Google Cloud CDN
Google Cloud CDN is Google's edge content delivery network for Google Cloud customers that caches static and dynamic content at globally distributed points of presence.
What does Google Cloud CDN do?
What is Google Cloud CDN?
Google Cloud CDN is the Content Delivery Network integrated with the Google Cloud load balancer. It caches content closer to end users on Google's global edge network, reducing latency and origin load. It is primarily an infrastructure service rather than a tracking tool.
How does Google Cloud CDN process personal data?
Cloud CDN itself does not set marketing cookies. It processes IP addresses, request headers and URLs to route, cache and protect traffic. Depending on the integration, Google's edge may set operational cookies such as NID or __Secure prefixed cookies when other Google services are involved, but these are not necessary for Cloud CDN to operate.
Is consent required?
In a pure caching configuration, Cloud CDN qualifies as strictly necessary for the technical delivery of the website and does not require consent under Article 5(3) of the ePrivacy Directive. If marketing or analytics features from other Google products are layered on top, those features must obtain consent independently.
International data transfers
Although traffic is served from the closest POP, Google is a US headquartered controller and may transfer operational and logging data to the United States. Transfers are governed by Standard Contractual Clauses and the EU US Data Privacy Framework. Customers can configure region restrictions for some Google Cloud services.
Compliance recommendations
Document Cloud CDN in your record of processing activities under hosting and content delivery, rely on the Google Cloud Data Processing Addendum, restrict regions where possible and avoid mixing Cloud CDN with Google products that introduce advertising cookies unless you have a consent flow in place.
Google Cloud CDN and the GDPR
- Legal basis
- legitimate_interest
- Risk level
- low
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
A DPIA is generally not required for Cloud CDN used as pure caching, but transfer risk should be documented. A DPIA may be needed if combined with monitoring or marketing services.
Sample text for your banner
We use Google Cloud CDN to deliver our website from servers close to you. Cloud CDN processes your IP address and request headers and may transfer technical data to the United States.
What Google Cloud CDN sets and contacts
- Tracking method
- edge_caching_with_operational_cookies
- Server location
- Google global edge POPs (US, EU, Asia, LATAM)
- Cookieless mode available
- Yes
- Data transferred outside the EU
- Google operates a global edge network. Although traffic is served from the closest POP, Google is a US headquartered controller. Transfers are covered by Standard Contractual Clauses and the EU US Data Privacy Framework.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| NID | preferences | 6 months | Operational cookie set by Google to remember user preferences such as language; may appear when other Google services run alongside Cloud CDN. |
| __Secure-1PSID | necessary | 24 months | Secure session and security cookie set by Google when authenticated Google services are integrated with the property. |
| GOOGLE_ABUSE_EXEMPTION | necessary | 1 year | Security cookie issued by Google to confirm a human user has passed an abuse challenge. |
Third-party domains contacted (4)
googleusercontent.comgoogleapis.comgstatic.comcloud.google.com
Frequently asked questions about Google Cloud CDN
Can't find your question? Write to us, we answer fast.
What cookies does Google Cloud CDN set?
Cloud CDN does not set tracking cookies on its own. It is a caching layer that processes IP addresses, headers and URLs. Operational cookies such as NID or __Secure prefixed cookies may appear if other Google services are layered on top of the same property.
Is consent required before using Cloud CDN?
In a pure caching configuration Cloud CDN qualifies as strictly necessary for the delivery of the service and does not require consent under Article 5(3) of the ePrivacy Directive. Consent is needed for any additional analytics or marketing component layered on top.
What is the legal basis for Cloud CDN?
The legal basis is legitimate interest under Article 6(1)(f) of the GDPR, namely the technical delivery, performance and security of the website. Contract performance may also apply for authenticated user areas.
Does Cloud CDN transfer data outside the EU?
Yes, indirectly. Although traffic is served from the closest edge POP, Google is a US headquartered controller and may transfer operational, logging and abuse data to the United States. Transfers are covered by Standard Contractual Clauses and the EU US Data Privacy Framework.
Is a DPIA required for Cloud CDN?
A standalone DPIA is generally not required for Cloud CDN used as a pure cache. A DPIA becomes useful when Cloud CDN is combined with Cloud Armor logs, monitoring or marketing services that involve systematic user observation.
How do I implement Cloud CDN compliantly?
Activate Cloud CDN only on resources that do not contain sensitive personal data, restrict the Google Cloud project to EU regions where possible, sign the Google Cloud DPA, enable Cloud Audit Logs and document the service in your record of processing activities.
Are there privacy friendly alternatives?
Bunny.net, Fastly EU, Scaleway Edge Services or self hosted Varnish provide caching with a smaller US footprint. The choice depends on geographic coverage, performance requirements and the level of data residency you need.
How should I update my cookie policy to mention Cloud CDN?
Mention Cloud CDN under hosting and content delivery, explain that it processes IP addresses and headers as a sub processor, state that no marketing cookie is set by the CDN itself, list the Google Cloud DPA as the legal framework and disclose potential transfers to the United States.
Transloadit
Transloadit is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Transloadit integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Transloadit helps organizations maintain robust websites that meet user expectations and technical requirements.
StackPath CDN
StackPath CDN is a content delivery network (CDN) that accelerates website performance by distributing content across a global network of edge servers. It reduces latency, improves page load times, and handles traffic spikes by serving cached content from the nearest location. StackPath CDN supports static and dynamic content acceleration, DDoS protection, and SSL/TLS encryption. With real-time analytics and purge capabilities, StackPath CDN ensures fast, reliable delivery.
Fastly
Fastly is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Fastly is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Fastly offers reliable solutions that scale with organizational needs and evolving web standards.
QUIC.cloud
QUIC.cloud is a web hosting and cloud infrastructure provider delivering reliable, scalable hosting solutions for websites and applications of all sizes. It offers shared, VPS, and dedicated server options with SSD storage, global CDN, and automated backups. QUIC.cloud provides one-click deployment, managed databases, and 24/7 monitoring. With high uptime guarantees and developer-friendly tools, QUIC.cloud ensures optimal performance at scale.
Uploadcare
Uploadcare is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Uploadcare supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Uploadcare ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
MyCDN
MyCDN is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. MyCDN supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, MyCDN enables informed decisions that improve experience and drive results.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.