> How SendPulse handles subscriber data under GDPR, when consent is needed for forms and chatbots, EU vs US hosting and a compliance checklist. > > Canonical: https://www.flowconsent.com/en/services/marketing/sendpulse Marketing # SendPulse Marketing · [Official website](https://sendpulse.com) SendPulse is a multichannel marketing platform offering email, SMS, push notifications, chatbots, landing pages and a free CRM. [Block SendPulse until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Marketing - Prior consent Required - Documented cookies 3 - Third-party domains 4 - Servers Cyprus (SendPulse Inc., EU operations) and the United States (SendPulse LLC) with global delivery infrastructure Overview ## What does SendPulse do? ## **What is SendPulse** SendPulse is a multichannel marketing platform that bundles email, SMS, web push, mobile push, chatbots (Facebook Messenger, WhatsApp, Instagram, Telegram), landing pages and a free CRM under one tool. It is popular with small and mid sized businesses thanks to a generous free tier. ## **What cookies and data SendPulse collects** SendPulse embed forms write cookies (sp\_session, sp\_visitor, sp\_form\_state) on your domain. The chatbot widget adds session and identity cookies. SendPulse receives subscriber email, phone, IP, user agent, source URL and engagement data (opens, clicks, button presses in chatbots). Web push tokens are stored to allow re engagement. ## **GDPR and ePrivacy implications** Loading SendPulse scripts writes to the user device, so Article 5(3) ePrivacy consent is required. Web push notifications require an explicit browser opt in. Email and SMS marketing are governed by Article 6(1)(a) GDPR consent and national newsletter laws; soft opt in for existing customers exists in B2B with narrow conditions. ## **Consent and legal basis** Use double opt in everywhere (mandatory in Germany under TTDSG, recommended in France and Spain). Get a fresh consent for each channel: subscribing to email does not automatically allow web push or SMS. Document the consent log with timestamp, source page and version of the notice. ## **Data transfers and hosting** SendPulse Inc. is registered in Limassol, Cyprus, which is an EU jurisdiction. The US affiliate SendPulse LLC (Delaware) shares the same infrastructure and may access subscriber data from the US. Transfers rely on Standard Contractual Clauses in the SendPulse DPA; the US affiliate is also typically registered under the EU US Data Privacy Framework. Verify the current status. ## **Practical compliance steps** Configure the Cyprus account (eu region) for EU subscribers when offered. Enable double opt in on every form. Block the embed scripts until consent. Mask any sensitive content collected via chatbots, and provide a clear unsubscribe link in every email and SMS. Sign the SendPulse DPA and document the cross border flows. Compliance ## SendPulse and the GDPR SendPulse is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) for the subscription and for the embed form cookies; legitimate interest (Art. 6(1)(f) GDPR) for fraud prevention and minimal delivery analytics - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, EU US Data Privacy Framework (US affiliate), national newsletter rules ### Impact assessment (DPIA) A DPIA is recommended when SendPulse is used to send transactional notifications combined with marketing, when SMS to minors may be sent, when sensitive segments are profiled, or when chatbots collect free text health or financial data. ### Sample text for your banner > We use SendPulse to deliver our newsletters, push notifications and chatbots. SendPulse writes cookies on your device, processes your email and IP and shares them with SendPulse Inc. (Cyprus) and SendPulse LLC (United States). We only load SendPulse if you accept. Cookies and trackers ## What SendPulse sets and contacts - Tracking method Multichannel platform: email, SMS, push, web push, chatbots, landing pages and CRM, delivered through JavaScript embed forms and pixel tracking - Server location Cyprus (SendPulse Inc., EU operations) and the United States (SendPulse LLC) with global delivery infrastructure - Data transferred outside the EU SendPulse Inc. is registered in Limassol, Cyprus, which keeps EU operations inside the EU. SendPulse LLC (Delaware, USA) handles the US market and shares infrastructure. Transfers to the US rely on Standard Contractual Clauses in the SendPulse data processing addendum. ### Cookies set (3) | Name | Type | Duration | Purpose | | --------------- | ------------ | -------- | ----------------------------------------------------------------------- | | sp\_session | third\_party | session | Identifies the active form session for the SendPulse widget | | sp\_visitor | third\_party | 1 year | Persistent visitor identifier used by the SendPulse forms | | sp\_form\_state | third\_party | 1 year | Stores the display state of a SendPulse form (already shown, dismissed) | ### Third-party domains contacted (4) - `sendpulse.com` - `login.sendpulse.com` - `cdn.sendpulse.com` - `web.sendpulse.com` Questions ## Frequently asked questions about SendPulse Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does SendPulse set? SendPulse embed forms write sp\_session, sp\_visitor and sp\_form\_state on your domain. The chatbot widget adds session and identity cookies. Web push uses browser permissions instead of cookies. ### Is consent required for SendPulse? Yes for the embed form scripts and the chatbot widget on public pages. Web push notifications require an explicit browser opt in. Email and SMS marketing always need a documented Art. 6(1)(a) GDPR consent. ### Which GDPR legal basis applies? Consent for marketing communications and embed cookies. Legitimate interest for delivery security and fraud prevention. Contract performance for transactional notifications closely tied to a paid service. ### Are there transfers to the United States? SendPulse Inc. is in Cyprus (EU) but SendPulse LLC (Delaware) shares the infrastructure and may access data from the US. Cover the flow with Standard Contractual Clauses in the SendPulse DPA and the EU US Data Privacy Framework certification of the US affiliate. ### Do I need a DPIA? Recommended when SendPulse mixes transactional and marketing flows, when SMS may reach minors, when chatbots collect free text health or financial data, or when sensitive segments are profiled. ### How do I implement SendPulse compliantly? Use the Cyprus region for EU subscribers, enable double opt in, block scripts behind consent, secure unsubscribe links, mask sensitive content in chatbot transcripts and sign the SendPulse DPA. ### Are there alternatives to SendPulse? EU based options include Brevo (France), GetResponse (Poland), CleverReach (Germany), MailerLite EU, Sarbacane (France), and self hosted Mautic or Listmonk. ### How do I update my cookie policy for SendPulse? List sp\_session, sp\_visitor and sp\_form\_state and the chatbot cookies with purpose and duration. Disclose SendPulse Inc. (Cyprus) and SendPulse LLC (United States) and the transfer mechanism. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [RealSatisfied](https://www.flowconsent.com/en/services/marketing/realsatisfied) [RealSatisfied is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. RealSatisfied integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, RealSatisfied helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/marketing/realsatisfied) [Preferences](https://www.flowconsent.com/en/services/marketing/realsatisfied) · ### [Yotpo SMSBump](https://www.flowconsent.com/en/services/marketing/yotpo-smsbump) [Yotpo SMSBump is an SMS marketing and messaging platform that enables businesses to reach customers through text messages. It provides bulk SMS sending, automated campaigns, two-way messaging, and audience segmentation. Yotpo SMSBump supports personalized messages, scheduling, and compliance management for SMS marketing regulations. With delivery analytics and integration capabilities, Yotpo SMSBump helps businesses drive engagement, send transactional alerts, and build direct communication channels.](https://www.flowconsent.com/en/services/marketing/yotpo-smsbump) [Marketing](https://www.flowconsent.com/en/services/marketing/yotpo-smsbump) · ### [Knock](https://www.flowconsent.com/en/services/marketing/knock) [Knock is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Knock enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Knock empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/knock) [Marketing](https://www.flowconsent.com/en/services/marketing/knock) · ### [Wise Agent](https://www.flowconsent.com/en/services/marketing/wise-agent) [Wise Agent is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Wise Agent enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Wise Agent empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/wise-agent) [Marketing](https://www.flowconsent.com/en/services/marketing/wise-agent) · ### [Extole](https://www.flowconsent.com/en/services/marketing/extole) [Extole is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Extole supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Extole ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/extole) [Marketing](https://www.flowconsent.com/en/services/marketing/extole) · ### [Birdeye](https://www.flowconsent.com/en/services/marketing/birdeye) [Birdeye is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Birdeye enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Birdeye empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/birdeye) [Marketing](https://www.flowconsent.com/en/services/marketing/birdeye) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)