FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Marketing

Xtremepush

MarketingOfficial website

Xtremepush is an Irish customer engagement platform that combines web and mobile push notifications, in app messages, email, SMS and on site personalisation into a single audience and orchestration layer. It is widely used in iGaming, retail, banking and travel, with primary EU hosting and optional US region. For EU customers it raises GDPR and ePrivacy obligations on tracking cookies, push subscription consent and email or SMS marketing legal bases.

Block Xtremepush until consentScan my site
Overview

What does Xtremepush do?

What Xtremepush is and how it works

Xtremepush is an Irish customer engagement platform serving iGaming, retail, financial services and travel. It bundles web and mobile push notifications, in app messages, email, SMS, on site banners and an audience and journey builder. The web SDK is loaded as a JavaScript tag, the mobile SDK ships native iOS and Android libraries. The platform is hosted in the EU by default.

What data Xtremepush collects

IP address, user agent, country, device platform, app version, language, customer identifier provided by the customer (often email hash or internal ID), push subscription token (APNs, FCM, Web Push), event stream (page views, custom events, transactions), audience memberships and message delivery and engagement logs.

GDPR and ePrivacy implications

Web SDK cookies and event streams fall under article 5(3) ePrivacy and need prior consent. Push notification subscriptions are a separate, explicit opt in granted by the browser or operating system. Email and SMS marketing must rest on consent or the soft opt in. Profiling for marketing automation needs to remain proportionate, especially in iGaming where vulnerable user protection is critical.

Consent requirements

Block the Xtremepush web SDK behind a Consent Management Platform. Never auto trigger the browser push prompt: ask first with a soft prompt that explains the value, then trigger the native prompt only if the user agrees. Manage email and SMS consent through clearly labelled opt in checkboxes and offer a preference centre.

International data transfers

Customer data stays in EU regions for EU clients. Push delivery to iOS and Android devices involves Apple Push Notification service (US, with SCCs) and Firebase Cloud Messaging (US, with SCCs and EU US DPF). Document these transfers in your privacy notice and records of processing.

Practical compliance steps

Sign the Xtremepush DPA, list APNs and FCM as sub processors, gate the web SDK behind consent, design a soft push prompt, document email and SMS lawful basis per segment, set conservative retention, run a DPIA where profiling is significant and audit segmentation logic to avoid discrimination.

Compliance

Xtremepush and the GDPR

Xtremepush is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Xtremepush web tracking writes cookies and shares identifiers with a third party for marketing analytics, so prior consent under article 5(3) ePrivacy is required. Push notifications require explicit subscription which acts as consent. Email and SMS marketing require consent or, for existing customers, the soft opt in.
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, Irish DPC guidance, CNIL guidance for French sites, BfDI for German sites, AEPD for Spanish sites.

Impact assessment (DPIA)

A DPIA is recommended when Xtremepush profiles EU users at scale (especially in iGaming, lending or insurance), drives automated decisions, or processes special category data. Document segmentation logic, retention, push subscription flows, sub processors (APNs, FCM) and any US fallback region.

Sample text for your banner

We use Xtremepush to send web and mobile push notifications, in app messages, emails and SMS. Xtremepush stores its data on EU servers and only fires its tracking cookies once you accept marketing.
Cookies and trackers

What Xtremepush sets and contacts

Tracking method
Customer engagement platform delivering push notifications, in app messages, email, SMS and on site personalisation. Xtremepush deploys JavaScript and mobile SDKs that set first party cookies, register push subscriptions, capture behavioural events and stream them to its cloud for segmentation and orchestration.
Server location
Xtremepush is headquartered in Dublin, Ireland, with primary infrastructure in EU and UK regions and a US region available on request for North American customers.
Data transferred outside the EU
Push notifications are delivered through Apple Push Notification service and Firebase Cloud Messaging, which involves transfers to the US. Application data itself stays in EU regions for EU customers. Transfers to the US for FCM and APNs are covered by SCCs and the EU US Data Privacy Framework where applicable.

Cookies set (2)

NameTypeDurationPurpose
xtremepush_idpersistent1 yearFirst party device identifier used by Xtremepush web SDK to recognise the visitor across sessions for behavioural events and audience membership. Requires consent.
xtremepush_sidsessionsessionSession identifier used by Xtremepush web SDK to group events into a session. Requires consent.

Third-party domains contacted (4)

  • xtremepush.com
  • webpushr.xtremepush.com
  • tracking.xtremepush.com
  • cdn.xtremepush.com
Questions

Frequently asked questions about Xtremepush

Can't find your question? Write to us, we answer fast.

What cookies does Xtremepush set?

Xtremepush web SDK sets a first party device identifier cookie, a session cookie and writes localStorage entries to keep the push subscription and audience memberships across sessions. Mobile SDKs do not set browser cookies but persist a device identifier locally and a push token issued by APNs or FCM.

Does Xtremepush require consent?

Yes for web tracking cookies and behavioural event streams. The browser or operating system native push prompt counts as the explicit subscription consent for push notifications. Email and SMS rely on consent or the soft opt in for existing customers.

What is the legal basis for Xtremepush?

Web tracking: consent under article 6(1)(a) GDPR and article 5(3) ePrivacy. Push subscriptions: the native browser or OS subscription. Email and SMS: consent or soft opt in. Profiling for personalisation should rely on consent for sensitive industries (iGaming, credit).

Where does Xtremepush store data?

EU customer data sits in EU regions by default. Push delivery uses Apple APNs and Firebase Cloud Messaging in the US, covered by SCCs and the EU US Data Privacy Framework. A US region of Xtremepush is available for North American clients on request.

Do we need a DPIA for Xtremepush?

A DPIA is recommended in iGaming, lending, insurance, and any context with significant profiling or automated decisions. Document segmentation, retention, push flows, sub processors and the role of marketing automation in customer outcomes.

How do we implement Xtremepush compliantly?

Sign the DPA, list APNs and FCM as sub processors, gate the web SDK behind a Consent Management Platform, use a soft push prompt, capture email and SMS opt in separately, set conservative retention and audit segments for fairness.

What alternatives to Xtremepush exist?

EU friendly alternatives include Braze (with EU data residency), Iterable (EU available), Insider (EU available), MoEngage (EU region), CleverTap (EU), Optimove (EU and UK), Selligent (now Marigold) and EU specific players like Notify and Batch (France).

How do we update the cookie policy when using Xtremepush?

List the Xtremepush web SDK cookies with vendor, purposes, retention and legal basis. Mention push subscription as a separate, OS managed opt in. Add APNs and FCM as transfer recipients for push delivery. Update on each platform release.

Same category

More services: Marketing

See the whole category

BuzzBuilder

BuzzBuilder is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. BuzzBuilder provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, BuzzBuilder helps deliver the right message to the right audience at the right time.

Marketing

Privy

Privy is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Privy enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Privy empowers marketing teams to achieve measurable growth.

Marketing

SendGrid

SendGrid is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. SendGrid provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, SendGrid helps deliver the right message to the right audience at the right time.

Marketing

TargetBay

TargetBay is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. TargetBay supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, TargetBay ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

Smarter Click

Smarter Click is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Smarter Click supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Smarter Click enables informed decisions that improve experience and drive results.

Marketing

Flamp

Flamp is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Flamp supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Flamp ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site