Sellforte US Tracking Technology Guidance

Version 2026-10-01

Sellforte Tracking Technology measures marketing activity on customer websites or apps within the agreed service scope. The site operator must explain its deployment to visitors. This guidance supports that work and does not provide visitor consent or replace the applicable customer agreement.

Before collection begins

Confirm the actual fields, events, identifiers, device access, destinations, purposes, recipients, processing locations, and retention in a deployment disclosure. Identify the site operator, Sellforte, Inc., the roles of its delivery Affiliates, and applicable suppliers. A label such as aggregate measurement does not make raw online identifiers anonymous or determine statutory roles. Document whether a feature collects communications or session content; do not deploy an undisclosed session-replay or communications-capture feature.

The Customer must publish the required notices and obtain consent before collection, interception, or device access where the law requires it. It must provide applicable opt-outs, honor recognized preference signals such as Global Privacy Control where required, and test that withdrawal or refusal stops the affected collection. Sellforte must supply accurate technical information and make its technology honor the agreed configuration. The Customer's acceptance of an Order Form is not a visitor's consent. US laws differ by state and processing activity; an opt-out regime for one activity does not eliminate consent requirements for another.

Permitted scope

The standard service excludes Sensitive Data and personal information about individuals known to be under 18. A deployment intended for minors or involving excluded data requires a specific signed amendment and legally appropriate safeguards before activation. A commercial agreement cannot waive COPPA, other age-related protections, or required consent. The Parties must minimize collection, stop or isolate prohibited processing when identified, and arrange lawful deletion. They must not identify, profile, or target advertising to children through the technology.

Use the technology for the Customer's agreed measurement and analytics. Sellforte must not sell or share collected Customer Personal Data, create cross-customer individual profiles, or use it for cross-context behavioral advertising under the standard DPA. If the intended deployment introduces audience activation, health-related inferences, biometric identification, individual eligibility decisions, or another purpose outside the agreed scope, obtain a separate scope and legal review before activation. Do not configure the technology to send video titles or video URLs with a persistent identifier; records of an individual's video viewing are excluded data under DPA Section 2.5.

Security and lifecycle

Transmit collected information securely, restrict access, limit events and fields to the agreed purpose, and apply the DPA to relevant supplier copies, logs, prompts, outputs, and support records. The operator must route applicable individual requests and source deletion requirements to Sellforte. Remove or disable deployed technology when no longer authorized, including after termination, and verify that transmission stops.

Suggested visitor disclosure structure

Identify the operator and contact channel; explain that Sellforte, Inc. and its delivery Affiliates in Finland, Germany, and the United Kingdom support the stated marketing measurement purpose; state the actual collected data and device technologies, recipients and countries, retention, and applicable choices; link to the operator's complete privacy notice; and present any required consent control before collection. Complete this disclosure from verified deployment facts. Do not claim US-only hosting, universal anonymity, absence of personal information, or compliance merely because this template is present.

Back to document navigation