Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Bitmovin is an Austrian video technology company whose player and analytics are used to stream and measure video on websites and apps. The player handles playback, while Bitmovin Analytics measures quality of experience and viewer behaviour using identifiers and IP address. Operated from the European Union, the player can run with functional storage, but the analytics component profiles viewing, so it requires prior consent under the GDPR and the ePrivacy Directive.
Bitmovin is a video streaming technology company based in Austria that provides an adaptive video player, encoding, and analytics. Websites and apps embed the Bitmovin Player to deliver video and can add Bitmovin Analytics to measure playback quality and viewer engagement. Because Bitmovin is an EU company, much of its processing can stay within the European Union.
The player stores functional preferences such as volume and quality, usually in local storage. Bitmovin Analytics, when enabled, collects playback events, quality of experience metrics, viewer identifiers, the page URL, device and browser information, and IP address to build engagement reports. The analytics identifiers can recognise a viewer across sessions.
The player itself can often run on strictly necessary, functional storage, but Bitmovin Analytics processes viewing behaviour and identifiers, so it falls under the ePrivacy consent requirement and needs a GDPR lawful basis. IP addresses and persistent viewer identifiers are personal data. Bitmovin acts as your processor, so a data processing agreement is required.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
You can usually load the Bitmovin Player for strictly necessary playback without a consent banner, but you must obtain prior, opt in consent before Bitmovin Analytics starts profiling viewing. Block the analytics module behind your consent banner and keep the player functional only until consent is given. Make consent specific and easy to withdraw.
Bitmovin is headquartered in the European Union, so core processing can remain in the EU and many deployments avoid a third country transfer. Video and analytics are often served through a global content delivery network, so confirm where playback and analytics data are processed and apply Standard Contractual Clauses and a transfer impact assessment if any provider is outside the EU. Document the data locations.
To use Bitmovin compliantly, keep the player on functional storage, gate Bitmovin Analytics behind consent, and sign a data processing agreement. Confirm the processing regions and CDN, set retention limits for analytics, and avoid sending personal data in custom analytics fields. List Bitmovin in your cookie policy and privacy notice and review it periodically.
Websites using Bitmovin must obtain user consent under GDPR regulations.
DPIA considerations
Bitmovin separates a largely functional player from an analytics component that profiles viewing, which shapes its risk profile. Key DPIA points: (1) Bitmovin Analytics processing of viewer identifiers, IP addresses, and engagement that can recognise viewers across sessions; (2) the player itself relying on functional storage that is lower risk; (3) EU headquartering that helps keep data in the EU, with CDN and any non EU provider needing transfer safeguards; (4) consent required before analytics profiling begins; (5) the need for a data processing agreement and retention limits. A DPIA is advisable where analytics is enabled at scale.
Sample consent text
We use the Bitmovin Player to deliver video and, with your consent, Bitmovin Analytics to measure playback quality and engagement. The player stores functional preferences such as volume, while the analytics component processes viewing data and your IP address. Bitmovin is an EU based provider. You can withdraw your consent to analytics at any time via our cookie settings, and video will still play.
Third-party domains contacted
bitmovin.comcdn.bitmovin.comanalytics-ingress-global.bitmovin.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| bitmovin_volume | Functional | Persistent (local storage) | Stores the chosen playback volume for the video player. |
| bitmovin_quality | Functional | Persistent (local storage) | Remembers the selected video quality preference. |
| bitmovin_analytics_uuid | Analytics | 1 year | Viewer identifier used by Bitmovin Analytics to measure playback quality and engagement across sessions. |
This service may collect user data. Ensure GDPR compliance with FlowConsent.
The Bitmovin Player mainly stores functional preferences such as volume and quality, often in local storage rather than cookies. Bitmovin Analytics, when enabled, sets identifiers to recognise viewers and measure engagement, which are not strictly necessary and require consent. The exact storage depends on your configuration.
You can usually run the player for strictly necessary playback without consent, but Bitmovin Analytics profiles viewing, so obtain prior, opt in consent before it loads. Block the analytics module until the viewer accepts.
Strictly necessary playback and functional storage can rely on legitimate interest (Art. 6(1)(f)). Bitmovin Analytics relies on consent (Art. 6(1)(a)) and the ePrivacy Directive because it profiles viewing behaviour.
Not necessarily. Bitmovin is headquartered in the EU, so processing can stay in the EU. Video and analytics may travel through a global CDN, so confirm the regions and apply Standard Contractual Clauses and a transfer impact assessment if any provider is outside the EU.
A DPIA is advisable where Bitmovin Analytics is enabled at scale, because it profiles viewing. Assess the viewer identifiers, IP processing, the CDN and processing regions, and your retention periods. The player alone is lower risk.
Keep the player on functional storage, gate Bitmovin Analytics behind consent, sign a data processing agreement, and confirm the processing regions and CDN. Set retention limits, avoid personal data in custom analytics fields, and document Bitmovin in your cookie policy and privacy notice.
Yes. A self hosted video file with an open source player such as Video.js, or other EU based video platforms, can deliver playback with less analytics profiling. They reduce tracking and keep more control over data location.
Describe the player''s functional storage and, separately, the Bitmovin Analytics identifiers and data with their purposes and durations, noting that Bitmovin is EU based and where data is processed. Link to Bitmovin''s privacy notice and review the entry when its storage or subprocessors change.