FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
CDN

jsDelivr

UnclassifiedOfficial website

jsDelivr is a free open source public CDN operated by Prospect One (Poland). Serves npm packages, GitHub releases and WordPress plugins from a global network. No cookies, no tracking, no identifier; the publisher loads only public scripts.

Block jsDelivr until consentScan my site
Overview

What does jsDelivr do?

What jsDelivr is

jsDelivr is a free open source content delivery network operated by Prospect One Sp. z o.o., a Polish company based in Krakow. It mirrors npm packages, GitHub releases, WordPress plugins, esm modules and a wide range of public assets, served from a multi provider edge network (Cloudflare, Fastly, Bunny.net and an internal load balancer) with more than 750 points of presence. Developers reference scripts with URLs like https://cdn.jsdelivr.net/npm/<package>@<version> instead of installing and bundling them locally.

No cookies, no tracking

jsDelivr sets no cookies and does not embed any tracking pixel. The CDN only logs aggregate file request counts per country and per package for the public statistics dashboard; the visitor IP is processed by the underlying CDN providers solely for routing and is not retained as a tracking identifier. There is no visitor profile, no audience matching, no analytics SDK, no marketing tag.

GDPR and ePrivacy implications

Loading a public open source script from jsDelivr is comparable to loading a static file from a CDN: it requires a network connection but no cookie or storage is written by jsDelivr itself. Under ePrivacy art. 5(3), no consent is required because nothing is stored on the visitor device. Under GDPR art. 6(1)(f), the processing of the IP for routing is grounded in the legitimate interest of the publisher in delivering the page. The Munich Google Fonts ruling does not apply because jsDelivr is hosted in the EU by Prospect One.

Underlying CDN providers and their privacy posture

jsDelivr load balances traffic across Cloudflare, Fastly and Bunny.net. All three honour HTTP signals and do not introduce additional tracking when serving a static file. Cloudflare and Fastly are US headquartered but offer EU regional services; Bunny.net is Slovenian and EU only by default. For maximum predictability the publisher can pin loading to the Bunny.net Subresource Integrity hash through the jsDelivr URL parameters or self host the file.

Best practices for European publishers

Add the integrity attribute to your script tags (SRI) to prevent supply chain attacks, pin the exact version of the package instead of a moving major tag, list jsDelivr in the privacy notice as a sub processor with the EU only Bunny.net edge if you can confirm it, and self host critical assets if the project has a strict CSP that forbids third party CDN domains.

Compliance

jsDelivr and the GDPR

Legal basis
Legitimate interest of the publisher in serving open source assets efficiently (GDPR art. 6(1)(f)) and the strictly necessary exemption of ePrivacy art. 5(3) for the network connection itself. No cookies, no tracking pixel, no behavioural identifier. The Munich Google Fonts ruling does not apply because jsDelivr is hosted in the EU by Prospect One and is not a US service.
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive, Polish Personal Data Protection Act (UODO), CNIL exemption for technically necessary CDN access

Impact assessment (DPIA)

A DPIA is not required for jsDelivr because the CDN sets no cookies, retains no personal data and is operated from the European Union by a Polish company. Document jsDelivr as a sub processor in your record of processing only if the assets loaded contain personal data (for example a JSON file embedding visitor profiles). The DPIA exemption applies as long as the underlying CDN providers (Cloudflare, Fastly, Bunny.net) handle only IP for routing without further processing.

Sample text for your banner

Our website loads open source JavaScript and CSS files from jsDelivr, a free public CDN operated by Prospect One (Poland). jsDelivr does not set cookies and does not track visitors. Your IP address is processed by the underlying CDN providers (Cloudflare, Fastly, Bunny.net) only for routing and is not retained for tracking purposes. No consent is required.
Cookies and trackers

What jsDelivr sets and contacts

Tracking method
public_open_source_cdn_with_no_cookies_and_minimal_log_retention
Server location
jsDelivr is a free public CDN operated by Prospect One Sp. z o.o., a Polish company headquartered in Krakow. The CDN runs on a global network powered by Cloudflare, Fastly, Bunny.net and an internal load balancer with more than 750 points of presence on every continent. European traffic is mostly served from Cloudflare, Fastly and Bunny.net European edges (Amsterdam, Frankfurt, Paris, London, Warsaw).
Cookieless mode available
Yes

Cookies set (1)

NameTypeDurationPurpose
noneN/AN/AjsDelivr is a static asset CDN and does not set any cookies. No tracking, no identifier, no behavioural profile.

Third-party domains contacted (5)

  • cdn.jsdelivr.net
  • jsdelivr.com
  • fastly.jsdelivr.net
  • gcore.jsdelivr.net
  • data.jsdelivr.com
Questions

Frequently asked questions about jsDelivr

Can't find your question? Write to us, we answer fast.

What cookies does jsDelivr set?

None. jsDelivr is a public open source CDN that serves static files without setting any cookie. The underlying CDN providers (Cloudflare, Fastly, Bunny.net) do not introduce tracking cookies for the static file fetch.

Is consent required for jsDelivr?

No. Loading a public script from jsDelivr requires only a network connection without any storage on the visitor device. Under ePrivacy art. 5(3), no consent is required because nothing is written to the device.

What is the legal basis for jsDelivr?

Legitimate interest of the publisher (GDPR art. 6(1)(f)) in delivering the page through a public CDN. Article 28 GDPR does not strictly apply because jsDelivr does not process visitor personal data beyond the routing IP, but a sub processor mention is good practice.

Are data transferred outside the EU?

jsDelivr itself is operated from Poland. The underlying CDN edges (Cloudflare, Fastly, Bunny.net) are global. EU visitors are normally routed to European edge nodes; no personal data is retained for tracking purposes. The Munich Google Fonts ruling does not apply.

Do I need a DPIA for jsDelivr?

No. jsDelivr does not process visitor personal data beyond routing. A DPIA is required only if the assets you load through jsDelivr contain personal data, in which case the DPIA covers your own content, not jsDelivr.

How do I use jsDelivr compliantly?

Add the integrity attribute (SRI) to your script tags, pin the exact version of the package, list jsDelivr in your privacy notice as a sub processor with the EU first edge configuration, and self host critical assets if your CSP forbids third party CDN domains.

What are the alternatives to jsDelivr?

unpkg (US), CDNJS by Cloudflare (US), Skypack (US, esm), esm.sh (US, esm), Bunny CDN (Slovenia, EU first paid CDN). For full control: self host the assets on your own CDN. jsDelivr is the EU first public CDN with the strongest privacy posture.

How do I update my cookie policy after adding jsDelivr?

Add jsDelivr to the sub processor list with Prospect One (Poland) as the operator, state that no cookies are set, mention the underlying CDN providers (Cloudflare, Fastly, Bunny.net) for transparency and note that no consent is required because no storage occurs on the visitor device.

Same category

More services: CDN

See the whole category

Render Better

Render Better is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Render Better supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Render Better enables informed decisions that improve experience and drive results.

Analytics

ImageEngine

ImageEngine is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. ImageEngine integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, ImageEngine helps organizations maintain robust websites that meet user expectations and technical requirements.

CDN

Sotoon

Sotoon is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Sotoon integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Sotoon helps organizations maintain robust websites that meet user expectations and technical requirements.

CDN

MyCDN

MyCDN is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. MyCDN supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, MyCDN enables informed decisions that improve experience and drive results.

CDN

Sitecore Experience Edge

Sitecore Experience Edge is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Sitecore Experience Edge integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Sitecore Experience Edge helps organizations maintain robust websites that meet.

CDN

Optimole

Optimole is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Optimole supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Optimole ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site