To properly display a cookie banner on a customer’s website and record the visitor’s preferences, Osano collects the following information:
| Information Collected | Retention Limit |
| Raw IP address | Session |
| Unique device identifier | Session |
| Reporting Dashboard Metrics | Indefinitely |
| Record of Consent | Indefinitely |
| Hashed IP Address | Indefinitely |
This information is encrypted during transmission and at rest, and it is de-identified by Osano in AWS (Dublin, Ireland) as part of consent record-keeping. The hashed, de-identified information is then stored in AWS (Virginia, US). Since the data is hashed and de-identified, Osano does not retain personal information, and only the customer can reverse the hashing to link the data back to an individual. No personal information from the EU or the UK is transferred to the US.