Yahoo Tag Manager
Yahoo Tag Manager (YTM) is the tag management system operated by LY Corporation (Japan), the successor of Yahoo Japan. It works like Google Tag Manager : the publisher installs a single JavaScript container snippet, then configures inside the YTM dashboard which third party tags (Yahoo Japan ads, Google Ads, Meta Pixel, custom HTML) should fire and under which conditions. Because YTM itself is just a script loader, the privacy impact comes from the tags it deploys rather than from the container; the container is hosted in Japan, which benefits from an EU adequacy decision.
What does Yahoo Tag Manager do?
What Yahoo Tag Manager is
Yahoo Tag Manager (YTM) is the tag management system maintained by LY Corporation, the Japanese parent of Yahoo Japan, born from the 2023 merger of Z Holdings and LINE Corporation. The product is functionally close to Google Tag Manager : the publisher installs one container snippet, then uses the dashboard to deploy any number of marketing and analytics tags without touching the site code. It is the dominant TMS on the Japanese consumer web.
What the container alone does
The container loader stores a small configuration cookie (ytm_config), processes the visitor IP and User Agent in Japan and downloads the latest tag configuration. On its own this is a minimal processing under Article 6(1)(f) GDPR with no real privacy risk : Japan benefits from the EU adequacy decision and the data plane stays in Tokyo (AWS ap northeast 1).
Where the real risk lies
The privacy footprint of YTM is the sum of the tags it deploys. Yahoo Japan ad pixels (B, YJSID cookies) implement large scale retargeting on the Yahoo Japan ad network. Google Ads, Meta Pixel, TikTok Pixel deployed through YTM each carry their own US or non EEA transfers. Custom HTML tags can fire arbitrary JavaScript and are the most common source of compliance leaks because they bypass YTM's category controls.
Consent and the CMP
Wire YTM to your CMP. Each tag must be fired only after the user has consented to its category. The Yahoo Japan ad pixels must be classified as marketing; analytics tags as analytics; custom HTML tags should be reviewed individually before they ship. The container loader itself can run before consent because it does not carry trackers, but if you want a fully gated banner you can also block it until acceptance.
Compliance steps
Enumerate every tag deployed via YTM in your processing register and cookie policy. Wire the CMP to YTM through a consent variable that gates each tag category. Audit custom HTML tags at every change. Sign the YTM DPA with LY Corporation. Reference the EU Japan adequacy decision for the container hosting. Add each individual tag's destination country (US for Google or Meta, etc.) to the privacy notice.
Yahoo Tag Manager and the GDPR
Yahoo Tag Manager is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) for any marketing or analytics tag deployed through the container; legitimate interest (Art. 6(1)(f) GDPR) for the strictly necessary container loader cookie
- Risk level
- high
- Applicable regulations
- GDPR, ePrivacy Directive, Japanese APPI, EU adequacy decision (Implementing Decision 2019/419)
Impact assessment (DPIA)
YTM itself is a tag dispatcher, so the privacy analysis splits in two layers. (1) The container loader sets a minimal session and configuration cookie and processes the visitor IP and User Agent in Japan; this part benefits from the EU adequacy decision for Japan and from the APPI. (2) Each tag fired through YTM (Yahoo Japan ad pixels, Google Ads, Meta Pixel, TikTok Pixel, custom HTML) has its own controller, retention, data flows and DPIA scope. Key considerations : (a) the publisher must enumerate every YTM tag in the cookie policy and apply the right consent gate per category; (b) Server side tagging features can shift the data flow to a Japan based endpoint, reducing US transfers; (c) custom HTML tags in YTM are a recurring risk because they bypass the standard category controls. A DPIA is recommended whenever YTM is used to deploy persistent identifiers, retargeting or large scale analytics.
Sample text for your banner
Our site uses Yahoo Tag Manager (LY Corporation, Tokyo, Japan) to load marketing and analytics tags such as Yahoo Japan Display Ads, Google Ads and Meta Pixel. The container itself stores only a minimal configuration cookie and sends your IP and User Agent to a Japanese data centre; Japan benefits from an EU adequacy decision so this transfer is treated like a transfer inside the EU. Each marketing or analytics tag has its own purpose, cookies and possibly its own destination country; you can refuse them individually in our cookie banner.
