> Ant Design and the GDPR: the antd React library sets no cookies when bundled, but loading fonts, icons or scripts from a CDN can send visitor data. > > Canonical: https://www.flowconsent.com/en/services/framework/ant-design Frameworks # Ant Design Unclassified Ant Design (antd) is the popular open source React UI component library originally created by Ant Group. When bundled directly with your application via npm it does not set cookies or send any data, so it raises no specific GDPR or ePrivacy concern. The picture changes when fonts, icons or scripts are loaded from a public CDN (alicdn.com, jsdelivr, unpkg), because the visitor's IP address is exposed to the CDN. [Block Ant Design until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=framework) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Frameworks](https://www.flowconsent.com/en/services/framework) - Consent Unclassified - Prior consent Not required - Documented cookies 1 - Third-party domains 4 - Servers Source code on GitHub (Microsoft, US). When served via the official Alibaba CDN (alicdn.com), files are delivered from China based infrastructure with global edges. Overview ## What does Ant Design do? ## **What is Ant Design?** Ant Design (antd) is one of the most widely used React UI component libraries, created by Ant Group and now maintained by an active open source community. It ships hundreds of accessible components (forms, tables, modals, charts) plus dedicated mobile (antd-mobile) and admin dashboard (Ant Design Pro) variants. Many European SaaS, fintech and admin tools rely on antd as their front end design system. ## **Cookies and identifiers** Ant Design itself does not set any cookie, write to local storage or open a network connection. It is a passive UI library that runs in the visitor's browser. Privacy implications only emerge when the bundle is delivered from a public CDN, in which case the CDN sees the IP address, the user agent and the requested resource. ## **GDPR and ePrivacy implications** Article 5(3) ePrivacy is not engaged by a self bundled antd, because no information is read or written on the visitor's device. When the library is loaded via alicdn.com (Alibaba Cloud, China) or another non EU CDN, the IP address transfer falls under Chapter V GDPR and requires either an adequacy decision (none for China), Standard Contractual Clauses or self hosting. ## **Best practice: self bundle** The recommended approach for European compliance is to install antd from npm and bundle it with your application via Webpack, Vite or similar tooling. Static assets (fonts, icons) are served from your own domain, no third party request is made and no consent is required. ## **If you must use a CDN** If you load antd from a CDN, prefer European or globally distributed providers (Cloudflare, Fastly, jsdelivr) over China specific ones, document the transfer in your records of processing and mention the CDN in the privacy policy. Avoid using @ant-design/icons via alicdn unless you have signed Standard Contractual Clauses with the CDN operator. ## **Implementing antd compliantly** Bundle antd locally, set a strict Content Security Policy that prevents fallbacks to remote CDNs, and audit your build to confirm no external request is fired. If you really need a CDN, document the legal basis (legitimate interest in delivering the page) and disclose the transfer to visitors. Compliance ## Ant Design and the GDPR - Legal basis When self bundled, no separate legal basis is needed because no personal data is processed. When loaded from a public CDN, legitimate interests under Article 6(1)(f) GDPR can apply for the technical loading, but a CMP exception or self hosting is recommended. - Risk level low - Applicable regulations GDPR (only if loaded from a third party CDN), ePrivacy Directive (only if cookies are set, which is not the case for the library itself) ### Impact assessment (DPIA) A DPIA is normally not needed for a self bundled UI library. It can be relevant when antd is part of a larger application that processes sensitive personal data, or when fonts and icons are loaded from a CDN located outside the EU. ### Sample text for your banner > This site uses Ant Design, a React UI library, bundled directly with our application. No third party cookie is set by the library itself. If components or fonts are loaded from a public CDN, your IP address may be sent to the CDN provider, which is necessary to deliver the page. Cookies and trackers ## What Ant Design sets and contacts - Tracking method React UI component library bundled into the application JavaScript and CSS. When loaded from npm and self bundled it makes no network call; when antd bundles or icons are loaded from a public CDN (jsdelivr, unpkg, alicdn) the visitor's IP address is exposed to the CDN. - Server location Source code on GitHub (Microsoft, US). When served via the official Alibaba CDN (alicdn.com), files are delivered from China based infrastructure with global edges. - Cookieless mode available Yes - Data transferred outside the EU When loaded from a public CDN, the visitor's IP address is sent to the CDN provider (China based alicdn, US based jsdelivr/unpkg). Self bundling the library through npm avoids any third country transfer. ### Cookies set (1) | Name | Type | Duration | Purpose | | ---------- | ------------ | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- | | No cookies | first\_party | n/a | Ant Design does not set any cookie. Cookie related impacts only come from CDN providers (Cloudflare \_\_cf\_bm, alicdn) when antd is loaded externally. | ### Third-party domains contacted (4) - `ant.design` - `gw.alipayobjects.com` - `cdn.jsdelivr.net` - `unpkg.com` Questions ## Frequently asked questions about Ant Design Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Does Ant Design set cookies? No. The library itself does not set any cookie or write to local storage. It is a passive React component library that runs entirely in the browser. ### Does Ant Design require consent? No, when antd is bundled with your application via npm, no consent is required. Consent considerations only arise when antd is loaded from a public CDN that may receive the visitor's IP address. ### What is the legal basis? For self bundled antd, no legal basis is needed because no personal data is processed. For CDN delivered antd, legitimate interests under Article 6(1)(f) GDPR can support the technical loading. ### Are data transferred outside the EU? Only if you load antd from a non EU CDN. The official alicdn.com is operated by Alibaba Cloud in China; jsdelivr and unpkg use mostly US infrastructure with Cloudflare edges. Self bundling avoids the question entirely. ### Do I need a DPIA for Ant Design? No, a DPIA is not required for the library itself. It can be appropriate for the parent application if it processes special categories of data or large scale profiling. ### How do I deploy antd compliantly? Install antd via npm, bundle it with Webpack or Vite, serve fonts and icons from your own domain, and set a strict Content Security Policy preventing third party CDN fallbacks. ### Are there alternatives to Ant Design? Other React UI libraries with EU friendly hosting include Material UI (npm bundled), Chakra UI (npm), Mantine (npm) or Radix UI primitives, all of which can be self bundled. ### Should I mention Ant Design in my cookie policy? Only if you load it from a third party CDN. If antd is self bundled, no specific mention is required because no third party processing takes place. Same category ## More services: Frameworks [See the whole category](https://www.flowconsent.com/en/services/framework) ### [Ziggy](https://www.flowconsent.com/en/services/framework/ziggy) [Ziggy is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Ziggy supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Ziggy ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/framework/ziggy) [Frameworks](https://www.flowconsent.com/en/services/framework/ziggy) · ### [Simple.css](https://www.flowconsent.com/en/services/framework/simple-css) [Simple.css is a CSS framework providing pre-built styles, components, and utility classes for building responsive web interfaces. It offers grid systems, typography scales, and design tokens for consistent styling. Simple.css supports dark mode, custom theming, and responsive breakpoints. With modular architecture and optimized file sizes, Simple.css helps developers create polished, professional web designs while maintaining fast page load speeds and excellent user experience.](https://www.flowconsent.com/en/services/framework/simple-css) [Frameworks](https://www.flowconsent.com/en/services/framework/simple-css) · ### [Fancybox](https://www.flowconsent.com/en/services/framework/fancybox) [FancyBox is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. FancyBox supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, FancyBox ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/framework/fancybox) [Frameworks](https://www.flowconsent.com/en/services/framework/fancybox) · ### [Lodash](https://www.flowconsent.com/en/services/framework/lodash) [Lodash is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Lodash is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Lodash offers reliable solutions that scale with organizational needs and evolving web standards.](https://www.flowconsent.com/en/services/framework/lodash) [Frameworks](https://www.flowconsent.com/en/services/framework/lodash) · ### [Yamada UI](https://www.flowconsent.com/en/services/framework/yamada-ui) [Yamada UI is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Yamada UI integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Yamada UI helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/framework/yamada-ui) [Frameworks](https://www.flowconsent.com/en/services/framework/yamada-ui) · ### [Keen-Slider](https://www.flowconsent.com/en/services/framework/keen-slider) [Keen-Slider is an image management and optimization solution that helps websites deliver high-quality visual content with optimal performance. It provides automatic compression, format conversion, and responsive delivery for fast page loads. Keen-Slider supports lazy loading, CDN distribution, and gallery creation, enabling businesses to showcase visuals beautifully while maintaining excellent Core Web Vitals scores and search engine rankings.](https://www.flowconsent.com/en/services/framework/keen-slider) [Frameworks](https://www.flowconsent.com/en/services/framework/keen-slider) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)