Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
PeerTube is a free, decentralised video platform built on the ActivityPub protocol and developed by the French non profit Framasoft. Each video is hosted on an independent instance, and embedding a PeerTube player loads the video from that instance rather than from a central ad network. It is designed to be privacy friendly: it sets no advertising or analytics cookies by default, though it can use peer to peer streaming that shares your IP address with other viewers.
PeerTube is free, open source software for publishing and watching videos in a decentralised, federated network. Instead of a single company, thousands of independent instances run PeerTube and connect to each other through the ActivityPub protocol, and the software is developed by the French non profit Framasoft. When you embed a PeerTube video, the player and the video stream are served by the instance that hosts the video.
By default PeerTube does not set advertising or analytics cookies. The player stores a few preferences such as volume and playback quality in the browser local storage, which are functional. To deliver video efficiently, PeerTube can use peer to peer streaming over WebRTC, which shares small video segments directly between viewers and therefore exposes each viewer IP address to other peers.
Because the default embed avoids tracking cookies, PeerTube is one of the lighter video options under the ePrivacy Directive, and strictly functional storage does not require consent. The instance that hosts the video acts as the controller or processor for any data it logs, such as server access logs and IP addresses. If peer to peer streaming is enabled, the sharing of IP addresses with other viewers should be assessed and disclosed.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
If you keep the privacy friendly defaults with no analytics or advertising, you can usually rely on legitimate interest for strictly necessary playback and do not need a consent banner for the player itself. However, if you enable peer to peer streaming or add any analytics, you should inform users and obtain consent where the law requires it. Offering a click to load placeholder is a robust way to avoid any processing before the visitor chooses to watch.
Where data is processed depends on where the chosen instance is hosted. If you self host PeerTube or pick an instance in the European Union, video data can stay within the EU and no third country transfer occurs. Peer to peer streaming can route segments to viewers anywhere in the world, so consider disabling it or documenting it if international exposure of IP addresses is a concern.
To use PeerTube compliantly, choose an EU based or self hosted instance, decide whether to enable peer to peer streaming, and document that choice. Use a click to load wrapper so the player loads only on user action, mention PeerTube and the hosting instance in your privacy notice, and describe the local storage it uses. Review the instance terms and the data the host logs before you embed.
Websites using PeerTube must obtain user consent under GDPR regulations.
DPIA considerations
PeerTube is privacy friendly by default and sets no advertising or analytics cookies, which lowers its risk profile. Key DPIA points: (1) the hosting instance logs IP addresses and access data and acts as controller or processor for those logs; (2) peer to peer streaming over WebRTC exposes each viewer IP address to other viewers, which is a disclosure to third parties that should be assessed or disabled; (3) data location depends entirely on the instance, so an EU instance or self hosting keeps data in adequate jurisdictions; (4) functional local storage for player preferences is low risk and exempt from consent; (5) embedding still loads remote content, so a click to load wrapper further reduces processing before consent.
Sample consent text
We embed videos using PeerTube, a privacy friendly, decentralised video platform. The player loads from the hosting instance and does not set advertising or analytics cookies. If peer to peer streaming is active, your IP address may be shared with other viewers to help deliver the video. The video loads only after you choose to play it.
Third-party domains contacted
joinpeertube.orgframatube.orgyour-peertube-instance.tldCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| peertube-videojs-volume | Functional | Persistent (local storage) | Stores the chosen playback volume for the video player. Functional and exempt from consent. |
| peertube-theme | Functional | Persistent (local storage) | Stores the selected interface theme and display preferences for the player. |
| peertube-last-video-quality | Functional | Persistent (local storage) | Remembers the last selected video quality to improve playback experience. |
This service may collect user data. Ensure GDPR compliance with FlowConsent.
By default PeerTube does not set advertising or analytics cookies. It stores a few functional preferences such as volume and quality in your browser local storage, which are exempt from consent. The main privacy consideration is peer to peer streaming rather than cookies.
If you keep the privacy friendly defaults with no analytics or advertising, you can generally rely on legitimate interest for the player and do not need consent for cookies. You should obtain consent or use a click to load wrapper if you enable peer to peer streaming or add analytics.
Strictly necessary video playback and functional local storage rely on legitimate interest (Art. 6(1)(f)). If you enable peer to peer streaming or analytics, consent (Art. 6(1)(a)) and the ePrivacy Directive apply to that additional processing.
Not inherently. Data is processed wherever the chosen instance is hosted, so an EU instance or self hosting keeps data in the EU. However, peer to peer streaming can route video segments to viewers in any country, exposing IP addresses internationally, which you should assess.
For a standard, privacy friendly embed a full DPIA is rarely required. Consider one if you enable peer to peer streaming at scale or host sensitive content, focusing on IP address exposure between peers and the logs kept by the hosting instance.
Choose an EU based or self hosted instance, decide whether to enable peer to peer streaming, and use a click to load wrapper so the player loads only on user action. Mention PeerTube and the instance in your privacy notice and describe the local storage used.
PeerTube is itself the privacy friendly alternative to centralised platforms such as YouTube or Vimeo. If you need a hosted option, a self hosted video file with a simple HTML5 player or an EU based video host are comparable privacy conscious choices.
State that PeerTube sets no advertising or analytics cookies, list the functional local storage items it uses, and explain whether peer to peer streaming is enabled and what that means for IP addresses. Identify the hosting instance and link to its privacy notice.