What Yahoo Tag Manager sets and contacts
- Tracking method
- Container based tag management system (single JavaScript loader plus dynamic tag injection)
- Server location
- Japan (LY Corporation, formerly Yahoo Japan, Tokyo, AWS ap, northeast, 1)
- Data transferred outside the EU
- Yahoo Tag Manager is operated by LY Corporation (the merger of Z Holdings / Yahoo Japan and LINE Corporation) and hosted in Japan on AWS ap, northeast, 1. Japan benefits from European Commission Implementing Decision (EU) 2019/419 recognising it as ensuring an adequate level of data protection, so transfers from European publishers to Japan do not require Standard Contractual Clauses on top of the adequacy. The tags that the container delivers (Google Ads, Meta Pixel, Yahoo Japan ad pixels) each carry their own destination countries.
Cookies set (4)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| ytm_config | Strictly necessary | Session | Stores the container configuration version pulled from the YTM dashboard so the loader does not refetch on every page view. |
| ytm_ev | Analytics | 30 days | Aggregates dataLayer event metrics inside YTM to power container, level analytics and debug tools. |
| B | Marketing | 1 year | Yahoo Japan persistent visitor identifier used by Yahoo Japan ad pixels deployed through YTM (cross site advertising attribution). |
| YJSID | Marketing | Session | Yahoo Japan session identifier used by Yahoo Japan ad and conversion tracking pixels. |
Third-party domains contacted (5)
yahoo.co.jps.yimg.jpyjtag.yahoo.co.jpb92.yahoo.co.jptags.yahoo.co.jp
Frequently asked questions about Yahoo Tag Manager
Can't find your question? Write to us, we answer fast.
Which cookies does Yahoo Tag Manager set?
The container itself sets ytm_config (strictly necessary, session) and ytm_ev (analytics, 30 days). The Yahoo Japan ad pixels deployed through YTM additionally set B (marketing, 1 year) and YJSID (marketing, session). Other tags fired via YTM set their own cookies.
Do I need consent for YTM?
Yes for any tag deployed through YTM that is not strictly necessary (marketing, analytics, retargeting). The container loader itself can be loaded before consent because it does not carry trackers, but every tag it deploys must be gated by category.
What legal basis applies?
Consent (Article 6(1)(a) GDPR) for marketing and analytics tags deployed through YTM. Legitimate interest (Article 6(1)(f)) for the container loader processing the IP. Each tag must be analysed separately for its own basis.
Is data transferred outside the EU?
The container itself is hosted in Japan, an adequate country under Implementing Decision 2019/419, so no SCCs are needed for it. The tags deployed through YTM may transfer data to other third countries (US for Google or Meta) and each has its own transfer chain.
Is a DPIA required?
Recommended for any deployment that uses YTM to fire persistent identifiers, retargeting or large scale analytics. The container alone does not warrant a DPIA, but the combined tag stack often does.
How do I implement YTM compliantly?
Wire YTM to your CMP through a consent variable that gates each tag category. List every tag in the cookie policy. Audit custom HTML tags before release. Sign the YTM DPA with LY Corporation. Reference the EU Japan adequacy decision for the container; add the destination country of each downstream tag in the privacy notice.
Are there European alternatives?
Yes : Google Tag Manager (US), Tealium iQ (US with EU regions), Commanders Act (France), Matomo Tag Manager (open source), Piwik PRO Tag Manager (Poland), Sourcepoint (US, EU regions). For an EU first stack, Commanders Act, Matomo or Piwik PRO are the strongest options.
How should I update my cookie policy?
List ytm_config, ytm_ev, B and YJSID in the cookie table with their domain, duration and purpose. Add LY Corporation to the recipient list with Japan as the destination country and reference the EU adequacy decision. For each downstream tag (Google Ads, Meta Pixel) add a separate section.
Appsflyer
Appsflyer is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Appsflyer offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Appsflyer empowers organizations to optimize strategy and maximize return on investment.
Kilkaya
Kilkaya is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Kilkaya supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Kilkaya enables informed decisions that improve experience and drive results.
Able CDP
Able CDP is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Able CDP supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Able CDP enables informed decisions that improve experience and drive results.
Hotjar Incoming Feedback
Hotjar Incoming Feedback is a survey and feedback collection platform that helps businesses gather valuable customer insights through customizable questionnaires, polls, and NPS surveys. It offers advanced logic branching, multi-channel distribution, and real-time analytics. Hotjar Incoming Feedback enables organizations to measure customer satisfaction, collect product feedback, and conduct market research. Its reporting tools transform raw feedback data into actionable insights.
WP Live Visitor Counter
WP Live Visitor Counter is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. WP Live Visitor Counter supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, WP Live Visitor Counter remains a leading web.
Juvo Leads
Juvo Leads is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Juvo Leads offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Juvo Leads empowers organizations to optimize strategy and maximize return on investment.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.