> How Truepush web push uses subscription tokens and cookies, why both cookie consent and the browser opt in are required, and how to deploy it under GDPR. > > Canonical: https://www.flowconsent.com/en/services/marketing/truepush Marketing # Truepush Marketing · [Official website](https://www.truepush.com) Truepush is a free web and app push notification service that lets sites and apps re engage users with browser and device notifications. It collects push subscription tokens, browser and device information, and segmentation data to target messages. Because it sets cookies and relies on the browser push opt in, it requires consent under the GDPR and the ePrivacy Directive. [Block Truepush until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Marketing - Prior consent Required - Documented cookies 4 - Third-party domains 3 - Servers United States and India Overview ## What does Truepush do? ## **What Truepush is** Truepush is a free web and app push notification service that helps websites and applications re engage their users with timely notifications. Site owners add a script that registers visitors as push subscribers and then send campaigns or automated messages from the Truepush dashboard. It supports segmentation so that different groups of subscribers receive different messages. ## **Data and cookies it uses** Truepush collects a push subscription token that identifies the subscriber browser or device, together with browser and device information and segmentation data used to target notifications. It also sets cookies to recognise subscribers and store segmentation attributes. These identifiers and cookies relate to identifiable users and are therefore personal data under the GDPR. ## **GDPR and ePrivacy obligations** Push notifications involve a double step under European law. First, the ePrivacy Directive requires consent before non essential cookies and the subscription identifier are stored on the device, and second, the browser itself shows a native permission prompt that the user must accept. Both steps must be freely given, so you should not trigger the browser prompt until the visitor has agreed through your own consent layer. The lawful basis for the whole flow is consent. ## **Managing consent** Use a clear opt in that explains what notifications the user will receive before the native browser prompt appears, and avoid prompting on the first page load without context. Record when and how each subscriber opted in, and make it easy to unsubscribe at any time. Treat the browser permission and your cookie consent as linked, since removing one should effectively end the messaging. ## **Data transfers outside the EEA** Truepush processes subscriber and device data outside the European Economic Area, including in the United States and India. These transfers rely on Standard Contractual Clauses, and you should confirm that supplementary measures are in place where needed. Document the transfer mechanism in your privacy notice and records of processing so subscribers understand where their data goes. ## **Practical steps to stay compliant** Gate the Truepush script and the browser prompt behind explicit consent, declare its cookies and the subscription identifier in your cookie policy, and sign a data processing agreement that includes Standard Contractual Clauses. Add Truepush to your records of processing, explain the international transfers in your privacy notice, and give subscribers a simple way to unsubscribe. Review retention so subscription data is not kept longer than needed. Compliance ## Truepush and the GDPR Truepush is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (GDPR Art. 6(1)(a) and ePrivacy Art. 5(3)), including the browser push opt-in - Risk level medium - Applicable regulations GDPR, ePrivacy Directive ### Impact assessment (DPIA) A data protection impact assessment should be considered where Truepush is used for large scale push messaging and behavioural segmentation. Consider (1) the collection of push subscription tokens and device information that single out identifiable users; (2) the legal basis, which is consent for both the cookie or identifier and the browser push opt in, and the need to keep these freely given; (3) the segmentation and targeting logic, since profiling subscribers can shape the messages they receive; (4) the international transfers to the United States and India, the reliance on Standard Contractual Clauses, and any supplementary measures required; and (5) data subject rights, retention of subscription data, and how unsubscribe requests and consent withdrawals are handled. ### Sample text for your banner > We would like to send you push notifications and use cookies to manage your subscription. Your data may be processed outside the EEA under appropriate safeguards. Allow to subscribe, or decline to continue without notifications. You can unsubscribe at any time. Cookies and trackers ## What Truepush sets and contacts - Tracking method Push subscription identifiers and cookies for segmentation - Server location United States and India - Data transferred outside the EU Subscriber and device data is processed outside the EEA, including the United States and India; transfers rely on Standard Contractual Clauses. ### Cookies set (4) | Name | Type | Duration | Purpose | | ------------------------ | ---------- | -------- | ------------------------------------------------------------------------------------------------------------- | | truepush\_subscriber\_id | Functional | 1 year | Stores the push subscriber identifier so the browser or device can be recognised and notifications delivered. | | truepush\_segment | Marketing | 1 year | Holds segmentation attributes used to target push notifications to specific subscriber groups. | | truepush\_analytics | Analytics | 1 year | Measures notification delivery, clicks, and engagement to report on campaign performance. | | truepush\_session | Functional | Session | Maintains the subscriber session and keeps the push opt in flow working during a visit. | ### Third-party domains contacted (3) - `truepush.com` - `cdn.truepush.com` - `app.truepush.com` Questions ## Frequently asked questions about Truepush Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies and identifiers does Truepush set? Truepush sets cookies to recognise subscribers and store segmentation attributes, and it collects a push subscription token together with browser and device information. The token uniquely identifies the subscriber browser or device so notifications can be delivered. These identifiers are non essential and should be listed in your cookie policy. ### Is consent required to use Truepush? Yes. Truepush requires a double step of consent, first for the cookies and subscription identifier under the ePrivacy Directive, and then for the native browser push permission prompt. You should obtain agreement through your own consent layer before triggering the browser prompt, and never enable notifications by default. ### What is the legal basis for Truepush? The lawful basis is consent under GDPR Article 6(1)(a) and ePrivacy Article 5(3), covering both the cookie or subscription identifier and the browser push opt in. Because there is no realistic legitimate interest alternative for push messaging, consent must be freely given and easy to withdraw. Document this basis in your records of processing. ### Does Truepush transfer data to the United States? Yes. Truepush processes subscriber and device data outside the EEA, including in the United States and India, and these transfers rely on Standard Contractual Clauses. You should confirm that supplementary measures are in place where needed and explain the transfers in your privacy notice. Subscribers should be told where their data is processed. ### Do I need a DPIA for Truepush? A DPIA should be considered where Truepush is used for large scale messaging and behavioural segmentation, especially given the transfers outside the EEA. Assess the subscription identifiers, the segmentation logic, the international transfers and their safeguards, and how consent and unsubscribe requests are handled. A formal DPIA may be required if the processing is high risk. ### How do I implement Truepush compliantly? Gate the Truepush script and the browser prompt behind explicit consent, and present a clear opt in that explains the notifications before the native prompt appears. Declare the cookies and subscription identifier in your cookie policy, sign a data processing agreement with Standard Contractual Clauses, and add Truepush to your records of processing. Make unsubscribing easy and set sensible retention. ### Are there alternatives to Truepush? Yes, other web and app push providers such as OneSignal, PushEngage, or Firebase Cloud Messaging offer similar subscription and segmentation features. All of them rely on the browser push opt in and set identifiers, so the same double consent obligations apply. Compare their hosting locations and data transfer practices when choosing. ### How should I update my cookie policy for Truepush? List the Truepush cookies and the push subscription identifier with their purpose and retention, and explain that notifications require both cookie consent and the browser permission. Disclose that subscriber data may be processed in the United States and India under Standard Contractual Clauses. Describe how users can unsubscribe and withdraw consent. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [Poltio](https://www.flowconsent.com/en/services/marketing/poltio) [Poltio is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Poltio supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Poltio ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/poltio) [Marketing](https://www.flowconsent.com/en/services/marketing/poltio) · ### [Outfunnel](https://www.flowconsent.com/en/services/marketing/outfunnel) [Outfunnel is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Outfunnel enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Outfunnel empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/outfunnel) [Marketing](https://www.flowconsent.com/en/services/marketing/outfunnel) · ### [Senja](https://www.flowconsent.com/en/services/marketing/senja) [Senja is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Senja integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Senja helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/marketing/senja) [Preferences](https://www.flowconsent.com/en/services/marketing/senja) · ### [Thrive Quiz Builder](https://www.flowconsent.com/en/services/marketing/thrive-quiz-builder) [Thrive Quiz Builder is an interactive quiz and calculator builder that helps businesses create engaging, lead-generating content for their websites. It supports branching logic, scoring systems, and personalized result pages that increase engagement. Thrive Quiz Builder integrates with email marketing and CRM platforms to capture and segment leads based on responses. With customizable designs and embeddable formats, Thrive Quiz Builder drives conversions through interactive content marketing.](https://www.flowconsent.com/en/services/marketing/thrive-quiz-builder) [Analytics](https://www.flowconsent.com/en/services/marketing/thrive-quiz-builder) · ### [TestFreaks](https://www.flowconsent.com/en/services/marketing/testfreaks) [TestFreaks is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. TestFreaks supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, TestFreaks ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/testfreaks) [Preferences](https://www.flowconsent.com/en/services/marketing/testfreaks) · ### [Societe des Avis Garantis](https://www.flowconsent.com/en/services/marketing/societe-des-avis-garantis) [Societe des Avis Garantis is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Societe des Avis Garantis supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Societe des Avis Garantis ensures your website delivers a smooth, uninterrupted experience to every visitor.](https://www.flowconsent.com/en/services/marketing/societe-des-avis-garantis) [Preferences](https://www.flowconsent.com/en/services/marketing/societe-des-avis-garantis) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)