Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
WP Google Map Plugin is a WordPress plugin that embeds Google Maps on your site, inheriting Google Maps cookies and the transfer of visitor IP data to Google in the United States.
WP Google Map Plugin is a popular WordPress plugin that lets site owners add interactive Google Maps, markers and directions without writing code. It works by loading the Google Maps JavaScript API, so the privacy characteristics are essentially those of Google Maps embedded in your WordPress pages.
When a page with the plugin loads a map, the browser contacts Google and sends the visitor IP address, the map location and interaction data, and Google can set cookies such as those used across its services. This is third party processing by Google, not just by your WordPress site.
Loading Google Maps places non essential third party requests and possible cookies on your page, so the ePrivacy consent rule and the GDPR both apply. You are the controller for embedding the map and Google is a separate controller for the data it receives.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
You should configure the plugin so the map loads only after the visitor consents, ideally with a click to load placeholder, because the request sends personal data to Google. Some versions of the plugin or companion consent plugins can defer the map until consent is given.
The Google Maps API is served from Google LLC in the United States, so embedding it transfers the visitor IP there. Rely on the EU US Data Privacy Framework, under which Google is certified, or Standard Contractual Clauses, and disclose this in your privacy policy.
Enable consent gating or a click to load option in the plugin settings, restrict and secure your Google Maps API key, and disclose Google Maps and the United States transfer in your privacy and cookie policies. For a lighter footprint, consider a static map image or a self hosted map.
Websites using WP Google Map Plugin must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is rarely needed for a simple location map, but consider one if the plugin tracks user positions or powers store locators at scale. Focus on the Google cookies and the United States transfer.
Sample consent text
This page shows a map using the WP Google Map Plugin, which loads Google Maps. Loading it sends your IP address to Google in the United States. The map appears only after you accept.
Third-party domains contacted
maps.googleapis.commaps.gstatic.comgoogle.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| NID | Advertising | 6 months | Set by Google to store visitor preferences and information for Google Maps and other Google services. |
| SOCS | Functional | 13 months | Stores the visitor consent state for Google services and interface settings. |
WP Google Map Plugin collects user analytics data — you legally need a consent banner. Try FlowConsent free.
The plugin code is light, but the Google Maps API it loads can set Google cookies and always sends the visitor IP to Google. Treat these as third party Google cookies in your assessment.
Yes, because it loads Google Maps and sends personal data to Google, you should obtain consent or use a click to load placeholder before the map appears.
Consent under Article 6(1)(a) of the GDPR is the safest basis, with the ePrivacy rule covering any Google cookies. Document a legitimate interest only if the map is essential and the transfer is assessed.
Yes, the Google Maps API is served from Google in the United States, so the visitor IP is transferred there under the EU US Data Privacy Framework or Standard Contractual Clauses.
A simple map rarely needs one, but consider a DPIA for large scale store locators or any tracking of user positions. Assess the Google cookies and the US transfer.
Turn on consent gating or a click to load option, restrict your API key, and disclose Google Maps and the US transfer in your policies. Provide an address fallback for users who decline.
Other WordPress map plugins use OpenStreetMap or Leaflet with European or self hosted tiles, avoiding the Google transfer. A static map image is the lightest option.
Disclose that the plugin loads Google Maps, list the Google cookies that may be set, state that the map loads only after consent and mention the United States transfer.