Web SDK cookies & data privacy

The Xtremepush web SDK needs to persist information between different page views and sessions to allow a single device to be identified consistently. This is done by creating a localStorage entry in the browser (named xtremepush.data) which stores information about the device.

During the first page load for a new website user (i.e. when the localStorage entry does not exist), an API request will be sent to the Xtremepush server to register the device.

In the following page loads (i.e. when the localStorage entry is present), an API request will only be sent if some of the website user's information is changed, such as browser language.

Xtremepush may also use some cookies, either in response to one of the above API requests or directly from the JavaScript SDK.

Data storage details

The details below describe how the various storage mechanisms are used by Xtremepush. When using this information to update a user-facing privacy notice, the storage purpose must be amended/supplemented to explain the reason for the usage in the context of the end-user.

For example:

The information collected by this process is used exclusively for the purposes of internal market research and for the optimisation and needs-based design of the website.

or:

Individual usage of the website is used to send optimised, event-based user messaging via email, push notifications, on-site content, social channels and SMS. This allows the most important and relevant information to be sent to users at appropriate times.