FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Other

Harborbyte

PreferencesOfficial website

Performance and observability service that captures browser errors, performance metrics and user session metadata through a JavaScript SDK and a server side ingestion API.

Block Harborbyte until consentScan my site
Overview

What does Harborbyte do?

What Harborbyte is

Harborbyte is a performance and observability service used by web teams to track frontend errors, page performance metrics (TTFB, LCP, FID) and user session metadata. A small JavaScript SDK is dropped on the page; it batches events and ships them to the Harborbyte ingestion API for analysis.

Data and cookies

The SDK writes a first party session cookie (hb_session) and a longer lived visitor cookie (hb_visitor). Events sent to the ingestion endpoint contain the page URL, user agent, error stacks, performance timings, IP address and an optional user identifier set by the operator.

GDPR and ePrivacy posture

Both cookies and the SDK request to the Harborbyte API trigger Article 5(3) ePrivacy because they read or write information on the visitor device. Consent is therefore required before the SDK loads. The IP address and any session identifiers shared with the API constitute personal data under Article 4(1) GDPR.

Transfers and contracts

Harborbyte hosts ingestion in US AWS regions. EU operators must sign Standard Contractual Clauses with Harborbyte, complete a Transfer Impact Assessment and document the residency in their RoPA. Confirm whether an EU residency option is available before signing.

Implementation steps

Gate the SDK behind your CMP, configure the SDK to scrub form inputs and URL query strings, set a short retention for session replays, sign the DPA and SCCs, run a DPIA when stack traces can incidentally contain personal data, and surface Harborbyte in your privacy notice.

Compliance

Harborbyte and the GDPR

Harborbyte is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy) for the Harborbyte SDK cookies and behavioural event collection. Legitimate interest (Art. 6(1)(f)) may apply for purely operational error reporting where no behavioural data is processed.
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, CCPA, UK GDPR

Impact assessment (DPIA)

A DPIA is appropriate when Harborbyte session metadata can be linked to identified users (logged in customers) or when stack traces can incidentally contain personal data from form inputs and URL parameters.

Sample text for your banner

We use Harborbyte to monitor performance and detect errors. With your consent, the Harborbyte SDK stores diagnostic information on your device and sends it to servers in the United States.
Cookies and trackers

What Harborbyte sets and contacts

Tracking method
JavaScript SDK that records browser performance, error stacks and user session metadata, plus first party cookies for session continuity. Server side ingestion API receives events from the SDK.
Server location
United States (operator infrastructure on AWS US East)
Data transferred outside the EU
Harborbyte ingests events on US AWS infrastructure. Standard Contractual Clauses are required and a Transfer Impact Assessment should be completed.

Cookies set (3)

NameTypeDurationPurpose
hb_sessionfirst_partySessionSession identifier used to group performance and error events from the same browsing session.
hb_visitorfirst_party1 yearPersistent visitor identifier used to deduplicate users across sessions and to count returning visitors.
hb_expfirst_party90 daysStores assignment to A/B experiment variants when the operator activates the experimentation feature.

Third-party domains contacted (3)

  • harborbyte.com
  • cdn.harborbyte.com
  • ingest.harborbyte.com
Questions

Frequently asked questions about Harborbyte

Can't find your question? Write to us, we answer fast.

What cookies does Harborbyte set?

The Harborbyte SDK writes hb_session (session) and hb_visitor (long lived). Optional cookies may be set if user identification or experiment bucketing is enabled.

Is consent required to load Harborbyte?

Yes. The cookies and the data sent to the ingestion API trigger Article 5(3) ePrivacy. Consent must be obtained before the SDK loads.

What is the legal basis for processing through Harborbyte?

Consent (Art. 6(1)(a) GDPR) for cookies and behavioural events. Legitimate interest may apply for purely operational error reporting that does not involve user behaviour.

Does Harborbyte transfer data to the United States?

Yes. The default ingestion runs on US AWS. Sign SCCs, complete a TIA and document the transfer in your RoPA.

Do I need a DPIA for Harborbyte?

Recommended when stack traces, query strings or session replays can incidentally contain personal data, and when session metadata is linked to identified users.

How do I implement Harborbyte compliantly?

Gate the SDK behind your CMP, scrub form inputs, mask URL query strings, set short retention for replays, sign the DPA and SCCs, and review the integration yearly.

What are the alternatives to Harborbyte?

EU friendly alternatives include Sentry (with EU residency), GlitchTip (self hosted), Datadog (EU site), Honeycomb and self hosted Grafana Faro.

How do I update my cookie policy when adding Harborbyte?

List hb_session and hb_visitor with their purpose, retention and processor. Mention the US transfer, the SCCs and the right to withdraw consent.

Same category

More services: Other

See the whole category

Apple App Store

Apple App Store is a comprehensive e-commerce platform that provides businesses with all the tools needed to build, manage, and grow an online store. From product catalog management and secure payment processing to inventory tracking and order fulfillment, Apple App Store delivers a complete commerce solution. It features responsive storefront themes, SEO-optimized product pages, and powerful marketing tools to help merchants increase visibility and drive sales across channels.

Other

HrFlow.ai

HrFlow.ai is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. HrFlow.ai integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, HrFlow.ai makes advanced AI accessible to all teams.

Preferences

WP Google Map Plugin

WP Google Map Plugin is a mapping and geolocation service that enables websites and applications to integrate interactive maps, location search, and geographic data. It provides customizable displays, geocoding, route planning, and location-based services. WP Google Map Plugin supports real-time tracking, store locators, and geographic analytics. With scalable APIs and extensive documentation, WP Google Map Plugin powers location features for digital projects of any size and complexity.

Analytics

Wabi

Wabi is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Wabi enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Wabi empowers marketing teams to achieve measurable growth.

Marketing

HTTP/2

HTTP/2 is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. HTTP/2 is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, HTTP/2 offers reliable solutions that scale with organizational needs and evolving web standards.

Other

TomTom Maps

TomTom Maps is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. TomTom Maps supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, TomTom Maps ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site