
pushub_uidhttp_cookie1 yearAnonymous identifier used by Pushub to count unique subscribers and measure click rates

Third-party domains contacted (4)

  • pushub.io
  • cdn.pushub.io
  • sw.pushub.io
  • api.pushub.io
Questions

Frequently asked questions about Pushub

Can't find your question? Write to us, we answer fast.

Which cookies or storage entries does Pushub set?

Pushub does not rely on classic third party cookies but does store a service worker registration, a push subscription endpoint and small operational entries in IndexedDB and localStorage. The endpoint is a persistent device level identifier and is treated as personal data under the GDPR.

Is consent required to use Pushub?

Yes. Two layers apply: the native browser permission prompt for push and the GDPR plus ePrivacy consent that covers storage and processing. The publisher must collect informed opt in before triggering the Pushub script and the soft prompt.

What legal basis applies to Pushub processing?

Article 6(1)(a) GDPR (consent) is the only valid legal basis. The processing is direct marketing in nature and depends on a persistent device identifier, so legitimate interest is not appropriate.

Are user data transferred to the United States?

Pushub itself runs in the European Union, but push delivery passes through APNs, FCM or Mozilla autopush, which may operate in the United States. The publisher must list these sub processors and rely on Standard Contractual Clauses or the EU US Data Privacy Framework for the transfer.

Do I need a DPIA for Pushub?

A DPIA is recommended. The platform tracks subscribers across sessions, captures IP at delivery time and creates a persistent identifier. Marketing scale and segmentation push the risk above the threshold defined by the EDPB criteria.

How do I deploy Pushub in a compliant way?

Load the script after consent is granted. Show a soft prompt before the native dialog, but never pre check it. Provide an in app preference page and a one click unsubscribe. Sign a Data Processing Agreement and document the IPN, FCM and Mozilla autopush sub processors.

Are there alternatives to Pushub?

OneSignal and Pushwoosh are global alternatives but raise the same compliance constraints. For lower risk, prefer email or SMS opt in flows or a self hosted Web Push stack relying directly on browser endpoints, where you control retention and segmentation.

How should I update my cookie or privacy policy for Pushub?

List Pushub as a processor with the categories of data (subscription endpoint, IP, segmentation tags, click events), the purposes (re engagement, personalisation), retention, and the browser push sub processors. Provide an unsubscribe link and the right to withdraw at any time.

Same category

More services: Marketing

See the whole category

BTOLEAD

BTOLEAD is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. BTOLEAD provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, BTOLEAD helps deliver the right message to the right audience at the right time.

Marketing

Duel

Duel is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Duel integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Duel helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Wheelio

Wheelio is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Wheelio integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Wheelio helps organizations maintain robust websites that meet user expectations and technical requirements.

Marketing

Privy

Privy App is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Privy App supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Privy App remains a leading web development choice.

Marketing

CASAFARI

Casafari is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Casafari provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Casafari helps deliver the right message to the right audience at the right time.

Marketing

SiteJabber

SiteJabber is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. SiteJabber integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, SiteJabber helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site